Web Vulnerabilities SQL Injection Union attack & Blind SQL Broken Access Controls & IDOR: Access control vulnerabilities and privilege escalation Server-side request forgery (SSRF) SSI (Server Side Include)and SSI Injection Prototype Pollution JWT attacks