[WUHANCLAN]

Uh, some of these vulnerabilities are critical. And just because corporate signs up for a HackerOne bug bounty doesn't mean that the security engineers managing triage are happy about it.

Security analysis and penetration testing always results in the perception that the security auditor is calling their baby ugly. Always.