⤷ Title: CISA KEV Alert: GeoServer XXE Flaw Under Active Attack Risks Data Theft & Internal Network Scanning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 03:00:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CISA KEV #CVE_2025_58360 #Data Theft #GeoServer #ssrf #XML External Entity #xxe
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 03:00:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CISA KEV #CVE_2025_58360 #Data Theft #GeoServer #ssrf #XML External Entity #xxe
Daily CyberSecurity
CISA KEV Alert: GeoServer XXE Flaw Under Active Attack Risks Data Theft & Internal Network Scanning
CISA added a critical XXE flaw (CVE-2025-58360) in OSGeo GeoServer to the KEV Catalog. The actively exploited bug allows attackers to read arbitrary files and perform SSRF on internal networks. Patch immediately.
⤷ Title: Apache SIS Patch Blocks XML Attack That Leaks Server Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 02:07:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache SIS #Apache Software Foundation #CVE_2025_68280 #Geospatial Security #GeoTIFF #GML #GPX #Information Disclosure #Java security #Metadata Security #XML Injection #xxe
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 02:07:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache SIS #Apache Software Foundation #CVE_2025_68280 #Geospatial Security #GeoTIFF #GML #GPX #Information Disclosure #Java security #Metadata Security #XML Injection #xxe
Daily CyberSecurity
Apache SIS Patch Blocks XML Attack That Leaks Server Files
The Apache Software Foundation has issued a security advisory for the Apache Spatial Information System (SIS), a key Java library used for developing geospatial applications. A newly discovered vu…
⤷ Title: XXE Bypass CTF Challange (Bugforge)
════════════════════════
𐀪 Author: blackm4c
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 19:03:10 GMT
════════════════════════
⌗ Tags: #hacking #xxe_injection #web_attack #xxe #ctf
════════════════════════
𐀪 Author: blackm4c
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 19:03:10 GMT
════════════════════════
⌗ Tags: #hacking #xxe_injection #web_attack #xxe #ctf
Medium
XXE Bypass CTF Challange (Bugforge)
Hello guys 👋
⤷ Title: Tanuki -Writeup
════════════════════════
𐀪 Author: 7s26Simon
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 00:15:02 GMT
════════════════════════
⌗ Tags: #ctf_writeup #bug_bounty_writeup #cybersecurity #bugforge #xxe
════════════════════════
𐀪 Author: 7s26Simon
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 00:15:02 GMT
════════════════════════
⌗ Tags: #ctf_writeup #bug_bounty_writeup #cybersecurity #bugforge #xxe
Medium
Tanuki -Writeup (Bugforge)
I recently became aware of bugforge.io , a great new platform that’s still in its infancy but has a lot of potential. They do a daily…
⤷ Title: The XML Trap: Critical Struts 2 Flaw CVE-2025-68493 Exposes Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 01:46:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Struts 2 #CVE_2025_68493 #Denial of Service #Java security #ssrf #XWork #XXE Injection #ZAST.AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 01:46:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Struts 2 #CVE_2025_68493 #Denial of Service #Java security #ssrf #XWork #XXE Injection #ZAST.AI
Daily CyberSecurity
The XML Trap: Critical Struts 2 Flaw CVE-2025-68493 Exposes Data
A new flaw has appeared in the foundation of one of the web’s most popular Java frameworks. Security researchers at ZAST.AI have uncovered an “Important” severity vulnerability i…
⤷ Title: Bypassing the Gatekeeper: Public Exploit Released for Cisco ISE Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 04:45:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cisco #Cisco ISE #CVE_2026_20029 #Cybersecurity 2026 #Identity Management #Network Access Control #Patch Alert #Proof of Concept #Snort 3 #XXE #Zero Trust
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 04:45:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cisco #Cisco ISE #CVE_2026_20029 #Cybersecurity 2026 #Identity Management #Network Access Control #Patch Alert #Proof of Concept #Snort 3 #XXE #Zero Trust
Information Security News
Bypassing the Gatekeeper: Public Exploit Released for Cisco ISE Flaw
Cisco has remediated a vulnerability within its Identity Services Engine (ISE) network access control system, for which a public proof-of-concept exploit has already surfaced. This flaw, which can…
⤷ Title: Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:41:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Syncope #CVE_2026_23794 #CVE_2026_23795 #IAM Security #Identity Management #Open Source Security #Patch Alert #Session Hijacking #XSS #xxe
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:41:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Syncope #CVE_2026_23794 #CVE_2026_23795 #IAM Security #Identity Management #Open Source Security #Patch Alert #Session Hijacking #XSS #xxe
Daily CyberSecurity
Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
Apache patches XSS (CVE-2026-23794) & XXE flaws in Syncope. Vulnerability allows session hijacking via login page. Update to v3.0.16 or v4.0.4 now.
⤷ Title: Triple Threat Patched: Zimbra 10.1.16 Fixes XSS, XXE & LDAP Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 00:33:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Collaboration Suite #CSRF #Email Security #LDAP injection #Patch Alert #security update #XSS #xxe #Zimbra #Zimbra 10.1.16
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 00:33:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Collaboration Suite #CSRF #Email Security #LDAP injection #Patch Alert #security update #XSS #xxe #Zimbra #Zimbra 10.1.16
Daily CyberSecurity
Triple Threat Patched: Zimbra 10.1.16 Fixes XSS, XXE & LDAP Injection
Zimbra 10.1.16 patches critical XSS, XXE, and LDAP injection flaws. Update immediately to secure your email collaboration suite and restore PDF previews.
⤷ Title: SOAP picoCTF Web Exploitation Medium Challenge | XXE Injection
════════════════════════
𐀪 Author: Fadil Adzima
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 11:12:06 GMT
════════════════════════
⌗ Tags: #hacking #picoctf #xxe_injection #medium_challenge #web_exploitation
════════════════════════
𐀪 Author: Fadil Adzima
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 11:12:06 GMT
════════════════════════
⌗ Tags: #hacking #picoctf #xxe_injection #medium_challenge #web_exploitation
Medium
SOAP picoCTF Web Exploitation Medium Challenge | XXE Injection
Challenge SOAP dari picoCTF merupakan soal Web Exploitation tingkat Medium yang berfokus pada kerentanan XML External Entity (XXE)…
⤷ Title: The File That Answered Back — XXE Hidden in Cell A2
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 17:05:28 GMT
════════════════════════
⌗ Tags: #xml #bug_bounty_writeup #bug_bounty #file_upload_vulnerability #xxe
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 17:05:28 GMT
════════════════════════
⌗ Tags: #xml #bug_bounty_writeup #bug_bounty #file_upload_vulnerability #xxe
Medium
The File That Answered Back — XXE Hidden in Cell A2
Most people know XXE. Few think to look for it inside a spreadsheet upload. But beneath every .xlsx is really a ZIP archive full of XML…