Snapchat
#921780 Improper Authentication - any user can login as other user with otp/logout & otp/login
U.S. General Services Administration
#1181253 e-mail verification bypass through interception & modification of response status
【三杀】More secure Facebook Canvas : Tale of $126k worth of bugs that lead to Facebook Account Takeovers – Youssef Sammouda
Misconfigured Reset password that leads to Account Takeover - zapstiko