Top 100 Web Vulnerabilities Reference

Provide a comprehensive, structured reference for the 100 most critical web application vulnerabilities organized by category. This skill enables systematic vulnerability identification, impact assessment, and remediation guidance across the full spectrum of web security threats. Content organized into 15 major vulnerability categories aligned with industry standards and real-world attack patterns. Evaluate injection attack vectors targeting data processing components: SQL Injection (1) Cross-Site Scripting - XSS (2) Command Injection (5, 11) XML Injection (6), LDAP Injection (7), XPath Injection (8) Server-Side Template Injection - SSTI (13) Assess authentication mechanism weaknesses: Session Fixation (14) Brute Force Attack (15) Session Hijacking (16) Credential Stuffing and Reuse (22) Insecure "Remember Me" Functionality (85) CAPTCHA Bypass (86) Identify data protection failures: IDOR - Insecure Direct Object References (23, 42) Data Leakage (24) Unencrypted Data Storage (25) Information Disclosure (33) Assess configuration weaknesses: Missing Security Headers (26) Default Passwords (28) Directory Listing (29) Unprotected API Endpoints (30) Open Ports and Services (31) Misconfigured CORS (35) Unpatched Software (34) Evaluate XML processing security: XXE - XML External Entity Injection (37) XEE - XML Entity Expansion (38) XML Bomb (Billion Laughs) (39) XML Denial of Service...