PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTest

xbow.com | vulnerability | CVE-2025-49493 | #cloud | #cloud-security | #vulnerability-research | #soap | #xxe | #akamai | #cve-2025-49493
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Walks through XBOW's autonomously found XXE in Akamai CloudTest (CVE-2025-49493), pinned to the RepositoryService SOAP endpoint where verbose XML errors confirmed the server parsed attacker input.
CVE
CVE-2025-49493
Published
Collected

Related coverage

vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Postmortem on Next.js Middleware bypass
Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps.
vulnerability · horizon3.ai
[CVE-2021-38647] OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments
# OMIGOD – RCE Vulnerability in Multiple Azure Linux Deployments Zach Hanley September 16, 2021 Attack Blogs Overview On September 14, multiple vulnerabilities were discovered by researchers at...
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
Back