https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T15:47:57.567959+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110126 fkie_cve-2026-110126 2026-10-14T15:47:57.597437+00:00

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment address ids and send POST /address or DELETE /address/{addressId} requests to overwrite or remove victims' saved addresses.

 https://db.gcve.eu/vuln/ghsa-rrcp-3x9c-4qr5 GHSA-rrcp-3x9c-4qr5 2026-10-14T15:47:57.597604+00:00

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment address ids and send POST /address or DELETE /address/{addressId} requests to overwrite or remove victims' saved addresses.