OopsSec Store Gift Card Vulnerability Due to Insecure Random Number Generation

OopsSec Store generates gift card codes using a linear congruential generator (LCG) seeded with the card's creation timestamp. The timestamp, exposed to buyers with millisecond precision, allows attackers to reproduce the gift card code and redeem it from a different account. No specific dates, CVE IDs, or additional technical parameters (e.g., LCG constants) were disclosed in the report. The vulnerability stems from insecure randomness implementation, enabling unauthorized access to gift card funds. The impact is limited to OopsSec Store's gift card system, with no broader ecosystem effects mentioned.