trappsec

trappsec trappsec est un framework open-source qui aide les développeurs à détecter les attaquants qui sondent la logique métier des API. En intégrant des routes leurres réalistes et des champs de miel difficiles à distinguer des véritables constructions d'API, les attaquants sont incités à...

tirreno

tirreno tirreno — это открытая аналитика безопасности. tirreno tir.ˈrɛ.no помогает понять, контролировать и защищать ваши приложения от киберугроз, перехвата учётных записей, ботов и злоупотреблений. В то время как классическая кибербезопасность сосредоточена на инфраструктуре и сетевом периметре...

CVE-2024-30896

CVE-2024-30896 Résumé Une faille de logique métier dans influxdb permet aux utilisateurs possédant un jeton allAccess valide d'élever leurs privilèges au niveau opérateur en listant les jetons d'autorisation actuels. Scénario L'attaquant peut être un utilisateur à qui un administrateur a accordé...

CVE-2026-56596

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

EUVD-2026-93373

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596

The HCL BigFix Service Management software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to provide malformed or unexpected data, potentially leading to processing errors , business logic bypasses , and unintended application behavior . The ...

CVE-2026-105573

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors...

CVE-2026-105573 newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors...

EUVD-2026-92931

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors...

CVE-2026-105573

A business logic error exists in newbee-ltd newbee-mall versions up to 2.7.5 . The vulnerability impacts an unknown function within the Shopping Cart Quantity Handler component, specifically in the file /jshERP-boot/accountHead/updateAccountHeadAndDetail. By manipulating the goodsCount argument, ...

PT-2026-106713

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2024-50968

CVE-2024-50968 Description Il existe une vulnérabilité de logique métier dans la fonction Ajouter au panier d'Agri-Trading Online Shopping System 1.0 de itsourcecode, qui permet à des attaquants distants de manipuler le paramètre quant lors de l'ajout d'un produit au panier. En définissant la...

CVE-2020-10130

CVE-2020-10130 - Продукт SearchBlox до версии V-9.1 уязвим для обхода бизнес-логики Product Description: SearchBlox упрощает корпоративный поиск для сложных организаций. Интуитивно понятные и интеллектуальные инструменты SearchBlox обеспечивают быструю настройку из коробки, безопасное шифрование ...

CVE-2026-25126

CVE-2026-25126: Манипуляция подсчётом голосов в PolarLearn Исследование: Joshua van Rijswijk Описание PoC для CVE-2026-25126 — уязвимости бизнес-логики высокой степени серьёзности в API голосования форума PolarLearn. Конечная точка POST /api/v1/forum/vote не обеспечивает строгую проверку поля...

CVE-2026-102107

Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appeared to originate from another user, because the server did not verify that the requester was authorized to act as the specified account. This could be used t...

CVE-2026-102107 Kiteworks Core user impersonation in a file-request feature

Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appeared to originate from another user, because the server did not verify that the requester was authorized to act as the specified account. This could be used t...

CVE-2026-102107 Kiteworks Core user impersonation in a file-request feature

Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appeared to originate from another user, because the server did not verify that the requester was authorized to act as the specified account. This could be used t...

CVE-2026-102107

Kiteworks Core contains a business logic flaw within its file-request feature. This flaw allows an authenticated user to send requests that appear to originate from a different user because the server fails to verify if the requester is authorized to act as the specified account. An attacker coul...