OGNL Injection

Object-Graph Navigation Language Injection

More Articles

Zip Slip

ORM Injection

Web Cache Poisoning

CSS Injection

CSTI Attack

Client-Side Template Injection

Github-Action Injection

LaTex Injection

Type Juggling

Loose Comparison Bug

CSWSH Attack

Cross-Site WebSocket Hijacking

JSONP Hijacking

Dependency Confusion

Brute Force

CRLF Injection

SSTI Attack

Server-Side Template Injection

GraphQL Injection

RFD Attack

Remote File Download

IDOR Attack

Insecure Direct Object Reference

SSRF

Server-Side Request Forgery

HTTP Request Smuggling

HRS Attack

XS-Leaks

Log Injection

XSS

Cross-Site Scripting

Command Injection

XST

Cross-Site Tracing

EL Injection

Expression Language Injection

Reverse Tabnabbing

Insecure File Upload

Websocket Connection Smuggling

WCS Attack

Relative Path Overwrite

RPO Attack

Prototype Pollution

Click Jacking

File Inclusion

LFI & RFI

LDAP Injection

ESI Injection

Edge Side Include Injection

XSHM Attack

Cross Site History Manipulation

XXE

XML External Entity

CSV Injection

Zip Bomb

Open Redirect

H2C Smuggling

NoSQL Injection

Path Traversal (Directory traversal)

SQL Injection

HTTP Parameter Pollution

HPP Attack

ReDOS Attack

Regex DOS

Cookie Bomb Attack

Client-Side Desync Attack

CSD Attack

DOM Clobbering

Email Injection

SMTP Injection & Mail Injection

SNI Injection

Web Cache Deception

Regex Injection

Subdomain Takeover

SAML Injection

Server-Side Javascript Injection

SSJI Attack

CSRF

Cross-Site Request Forgery

JSON Hijacking

Insecure Deserialization