CVE-2026-109406Medium· 5.4▾ SunlitA weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amou…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108784Medium· 6.5A vulnerability was detected in macrozheng mall up to 1.0.3
CVE-2026-82423Medium· 5.4A vulnerability has been found in macrozheng mall up to 1.0.3
CVE-2026-108789Medium· 5.5A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2
CVE-2025-58289Medium· 5.9Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.
CVE-2026-105573Medium· 4.3A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5
CVE-2026-77166Low· 2.4The emoji field in the page emoji update endpoint does not properly validate user input