Social engineering is a type of attack that targets human behavior rather than technical vulnerabilities.

Stack overflow occurs when a program writes data beyond the end of a stack buffer, overwriting other data on the stack.

Self-XSS is not a common type of XSS vulnerability. It occurs when a script is executed by the victim's browser without any interaction from the attacker.

ARP spoofing is a type of MitM attack in which an attacker sends fake ARP (Address Resolution Protocol) messages to a victim's computer, causing the victim's traffic to be routed through the attacker's computer.

Tailgating is not a common type of social engineering attack. It occurs when an attacker follows a victim into a secure area without authorization.

Spear phishing is a type of phishing attack in which an attacker targets a specific individual or organization with a personalized email message.

Poisoned search results are not a common type of baiting attack. They occur when an attacker manipulates search engine results to display malicious websites or links.

Automated calls are the most common type of vishing attack. They use pre-recorded messages to trick victims into giving up personal information or downloading malware.

QR code phishing is not a common type of smishing attack. It occurs when an attacker creates a malicious QR code that, when scanned, directs the victim to a malicious website or downloads malware.

Remote code execution is the most common type of zero-day vulnerability. It allows an attacker to execute arbitrary code on a victim's computer.

Man-in-the-middle attack is not a common type of supply chain attack. It occurs when an attacker intercepts communications between two parties and impersonates one of them.

Cryptolocker is the most common type of ransomware attack. It encrypts a victim's files and demands a ransom payment to decrypt them.

Unintentional insider is not a common type of insider threat. It occurs when an employee unintentionally compromises an organization's security, such as by clicking on a malicious link or downloading malware.

Misconfiguration is the most common type of cloud security vulnerability. It occurs when a cloud service is not configured properly, leaving it vulnerable to attack.