Content is hidden
Remote Code Execution (RCE)
Business Logic Errors
Open Redirect
Brute Force
Account Enumeration
No Rate Limiting on Form