Category:Web security exploits

• Internet security

B

• BREACH
• Bredolab botnet
• Browser isolation
• Browser security

C

• Cache timing attack
• Clickjacking
• Content Security Policy
• Cookiemonster attack
• Cross-site cooking
• Cross-site leaks
• Cross-site request forgery
• Cross-site scripting
• Cross-site tracing

D

• Directory traversal attack
• DNS rebinding
• Double encoding
• Downgrade attack

E

• Evil twin (wireless networks)

F

• File inclusion vulnerability
• Form grabbing
• FREAK

H

• History sniffing
• HTTP header injection
• HTTP request smuggling
• HTTP response splitting

I

• IDN homograph attack
• Insecure direct object reference

L

• Logjam (computer security)

M

• Man-in-the-browser
• Mass assignment vulnerability

P

• POODLE
• Prototype pollution

S

• Self-XSS
• Session fixation
• Session hijacking
• Session poisoning
• Snarfing
• Spoofed URL

W

• Web shell
• Web skimming
• Web threat

X

• XML external entity attack
• XSS worm