[Pwn2d]

lunarissec identified 3 critical vulnerabilities on commissaire-justice.fr

    A BOLA vulnerability allowing any authenticated user to read and modify any other user's account data (email, name).

• Convention signing endpoints accessible without authentication, exposing sensitive data (SIRET, name, address, signataire) of all conventions.An unauthorized data creation flaw allowing any user to inject fake entities into the official registry with any SIREN number.m0rphyn, pwn2d, cyber The French system is truly shit, they're screwing us over in France.

We sell users and all sensitive data And the vulnerabilities. We didn't claim responsibility for any of the latest attacks we've carried out, but now we will claim everything.

1. Contact : @LastNodem , @Couzoua
   

"success": true,
    "data": {
        "leiInfos": {
            "dependances": []
        },
        "adresse": {
            "pays": "FRANCE",
            "ligne1": "",
            "ligne2": "",
            "ligne3": "",
            "ville": "",
            "codePostal": ""
        },
        "holding": false,
        "association": false,
        "syndic": false,
        "siege": true,
        "statutHorodatage": "2026-06-03T10:14:33.958Z",
        "dateDmaj": "2026-06-02T17:53:23.960Z",
        "apiAutoMaj": true,
        "idTiers": null,
        "_id": "6a1ffe895763b7e4c79b85a5",
        "raisonSociale": {
            "nom1": "",
            "nom2": ""
        },
        "formeJuridique": "",
        "statut": "ACTIVE",
        "apiDateMaj": "2026-06-03T10:14:33.958Z",
        "dirigeants": [],
        "liensExternes": [],
        "createdAt": "2026-06-03T10:14:34.000Z",
        "updatedAt": "2026-06-03T10:14:34.000Z",
        "siren": null,
        "nic": null,
        "formeJuridiqueLibelle": "Forme juridique inconnue",
        "objetSocial1": null,
        "objetSocial2": null,
        "id": "6a1ffe895763b7e4c79b85a5"
{
  "results": [
    {
      "role": "user",
      "isEmailVerified": false,
      "email": "[email protected]",
      "name": "Test2",
      "createdAt": "2026-06-02T20:37:17.709Z",
      "updatedAt": "2026-06-02T20:37:17.709Z",
      "id": "6a1f3efd96efff00282b1f07"
    },
    {
      "role": "user",
      "isEmailVerified": false,
      "email": "[email protected]",
      "name": "Hacked User",
      "createdAt": "2026-06-02T20:38:16.910Z",
      "updatedAt": "2026-06-02T21:36:12.369Z",
      "id": "6a1f3f3896efff00282b1f0c"
    },
    {
      "role": "user",
      "isEmailVerified": false,
      "email": "[email protected]",
      "name": "Attacker",
      "createdAt": "2026-06-02T20:43:09.951Z",
      "updatedAt": "2026-06-02T20:43:09.951Z",
      "id": "6a1f405dbbe97e002847454b"
    },
    {
      "role": "user",
      "isEmailVerified": false,
      "email": "[email protected]",
      "name": "HACKED",
      "createdAt": "2026-06-02T20:49:17.130Z",
      "updatedAt": "2026-06-02T20:51:49.108Z",
      "id": "6a1f41cdbbe97e0028474550"
    },
    {
      "role": "user",
      "isEmailVerified": false,
      "email": "[email protected]",
      "name": "Attacker",
      "createdAt": "2026-06-02T20:50:50.589Z",
      "updatedAt": "2026-06-02T20:50:50.589Z",
      "id": "6a1f422aff13c70028925748"
    },
    {
      "role": "user",
      "isEmailVerified": false,
      "email": "[email protected]",
      "name": "sqdsqdqq",
      "createdAt": "2026-06-02T21:20:34.274Z",
      "updatedAt": "2026-06-02T21:20:34.274Z",
      "id": "6a1f4922bbe97e0028474558"
    },
    {
      "role": "user",
      "isEmailVerified": false,
      "email": "[email protected]",
      "name": "Admin",
      "createdAt": "2026-06-02T21:21:02.819Z",
      "updatedAt": "2026-06-02T21:21:02.819Z",
      "id": "6a1f493e96efff00282b1f18"
    },
    {
      "role": "user",
      "isEmailVerified": false,
      "email": "[email protected]",
      "name": "User",
      "createdAt": "2026-06-02T21:28:48.551Z",
      "updatedAt": "2026-06-02T21:28:48.551Z",
      "id": "6a1f4b10ff13c7002892574f"
    },
    {
      "role": "user",
      "isEmailVerified": false,
      "email": "[email protected]",
      "name": "sqdsqdqq",
      "createdAt": "2026-06-02T22:05:59.976Z",
      "updatedAt": "2026-06-02T22:05:59.976Z",
      "id": "6a1f53c7bbe97e0028474565"
    }
  ],
  "page": 1,
  "limit": 10,
  "totalPages": 1,
  "totalResults": 9
}
{
    "admin": {
        "role": "admin",
        "isEmailVerified": false,
        "email": "[email protected]",
        "name": "Admin",
        "createdAt": "2026-06-02T21:21:02.819Z",
        "updatedAt": "2026-06-02T21:21:02.819Z",
        "id": "6a1f493e96efff00282b1f18"
    },
    "tokens": {
        "access": {
            "token": "censorship buy for token",
            "expires": "2026-06-02T21:51:02.851Z"
        },
        "refresh": {
            "token": "