#security researcher #bug report #vulnerability disclosure #html penetration testing #reward payment #web vulnerability