Curated security research, vulnerabilities, advisories and tools for practitioners.

#xml

Security coverage tagged xml.

1.

CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCE

vulnerability | 2026-06-23 11:21 | CVE-2026-33112 | blog.viettelcybersecurity.com | original ↗ | #rce | #deserialization | #sharepoint

2.

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

blog | 2026-02-06 17:36 | yeswehack.com | original ↗ | #bug-bounty | #cloud | #rce

3.

Unexpected security footguns in Go's parsers

blog | 2025-06-18 11:00 | CVE-2020-16250 | blog.trailofbits.com | original ↗ | #authentication-bypass | #deserialization | #go

4.

SAML roulette: the hacker always wins

research | 2025-03-31 07:10 | portswigger.net | original ↗ | #gitlab | #authentication-bypass | #xml

5.

How to Find XXE Bugs: Severe, Missed and Misunderstood

vulnerability | 2021-02-19 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #rce | #web-security

6.

Graphtage: A New Semantic Diffing Tool

blog | 2020-08-28 11:00 | blog.trailofbits.com | original ↗ | #open-source | #tooling | #json

7.

Burp Suite now reports blind XXE injection

blog | 2015-05-06 14:33 | portswigger.net | original ↗ | #burp-suite | #collaborator | #scanner

8.

[MoBP] SOAP parameter parsing

blog | 2008-11-14 06:47 | portswigger.net | original ↗ | #burp-suite | #fuzzing | #portswigger