Don't forget server-side template injection (SSTI)

RCE via SSTI
I was a testing SSTi And when i tested the payload: <%= 7*7 %>
Give me 49
It means he vuln be SSTI
So i test This payload: <%= system("id") %>
To run command ("id")
And it's worked
Look
A clear RCE via SSTi

Remote Code Execution (RCE) via upload files vulnerability

لقيت ثغرات حرجه اولها SQL injection و ثم logic business vulnerability تقدر تشري اي منتج ببلاش و ثم XSS و ثغرات اخره فيها injection
هكي يصير لي ميطلبش في مختبر اختراق
تواصل معنا https://cyberroot.xo.je

I found SQL injection on a shop
And i found logic business can by anything for free and found XSS

عثرت على ثغره Blind SSRF في موقع او سيرفر تابع ل شركة اتصالات المانيه و حاليا قيد الابلاغ

I discovered a Blind SSRF vulnerability on a website or server belonging to a German telecommunications company and it is currently being reported.