Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber

Summary The PUT /api/v1/subscriber/imsi API accepts an IMSI identifier from both the URL path and the JSON request body but never verifies they match. This allows an authenticated NetworkManager to modify any subscriber's policy while the audit trail records a fabricated or unrelated subscriber...

EUVD-2022-28895

Malicious code in bioql PyPI...

Cross site scripting

Cross-Site Scripting XSS vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin versions = 2.9.9, vulnerable at parameter 'source'...

WordPress plugin 跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. cross-site scripting vulnerability exists in the WordPress plugin, which stems from the vulnerability of the Yasr-Yet...