UprootSecurity Resources
October 1, 2025 at 3:19:20 PM UTC * - permalink -

- https://resources.uprootsecurity.com/xml-injection

gist.githubusercontent.com/honoki/d7035c3ccca1698ec7b541c77b9410cf/raw/be69a5ecf7974057d49f3f32ccd9a7a72668c2e5/xxe-payloads.txt
November 29, 2021 at 8:24:01 PM UTC - permalink -

- https://gist.githubusercontent.com/honoki/d7035c3ccca1698ec7b541c77b9410cf/raw/be69a5ecf7974057d49f3f32ccd9a7a72668c2e5/xxe-payloads.txt

Advanced XXE Exploitation - HIP2019-Advanced_XXE_Exploitation.pdf
November 5, 2021 at 6:27:05 PM UTC - permalink -

- https://gosecure.github.io/presentations/2019-06-19-hack_in_paris/HIP2019-Advanced_XXE_Exploitation.pdf

legalhackers.com/advisories/zend-framework-XXE-vuln.txt
July 2, 2021 at 1:37:13 PM UTC - permalink -

- https://legalhackers.com/advisories/zend-framework-XXE-vuln.txt

Don't open that XML: XXE to RCE in XML plugins for VS Code, Eclipse, Theia, ... - Shielder
October 24, 2019 at 10:43:16 PM UTC - permalink -

- https://www.shielder.it/blog/dont-open-that-xml-xxe-to-rce-in-xml-plugins-for-vs-code-eclipse-theia/