bug bounty 3 HackSmarter - AWS Lab - Second Jul 31, 2026 Exploit JWT Signature Flaw Jul 27, 2026 Account Takeover Via Password Change Functionality Jul 24, 2026