broken link vulnerability by Shamim ( hackerone @shamim12