Lazada’s live bug bounty uncovers 115 vulnerabilities