11. Common Vulnerabilities

1. No Rate limit and 
2. weak password reset mechanism when user reset account password still login not force logout
3. Account take over by response manipulation -> Most common bugs in mobile