remote code execution bug bounty