hackerone Http Live Simulator Vulnerabilities