Unauthenticated views may expose information to anonymous users

ImpactA number of Nautobot URL endpoints were found to be improperly accessible to unauthenticated anonymous users, including the following:- /api/graphql/ 1- /api/users/users/session/ Nautobot 2.x only; the only information exposed to an anonymous user is which authentication backend classes are...

Test-Extensions

Burp Suite Security Extensions — Burp Challenge Objetivo...

SQLi

Blind SQLi - Status Code & Time Based Herramienta de Blind SQ...

langextract-poc

LangExtract POC - Arquitectura Hexagonal Sistema de extracció...

Quatuor Evaluation of Performance SQL Injection Vulnerability

Quatuor Evaluación de Desempeño is a performance evaluation system developed by the Spanish company Quatuor. Quatuor Evaluación de Desempeño has a SQL injection vulnerability. This vulnerability stems from external SQL injections in the parameters Idusuario and Idevaluacion within the...

Quatuor Evaluation of Performance SQL Injection Vulnerability

Quatuor Evaluación de Desempeño is a performance evaluation system developed by the Spanish company Quatuor. Quatuor Evaluación de Desempeño has a SQL injection vulnerability. This vulnerability stems from incorrect operations with the parameter Idevaluacion in the...

WordPress Protección de datos – RGPD plugin <= 0.68 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Protección de datos RGPD versions = 0.68...

CVE-2026-24539

Missing Authorization vulnerability in ABCdatos Protección de datos – RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protección de datos – RGPD: from n/a through = 0.68...

CVE-2026-24539

Missing Authorization vulnerability in ABCdatos Protección de datos – RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protección de datos – RGPD: from n/a through = 0.68...

CVE-2026-24539 WordPress Protección de datos – RGPD plugin <= 0.68 - Broken Access Control vulnerability

Missing Authorization vulnerability in ABCdatos Protección de datos – RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protección de datos – RGPD: from n/a through = 0.68...

CVE-2026-24539

CVE-2026-24539 concerns the WordPress plugin “Protección de datos – RGPD” (versions up to and including 0.68). The issue is described as a Broken Access Control / Missing Authorization vulnerability enabling exploitation of incorrectly configured access control security levels. Public sources in ...

CVE-2026-24539

Missing Authorization vulnerability in ABCdatos Protección de datos - RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protección de datos - RGPD: from n/a through = 0.68...

CVE-2026-24539 WordPress Protección de datos – RGPD plugin <= 0.68 - Broken Access Control vulnerability

Missing Authorization vulnerability in ABCdatos Protección de datos RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protección de datos RGPD: from n/a through = 0.68...

PT-2026-4386

Name of the Vulnerable Software and Affected Versions Protección de datos – RGPD versions prior to 0.69 Description A missing authorization issue in the proteccion-datos-rgpd plugin allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a...

CVE-2026-24539: Missing Authorization

Missing Authorization vulnerability in ABCdatos Protección de datos – RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protección de datos – RGPD: from n/a through = 0.68...

sql-injection-practice

Proyecto: Inyección SQL – Blue Team Descripción del proyecto Est...

EUVD-2025-37924

Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busqueda.php txtdepecodi, busqueda/busqueda.php txtusuacodi, anexoslista.php raditemp, Administracion/listas/formAreaajax.php codDepe, Administracion/listas/formDepeHijoajax.php codDepe,...

Innovation and Qualification: SQL Injection Vulnerabilities

Innovación y Cualificación is an e-learning solution from Innovación y Cualificación. Innovación y Cualificación suffers from an SQL injection vulnerability that originates from SQL injection and could lead to an attacker obtaining, updating, and deleting database data via injected SQL queries...

Innovation and Qualification Safety Vulnerabilities

Innovación y Cualificación is an e-learning solution from Innovación y Cualificación. Innovación y Cualificación suffers from a security vulnerability that originates from SQL injection and could lead to an attacker obtaining, updating, and deleting database data via injected SQL queries...

Innovation and Qualification Safety Vulnerabilities

Innovación y Cualificación is an e-learning solution from Innovación y Cualificación. Innovación y Cualificación has a security vulnerability that stems from improper access control and could lead to an attacker gaining access to sensitive information of other users...