Bug Bounty 3 1-Click Account Takeover (ATO) in Voox Android Apr 2, 2026 2FA Bypass via Response Manipulation -- Binding MFA Without Email Verification Mar 3, 2026 Bypassing OTP Rate Limits with a Simple Capital Letter Oct 23, 2025