Vendor
high
advisory
Shopify App: Cross-shop authorization bypass (CVE-2026-63414)
1 TTP 1 CVEThe shopify_app Ruby gem contains a cross-shop authorization bypass vulnerability where user-supplied shop parameters can override cryptographically verified session contexts.
shopify_app
web-application
authentication-bypass
rubygems
cve-2026-63414
1t
1c
high
advisory
JWR Phishing Framework Analysis
3 TTPsThe JWR phishing framework is a sophisticated, operator-steered PhaaS platform that uses persistent WebSocket connections to capture PII, payment credentials, and device fingerprints in real-time.
Shopify Checkout +3
phishing
credential-theft
websocket
saas
3t