Content is hidden
Session Expiration Too Long
Sensitive Data Exposure
Mail Server Misconfiguration
Mobile Security Misconfiguration
Cache poisoning
Private API Keys
Race Conditions
Cross-Site Request Forgery (CSRF)
Cross-site Scripting (XSS) - DOM
Open Redirect