DICE Bug Bounty PoCs

• R-001: CORS cross-origin data theft
• R-002: GraphQL CSRF via text/plain