1.SAML: A fractal of bad designblog | 2026-09-21 11:00 | blog.trailofbits.com | Original ↗ | .md | #authentication | #sso | #xml
2.CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCEvulnerability | 2026-06-23 11:21 | CVE-2026-33112 | blog.viettelcybersecurity.com | Original ↗ | .md | #rce | #deserialization | #sharepoint
3.XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilitiesblog | 2026-02-06 17:36 | yeswehack.com | Original ↗ | .md | #bug-bounty | #cloud | #rce
4.Unexpected security footguns in Go's parsersblog | 2025-06-18 11:00 | CVE-2020-16250 | blog.trailofbits.com | Original ↗ | .md | #authentication-bypass | #deserialization | #go
5.SAML roulette: the hacker always winsresearch | 2025-03-31 07:10 | portswigger.net | Original ↗ | .md | #gitlab | #authentication-bypass | #xml
6.Exploiting XPath Injection Weaknessesblog | 2023-11-30 00:00 | netspi.com | Original ↗ | .md | #burp-suite | #authentication-bypass | #web-security
7.How to Find XXE Bugs: Severe, Missed and Misunderstoodvulnerability | 2021-02-19 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #rce | #web-security
8.Graphtage: A New Semantic Diffing Toolblog | 2020-08-28 11:00 | blog.trailofbits.com | Original ↗ | .md | #open-source | #tooling | #json
9.XXE in IBM's MaaS360 Platformblog | 2018-10-16 00:00 | netspi.com | Original ↗ | .md | #ssrf | #xxe | #xml
10.Attacking SSO: Common SAML Vulnerabilities and Ways to Find Themblog | 2017-03-07 00:00 | netspi.com | Original ↗ | .md | #authentication | #sso | #xml
11.Burp Suite now reports blind XXE injectionblog | 2015-05-06 14:33 | portswigger.net | Original ↗ | .md | #burp-suite | #collaborator | #scanner
12.Forcing XXE Reflection through Server Error Messagesblog | 2015-05-04 00:00 | netspi.com | Original ↗ | .md | #xxe | #xml | #web-pentesting
13.Playing with Content-Type – XXE on JSON Endpointsblog | 2015-04-20 00:00 | netspi.com | Original ↗ | .md | #pentesting | #web-security | #ssrf
14.[MoBP] SOAP parameter parsingblog | 2008-11-14 06:47 | portswigger.net | Original ↗ | .md | #burp-suite | #fuzzing | #portswigger