Is there a checklist of "bad entries" that I can use for QA?

Question

I am doing a QA session on an almost ready to use web application. Obviously, I would like to detect every hidden error. Therefore, I continue to feed the system with all sorts of bad inputs (illegal parameters, SQL injections, etc.). I am looking for a general checklist of "bad entries." I can go through its elements, so I will not miss any common mistake. Is there such a list somewhere?

I do not limit myself to online listings. I also accept articles and even order recommendations on this.

Answer 1

I suggest going through the OWASP site.

It's all about secure web applications and contains many examples of XSS, SQL Injection, etc.

This will give you a good start.