https://bbreports.es/https://bbreports.es/reporteshttps://bbreports.es/acercahttps://bbreports.es/categoria/idor-bolahttps://bbreports.es/categoria/xsshttps://bbreports.es/categoria/ssrfhttps://bbreports.es/categoria/sql-injectionhttps://bbreports.es/categoria/oauth-sesioneshttps://bbreports.es/categoria/csrfhttps://bbreports.es/categoria/rcehttps://bbreports.es/categoria/apishttps://bbreports.es/categoria/logica-de-negociohttps://bbreports.es/categoria/autenticacionhttps://bbreports.es/categoria/configuracionhttps://bbreports.es/categoria/otroshttps://bbreports.es/reporte/nextcloud-team-folders-un-administrador-delegado-solo-api-podia-darse-acceso-a-c2026-09-26https://bbreports.es/reporte/nextcloud-photos-los-albumes-inteligentes-compartidos-buscaban-con-las-carpetas2026-09-26https://bbreports.es/reporte/curl-en-macos-reutiliza-conexiones-tls-sin-pasar-por-sectrust-al-no-comparar-nat2026-09-26https://bbreports.es/reporte/curl-con-openssl-ignoraba-pinnedpubkey-con-insecure-si-el-servidor-no-enviaba-ce2026-09-26https://bbreports.es/reporte/cve-2026-80229-uso-tras-liberacion-en-libcurl-con-openssl-3-x-al-reutilizar-cone2026-09-26https://bbreports.es/reporte/essity-api-sin-autenticacion-de-un-chatbot-interno-de-teams-permitia-leer-escrib2026-09-26https://bbreports.es/reporte/curl-8-21-0-en-windows-reutiliza-conexiones-negotiate-con-la-identidad-equivocad2026-09-26https://bbreports.es/reporte/curl-con-libpsl-deja-escapar-cookies-de-un-sufijo-publico-a-hosts-hermanos-cve-22026-09-26https://bbreports.es/reporte/desbordamiento-de-pila-en-st-geomfromgeojson-de-mariadb-un-usuario-autenticado-t2026-09-26https://bbreports.es/reporte/nextcloud-files-lock-un-colaborador-con-permiso-de-escritura-podia-bloquear-para2026-09-26https://bbreports.es/reporte/nextcloud-collectives-un-emoji-de-pagina-con-texto-largo-y-saltos-de-linea-bloqu2026-09-26https://bbreports.es/reporte/weblate-una-busqueda-sin-autenticar-de-33-bytes-bloqueaba-52-s-de-cpu-y-congelab2026-09-26https://bbreports.es/reporte/wlc-el-cliente-de-weblate-enviaba-el-token-de-wlc-key-a-la-url-que-fijase-un-fic2026-09-26https://bbreports.es/reporte/nextcloud-mail-el-autocompletado-de-contactos-se-salta-las-restricciones-de-enum2026-09-26https://bbreports.es/reporte/desbordamiento-de-pila-en-mariadb-permite-tumbar-el-servidor-con-un-solo-set2026-09-25https://bbreports.es/reporte/robo-del-cambio-en-la-firma-en-frio-de-monero-mediante-un-unsigned-txset-falsifi2026-09-25https://bbreports.es/reporte/mariadb-una-colision-en-la-cache-de-privilegios-permite-a-un-rol-heredar-permiso2026-09-25https://bbreports.es/reporte/mariadb-una-cuenta-anonima-podia-cortar-conexiones-ajenas-con-kill-solo-con-pres2026-09-25https://bbreports.es/reporte/inyeccion-de-comandos-en-install-packages-del-sdk-de-aws-bedrock-agentcore-via-f2026-09-25https://bbreports.es/reporte/idor-en-nextcloud-circles-cualquier-usuario-podia-consultar-la-membresia-de-cual2026-09-25https://bbreports.es/reporte/mariadb-un-usuario-con-solo-usage-cambia-la-contrasena-de-un-administrador-via-g2026-09-25https://bbreports.es/reporte/lectura-fuera-de-limites-al-parsear-ficheros-frm-en-mariadb-permite-ejecutar-cod2026-09-25https://bbreports.es/reporte/desbordamiento-de-pila-en-quote-name-de-mariadb-dump-un-servidor-malicioso-ejecu2026-09-25https://bbreports.es/reporte/rails-action-text-el-contenido-de-code-y-pre-rompe-su-delimitador-en-to-markdown2026-09-25https://bbreports.es/reporte/use-after-free-en-el-indice-btree-de-tablas-memory-de-mariadb-por-un-key-version2026-09-25https://bbreports.es/reporte/cors-mal-configurado-en-admin-myndr-net-cualquier-subdominio-myndr-net-podia-lee2026-09-25https://bbreports.es/reporte/tor-celdas-introduce2-con-mac-invalido-hacen-crecer-sin-limite-la-cache-anti-rep2026-09-25https://bbreports.es/reporte/tor-un-relay-end-vacio-reordenado-por-conflux-provoca-una-lectura-fuera-de-limit2026-09-25https://bbreports.es/reporte/weblate-inyeccion-de-argumentos-en-mercurial-via-hgrepository-get-file-permite-e2026-09-24https://bbreports.es/reporte/fuga-de-memoria-dinamica-en-mariadb-por-desbordamiento-de-enteros-en-json-arraya2026-09-24https://bbreports.es/reporte/hackerone-code-enviaba-a-segment-tokens-de-restablecimiento-de-contrasena-todavi2026-09-24https://bbreports.es/reporte/nextcloud-collectives-un-enlace-publico-permitia-crear-paginas-aunque-la-edicion2026-09-24https://bbreports.es/reporte/hackerone-la-funcion-de-skills-filtraba-a-otros-hackers-los-titulos-de-reportes2026-09-23https://bbreports.es/reporte/roundcube-inyeccion-de-cabeceras-smtp-persistente-a-traves-del-campo-organizacio2026-09-23https://bbreports.es/reporte/nextcloud-files-lock-bloquear-y-desbloquear-ficheros-de-otros-usuarios-usando-su2026-09-23https://bbreports.es/reporte/rce-en-gitlab-al-limpiar-metadatos-con-exiftool2026-09-22https://bbreports.es/reporte/lectura-de-ficheros-arbitrarios-en-gitlab-al-mover-una-incidencia2026-09-22https://bbreports.es/reporte/ssrf-en-shopify-que-escala-hasta-root-en-todas-las-instancias2026-09-22https://bbreports.es/reporte/toma-masiva-de-cuentas-en-slack-por-http-request-smuggling2026-09-22https://bbreports.es/reporte/rce-en-el-cliente-de-steam-por-desbordamiento-de-bufer-en-la-info-del-servidor2026-09-22https://bbreports.es/reporte/twitter-saltarse-la-restriccion-de-descubrimiento-por-telefono-o-email2026-09-22https://bbreports.es/reporte/xss-almacenado-en-los-comentarios-de-incidencias-de-gitlab2026-09-22https://bbreports.es/reporte/inyeccion-sql-en-labs-data-gov-a-traves-de-la-cabecera-user-agent2026-09-22