Curated security research, vulnerabilities, advisories and tools for practitioners.

#xxe

Security coverage tagged xxe.

1.

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

blog | 2026-02-06 17:36 | yeswehack.com | original ↗ | #bug-bounty | #cloud | #rce

2.

Dojo challenge #42 - Hex Color Palette winners & writeup

blog | 2025-07-11 13:02 | yeswehack.com | original ↗ | #ctf | #dojo | #xxe

3.

CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTest

vulnerability | 2025-06-30 12:00 | CVE-2025-49493 | xbow.com | original ↗ | #cloud | #cloud-security | #vulnerability-research

4.

Remote code execution (RCE) 101

vulnerability | 2025-03-26 12:00 | bugcrowd.com | original ↗ | #rce | #web-security | #ssti

5.

Impossible XXE in PHP

research | 2025-03-11 14:49 | swarm.ptsecurity.com | original ↗ | #php | #web-security | #xxe

6.

Dojo challenge #34 winners!

vulnerability | 2024-08-05 15:19 | yeswehack.com | original ↗ | #ai-security | #ctf | #dojo

7.

Getting XXE in Web Browsers using ChatGPT

research | 2024-05-22 14:12 | swarm.ptsecurity.com | original ↗ | #browser-security | #xxe | #chatgpt

8.

‘The level of automation right now is crazy’: GoDiego on why post-auth vulnerabilities are the future of Bug Bounty

blog | 2024-02-13 09:09 | yeswehack.com | original ↗ | #bug-bounty | #automation | #interview

9.

ZwinK’s Tips and Tricks to Crush Bug Bounty #6

blog | 2021-06-29 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #bugcrowd | #methodology

10.

File Upload Attacks (Part 2)

blog | 2021-06-16 15:18 | yeswehack.com | original ↗ | #bug-bounty | #rce | #web-security

11.

How to Find XXE Bugs: Severe, Missed and Misunderstood

vulnerability | 2021-02-19 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #rce | #web-security

12.

Top 10 web hacking techniques of 2018

research | 2021-01-05 14:10 | portswigger.net | original ↗ | #web-security | #wordpress | #research

13.

Bugcrowd University – What’s New?

blog | 2019-09-10 00:00 | bugcrowd.com | original ↗ | #burp-suite | #def-con | #reconnaissance

14.

Supporting Researcher Success through Education & Collaboration

research | 2019-08-06 00:00 | bugcrowd.com | original ↗ | #burp-suite | #training | #education

15.

InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilities

advisory | 2019-07-24 00:00 | CVE-2018-17150 | bishopfox.com | original ↗ | #xss | #xxe | #authorization

16.

Test your hacking skills on real-world simulated bugs

vulnerability | 2018-12-04 16:00 | hackerone.com | original ↗ | #rce | #sql-injection | #xxe

17.

PhpSpreadsheet Versions<=1.5.0 - XXE injection

vulnerability | 2018-11-30 00:00 | CVE-2018-19277 | bishopfox.com | original ↗ | #php | #vulnerability | #xxe

18.

Researcher Spotlight: Mongo

research | 2016-01-29 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #rce | #ctf

19.

Burp Suite now reports blind XXE injection

blog | 2015-05-06 14:33 | portswigger.net | original ↗ | #burp-suite | #collaborator | #scanner