[DeadlySox]

I wanna ask a discussion question 
when a website or a company has been breached or their database has been leaked
what are the vulnerabilities that the attackers use to breach the database or website?
I mean the common ones are known and are patched so how do they get breached?

[AFS_Nemesis]

SQL injection, local/remote file inclusions, sometimes you can chain into a remote code execution situation or just be luck enough to find one straightaway. Finding outdated software + known exploits is another. Weak authentication systems, privilege escalation both horizontally and laterally. General API abuse is becoming more popular.

I'm dev for a project to automatically look through a collection of router firmware images across many manufacturers and models. This would be more in the 0day side of the playpen once it starts working as anticipated. Already found some private keys that are being used for something that it shouldn't be...