Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewards