Hyperlink Injection - Easy Money (sometimes)

SQL Injection & Remote Code Execution - Double P1

RCE via Apache Struts2 - Still out there