Coupon value manipulation, arbitrary discount % (CWE-20)
Coupon reuse, no single-use server tracking (CWE-472)
Race condition, concurrent like bypass (CWE-367)
Real Exploit Examples - From Scanned Repositories
Representative exploit findings across scanned repositories. Each example shows a confirmed exploitable vulnerability with the affected file and attack path.
Chained Attack Scenarios
Individual findings that combine into high-impact attack chains. Each chain was constructed from real findings across the scanned repos.