Infinity8 Labs is now Breachvane Labs.

Vulnerability Library

Understand the risk. Fix it right.

Reference guides for common vulnerability classes: what they are, why they matter, and how to remediate and test for them. Breachvane findings link here for remediation guidance.

Search all 24 entriesBrowse by category

OWASP Top 10 categories

Browse by category

Select a category to see its entries.

OWASP A02:2021

Cryptographic Failures

2 entries

OWASP A04:2021

Insecure Design

2 entries

OWASP A06:2021

Vulnerable and Outdated Components

1 entry

OWASP A08:2021

Software and Data Integrity Failures

1 entry

OWASP A10:2021

Server-Side Request Forgery

1 entry

All entries

Search the library

VulnerabilityTypical severityCWEOWASP
Broken access control & IDOR
The application checks who you are but not whether you're allowed to touch a specific record or function, so changing an ID or calling an endpoint directly exposes other users' data or admin actions.Medium to CriticalCWE-639, CWE-285A01:2021 Broken Access ControlClickjacking
Clickjacking places a trusted page inside a deceptive frame so the user clicks or types into controls they cannot clearly see. It can turn an ordinary authenticated action into an unintended change.Low to HighCWE-1021A04:2021 Insecure DesignCross-site request forgery (CSRF)
CSRF tricks a signed-in user's browser into submitting an unwanted request with that user's cookies. It can change account settings, initiate transactions, or perform administrative actions without the user's informed approval.Medium to HighCWE-352A01:2021 Broken Access ControlCross-site scripting (XSS)
Untrusted data is written into a web page without the right encoding, so an attacker's script runs in another user's browser with that user's session and permissions.Medium to HighCWE-79A03:2021 InjectionFile upload flaws
File upload flaws let users store files with unsafe content, names, locations, or permissions. Consequences range from stored script execution and malware distribution to server-side code execution.Medium to CriticalCWE-434A04:2021 Insecure DesignInsecure deserialization
Insecure deserialization occurs when an application reconstructs native objects from attacker-controlled data. Depending on the runtime and available classes, this can change application state, bypass checks, or execute code.Medium to CriticalCWE-502A08:2021 Software and Data Integrity FailuresJSON Web Token (JWT) weaknesses
JWT weaknesses occur when applications decode tokens without fully validating their signature, algorithm, issuer, audience, lifetime, and key source. Attackers may forge identities or privileges that the server treats as trusted.Medium to CriticalCWE-347, CWE-287A07:2021 Identification and Authentication FailuresLDAP injection
LDAP injection occurs when untrusted input changes the structure of a directory query. It can bypass authentication, broaden searches, disclose directory data, or modify records beyond the intended scope.Medium to CriticalCWE-90A03:2021 InjectionMissing multi-factor authentication
Missing MFA leaves an account protected by only one factor, commonly a reusable password. A stolen, phished, sprayed, or reused password can therefore provide immediate access.Medium to CriticalCWE-308A07:2021 Identification and Authentication FailuresMissing security headers
Missing or weak HTTP security headers leave browser protections undefined or permissive. They can increase the impact of cross-site scripting, clickjacking, content-type confusion, information leakage, and insecure transport.Low to HighCWE-693A05:2021 Security MisconfigurationNull sessions and anonymous access to domain controllers
A domain controller accepts connections with no username or password and answers directory questions for them. Anyone who can reach it on the network can list users, groups and the password policy without a single credential.Medium to HighCWE-287, CWE-200A05:2021 Security MisconfigurationOpen redirect
An open redirect lets untrusted input choose where a trusted application sends the user's browser. It is commonly abused for convincing phishing links and can become more serious when combined with authentication or authorization flows.Low to HighCWE-601A01:2021 Broken Access ControlOperating system command injection
OS command injection occurs when untrusted input changes a command executed by the operating system. It can let an attacker run commands with the application's privileges and often leads to full server compromise.High to CriticalCWE-78A03:2021 InjectionPath traversal
Path traversal lets untrusted input escape an intended directory and access other files or locations. It can expose secrets, overwrite application data, or turn file-handling features into server compromise.Medium to CriticalCWE-22A01:2021 Broken Access ControlSecurity misconfiguration and default credentials
Security misconfiguration leaves systems exposed through unsafe defaults, unnecessary features, excessive permissions, or shared credentials. A single overlooked setting can bypass otherwise sound application controls.Low to CriticalCWE-16, CWE-1392A05:2021 Security MisconfigurationSensitive data exposure
Sensitive data exposure occurs when confidential information is collected unnecessarily, returned to the wrong audience, logged, stored, or transmitted without adequate protection. The result may be account takeover, privacy harm, fraud, or large-scale breach.Low to CriticalCWE-200, CWE-312A02:2021 Cryptographic FailuresServer-side request forgery (SSRF)
SSRF lets an attacker make the application server send requests to destinations the attacker could not normally reach. It can expose internal services, cloud metadata, credentials, and trusted administrative interfaces.Medium to CriticalCWE-918A10:2021 Server-Side Request ForgeryServer-side template injection (SSTI)
SSTI occurs when untrusted input is interpreted as template source instead of ordinary data. It can expose application objects and secrets and, in many template engines, lead to server-side code execution.High to CriticalCWE-1336A03:2021 InjectionSession fixation
Session fixation occurs when an application keeps the same session identifier after login or a privilege change. An attacker who knows or sets the pre-login identifier may be able to reuse it as an authenticated session.Medium to HighCWE-384A07:2021 Identification and Authentication FailuresSQL injection (SQLi)
User input is built into a database query as code instead of being passed as data, letting an attacker read, change or delete data and sometimes take over the database server.High to CriticalCWE-89A03:2021 InjectionTLS misconfiguration
TLS misconfiguration weakens the protection of data in transit through obsolete protocols, weak algorithms, invalid certificates, or inconsistent HTTPS enforcement. Attackers may intercept, downgrade, or impersonate connections.Low to HighCWE-326, CWE-327A02:2021 Cryptographic FailuresVulnerable and outdated components
Applications inherit risk from unsupported or vulnerable libraries, frameworks, runtimes, images, appliances, and services. A reachable weakness in one component can compromise the entire application or its supply chain.Low to CriticalCWE-1104A06:2021 Vulnerable and Outdated ComponentsWeak password policy
A weak password policy permits short, common, compromised, or repeatedly guessed passwords. Attackers can exploit it through password spraying, credential stuffing, online guessing, or offline cracking after a data breach.Medium to HighCWE-521A07:2021 Identification and Authentication FailuresXML external entity injection (XXE)
XXE occurs when an XML parser processes attacker-controlled external entities or document type definitions. It can expose local files, trigger server-side requests, or exhaust application resources.Medium to CriticalCWE-611, CWE-776A05:2021 Security Misconfiguration
24 entriesvulnerabilities.json

It’s not if. It’s when. Know where you stand.

Start with a free, high-level Attack Path Review™. No commitment.

Get a free review (opens in a new tab)