grep -l "XXE" ./machines [1] sorted: date ▼

namediffosdatetags

DevArea medium linux 2026-03-28 Anonymous FTP exposed a Java SOAP service JAR; an MTOM XXE attack against the CXF endpoint leaked the Hoverfly admin password from a systemd unit file, then authenticated RCE via Hoverfly middleware yielded a shell as dev_ryan; privilege escalation exploited a world-writable /bin/bash by writing a SUID-creating wrapper triggered by a root-owned systemd timer. ftp·xxe·soap·mtom·apache cxf·hoverfly·+4

no machines match that filter