Web/App Based Vulnerabilities Definitions

Front

Buffer Overflow

Back

Overflowing memory by writing more data than expected.

Front

Code Injection

Back

Injecting malicious code (e.g., Python, shell) into an app.

Front

SQL Injection (SQLi)

Back

Injecting SQL commands into queries via user input.

Front

Cross-site Scripting (XSS)

Back

Injecting scripts into websites that run in others' browsers.

Front

Privilege Escalation

Back

Gaining higher access rights than intended.

Front

Directory Traversal

Back

Accessing files/folders outside the web root.

Front

Misconfiguration

Back

Weak or insecure default settings in software.

Front

Replay Attack

Back

Reusing valid data (like login tokens) to repeat actions.

Front

Cross-site Request Forgery (CSRF/XSRF)

Back

Trick a logged-in user into submitting a request.

Front

Race Condition

Back

Two actions happening at the same time that cause unexpected behavior.