Hello, recently I discovered a small vulnerability in search module.
Users can "bypass" search limits by just removing ips4_lastSearch cookie.
People may use it in DoS/DDoS attacks as it's using a lot of resources. Video showcase: https://streamable.com/xdo5ow