A7 and A6: Leaky and Unprepared Applications OWASP Top 10 list items 7 and 6 involve applications that expose sensitive data and are not protected from modern attacks.