Consent-O-Matic

Consent-O-Matic | ---|--- La mayoría de los sitios web hoy en día quieren procesar tus datos y te piden consentimiento mediante banners de cookies. Aunque estos banners están pensados para darte control, en la práctica a menudo resultan en clics repetitivos y que consumen tiempo, especialmente si...

365-Stealer

365-Stealer Tabla de Contenidos Acerca de 365-Stealer Acerca del Ataque de Concesión de Consentimiento Ilícito Características Clave de 365-Stealer Configuración del Entorno de Ataque Registro Automatizado de Aplicaciones en Azure Registro Manual de Aplicaciones en Azure Configuración de la...

AzureAD-Attack-Defense

Manual de ataque y defensa para Microsoft Entra Esta publicación es una colección de diversos escenarios de ataque comunes sobre Microsoft Entra y cómo pueden mitigarse o detectarse. Todos los escenarios, ideas y comentarios incluidos se basan en las experiencias de los colaboradores durante sus...

reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

blackout-public

ZoomInfo GTM Studio: Documentación sobre el seguimiento previo al consentimiento "Puedes bloquear al investigador. No puedes bloquear la evidencia." Lo que sucedió El 25 de noviembre de 2025, el CEO de ZoomInfo, Henry Schuck, publicó una demostración del producto GTM Studio en LinkedIn: su...

CVE-2026-42636

Unauthenticated Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.4.6 versions...

CVE-2026-42636 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.4.6 versions...

CVE-2026-42636

The WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin for WordPress, versions

EUVD-2026-93058

Unauthenticated Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.4.6 versions...

CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-103433

Docker Buildx Bake fails to request the required fs.read approval for specific filesystem inputs. This vulnerability allows an untrusted Bake definition to expose a readable file via a pathless secret (where the ID is interpreted as a client-side pathname) or to consume a local OCI image layout o...

Beautiful Cookie Consent Banner < 2.10.2 - Cross-Site Scripting

The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nscbarcontenthref' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-75865

CVE-2026-75865 — WPLP Cookie Consent gdpr-cookie-consent ≤ 4.4.1 Proof-of-concept and technical write-up for CVE-2026-75865 , an unauthenticated arbitrary file upload leading to remote code execution in the WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent...

CVE-2026-92977 Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via Comment

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2025-11371

Aviso legal Este proyecto se publica solo con fines educativos y de investigación. El uso de este software para atacar objetivos sin consentimiento previo y explícito es ilegal. El autor no se hace responsable de ningún uso indebido, daño o consecuencia legal derivada del uso de este código. Siga...

Claude-Code-MCP-Injection-PoC

Claude Code: Representación Engañosa de la Confirmación de Herramientas MCP Una Prueba de Concepto PoC profesional que demuestra una falla crítica de UI/UX en Claude Code de Anthropic. Esta vulnerabilidad permite que un servidor MCP malicioso engañe a los usuarios para que aprueben la ejecución d...

CVE-2026-101062: Incorrect Authorization

Obot before v0.23.0 affected versions = v0.22.1 running with OBOTSERVERENABLEAUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without any restriction on the redirect URIs a client may register. Because the authorization flow auto-completes for an already...

Cross-site Scripting (XSS)

Spring Authorization Server is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to user-controlled values being rendered without HTML entity encoding in the default consent page, which allows an attacker to inject malicious content through a crafted OAuth2 authorization request an...

WordPress WPLP Cookie Consent plugin < 4.4.4 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions 4.4.4...