# Web Vulnerabilities

<table><thead><tr><th data-type="content-ref"></th></tr></thead><tbody><tr><td><a href="file-upload-attack">file-upload-attack</a></td></tr><tr><td><a href="padding-oracle-attack">padding-oracle-attack</a></td></tr><tr><td><a href="type-juggling-attack">type-juggling-attack</a></td></tr><tr><td><a href="nosql-attack">nosql-attack</a></td></tr><tr><td><a href="lightweight-directory-access-protocol-ldap-attack">lightweight-directory-access-protocol-ldap-attack</a></td></tr><tr><td><a href="deserialization-attack">deserialization-attack</a></td></tr><tr><td><a href="latex-injection-attack">latex-injection-attack</a></td></tr><tr><td><a href="api-attack">api-attack</a></td></tr><tr><td><a href="prototype-pollution-attack">prototype-pollution-attack</a></td></tr><tr><td><a href="axfr-full-zone-transfer-attack">axfr-full-zone-transfer-attack</a></td></tr><tr><td><a href="mass-assignment-attack">mass-assignment-attack</a></td></tr><tr><td><a href="open-redirect-attack">open-redirect-attack</a></td></tr><tr><td><a href="webdav-attack">webdav-attack</a></td></tr><tr><td><a href="proxys-squid-attack">proxys-squid-attack</a></td></tr><tr><td><a href="shellshock-attack">shellshock-attack</a></td></tr><tr><td><a href="xpath-injection-attack">xpath-injection-attack</a></td></tr><tr><td><a href="insecure-direct-object-reference-idor-attack">insecure-direct-object-reference-idor-attack</a></td></tr><tr><td><a href="sql-truncation-attack">sql-truncation-attack</a></td></tr><tr><td><a href="execution-after-redirect-ear-attack">execution-after-redirect-ear-attack</a></td></tr><tr><td><a href="session-puzzling-attack">session-puzzling-attack</a></td></tr><tr><td><a href="race-condition-attack">race-condition-attack</a></td></tr><tr><td><a href="json-web-token-jwt-attack">json-web-token-jwt-attack</a></td></tr><tr><td><a href="css-injection-cssi">css-injection-cssi</a></td></tr><tr><td><a href="deserialization-yaml-attack">deserialization-yaml-attack</a></td></tr><tr><td><a href="http-header-command-injection">http-header-command-injection</a></td></tr><tr><td><a href="deserialization-pickle-attack">deserialization-pickle-attack</a></td></tr><tr><td><a href="graphql-attack">graphql-attack</a></td></tr></tbody></table>
