insecure-design 4 Client-Side Price Tampering Leads to Unauthorized Purchase | Ligature Jul 9, 2026 Sensitive Information Disclosure – Secrets Exposed in Base64 Session Cookie | Cookie Cutter May 20, 2026 Mass Assignment Leading to Admin Account Creation | Trellis May 14, 2026 Predictable Token Enumeration – Gift Card Redemption Abuse | BugForge Lab May 3, 2026