> For the complete documentation index, see [llms.txt](https://sudoninja.gitbook.io/sudoninjabook/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sudoninja.gitbook.io/sudoninjabook/list-of-vulnerabilities-2/web-application-vulnerability-2022.md).

# Web Application Vulnerability 2022

I found below list from linkdlen Post by Joas A. Santos

Web Application Vulnerability 2022 - Bug Bounty

* Log4j 
* XSS (Stored and Reflected)
* Host Header Injection 
* Account Takeover -2FA Bypass 
* SSRF
* CRLF Injection 
* CSRF 
* Business Logic Vulnerability
* Remote Code Execution in Cloud Services (AWS,GCP, Hawuei, Oracle and Azure)
* Information Disclosure
* Cache Poisoning
* Open Redirect
* File Upload Vulnerability
* SQL Injection
* Exploit OAuth
* API Exposure
* DoS and DDoS
* Clickjacking
* Prototype Pollution
* IDOR
* GitHub
* subdomain takeover
* Email spoofing 

\-