trappsec

trappsec trappsec — это фреймворк с открытым исходным кодом, который помогает разработчикам выявлять атакующих, исследующих бизнес-логику API. Встраивая реалистичные маршруты-приманки и поля-ловушки, которые сложно отличить от реальных конструкций API, злоумышленники подталкиваются к...

CVE-2024-30896

CVE-2024-30896 Краткое описание Ошибка бизнес-логики в influxdb позволяет пользователям, владеющим действительным токеном allAccess, повышать свои привилегии до уровня оператора путем перечисления текущих токенов авторизации. Сценарий Злоумышленником может быть пользователь, которому администрато...

CVE-2024-50968

CVE-2024-50968 Описание Уязвимость бизнес-логики существует в функции добавления в корзину Add to Cart системы интернет-магазина Agri-Trading Online Shopping System 1.0 от itsourcecode, что позволяет удаленным атакующим манипулировать параметром quant при добавлении товара в корзину. Установив...

CVE-2020-10130

CVE-2020-10130 - Продукт SearchBlox до версии V-9.1 уязвим для обхода бизнес-логики Product Description: SearchBlox упрощает корпоративный поиск для сложных организаций. Интуитивно понятные и интеллектуальные инструменты SearchBlox обеспечивают быструю настройку из коробки, безопасное шифрование ...

CVE-2026-25126

CVE-2026-25126: PolarLearn 투표 수 조작 연구: Joshua van Rijswijk 설명 CVE-2026-25126 에 대한 PoC로, PolarLearn 포럼 투표 API의 높은 심각도 비즈니스 로직 취약점입니다. 엔드포인트 POST /api/v1/forum/vote는 direction 필드에 대한 엄격한 런타임 검증을 적용하지 않습니다. TypeScript 타입은 런타임에 강제되지 않으므로, 공격자는 다운스트림에서 잘못 처리되는 임의의 문자열을 보낼 수 있습니다. 이로 인해 소위 유령 반대 투표ghos...

tirreno

tirreno tirreno — это открытая аналитика безопасности. tirreno tir.ˈrɛ.no помогает понять, контролировать и защищать ваши приложения от киберугроз, перехвата учётных записей, ботов и злоупотреблений. В то время как классическая кибербезопасность сосредоточена на инфраструктуре и сетевом периметре...

CVE-2026-89050

The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as paid, allowing users who can place an order to obtain a paid ad placement without payment...

CVE-2026-29810

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

EUVD-2026-77074

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

CVE-2026-29810

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

CVE-2026-29810

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

CVE-2026-29810

CyberPanel versions prior to 2.4.4 contain a business-logic flaw where a required return 0 statement is omitted, leading to an incomplete authorization or validation check. The vulnerability is exploitable over the network with low complexity and requires low privileges (an authenticated account)...

Shopper: Negative discount values accepted and propagated through order calculation pipeline

Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...

GHSA-5VF4-452P-JJHF Shopper: Negative discount values accepted and propagated through order calculation pipeline

Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...

PT-2026-90547

Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...

CVE-2026-86753 snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint

snipe-it versions before 8.7.0 fail to validate the requestable flag for asset models in the POST /account/request/assetmodel/modelId endpoint. Authenticated users can bypass administrative restrictions and create checkout requests for non-requestable asset models by submitting requests directly ...

CVE-2026-86753

snipe-it (asset management application by grokability) versions before 8.7.0 contain a business logic bypass in the POST /account/request/asset_model/{modelId} endpoint. The root cause is a failure to validate the requestable flag for asset models, allowing authenticated users to bypass administr...

CVE-2026-86753 snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint

snipe-it versions before 8.7.0 fail to validate the requestable flag for asset models in the POST /account/request/assetmodel/modelId endpoint. Authenticated users can bypass administrative restrictions and create checkout requests for non-requestable asset models by submitting requests directly ...

EUVD-2026-74717

The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price defined elsewhere on the site and complete an order at that...

CVE-2026-85030

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routesagent.py of the component selfRegister API Endpoint. Such manipulation of the argument initialbalance leads to business...