bug bounty account take over check list

Here is a list of the most important points / gaps that I am trying to hunt to take over the account in any program