Content is hidden
Subdomain Takeover
Open Redirect
Sensitive Data Hardcoded
Business Logic Errors
Improper Authentication
Broken Access Control (BAC)
No Rate Limiting on Form