> For the complete documentation index, see [llms.txt](https://docs.web3pentesting.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities.md).

# DApp / WApp Vulnerabilities

- [Insecure Authentication and Authorization](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities/insecure-authentication-and-authorization.md)
- [Insufficient Data Protection](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities/insufficient-data-protection.md)
- [Input Validation Issues](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities/input-validation-issues.md)
- [Insecure APIs](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities/insecure-apis.md)
- [Lack of Encryption](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities/lack-of-encryption.md)
- [Improper Error Handling](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities/improper-error-handling.md)
- [Cross-Site Scripting (XSS)](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities/cross-site-scripting-xss.md)
- [Cross-Site Request Forgery (CSRF)](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities/cross-site-request-forgery-csrf.md)
- [Session Management Vulnerabilities](https://docs.web3pentesting.com/dapp-wapp-vulnerabilities/session-management-vulnerabilities.md)