Cross-Site Scripting
Loose Comparison Bug
Cross-Site WebSocket Hijacking
SMTP Injection & Mail Injection
Insecure Direct Object Reference
Cross-Site Request Forgery
HPP Attack
Object-Graph Navigation Language Injection
CSD Attack
RPO Attack
XML External Entity
WCS Attack
SSJI Attack
Server-Side Request Forgery
HRS Attack
Remote File Download
Cross Site History Manipulation
Cross-Site Tracing
Expression Language Injection
Client-Side Template Injection
Server-Side Template Injection
Edge Side Include Injection
LFI & RFI
Regex DOS