Broken Access Control

Identification and Authentication Failures

Command Injection

Insecure Design

SQL Injection: Part 1

SQL Injection: Part 2

SQL Injection: Part 3

Server-Side Request Forgery (SSRF)

Reflected Cross-Site Scripting (XSS)

Stored Cross-Site Scripting (XSS)

DOM-Based Cross-Site Scripting (XSS)

XML External Entities (XXE)

Broken Function Level Authorization

Broken Object Level Authorization

Mass Assignment

OAuth Implementation Vulnerabilities: Part 1

OAuth Implementation Vulnerabilities: Part 2

Excessive Data Exposure