CVE-2026-92977

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2023-31853

CVE-2023-31853 Existe un ataque de cross-site scripting XSS reflejado en la interfaz de gestión basada en web del Cudy LT400. La página /cgi-bin/luci/admin/network/bandwidth tiene XSS reflejado a través del parámetro icon. Los métodos de explotación implican enviar una solicitud especialmente...

cve-2025-5777-citrixbleed2_reproduction

CVE-2025-5777 — CitrixBleed 2 Divulgación de memoria de Citrix NetScaler CVSS 9.3 — Crítico — Explotación activa en la naturaleza CitrixBleed 2 es una vulnerabilidad de divulgación de memoria en Citrix NetScaler ADC y NetScaler Gateway. Una validación de entrada insuficiente en el endpoint de...

EUVD-2026-91892

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-92977 Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via Comment

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-92977

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.3.5 . The root cause is insufficient input sanitization and output escaping, specifically where a page-wide regex strips closing quo...

CVE-2026-92977 Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via Comment

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-92977: Improper Neutralization of Input During Web Page Generation

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

PT-2026-104577

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description A cross-site scripting defect exists where the SAML message, relay state, and target URL are placed unencoded into the load-balancer cookie bounce auto-submit page. This issue is reachable when...

PT-2026-104550

Name of the Vulnerable Software and Affected Versions Burst Statistics – Simple WordPress Analytics Google Analytics Alternative versions prior to 3.7.2 Description Improper authentication allows for account persistence. The maybe load shared dashboard handler issues a genuine WordPress session...

PT-2026-104493

Name of the Vulnerable Software and Affected Versions The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress versions prior to 5.3.6 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject...

CVE-2026-105116: Improper Neutralization of Input During Web Page Generation

OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Omisión de Autenticación y RCE mediante usuario nulo CVE-2026-19900 Credenciales fijas y omisión de autenticación RCE mediante usuario nulo. Omisión mediante cabecera: Cookie:user=null Uso Compila y ejecuta el script con un host objetivo: go build cve-2026-19900-PoC.g...

CVE-2026-5513

CVE-2026-5513 — Bookly ≤ 27.2 XSS Almacenado a través de Cookie Resumen Campo| Valor ---|--- CVE ID| CVE-2026-5513 Vulnerabilidad| Cross-Site Scripting Almacenado XSS Plugin| Bookly — Sistema de Programación y Reserva de Citas en Línea Afectado| ≤ 27.2 Parcheado| 27.3+ CVSS 3.1| 7.2 Alto —...

WordPress Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Pham Duc Anh in WordPress Plugin Real Cookie Banner versions = 5.3.5...

CLSA-2026-1790965371 TuxCare security update for cookie (1 CVE)

TuxCare rebuilt cookie to address 1 CVE. Fixed in 0.1.0-tuxcare.1...

scripts-nse

¿Qué es? Algunos scripts NSE para buscar información de routers. El autor de estos scripts es VicenDominguez. Él encontró el 0-Day en Huawei; yo solo lo modifiqué para otros dos. El autor de este script no es responsable de su uso. Huawei HG253s v2 Vodafone-España está empezando a alquilar un nue...

CookieViz

CookieViz Francés CookieViz es una herramienta de visualización que permite medir el impacto de las cookies durante tu propia navegación. Cookieviz analiza las interacciones entre un navegador y los sitios y servidores remotos. Podrás saber a qué otros actores envía información el sitio que...

CVE-2026-104469 YesWiki before 4.6.7 Session Fixation via Login in AuthController.php

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki- session cookie can reuse it after login to access private...

CVE-2026-104469

YesWiki versions prior to 4.6.7 are susceptible to a session fixation vulnerability. The root cause is that the application fails to regenerate the PHP session ID during the login process. An attacker who obtains or sets a victim's pre-authentication YesWiki- * session cookie can reuse that cooki...