Labels

HTTP Request Smuggling

Download of Code Without Integrity Check

Deserialization of Untrusted Data

File and Directory Information Exposure

Open Redirect

Externally Controlled Reference to a Resource in Another Sphere

Insufficient Session Expiration

Unverified Password Change

Insecure Direct Object Reference (IDOR)

Weak Password Recovery Mechanism for Forgotten Password

Improper Restriction of Names for Files and Other Resources

Security Through Obscurity

Violation of Secure Design Principles

Improper Neutralization

Incorrect Permission Assignment for Critical Resource

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Command Injection - Generic

Allocation of Resources Without Limits or Throttling

OS Command Injection

Cross-site Scripting (XSS) - Stored