CVE-2026-30523

The SourceCodester Loan Management System v1.0 contains a Business Logic vulnerability due to insufficient input validation. The backend fails to verify that the months parameter, used to define "Loan Plans," is a positive integer. An attacker can submit a negative value , leading to the creation...

SourceCodester Loan Management System 安全漏洞

The SourceCodester Loan Management System is an open-source loan management system developed by SourceCodester. Version 1.0 of the SourceCodester Loan Management System contains a security vulnerability. This vulnerability stems from insufficient input validation, which could allow attackers to...

NFTLoanFacilitator: Insufficient granularity allows for same-term loans to be accepted

Lines of code Vulnerability details Details & Impact It is possible for the calculated interest rate improvement to be zero if the existing interest rate is low enough ≤ 0.9% with 10% improvement rate. In such cases, lenders can compete to continually buyout each other with the same terms. The...