CVE-2026-108784Medium· 6.5▾ SunlitA vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manip…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manipulation of the argument total_amount results in business logic errors. The attack can be launched remotely. The exploit is now public and may be used. The patch is identified as dcaa93b3150352e5044708d7211b5bed0af4509f. A patch should be applied to remediate this issue.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-82423Medium· 5.4A vulnerability has been found in macrozheng mall up to 1.0.3
CVE-2026-108789Medium· 5.5A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2
CVE-2025-58289Medium· 5.9Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.
CVE-2026-105573Medium· 4.3A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5
CVE-2026-77166Low· 2.4The emoji field in the page emoji update endpoint does not properly validate user input
CVE-2026-82982Medium· 4.3The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting a file whose contents changed after they reviewed it