Write-ups of my findings -:

1. HTTP Desync Attack (Request Smuggling) - Mass Account Takeover at a Cryptocurrency based asset and 121 other websites

2. HTTP Desync Attack (Request Smuggling) - Mass Session Hijacking at Foxycart

3. Web Cache Poisoning - Capability to disable/deface the app.vulnerable.com (A tale of poisoning through the layers of caching)

4. XSSI (Cross Site Script Inclusion) to Steal AccessToken and More

5. Account Takeover at https://trello.com