PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-0133] Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN

xbow.com | vulnerability | CVE-2025-0133 | #bug-bounty | #vulnerability-research | #xss | #vpn | #cve-2025-0133 | #globalprotect | #palo-alto
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Details the multiple XSS flaws XBOW found in Palo Alto's GlobalProtect VPN portal (CVE-2025-0133) during a bug bounty run, following analysis of how XML configuration data flows into rendering.
CVE
CVE-2025-0133
Published
Collected

Related coverage

vulnerability · bugcrowd.com
What you need to know about CVE-2025-0133
CVE-2025-0133 in Palo Alto Networks' GlobalProtect VPN gateway lets attackers hijack sessions via a tampered link. Bugcrowd's Casey Ellis and Von Tran explain the impact for defenders and hackers.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · horizon3.ai
[CVE-2020-35124] Unauthenticated XSS to Remote Code Execution Chain in Mautic < 3.2.4
# Unauthenticated XSS to Remote Code Execution Chain in Mautic ` page. Below we dump the contents of the `/etc/passwd` file on the Mautic server. And upgrading to a reverse shell using a Python...
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
blog · hacktron.ai
When Your VPN Opens Your Private Network to the Public
AI-assisted reverse engineering of stripped PAN-OS binaries uncovered a JWT algorithm confusion flaw in GlobalProtect's Cloud Authentication Service, enabling VPN auth bypass with just a username.
Back