Lucene search
+L

166 matches found

Positive Technologies
Positive Technologies
added 2026/06/07 12:00 a.m.37 views

PT-2026-47196

Name of the Vulnerable Software and Affected Versions songquanpeng one-api versions prior to 0.6.11-preview.7 Description A business logic error exists in the Redemption Code Top-Up Endpoint. The issue is located within the Redeem function of the model/redemption.go file. This flaw allows for...

3.1CVSS5.2AI score0.0022EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/06/05 7:47 p.m.15 views

CVE-2026-6334

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated OAuth client to redeem authorization codes issued to a different client via a crafted token exchange request.. Mattermo...

3.8CVSS5.5AI score0.00118EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:37 p.m.30 views

CVE-2026-47741

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's totaluse counter. Under concurrent checkout pressure Black Friday, flash sale, viral coupon, the global usagelimit was...

5.9CVSS5.5AI score0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/29 6:02 p.m.42 views

CVE-2026-47741 Shopper: Race condition on Discount.usage_limit allows silent over-redemption

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's totaluse counter. Under concurrent checkout pressure Black Friday, flash sale, viral coupon, the global usagelimit was...

5.9CVSS5.8AI score0.00239EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/29 6:02 p.m.68 views

CVE-2026-47741

CVE-2026-47741 affects Shopper, a Headless e-commerce Admin Panel. Before 2.8.0, CreateOrderFromCartAction::execute created the Order row before incrementing the discount’s total_use, allowing a race condition under concurrent checkout that silently exceeded the global usage_limit and applied the...

5.9CVSS5.8AI score0.00239EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/29 6:02 p.m.12 views

CVE-2026-47741

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's totaluse counter. Under concurrent checkout pressure Black Friday, flash sale, viral coupon, the global usagelimit was...

5.9CVSS5.8AI score0.00239EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/05/29 6:02 p.m.13 views

CVE-2026-47741 Shopper: Race condition on Discount.usage_limit allows silent over-redemption

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's totaluse counter. Under concurrent checkout pressure Black Friday, flash sale, viral coupon, the global usagelimit was...

5.9CVSS6AI score
SaveExploits0References5
EUVD
EUVD
added 2026/05/29 6:02 p.m.28 views

EUVD-2026-33409

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's totaluse counter. Under concurrent checkout pressure Black Friday, flash sale, viral coupon, the global usagelimit was...

5.9CVSS5.8AI score0.00239EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/05/29 6:02 p.m.47 views

CVE-2026-47741 Shopper: Race condition on Discount.usage_limit allows silent over-redemption

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's totaluse counter. Under concurrent checkout pressure Black Friday, flash sale, viral coupon, the global usagelimit was...

5.9CVSS0.00239EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/05/18 9:44 a.m.12 views

Authentication Bypass by Primary Weakness

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the OAuth authorization code redemption process. An attacker can gain unauthorized access to resource...

3.8CVSS5.9AI score0.00118EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/18 9:31 a.m.45 views

GHSA-JP3F-X449-4Q75 Mattermost doesn't enforce client identity binding during the OAuth authorization code redemption flow

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated OAuth client to redeem authorization codes issued to a different client via a crafted token exchange request.. Mattermo...

3.1CVSS5.9AI score0.00118EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/18 8:16 a.m.35 views

CVE-2026-6334

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated OAuth client to redeem authorization codes issued to a different client via a crafted token exchange request.. Mattermo...

3.8CVSS0.00118EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/18 6:33 a.m.10 views

CVE-2026-6334 OAuth authorization code client binding not enforced during token redemption in Mattermost

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated OAuth client to redeem authorization codes issued to a different client via a crafted token exchange request.. Mattermo...

3.1CVSS5.9AI score0.00118EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/18 6:33 a.m.57 views

CVE-2026-6334 OAuth authorization code client binding not enforced during token redemption in Mattermost

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated OAuth client to redeem authorization codes issued to a different client via a crafted token exchange request.. Mattermo...

3.1CVSS0.00118EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/18 6:33 a.m.38 views

EUVD-2026-30743

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated OAuth client to redeem authorization codes issued to a different client via a crafted token exchange request.. Mattermo...

3.1CVSS5.9AI score0.00118EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/18 6:33 a.m.62 views

CVE-2026-6334

Mattermost versions 11.5.x <= 11.5.1 and 10.11.x

3.8CVSS5.9AI score0.00118EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/05/18 6:33 a.m.10 views

CVE-2026-6334 OAuth authorization code client binding not enforced during token redemption in Mattermost

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated OAuth client to redeem authorization codes issued to a different client via a crafted token exchange request.. Mattermo...

3.1CVSS6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/18 12:00 a.m.28 views

PT-2026-41644

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.5.0 through 11.5.1 Mattermost versions 10.11.0 through 10.11.13 Description An issue exists in the OAuth authorization code redemption flow where client identity binding is not enforced. This allows an authenticated OAut...

3.8CVSS5.9AI score0.00118EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/18 12:00 a.m.23 views

PT-2026-44942

Name of the Vulnerable Software and Affected Versions Shopper versions prior to 2.8.0 Description A race condition exists in the CreateOrderFromCartAction::execute function. The system creates an order row before verifying and incrementing the total use counter of a discount. Under high concurren...

5.9CVSS5.8AI score0.00239EPSS
SaveExploits0References13
OSV
OSV
added 2026/04/04 6:26 a.m.13 views

GHSA-9JPJ-G8VV-J5MF OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter

Summary Before OpenClaw 2026.4.2, the Gemini OAuth flow reused the PKCE verifier as the OAuth state value. Because the provider reflected state back in the redirect URL, the verifier could be exposed alongside the authorization code. Impact Anyone who could capture the redirect URL could learn bo...

7CVSS6AI score0.00238EPSS
SaveExploits0References5
Rows per page
Query Builder