hackerone Mcstatic Vulnerabilities