HoH2 Training

There are some users with usernames admin##@z3.lv, for example, admin01@z3.lv.
System does not send out links to reset passwords but shows example links.
Real password reset links are not shown.
Find as many vulnerabilities You can and write a report.
If You are stuck, do not be afreid to ask for tips. There should be at least 8 reportable vulnerabilities.
Good luck!