Authentication and Session Management Flaws
Command Injection
Cross-Site Request Forgery (CSRF)
Insecure Direct Object References (IDOR)
Security Misconfiguration
Sensitive Data Exposure
Server-Side Request Forgery (SSRF)
SQL Injection
XML External Entities (XXE)