Directory Traversal
IDOR (Insecure Direct Object Reference)
Business logic vulnerabilities