HTTP Response Splitting

HTTP Request Smuggling

HTTP Request Splitting

Integer Overflows

LDAP Injection

Mail Command Injection

Null Byte Injection

OS Commanding

Path Traversal

Predictable Resource Location

Remote File Inclusion (RFI)

Routing Detour

Session Fixation

SOAP Array Abuse

SQL Injection

URL Redirector Abuse

XPath Injection

XML Attribute Blowup

XML External Entities

XML Entity Expansion

XML Injection

XQuery Injection

Application Misconfiguration

Directory Indexing

Improper Filesystem Permissions

Improper Input Handling

Improper Output Handling

Information Leakage

Insecure Indexing

Insufficient Anti-automation

Insufficient Authentication

Insufficient Authorization

Insufficient Password Recovery

Insufficient Process Validation

Insufficient Session Expiration

Insufficient Transport Layer Protection

Server Misconfiguration

Directory Listing Denied

Directory Listing Enabled

Directory Traversal

Discovered SOAP Service

File Upload

Frame Injection

LDAP Injection

Local File Include

Open Cross Domain Policy

Open Redirect

Path Disclosure

Permissive Cross-Origin Resource Sharing

Persistent Cross-site Scripting

Redirect Response With Body

Reflected Cross-site Scripting

Remote Code Injection

Remote File Include

Response Splitting

Session Cookie not Flagged as HTTPOnly

Session Cookie not Flagged as Secure

Session Fixation

Source Leakage

SQL Injection

Strict Transport Security

Weak Session Management

XML Injection

XPATH Injection