mass assignment vulnerabilities and exploits