#XXE

2 posts

BugForge - Daily - Tanuki (Jan 20, 2026)

This challenge demonstrates a classic XML External Entity (XXE) vulnerability introduced through a server-side XML file upload feature exposed via the Import…

XXE

Posted on 2026-01-20 20:02 5 min read

BugForge - Daily - Tanuki (Jan 6, 2026)

This challenge demonstrates an XML External Entity (XXE) vulnerability exploitable through XInclude processing in the Import Deck functionality. While…

XXE

Posted on 2026-01-06 20:00 4 min read