Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-0133] Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN

xbow.com | vulnerability | CVE-2025-0133 | #bug-bounty | #vulnerability-research | #xss | #vpn | #cve-2025-0133 | #globalprotect | #palo-alto

Summary

Details the multiple XSS flaws XBOW found in Palo Alto's GlobalProtect VPN portal (CVE-2025-0133) during a bug bounty run, following analysis of how XML configuration data flows into rendering.
Published
Collected

original ↗

Related coverage

  1. What you need to know about CVE-2025-0133 (bugcrowd.com)
  2. Google Bug Hunters (bughunters.google.com)
  3. How to use Codex for Bug Bounty research: explore broadly, validate rigorously (yeswehack.com)
  4. Flounder: Autonomous AI White-Hat Security Auditor with Execution-Grounded Verification (github.com)
  5. strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication (bishopfox.com)
  6. PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls (bishopfox.com)

back