Content is hidden
Email HTML Injection
Information Exposure
Business Logic Errors
Server-Side Request Forgery (SSRF)
UI Redressing (Clickjacking)
EXIF Geolocation Data Not Stripped From Uploaded Images
Internal IP Disclosure
Sensitive Data Exposure
SQL Injection