<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://bbreports.es/</loc></url><url><loc>https://bbreports.es/reportes</loc></url><url><loc>https://bbreports.es/acerca</loc></url><url><loc>https://bbreports.es/categoria/idor-bola</loc></url><url><loc>https://bbreports.es/categoria/xss</loc></url><url><loc>https://bbreports.es/categoria/ssrf</loc></url><url><loc>https://bbreports.es/categoria/sql-injection</loc></url><url><loc>https://bbreports.es/categoria/oauth-sesiones</loc></url><url><loc>https://bbreports.es/categoria/csrf</loc></url><url><loc>https://bbreports.es/categoria/rce</loc></url><url><loc>https://bbreports.es/categoria/apis</loc></url><url><loc>https://bbreports.es/categoria/logica-de-negocio</loc></url><url><loc>https://bbreports.es/categoria/autenticacion</loc></url><url><loc>https://bbreports.es/categoria/configuracion</loc></url><url><loc>https://bbreports.es/categoria/otros</loc></url><url><loc>https://bbreports.es/reporte/desbordamiento-de-pila-en-mariadb-permite-tumbar-el-servidor-con-un-solo-set</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/robo-del-cambio-en-la-firma-en-frio-de-monero-mediante-un-unsigned-txset-falsifi</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/mariadb-una-colision-en-la-cache-de-privilegios-permite-a-un-rol-heredar-permiso</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/mariadb-una-cuenta-anonima-podia-cortar-conexiones-ajenas-con-kill-solo-con-pres</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/inyeccion-de-comandos-en-install-packages-del-sdk-de-aws-bedrock-agentcore-via-f</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/idor-en-nextcloud-circles-cualquier-usuario-podia-consultar-la-membresia-de-cual</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/mariadb-un-usuario-con-solo-usage-cambia-la-contrasena-de-un-administrador-via-g</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/lectura-fuera-de-limites-al-parsear-ficheros-frm-en-mariadb-permite-ejecutar-cod</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/desbordamiento-de-pila-en-quote-name-de-mariadb-dump-un-servidor-malicioso-ejecu</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/rails-action-text-el-contenido-de-code-y-pre-rompe-su-delimitador-en-to-markdown</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/use-after-free-en-el-indice-btree-de-tablas-memory-de-mariadb-por-un-key-version</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/cors-mal-configurado-en-admin-myndr-net-cualquier-subdominio-myndr-net-podia-lee</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/tor-celdas-introduce2-con-mac-invalido-hacen-crecer-sin-limite-la-cache-anti-rep</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/tor-un-relay-end-vacio-reordenado-por-conflux-provoca-una-lectura-fuera-de-limit</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://bbreports.es/reporte/weblate-inyeccion-de-argumentos-en-mercurial-via-hgrepository-get-file-permite-e</loc><lastmod>2026-09-24</lastmod></url><url><loc>https://bbreports.es/reporte/fuga-de-memoria-dinamica-en-mariadb-por-desbordamiento-de-enteros-en-json-arraya</loc><lastmod>2026-09-24</lastmod></url><url><loc>https://bbreports.es/reporte/hackerone-code-enviaba-a-segment-tokens-de-restablecimiento-de-contrasena-todavi</loc><lastmod>2026-09-24</lastmod></url><url><loc>https://bbreports.es/reporte/nextcloud-collectives-un-enlace-publico-permitia-crear-paginas-aunque-la-edicion</loc><lastmod>2026-09-24</lastmod></url><url><loc>https://bbreports.es/reporte/hackerone-la-funcion-de-skills-filtraba-a-otros-hackers-los-titulos-de-reportes</loc><lastmod>2026-09-23</lastmod></url><url><loc>https://bbreports.es/reporte/roundcube-inyeccion-de-cabeceras-smtp-persistente-a-traves-del-campo-organizacio</loc><lastmod>2026-09-23</lastmod></url><url><loc>https://bbreports.es/reporte/nextcloud-files-lock-bloquear-y-desbloquear-ficheros-de-otros-usuarios-usando-su</loc><lastmod>2026-09-23</lastmod></url><url><loc>https://bbreports.es/reporte/rce-en-gitlab-al-limpiar-metadatos-con-exiftool</loc><lastmod>2026-09-22</lastmod></url><url><loc>https://bbreports.es/reporte/lectura-de-ficheros-arbitrarios-en-gitlab-al-mover-una-incidencia</loc><lastmod>2026-09-22</lastmod></url><url><loc>https://bbreports.es/reporte/ssrf-en-shopify-que-escala-hasta-root-en-todas-las-instancias</loc><lastmod>2026-09-22</lastmod></url><url><loc>https://bbreports.es/reporte/toma-masiva-de-cuentas-en-slack-por-http-request-smuggling</loc><lastmod>2026-09-22</lastmod></url><url><loc>https://bbreports.es/reporte/rce-en-el-cliente-de-steam-por-desbordamiento-de-bufer-en-la-info-del-servidor</loc><lastmod>2026-09-22</lastmod></url><url><loc>https://bbreports.es/reporte/twitter-saltarse-la-restriccion-de-descubrimiento-por-telefono-o-email</loc><lastmod>2026-09-22</lastmod></url><url><loc>https://bbreports.es/reporte/xss-almacenado-en-los-comentarios-de-incidencias-de-gitlab</loc><lastmod>2026-09-22</lastmod></url><url><loc>https://bbreports.es/reporte/inyeccion-sql-en-labs-data-gov-a-traves-de-la-cabecera-user-agent</loc><lastmod>2026-09-22</lastmod></url></urlset>