1.XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilitiesblog | 2026-02-06 17:36 | yeswehack.com | Original ↗ | .md | #bug-bounty | #cloud | #rce
2.Dojo challenge #42 - Hex Color Palette winners & writeupblog | 2025-07-11 13:02 | yeswehack.com | Original ↗ | .md | #ctf | #dojo | #xxe
3.CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTestvulnerability | 2025-06-30 12:00 | CVE-2025-49493 | xbow.com | Original ↗ | .md | #cloud | #cloud-security | #vulnerability-research
4.Remote code execution (RCE) 101vulnerability | 2025-03-26 12:00 | bugcrowd.com | Original ↗ | .md | #rce | #web-security | #ssti
5.Impossible XXE in PHPresearch | 2025-03-11 14:49 | swarm.ptsecurity.com | Original ↗ | .md | #php | #web-security | #xxe
6.Dojo challenge #34 winners!vulnerability | 2024-08-05 15:19 | yeswehack.com | Original ↗ | .md | #ai-security | #ctf | #dojo
7.Why nested deserialization is harmful: Magento XXE (CVE-2024-34102)research | 2024-06-26 00:00 | CVE-2024-34102 | slcyber.io | Original ↗ | .md | #vulnerability-research | #deserialization | #magento
8.Getting XXE in Web Browsers using ChatGPTresearch | 2024-05-22 14:12 | swarm.ptsecurity.com | Original ↗ | .md | #browser-security | #xxe | #chatgpt
9.‘The level of automation right now is crazy’: GoDiego on why post-auth vulnerabilities are the future of Bug Bountyblog | 2024-02-13 09:09 | yeswehack.com | Original ↗ | .md | #bug-bounty | #automation | #interview
10.CVE-2022-28219: Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plusvulnerability | 2022-06-29 13:13 | CVE-2022-28219 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #active-directory
11.ZwinK’s Tips and Tricks to Crush Bug Bounty #6blog | 2021-06-29 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #bugcrowd | #methodology
12.File Upload Attacks (Part 2)blog | 2021-06-16 15:18 | yeswehack.com | Original ↗ | .md | #bug-bounty | #rce | #web-security
13.How to Find XXE Bugs: Severe, Missed and Misunderstoodvulnerability | 2021-02-19 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #rce | #web-security
14.Top 10 web hacking techniques of 2018research | 2021-01-05 14:10 | portswigger.net | Original ↗ | .md | #web-security | #wordpress | #research
15.Bugcrowd University – What’s New?blog | 2019-09-10 00:00 | bugcrowd.com | Original ↗ | .md | #burp-suite | #def-con | #reconnaissance
16.Supporting Researcher Success through Education & Collaborationresearch | 2019-08-06 00:00 | bugcrowd.com | Original ↗ | .md | #burp-suite | #training | #education
17.InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilitiesadvisory | 2019-07-24 00:00 | CVE-2018-17150 | bishopfox.com | Original ↗ | .md | #xss | #xxe | #authorization
18.Test your hacking skills on real-world simulated bugsvulnerability | 2018-12-04 16:00 | hackerone.com | Original ↗ | .md | #rce | #sql-injection | #xxe
19.PhpSpreadsheet Versions<=1.5.0 - XXE injectionvulnerability | 2018-11-30 00:00 | CVE-2018-19277 | bishopfox.com | Original ↗ | .md | #php | #vulnerability | #xxe
20.XXE in IBM's MaaS360 Platformblog | 2018-10-16 00:00 | netspi.com | Original ↗ | .md | #ssrf | #xxe | #xml
21.Please Stop Giving Me Your Passwordsblog | 2018-03-27 00:00 | netspi.com | Original ↗ | .md | #secure-coding | #secrets-management | #sast
22.Researcher Spotlight: Mongoresearch | 2016-01-29 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #rce | #ctf
23.10 Places to Stick Your UNC Pathblog | 2015-07-22 00:00 | netspi.com | Original ↗ | .md | #pentesting | #smb | #xxe
24.Burp Suite now reports blind XXE injectionblog | 2015-05-06 14:33 | portswigger.net | Original ↗ | .md | #burp-suite | #collaborator | #scanner
25.Forcing XXE Reflection through Server Error Messagesblog | 2015-05-04 00:00 | netspi.com | Original ↗ | .md | #xxe | #xml | #web-pentesting
26.Playing with Content-Type – XXE on JSON Endpointsblog | 2015-04-20 00:00 | netspi.com | Original ↗ | .md | #pentesting | #web-security | #ssrf
27.Advisory: XXE Injection in Oracle Database (CVE-2014-6577)vulnerability | 2015-01-21 00:00 | CVE-2014-6577 | netspi.com | Original ↗ | .md | #ssrf | #xxe | #oracle