SQL Injection NoSQL Injection XSS CSRF SSRF Path Traversal OS Command Injection Web Shell Brute Force Privilege Escalation Secret Leak Open Redirect IDOR SSTI Subdomain Takeover CORS Misconfig Supply Chain Prompt Injection Clickjacking XXE File Upload HTTP Methods Directory Listing Config Exposure Admin Exposure Known CVEs Weak TLS Open Ports Email Spoofing Broken Access Control