Sanction Bypass Through Depositing to Authorized Borrower's Market

Lines of code Vulnerability details Impact Wildcat protocol provides lending with lender backed collateral considered as reserves and the ratio must be upheld by the borrower. The protocol team has taken certain steps to prevent interaction with sanctioned users. However, sanction status is only...

Shopify: List of devices is accessible regardless of the account limitations

List of devices is accessible regardless of the account limitations. PoC . Create a limited account A with no rights. . Log some devices with a different account B. . From account A, GET /admin/mobiledevices.json. . List of devices...