BugHunting 1 How I found a 0-Click Account takeover in a public BBP and leveraged it to access Admin-Level functionalities Aug 16, 2025