A06 - Insecure Design 3

• Client-Side Price Manipulation – Discount Abuse via Cookie Tampering | Snooker May 19, 2026
• Race Condition in Cart and Checkout Flow – Multi-Item Purchase for Single Charge | Cafe Club May 10, 2026
• Predictable Token Enumeration – Gift Card Redemption Abuse | BugForge Lab May 3, 2026