Web Security 2 Bypassing Rate Limits via HTTP/2 Single-Packet Attack: A Race Condition Story Oct 13, 2025 OAuth Account Takeover: Exploiting Email Change Without Re-authentication Oct 13, 2025