Pages

API Endpoint Brute Forcing

Last updated Jan 13, 2026
Client Side Template Injection (CSTI)

Last updated Dec 21, 2022
Command Injection

Last updated Aug 23, 2020
CRLF Injection

Last updated Jan 13, 2026
Cross Origin Resource Sharing Misonfiguration

Last updated Dec 26, 2020
Cross Site Scripting (XSS)

Last updated Dec 14, 2020
GraphQL Access Control Issues

Last updated Dec 15, 2021
GraphQL Arbitrary File Write

Last updated Dec 15, 2021
GraphQL Batching Brute Force

Last updated Sep 8, 2022
Hidden API Functionality Exposure

Last updated Jul 24, 2022
Home (outdated)

Last updated Aug 27, 2026
Horizontal Access Control

Last updated Aug 4, 2022
Information Disclosure

Last updated Oct 31, 2021
Insecure Direct Object Reference

Last updated Dec 27, 2020
Insecure PostMessage Configuration

Last updated Aug 23, 2020
Introspection Enabled

Last updated Dec 15, 2021
JSON CSRF

Last updated Jan 13, 2026
JSON Hijacking

Last updated Sep 13, 2020
JWT Secret Key Brute Force

Last updated Dec 27, 2020
LDAP Injection

Last updated Jan 13, 2026
Mass Assignment

Last updated Jun 6, 2020
NoSQL Injection

Last updated Jan 12, 2026
Open Redirect

Last updated Apr 23, 2021
Path Traversal

Last updated Jul 31, 2021
Prototype Pollution

Last updated Jan 12, 2026
Rate Limit Bypass

Last updated Jan 14, 2026
Sensitive Data Exposure

Last updated Oct 31, 2021
Server Side Request Forgery (SSRF)

Last updated Jan 12, 2026
SOAP Injection

Last updated Jan 13, 2026
SQL Injection

Last updated Sep 22, 2020
Unsafe Deserialization

Last updated Jan 12, 2026
User Enumeration

Last updated Aug 7, 2021
Vertical Access Control

Last updated Dec 28, 2020
XML Bomb Denial‐of‐Service

Last updated Jan 13, 2026
XML External Entity Injection (XXE)

Last updated Jun 5, 2020
XML Injection

Last updated Jan 13, 2026
XPath Injection

Last updated Dec 26, 2020