# Vulnerability catalog

140 curated families. This is an extensible index, not an exhaustive list of every possible flaw. Candidate CWE references require root-cause evidence; ATT&CK associations require the stated behavior.

- [Broken object-level authorization (BOLA / IDOR)](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/bola-controlled-object-access.html) — CWE-639. An actor can access another owner’s protected object by supplying its identifier.
- [Broken function-level authorization (BFLA)](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/bfla-restricted-function.html) — CWE-862, CWE-863. A lower-privilege actor invokes a function reserved for another role.
- [Broken property authorization: private response fields](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/bopla-private-response-property.html) — CWE-862, CWE-863. An otherwise permitted object response includes fields the actor is not entitled to read.
- [Mass assignment of server-controlled properties](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/mass-assignment-protected-property.html) — CWE-915. Automatic request binding lets a user modify a property that should be set only by trusted server logic.
- [Authentication or MFA state bypass](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/authentication-incomplete-state-bypass.html) — CWE-287. A session that has not completed required authentication can perform protected operations.
- [Session fixation across login](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/session-fixation-login-binding.html) — CWE-384. A session known to an attacker remains usable after another controlled user authenticates into it.
- [Residual access after explicit session revocation](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/session-revocation-residual-access.html) — CWE-613. A revoked credential or removed membership retains access beyond the product’s applicable revocation guarantee.
- [Password reset binding or single-use failure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/password-reset-account-binding.html) — CWE-640. Recovery proof can change the wrong account or be reused contrary to the recovery contract.
- [OAuth login or account-linking confusion](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/oauth-login-account-linking-confusion.html) — CWE-287, CWE-352. An authorization response or external identity is bound to the wrong application session or controlled account.
- [JWT signature, issuer, audience, or token-purpose validation failure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/jwt-signature-trust-failure.html) — CWE-347, CWE-287. A service accepts token claims without the required signature or trusted issuer/key validation.
- [SQL injection](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/sql-query-structure-injection.html) — CWE-89. Input changes SQL query structure instead of remaining a bound value.
- [NoSQL operator or query injection](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/nosql-operator-contract-bypass.html) — CWE-943. An unexpected object, operator, or expression crosses a NoSQL query boundary.
- [OS command injection](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/os-command-argument-boundary.html) — CWE-78. An untrusted parameter becomes shell command syntax rather than remaining a data argument.
- [Server-side template injection (SSTI)](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/server-template-expression-injection.html) — CWE-1336. Lower-trust data becomes executable template source at a server-side renderer.
- [Reflected or stored cross-site scripting](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/xss-reflected-stored-origin-execution.html) — CWE-79. Attacker-controlled input executes in another controlled user’s browser under the application origin.
- [DOM-based cross-site scripting](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/dom-xss-source-sink-flow.html) — CWE-79. Browser-side code moves attacker-controlled data into an executable DOM or script sink.
- [Cross-site request forgery (CSRF)](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/csrf-browser-forged-state-change.html) — CWE-352. A browser can be induced to perform a protected state change using ambient credentials.
- [CORS private-data exposure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/cors-private-credentialed-read.html) — CWE-942. A lower-trust origin can read a protected response using the controlled user’s browser credentials.
- [Cross-origin messaging trust failure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/postmessage-origin-validation.html) — CWE-346. A message handler trusts an unauthorized sender or leaks protected data to an unintended origin.
- [Server-side request forgery (SSRF)](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/ssrf-forbidden-destination.html) — CWE-918. A server-side fetch crosses the feature’s destination, network, or credential policy.
- [Unsafe upload interpretation or placement](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/unsafe-upload-interpretation.html) — CWE-434. Uploaded content is handled in a security-sensitive context beyond its permitted file contract.
- [Path traversal outside an allowed root](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/path-traversal-controlled-canary.html) — CWE-22. A controlled path escapes the intended filesystem or object-key boundary.
- [XML external entity injection (XXE)](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/xxe-external-entity-resolution.html) — CWE-611. An XML parser resolves untrusted external entities across an unintended file or network boundary.
- [Archive extraction path escape](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/archive-extraction-path-escape.html) — CWE-22. An archive member is extracted outside its designated output directory.
- [Web cache poisoning](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/web-cache-poisoning-unkeyed-input.html) — CWE-349. Unkeyed attacker-controlled input changes a representation later served from shared cache.
- [Web cache deception](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/web-cache-deception-private-response.html) — CWE-524. A path/cache-policy discrepancy stores a private response for retrieval by another client.
- [HTTP request smuggling / desynchronization](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/http-request-boundary-desynchronization.html) — CWE-444. Two HTTP-processing components disagree about request boundaries or parsing.
- [Race condition in a security-sensitive transition](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/race-condition-duplicate-transition.html) — CWE-362. Concurrent operations violate a rule that holds when the same actions run serially.
- [Workflow order or approval bypass](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/workflow-order-validation-bypass.html) — CWE-841. An actor can complete a protected workflow without its required prior approval or immutable conditions.
- [Single-use action or idempotency replay failure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/single-use-idempotency-replay.html) — CWE-837. A replay creates another protected effect where the operation must be unique or idempotent.
- [GraphQL resolver or field authorization failure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/graphql-resolver-field-authz.html) — CWE-863. A GraphQL path or protected field bypasses the permission enforced for the same object elsewhere.
- [WebSocket message or subscription authorization failure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/websocket-message-authorization.html) — CWE-862. A valid connection performs unauthorized per-message actions or receives a private subscription.
- [Cross-site WebSocket hijacking](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/cross-site-websocket-hijacking.html) — CWE-346, CWE-352. A page on another origin opens an authenticated socket and reads or performs protected operations.
- [Hard-coded product credentials](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/hardcoded-credentials.html) — CWE-798. A reusable credential is embedded in source, history, a release, or a default configuration. Distinguish a shared built-in credential from an accidentally committed deployment credential when assigning the weakness.
- [CI metadata interpreted as executable script](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/ci-script-injection.html) — CWE-94. Pull-request titles, branch metadata, issue fields, or artifact values are inserted into a generated shell/program instead of being handled as data.
- [Untrusted contribution executed by privileged CI](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/ci-untrusted-code-execution.html) — CWE-829. A trusted workflow fetches or loads contribution-controlled code, configuration, or dependencies and executes them with authority unavailable to the contributor.
- [CI artifact poisoning across a workflow trust boundary](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/ci-artifact-poisoning.html) — CWE-829. A higher-trust workflow treats attacker-controlled test/build output as executable code or authoritative release input without adequate producer and content constraints.
- [Dependency confusion and unintended package origin](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/dependency-confusion.html) — CWE-829. Dependency resolution selects an attacker-controlled package origin where the build or application expects an organization-controlled package.
- [Unsafe object deserialization](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/unsafe-deserialization.html) — CWE-502. Untrusted bytes reach a format that can instantiate behavior-bearing objects or invoke code, such as Python pickle, without a sufficient trust boundary.
- [JavaScript prototype pollution](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/prototype-pollution.html) — CWE-1321. An attacker-controlled property path changes inherited object state, which can affect unrelated objects and security-sensitive consumers.
- [Out-of-bounds memory read](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/out-of-bounds-read.html) — CWE-125. A parser or native consumer reads outside the valid extent of an object or buffer, potentially causing a crash or disclosure depending on how the result is used.
- [Out-of-bounds memory write](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/out-of-bounds-write.html) — CWE-787. A native component writes beyond an allocated object because length, index, or allocation assumptions do not agree.
- [Use after free in a public API or parser lifecycle](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/use-after-free.html) — CWE-416. Code uses an object after its lifetime has ended, often across callbacks, error handling, reference counting, or asynchronous operations.
- [Integer overflow affecting allocation or bounds](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/integer-overflow.html) — CWE-190. Input-derived arithmetic wraps or overflows so the checked size, allocation size, and later operation refer to different effective values.
- [Parser resource exhaustion and decompression amplification](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/parser-resource-exhaustion.html) — CWE-400. A small accepted input causes disproportionate CPU, memory, recursion, or expanded output consumption without effective limits at the relevant consumer.
- [Regular-expression denial of service](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/regex-dos.html) — CWE-1333. An attacker-controlled string makes the chosen regular-expression engine perform excessive backtracking or other disproportionate matching work.
- [Predictable temporary files and unsafe creation](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/insecure-temporary-files.html) — CWE-377. A component creates or reuses temporary files in a way that permits another local principal to precreate, replace, read, or redirect sensitive operations.
- [Untrusted executable, library, or module search path](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/untrusted-search-path.html) — CWE-427. A program resolves an executable/library/module from an attacker-writable search location instead of the intended trusted component.
- [Overbroad cloud role trust](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/cloud-iam-role-trust.html) — CWE-863. A principal outside the integration's intended trust set can obtain an owned role's authority.
- [Excessive service-role delegation](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/cloud-passrole-escalation.html) — CWE-266. A restricted principal can cause an allowed service to execute with a more powerful role than the application contract permits.
- [Federated cloud role accepts the wrong workload identity](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/cloud-oidc-subject-scope.html) — CWE-863. OIDC role trust accepts a legitimate token from a disallowed controlled subject, repository, branch or audience.
- [Anonymous access to private object storage](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/cloud-storage-anonymous-read.html) — CWE-732. An unsigned request retrieves an object that the product promises to keep private.
- [Unauthorized object creation or replacement](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/cloud-storage-unauthorized-write.html) — CWE-732. An unauthorized principal can create or replace an object in a protected storage location.
- [Signed storage capability exceeds its authorized scope](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/cloud-presigned-capability-scope.html) — CWE-863. The application issues or accepts a storage capability for an object, operation or lifetime beyond the caller's entitlement.
- [Private delivery policy bypassed through the origin](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/cloud-origin-access-bypass.html) — CWE-862. A private object is protected at the CDN or application edge but remains accessible directly at an owned origin.
- [Kubernetes Secret access exceeds tenant permissions](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/kube-secret-rbac-exposure.html) — CWE-732. A restricted cluster principal can read a canary Secret outside its intended resource boundary.
- [Workload creation grants unintended service-account authority](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/kube-workload-identity-selection.html) — CWE-266. An allowed workload-creation path lets a tenant select a service account or resource mount exceeding its promised permissions.
- [Admission policy misses a supported object or update path](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/kube-admission-policy-gap.html) — CWE-863. A tenant can persist an object prohibited by the advertised admission policy through a missed operation, selector or subresource.
- [Namespace or workload network restriction is ineffective](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/kube-network-isolation-failure.html) — CWE-923. A disallowed fixture workload reaches a service across a network boundary that the deployment claims to enforce.
- [Container exposes unintended host files or privileges](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/container-host-resource-exposure.html) — CWE-250. A supported container configuration gives an untrusted workload access to host resources outside the documented isolation boundary.
- [Sensitive values exposed through state or plan artifacts](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/iac-state-secret-exposure.html) — CWE-522. A deployment artifact readable by an unintended principal contains credentials or equivalent confidential material.
- [Secrets retained in container build artifacts](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/container-build-secret-leak.html) — CWE-522. A build places confidential inputs in image history, layers or artifacts available outside their intended audience.
- [Supported deployment default exposes a protected service](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/iac-insecure-supported-default.html) — CWE-276. A supported installation path creates permissive service exposure or permissions that contradict the product's stated deployment boundary.
- [Dangling DNS reference to a retired service](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/dns-dangling-resource-reference.html) — CWE-672. An owned hostname still points to a released provider resource, creating a possible takeover path if provider binding rules permit it.
- [Restricted DNS zone transferable from an unintended source](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/dns-unrestricted-zone-transfer.html) — CWE-732. An unauthorized source can retrieve an entire zone that the owner intends to restrict.
- [DNS recursion available outside the intended client network](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/dns-unrestricted-recursion.html) — CWE-862, CWE-863. A resolver performs recursive lookups for a client excluded by its intended access policy.
- [SMTP relay allows unauthenticated external delivery](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/smtp-unintended-open-relay.html) — CWE-441. An untrusted unauthenticated client can relay between external domains contrary to the server's relay policy.
- [Redis authentication or key ACL boundary failure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/redis-canary-access.html) — CWE-862, CWE-863. An anonymous or restricted client can read a key outside the service's intended access policy.
- [PostgreSQL trust authentication exceeds the approved network boundary](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/postgres-unintended-trust-auth.html) — CWE-306. An unintended source can connect as a protected database identity without the required authentication because an effective trust rule applies.
- [Message broker permissions cross a virtual-host boundary](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/queue-virtual-host-boundary.html) — CWE-863. A restricted broker identity can act on a queue or exchange belonging to a different isolated fixture tenant.
- [Container daemon management endpoint lacks required client authentication](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/container-daemon-client-auth.html) — CWE-306. An untrusted network client reaches protected container-management functionality without the required identity checks.
- [Exported Android component exposes a protected operation](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/android-exported-operation.html) — CWE-926. An externally reachable activity, service or receiver performs work that its caller is not entitled to request.
- [Content-provider permission or URI-grant escape](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/android-provider-grant.html) — CWE-926, CWE-863. A recipient obtains data or file capabilities beyond the URI and permissions deliberately shared with it.
- [Nested intent redirects application authority](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/android-intent-redirection.html) — CWE-441. An exported entry point forwards attacker-supplied intent fields into a protected destination using the target application’s authority.
- [PendingIntent grants unintended mutable or replayable authority](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/android-pendingintent-delegation.html) — CWE-863. A recipient can alter or reuse a delegated action beyond its intended destination, parameters or lifetime.
- [Mobile link handler trusts routing as authorization](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/mobile-link-handler.html) — CWE-939, CWE-863. An externally supplied custom or universal/app link reaches a protected client operation without validating the route input and current security context.
- [Untrusted WebView content reaches a native bridge](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/mobile-webview-native-bridge.html) — CWE-749. A page or frame controlled outside the trusted app origin can invoke native capabilities through a shipped WebView bridge.
- [Keychain accessibility violates the intended lock boundary](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/ios-keychain-access-policy.html) — CWE-922. A sensitive item or protected key operation is available in a device state that the application’s security policy requires it to deny.
- [Extension input crosses an iOS shared-container boundary](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/ios-shared-container-trust.html) — CWE-863. The main application trusts content written through a lower-trust extension/input path as if it were an authorized app action.
- [Local authentication does not gate the protected operation](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/client-local-auth-gate.html) — CWE-288. A local PIN or biometric screen is bypassed through another reachable path while the supposedly protected data/key operation remains usable.
- [Backup or transfer exposes unintended sensitive client state](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/client-backup-sensitive-state.html) — CWE-530, CWE-922. A supported backup, migration or diagnostic-copy path carries a secret into an unintended recipient or security context.
- [Sensitive client state leaks through accessible diagnostics](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/client-secret-logging.html) — CWE-532. Logs, crash reports or user-exportable diagnostics disclose a secret or private record to a principal outside its intended audience.
- [TLS peer certificate or hostname verification failure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/client-invalid-certificate.html) — CWE-295, CWE-297. Release trust validation accepts an untrusted certificate chain or wrong-host identity on a sensitive connection.
- [Electron IPC exposes main-process authority to an untrusted sender](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/electron-ipc-confused-deputy.html) — CWE-749, CWE-863. An attacker-controlled renderer or frame invokes a privileged main-process operation through insufficient sender or argument validation.
- [Desktop protocol handler misinterprets external input](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/desktop-protocol-confusion.html) — CWE-88. An OS-dispatched URL reaches a native command or operation with attacker-controlled arguments outside the intended handler contract.
- [Updater accepts an artifact outside its publisher trust policy](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/update-untrusted-artifact.html) — CWE-494, CWE-347. The real update decision accepts modified bytes or an unrelated publisher identity before activation.
- [Privileged updater consumes lower-user-controlled staging content](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/updater-privileged-staging.html) — CWE-732, CWE-367. A standard user can replace a staged file or redirect a path actually consumed by a privileged installation process.
- [Attacker-controlled rollback restores a prohibited security state](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/update-security-rollback.html) — CWE-863. An attacker bypasses an update version authorization policy to cause a rollback that restores a prohibited security state.
- [Indirect prompt injection into protected tool actions](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/indirect-prompt-tool-injection.html) — CWE-1427. Lower-trust retrieved content influences the agent into a tool operation outside the legitimate task or granted authority.
- [Agent tool accepts unauthorized object or tenant parameters](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/agent-tool-object-authorization.html) — CWE-863. A tool trusts caller-supplied object or workspace identifiers instead of enforcing the authenticated principal’s authority.
- [Agent approval is not bound to executed arguments](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/agent-approval-argument-drift.html) — CWE-367. An approved harmless action can be modified before dispatch without revalidating the approval’s scope.
- [MCP proxy consent confuses different clients](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/mcp-proxy-confused-deputy.html) — CWE-441. A proxy reuses upstream consent in a way that grants a new MCP client access without the resource owner’s intended per-client consent.
- [MCP accepts a token for another resource](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/mcp-token-audience-confusion.html) — CWE-287. A protected MCP resource accepts a token that was not issued for that resource.
- [RAG retrieval or citation resolver crosses tenant boundaries](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/rag-cross-tenant-retrieval.html) — CWE-863. Search filters, chunk retrieval or citation download omit an ownership decision required for the effective caller.
- [RAG cache or fresh retrieval ignores revoked access](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/rag-cache-revocation-leak.html) — CWE-863. A new retrieval or cache response exposes protected content after its applicable permission revocation has taken effect.
- [Contract callback reentrancy violates a state invariant](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/contract-reentrant-state.html) — CWE-1265. Nested calls observe or alter state under assumptions that do not hold while an earlier operation is incomplete.
- [Contract initializer permits unauthorized ownership or configuration](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/contract-unprotected-initializer.html) — CWE-862. A reachable initialization path lets an ordinary actor establish or replace privileged state outside the intended deployment lifecycle.
- [Contract upgrade authority can be bypassed](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/contract-upgrade-authorization.html) — CWE-862. An actor outside the upgrade policy can change a proxy’s execution target or equivalent privileged configuration.
- [Vault share conversion or rounding breaks entitlement](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/contract-share-accounting.html) — CWE-682. Conversions, fees or rounding create an unintended claim on assets or an eligible loss under supported token behavior.
- [Signed contract action can be replayed unexpectedly](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/contract-signature-replay.html) — CWE-294. A successfully consumed authorization remains reusable despite a one-use or otherwise bounded execution contract.
- [Signed action does not bind its intended context](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/contract-signature-context.html) — CWE-345. A valid signature is accepted for another recipient, action, verifier or chain context contrary to the authorization contract.
- [Oracle freshness or dependency state permits an invalid decision](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/contract-stale-oracle.html) — CWE-754. A consumer accepts an observation outside its required freshness or availability conditions and makes an incorrect economic decision.
- [Oracle denomination or decimal conversion is incorrect](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/contract-oracle-unit-confusion.html) — CWE-682. The consumer mixes quote currencies, token precision or feed precision and assigns the wrong economic value.
- [Firmware verifier accepts unauthenticated protected bytes](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/firmware-signature-validation.html) — CWE-347. The relevant update acceptance path fails to authenticate executable payload or security-relevant metadata correctly.
- [Firmware security-version state can be lowered](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/firmware-security-version-rollback.html) — CWE-1328. An attacker can reduce the protected security version and thereby restore software excluded by the anti-rollback policy.
- [Firmware verification fails to enforce required product binding](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/firmware-product-binding.html) — CWE-20. An otherwise authentic image is accepted for an incompatible product or security configuration despite required target restrictions.
- [Boot or recovery path executes an unverified component](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/firmware-boot-chain-gap.html) — CWE-345. A reachable boot path omits an authenticity check required by the product’s execution trust model.
- [Production UART exposes an unauthenticated privileged console](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/hardware-unauthenticated-console.html) — CWE-306. The in-scope physical access model yields a protected console capability without required authentication.
- [On-chip debug interface exposes protected memory or control](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/hardware-debug-authorization.html) — CWE-1191. A production debug/test interface permits a protected capability beyond the documented physical-access authorization.
- [Firmware contains a reusable shared authentication credential](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/firmware-shared-credentials.html) — CWE-798. An attacker-accessible firmware artifact embeds a credential that grants protected access, potentially across multiple devices.
- [Exposed repository or history secret](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/exposed-repository-secret.html) — CWE-540. Source, history, or a published artifact exposes a credential outside its intended audience.
- [Open redirect across an origin trust boundary](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/open-redirect-trust.html) — CWE-601. Attacker input controls a navigation destination that the application treats as trusted.
- [Clickjacking of a sensitive authenticated action](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/clickjacking-sensitive-action.html) — CWE-1021. An untrusted origin can frame and visually disguise an authenticated operation.
- [Untrusted Host or forwarding-header origin construction](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/host-header-origin-trust.html) — CWE-346. The application constructs a security-sensitive origin from request metadata that an attacker can influence.
- [Sensitive data in errors, debug routes, or generated files](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/sensitive-error-disclosure.html) — CWE-209. An error or debug output crosses a confidentiality boundary by revealing protected state.
- [Predictable security token or capability identifier](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/weak-security-token-randomness.html) — CWE-338. A security token relies on randomness that does not meet its unpredictability requirement.
- [Password storage without an adequate adaptive hash](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/password-storage-weak-hash.html) — CWE-916. A password verifier has insufficient computational cost for its supported threat model.
- [Encrypted data accepted without integrity authentication](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/crypto-authentication-missing.html) — CWE-353. A protected data format permits security-relevant changes that are not detected before use.
- [SAML assertion signature, audience, or response binding failure](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/saml-assertion-trust.html) — CWE-347, CWE-287. The service provider trusts an assertion whose signature or authentication context is not valid for the receiving flow.
- [Unauthorized authenticator enrollment, replacement, or removal](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/authenticator-management-proof-bypass.html) — CWE-287. A lower-assurance or wrong-account context can add, replace, or remove an authentication factor contrary to its management policy.
- [WebAuthn assertion accepted for an invalid account or ceremony context](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/webauthn-assertion-binding-failure.html) — CWE-287, CWE-347. The relying party accepts a passkey assertion without the required account, challenge, signature, origin, or verification binding.
- [Verification or account merge preserves another actor's access](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/identity-verification-merge-confusion.html) — CWE-287. Registration, verification, email change, or federation merging transfers trust to an identity while retaining an unintended actor's usable credentials or session.
- [Enforced SSO bypass through an alternate login path](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/enforced-sso-alternate-login-bypass.html) — CWE-288. A protected tenant requiring federation remains accessible through a local or alternate authentication path outside the documented exceptions.
- [Argument or option injection without shell interpretation](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/process-argument-option-injection.html) — CWE-88. A value-only input changes options or mode of the intended executable, even when no shell is used.
- [Parameter or JSON parser disagreement crosses a security check](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/request-parser-value-conflict.html) — CWE-436. Validation or authorization uses one interpretation of a request value while the protected operation uses another.
- [Server-side parameter pollution in a constructed request](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/downstream-parameter-injection.html) — CWE-235. An outer input injects or alters parameters in a server-created downstream request.
- [Unverified or tampered webhook causes a protected effect](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/webhook-event-authenticity-failure.html) — CWE-345. An event is processed with privileged consequences without establishing the required sender and content authenticity.
- [Authentic integration event applied to the wrong tenant or object](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/webhook-provider-tenant-binding.html) — CWE-863. A valid provider event is misbound to a local tenant, installation, mode or resource the event is not authorized to modify.
- [GitLab job token crosses an unintended project boundary](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/gitlab-job-token-boundary.html) — CWE-863. A contribution-controlled job acquires access to a private receiving-project resource beyond the CI integration contract.
- [Shared CI runner exposes private state across jobs](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/ci-runner-cross-job-state.html) — CWE-668. A job reaches a previous job's private filesystem or image material despite the runner's promised isolation.
- [Page message borrows unintended browser-extension authority](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/extension-message-authority.html) — CWE-441, CWE-863. An ordinary web page reaches a privileged extension action through insufficient message sender or argument validation.
- [Delayed extension result reaches a different document](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/extension-document-reply-confusion.html) — CWE-367, CWE-863. An asynchronous extension operation reuses stale tab/frame authority after navigation and exposes a protected result to another document.
- [Agent conversation, checkpoint or memory crosses ownership boundaries](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/ai-persistent-state-ownership.html) — CWE-863. Persisted agent state or its resume/export path is accessible or mutable by a principal outside its intended owner or sharing grant.
- [MCP resumed state changes authorization or request meaning](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/mcp-resume-state-integrity.html) — CWE-345, CWE-863. An MRTR server trusts modified or context-mismatched requestState when it affects a protected resumed operation.
- [Private MCP result is reused across authorization contexts](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/mcp-private-cache-context.html) — CWE-524, CWE-863. A shared cache delivers caller-specific protocol data outside the authorization context that produced it.
- [Agent retry commits a protected single-use action twice](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/agent-retry-duplicate-effect.html) — CWE-841. A response-loss or resume path duplicates an operation whose application contract requires at-most-once effect.
- [Private client content leaks through a lower-trust display or sharing channel](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/client-private-ui-disclosure.html) — . A private marker appears in a notification, background snapshot, clipboard or another user-visible channel outside its promised audience.
- [Untrusted model artifact reaches executable deserialization or custom code](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/model-artifact-unsafe-loading.html) — CWE-502, CWE-829. An attacker-controlled artifact reaches a loader whose execution trust exceeds the uploader's intended data-only authority.
- [Unbounded resource allocation or request amplification](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/resource-allocation-limit-failure.html) — CWE-770. An operation consumes an unconstrained protected resource through input size, fan-out, queued work, output size or retries.
- [Sensitive business flow exceeds its permitted frequency or allocation](https://bug-bounty-field-manual.kmahshooq.chatgpt.site/vulnerabilities/sensitive-flow-frequency-limit.html) — CWE-799. An actor exceeds an intended recipient, reservation, workflow or tenant allocation through repeated otherwise valid operations.