Business Logic Abuse 2 Client-Side Price Manipulation – Discount Abuse via Cookie Tampering | Snooker May 19, 2026 Predictable Token Enumeration – Gift Card Redemption Abuse | BugForge Lab May 3, 2026