[pwn2dd]

[HEADING=1]

Lunarissec Group identified 3 critical vulnerabilities on commissaire-justice.fr

[/HEADING]
[HEADING=3]

[/HEADING]
[HEADING=3]

[COLOR=rgb(255, 255, 255)]A BOLA vulnerability allowing any authenticated user to read and modify any other user's account data (email, name).[/COLOR]

[/HEADING]
[HEADING=3]

[COLOR=rgb(255, 255, 255)]Convention signing endpoints accessible without authentication, exposing sensitive data (SIRET, name, address, signataire) of all conventions.[/COLOR]

[/HEADING]
[HEADING=3]

[COLOR=rgb(255, 255, 255)]An unauthorized data creation flaw allowing any user to inject fake entities into the official registry with any SIREN number.[/COLOR]

[/HEADING]
[HEADING=2]

[COLOR=rgb(255, 255, 255)]m0rphyn, pwn2d, cyber[/COLOR]

[/HEADING]
[HEADING=2]

[COLOR=rgb(255, 255, 255)]The French security services are shitty, a shitty government is fucking us, France.[/COLOR]

[/HEADING]
[HEADING=2]

We sell sensitive account data and vulnerability: "data" "leiInfos" "dependances": "adresse": { "pays": "FRANCE", "ligne1": "",

[/HEADING]
[HEADING=2]

"ligne2": "", "ligne3": "", "ville": "", "codePostal": "" "nom1": "", "nom2": "" "formeJuridique": "", "statut": "ACTIVE", "formeJuridiqueLibelle": "siren": """, "nic": """ "_id": "idTiers" "objetSocial1": "objetSocial2" "id": "dirigeants"

[/HEADING]

[HEADING=2]CONTACT FOR BUY : @LastNodem @Couzoua[/HEADING]
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

[COLOR=rgb(226, 80, 65)]"success": true,
"data": {
"leiInfos": {
"dependances": []
},
"adresse": {
"pays": "FRANCE",
"ligne1": "",
"ligne2": "",
"ligne3": "",
"ville": "",
"codePostal": ""
},
"holding": false,
"association": false,
"syndic": false,
"siege": true,
"statutHorodatage": "2026-06-03T10:14:33.958Z",
"dateDmaj": "2026-06-02T17:53:23.960Z",
"apiAutoMaj": true,
"idTiers": null,
"_id": "6a1ffe895763b7e4c79b85a5",
"raisonSociale": {
"nom1": "",
"nom2": ""
},
"formeJuridique": "",
"statut": "ACTIVE",
"apiDateMaj": "2026-06-03T10:14:33.958Z",
"dirigeants": [],
"liensExternes": [],
"createdAt": "2026-06-03T10:14:34.000Z",
"updatedAt": "2026-06-03T10:14:34.000Z",
"siren": null,
"nic": null,
"formeJuridiqueLibelle": "Forme juridique inconnue",
"objetSocial1": null,
"objetSocial2": null,
"id": "6a1ffe895763b7e4c79b85a5"
{
"results": [
{
"role": "user",
"isEmailVerified": false,
"email": "[email protected]",
"name": "Test2",
"createdAt": "2026-06-02T20:37:17.709Z",
"updatedAt": "2026-06-02T20:37:17.709Z",
"id": "6a1f3efd96efff00282b1f07"
},
{
"role": "user",
"isEmailVerified": false,
"email": "[email protected]",
"name": "Hacked User",
"createdAt": "2026-06-02T20:38:16.910Z",
"updatedAt": "2026-06-02T21:36:12.369Z",
"id": "6a1f3f3896efff00282b1f0c"
},
{
"role": "user",
"isEmailVerified": false,
"email": "[email protected]",
"name": "Attacker",
"createdAt": "2026-06-02T20:43:09.951Z",
"updatedAt": "2026-06-02T20:43:09.951Z",
"id": "6a1f405dbbe97e002847454b"
},
{
"role": "user",
"isEmailVerified": false,
"email": "[email protected]",
"name": "HACKED",
"createdAt": "2026-06-02T20:49:17.130Z",
"updatedAt": "2026-06-02T20:51:49.108Z",
"id": "6a1f41cdbbe97e0028474550"
},
{
"role": "user",
"isEmailVerified": false,
"email": "[email protected]",
"name": "Attacker",
"createdAt": "2026-06-02T20:50:50.589Z",
"updatedAt": "2026-06-02T20:50:50.589Z",
"id": "6a1f422aff13c70028925748"
},
{
"role": "user",
"isEmailVerified": false,
"email": "[email protected]",
"name": "sqdsqdqq",
"createdAt": "2026-06-02T21:20:34.274Z",
"updatedAt": "2026-06-02T21:20:34.274Z",
"id": "6a1f4922bbe97e0028474558"
},
{
"role": "user",
"isEmailVerified": false,
"email": "[COLOR=rgb(226, 80, 65)][EMAIL='[email protected]']--------[/EMAIL][/COLOR][EMAIL='[email protected]']@commissaire-justice.fr[/EMAIL]",
"name": "Admin",
"createdAt": "2026-06-02T21:21:02.819Z",
"updatedAt": "2026-06-02T21:21:02.819Z",
"id": "6a1f493e96efff00282b1f18"
},
{
"role": "user",
"isEmailVerified": false,
"email": "[email protected]",
"name": "User",
"createdAt": "2026-06-02T21:28:48.551Z",
"updatedAt": "2026-06-02T21:28:48.551Z",
"id": "6a1f4b10ff13c7002892574f"
},
{
"role": "user",
"isEmailVerified": false,
"email": "[email protected]",
"name": "sqdsqdqq",
"createdAt": "2026-06-02T22:05:59.976Z",
"updatedAt": "2026-06-02T22:05:59.976Z",
"id": "6a1f53c7bbe97e0028474565"
}
],
"page": 1,
"limit": 10,
"totalPages": 1,
"totalResults": 9
}
{
"admin": {
"role": "admin",
"isEmailVerified": false,
"email": "[email protected]",
"name": "Admin",
"createdAt": "2026-06-02T21:21:02.819Z",
"updatedAt": "2026-06-02T21:21:02.819Z",
"id": "6a1f493e96efff00282b1f18"
},
"tokens": {
"access": {
"token": "censorship buy for token",
"expires": "2026-06-02T21:51:02.851Z"
},
"refresh": {[/COLOR]

---

---

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Selling in Games section. If you feel this is incorrect: http://breached4wtyw5fb45zj7sggnoazgv3aohme2zftkrndhvo76d5q5uad.onion/Forum-Ban-Appeals

[Crumpled2415]

Why don't you share link to download it ?