Content is hidden
Business Logic Errors
Cache poisoning
Information Exposure
Open Redirect
Violation of Secure Design Principles
Weak 2FA Implementation (Missing Failsafe)
Improper Access Control
Insecure Direct Object Reference (IDOR)