Exploiting XSS To Steal Cookies

Blind OS Command Injection with Output Redirection

Exploiting SQLi to Query Database Version on MySQL and Microsoft

Blind XXE with OOB Interaction via XML Parameter Entities

OAuth Account Hijacking via redirect_uri

Web Shell Upload via Extension Blacklist Bypass

Server-Side Template Injection in an Unknown Language with a Documented Exploit

Multi-Step Process with No Access Control on One Step

Insufficient Workflow Validation

File Path Traversal Sequences Stripped Non-Recursively

SSRF via Flawed Request Parsing

CORS Vulnerability with Trusted Insecure Protocols