account-takeover 2 Bypassing Rate Limits via HTTP/2 Single-Packet Attack: A Race Condition Story Oct 13, 2025 OAuth Account Takeover: Exploiting Email Change Without Re-authentication Nov 24, 2024