Content is hidden
Business Logic Errors
OAuth Misconfiguration
Cross-Site Request Forgery (CSRF)
Improper Access Control
Username Enumeration
Information Exposure
Insufficient Session Expiration