Attack Techniques

CVEs grouped by attack vector / technique

Techniques

Authentication Bypass 7467

Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.

Buffer Overflow 5205

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

Cross-Site Request Forgery exploits the automatic credential inclusion behavior of web browsers.

Code Injection 1083

Code injection occurs when an application accepts user input and passes it directly into a language interpreter or evaluator without proper sanitization.

Denial Of Service 5439

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

File Upload 905

Malicious file upload attacks exploit insufficient validation when web applications accept user-provided files.

Information Disclosure 12473

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

Local File Inclusion vulnerabilities occur when an application accepts user-controlled input to specify which file should be loaded or executed, typically through functions like PHP's `include()`, `require()`, or `fopen()`.

Path Traversal 1798

Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.

Potential RCE 1

Privilege Escalation 2401

Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.

Remote Code Execution 61

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.

SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.

Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.

Cross-Site Scripting occurs when an application accepts untrusted data and sends it to a web browser without proper validation or encoding.

XML External Entity (XXE) attacks exploit XML parsers that process Document Type Definitions (DTDs) without proper restrictions.

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy