Open Redirects

Open redirects

Unvalidated Redirects and Forwards | DOM-based open redirection | CWE-601 | HTTP (Redirect|Refresh) | HSTS | Upgrade Insecure Requests | 3xx redirection | Playlist

Exploit

Click-fraud monetization | Pay-per-click advertising (PPC) | Domain generation algorithm | Domain-flux | Web advertising | Web tracking

GitHub

Open redirect (01.'14) | Path-based open redirect (02.'14) | Unvalidated redirect in GitHub.com (02.'14) | Open redirect (02.'14) |
Insufficient OAuth redirect URL validation (10.'14) | Insufficient OAuth redirect URL validation (03.'16) | Gist archive download content spoofing (07.'16)

IDOR

Insecure Direct Object Reference | Directory Transversal