UprootSecurity Resources
October 1, 2025 at 3:19:20 PM UTC * - permalink -

- https://resources.uprootsecurity.com/xml-injection

gist.githubusercontent.com/honoki/d7035c3ccca1698ec7b541c77b9410cf/raw/be69a5ecf7974057d49f3f32ccd9a7a72668c2e5/xxe-payloads.txt
November 29, 2021 at 8:24:01 PM UTC - permalink -

- https://gist.githubusercontent.com/honoki/d7035c3ccca1698ec7b541c77b9410cf/raw/be69a5ecf7974057d49f3f32ccd9a7a72668c2e5/xxe-payloads.txt

Don't open that XML: XXE to RCE in XML plugins for VS Code, Eclipse, Theia, ... - Shielder
October 24, 2019 at 10:43:16 PM UTC - permalink -

- https://www.shielder.it/blog/dont-open-that-xml-xxe-to-rce-in-xml-plugins-for-vs-code-eclipse-theia/