Mmacrozheng

Products

Exploited and recent CVEs

• CVE-2026-109410 Low 2.4 macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation 0.3%
• CVE-2026-109407 Low 3.1 macrozheng mall Coupon Redemption generateOrder race condition 0.2%
• CVE-2026-109406 Medium 5.4 macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error 0.2%
• CVE-2026-108785 Medium 6.3 macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration 0.3%
• CVE-2026-108784 Medium 6.5 macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error 0.3%
• CVE-2026-82423 Medium 5.4 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow 0.4%
• CVE-2026-82364 Medium 4.2 macrozheng mall Order Submission submit race condition 0.3%
• CVE-2026-79406 Medium 4.3 macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error 0.4%
• CVE-2026-19361 Low 3.7 macrozheng mall mall-portal getAuthCode password recovery 0.4%
• CVE-2026-15186 Medium 6.3 macrozheng mall Portal Endpoint create resource injection 0.4%
• CVE-2026-10070 Medium 4.7 macrozheng mall Super Admin Password update improper authorization 0.2%
• CVE-2026-25858 Critical 9.1 macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure 0.7%
• CVE-2025-15118 Medium 4.3 macrozheng mall Member Endpoint update improper authorization 0.3%
• CVE-2025-14016 Medium 5.4 macrozheng mall-swarm delete improper authorization 0.3%
• CVE-2025-13443 Medium 5.4 macrozheng mall delete access control 0.3%
• CVE-2025-13118 Medium 6.3 macrozheng mall-swarm paySuccess improper authorization 0.3%
• CVE-2025-13117 Medium 5.4 macrozheng mall-swarm/mall cancelOrder improper authorization 0.3%
• CVE-2025-13117 Medium 5.4 macrozheng mall-swarm/mall cancelOrder improper authorization 0.3%
• CVE-2025-13116 Medium 5.4 macrozheng mall-swarm/mall cancelUserOrder improper authorization 0.3%
• CVE-2025-13116 Medium 5.4 macrozheng mall-swarm/mall cancelUserOrder improper authorization 0.3%
• CVE-2025-13115 Medium 4.3 macrozheng mall-swarm/mall Order Details detail improper authorization 0.4%
• CVE-2025-13115 Medium 4.3 macrozheng mall-swarm/mall Order Details detail improper authorization 0.4%
• CVE-2025-13114 Medium 6.3 macrozheng mall-swarm attr updateAttr improper authorization 0.3%
• CVE-2025-9836 Medium 4.3 macrozheng mall paySuccess authorization 0.3%
• CVE-2025-9835 Medium 4.3 macrozheng mall cancelUserOrder cancelOrder authorization 0.4%
• CVE-2025-9514 Low 3.7 macrozheng mall Registration weak password 0.4%
• CVE-2025-8755 Medium 5.3 macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization 0.6%
• CVE-2025-8750 Low 2.4 macrozheng mall Add Product Page upload cross site scripting 0.3%
• CVE-2025-8742 Low 3.7 macrozheng mall Admin Login excessive authentication 0.6%
• CVE-2025-8741 Low 3.7 macrozheng mall login cleartext transmission 0.4%