- Password Management: Password in Configuration File(明文存储密码)
https://www.cnblogs.com/mahongbiao/p/12496042.html - Command Injection(命令注入)
https://www.cnblogs.com/mahongbiao/p/12494308.html - Unreleased Resource: Database 未释放资源：数据库
https://www.cnblogs.com/mahongbiao/p/12494278.html - SQL Injection SQL注入
https://www.cnblogs.com/mahongbiao/p/12494234.html - Path Manipulation 路径篡改
https://www.cnblogs.com/mahongbiao/p/12494108.html - Header Manipulation HTTP请求头篡改
https://www.cnblogs.com/mahongbiao/p/12494057.html - Dynamic Code Evaluation: Code Injection 动态代码执行：代码注入
https://www.cnblogs.com/mahongbiao/p/12493998.html - Cross-Site Scripting: Persistent XSS
https://www.cnblogs.com/mahongbiao/p/12493915.html - Cookie Security: Cookie not Sent Over SSL Cookie未使用SSL加密
https://www.cnblogs.com/mahongbiao/p/12493365.html - Access Control: Database 数据库访问控制
https://www.cnblogs.com/mahongbiao/p/12493343.html - File Disclosure: Spring 文件泄露（Spring框架）
https://www.cnblogs.com/mahongbiao/p/12862858.html - Privacy Violation 隐私泄露
https://www.cnblogs.com/mahongbiao/p/12862884.html - Privacy Violation: Heap Inspection 隐私泄露（堆检查）
https://www.cnblogs.com/mahongbiao/p/12862885.html - Race Condition: Singleton Member Field 竞争条件:单例的成员字段
https://www.cnblogs.com/mahongbiao/p/12862899.html