SSTI Attack

Server-Side Template Injection

More Articles

Web Cache Deception

LDAP Injection

LaTex Injection

Reverse Tabnabbing

Command Injection

Client-Side Desync Attack

CSD Attack

Insecure File Upload

CSRF

Cross-Site Request Forgery

File Inclusion

LFI & RFI

ORM Injection

Server-Side Javascript Injection

SSJI Attack

CSTI Attack

Client-Side Template Injection

HTTP Parameter Pollution

HPP Attack

Zip Bomb

CSS Injection

XS-Leaks

Subdomain Takeover

Log Injection

Click Jacking

HTTP Request Smuggling

HRS Attack

DOM Clobbering

SAML Injection

XSS

Cross-Site Scripting

ReDOS Attack

Regex DOS

Cookie Bomb Attack

Websocket Connection Smuggling

WCS Attack

SQL Injection

Web Cache Poisoning

NoSQL Injection

JSONP Hijacking

Brute Force

H2C Smuggling

Insecure Deserialization

Regex Injection

GraphQL Injection

Prototype Pollution

Email Injection

SMTP Injection & Mail Injection

Relative Path Overwrite

RPO Attack

XXE

XML External Entity

CSWSH Attack

Cross-Site WebSocket Hijacking

ESI Injection

Edge Side Include Injection

SSRF

Server-Side Request Forgery

CRLF Injection

Type Juggling

Loose Comparison Bug

CSV Injection

Open Redirect

RFD Attack

Remote File Download

Path Traversal (Directory traversal)

Zip Slip

IDOR Attack

Insecure Direct Object Reference

Github-Action Injection

XST

Cross-Site Tracing

JSON Hijacking

OGNL Injection

Object-Graph Navigation Language Injection

Dependency Confusion

SNI Injection

EL Injection

Expression Language Injection

XSHM Attack

Cross Site History Manipulation