Kelvin Security Labs

CTF Writeups | Pentesting Labs | Exploits

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Categories XXE

Category

XXE 2

XXE Injection – Arbitrary File Disclosure via XML Import | Holloway May 13, 2026
XInclude Injection to Arbitrary File Read | Tanuki May 12, 2026

Recently Updated

Next.js Middleware Authorization Bypass (CVE-2025-29927) | BugVault
Autovation Unsafe Yaml Deserialization
Multi-Step Access Control Bypass Leads to Administrative Compromise | Tamper Temple
NoSQL Injection Leads to Treasury Account Takeover | Coined
Password Change IDOR Leads to Administrator Account Takeover | Noted

Trending Tags

webversepro broken-access-control webverselabs-pro privilege-escalation information-disclosure linux rce authentication-bypass bugforge idor

© 2026 Kelvin. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

webversepro broken-access-control webverselabs-pro privilege-escalation information-disclosure linux rce authentication-bypass bugforge idor

A new version of content is available.