Full-Blown SSRF to Gain Access to Millions of Users Records and Multiple Internal Panels

RCE via LFI Log Poisoning - The Death Potion

Privilege Escalation via Impersonation Features feature