Server Side

Access control Vulnerabilities and privilege escalation API testing Authentication vulnerabilities Business logic vulnerabilities File Upload Vulnerabilities information disclosure vulnerabilities NoSQL Injection OAuth Authentication OS Command injection Path Traversal Race Condition Server side request forgery (SSRF)SQL Injection XXE injection (Xml eXternal Entity)

PreviousWebSocket NextAccess control Vulnerabilities and privilege escalation