A01 - Broken Access Control 15 categories , 47 posts

• Access Control Bypass 1 post
• Authentication Bypass 4 posts
• Authorization Bypass 2 posts
• BOLA 1 post
• Broken Access Control 1 post
• Cross-Site Request Forgery 1 post
• GraphQL Authorization 1 post
• IDOR 14 posts
• Information Disclosure 11 posts
• Local File Inclusion 9 posts
• Mass Assignment 2 posts
• Missing Authorization 3 posts
• Path Traversal 4 posts
• Privilege Escalation 7 posts
• SSRF 4 posts

A01 Broken Access Control 1 category , 1 post

• Authorization 1 post

A02 - Security Misconfiguration 7 categories , 30 posts

• GraphQL Information Disclosure 1 post
• Information Disclosure 11 posts
• Local File Inclusion 9 posts
• Prompt Injection 3 posts
• Source Code Disclosure 1 post
• Unrestricted File Upload 8 posts
• XXE 2 posts

A04 - Cryptographic Failures 1 category , 1 post

• Sensitive Information Disclosure 1 post

A04 - Insecure Design 2 categories , 2 posts

• Business Logic 1 post
• Race Condition 2 posts

A05 - Injection 15 categories , 63 posts

• Command Injection 8 posts
• Cross-Site Scripting 5 posts
• Cross-Site Scripting (XSS) 6 posts
• LDAP Injection 3 posts
• NoSQL Injection 6 posts
• OS Command Injection 3 posts
• Prompt Injection 3 posts
• Prototype Pollution 1 post
• SQL Injection 16 posts
• SSTI 8 posts
• Server-Side Includes Injection 1 post
• Server-Side Template Injection 1 post
• Stored Cross-Site Scripting 1 post
• URI injection 1 post
• XML External Entity 3 posts

A05:2025 - Injection 1 category , 1 post

• Command Injection 8 posts

A06 - Insecure Design 2 categories , 3 posts

• Business Logic Abuse 2 posts
• Race Condition 2 posts

A07 - Authentication Failures 11 categories , 18 posts

• Authentication Bypass 4 posts
• Broken Authentication 1 post
• Default Credentials 1 post
• JWT 5 posts
• OTP Authentication 1 post
• Password Brute Force 1 post
• Password Reset Poisoning 1 post
• Weak Authentication 1 post
• Weak Credentials 2 posts
• Weak OTP 1 post
• Weak Session Management 1 post

A08 - Software and Data Integrity Failures 2 categories , 2 posts

• Insecure Deserialization 1 post
• PHP Object Injection 1 post

Penetration Testing 10 categories , 15 posts

• CVE-2017-0144 (EternalBlue RCE) 1 post
• CVE-2017-11610 (Supervisor XML-RPC RCE) 1 post
• CVE-2018-16763 (Fuel CMS RCE) 1 post
• CVE-2019-16278 (Nostromo RCE) 1 post
• CVE-2019-9053 (CMS Made Simple SQL Injection) 1 post
• CVE-2021-22204 (Arbitrary Code Execution via Exiftool) 1 post
• CVE-2025-29927 (Next.js Middleware Authorization Bypass) 1 post
• Linux Privilege Escalation 2 posts
• Linux priviledge escalation 2 posts
• Web Application Exploitation 4 posts