Xml-External-Entity — PoC Archivehttps://poc.intelseclab.com/tags/xml-external-entity/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Adobe Experience Manager Forms XXE to JNDI RCE Scanner (CVE-2025-54253)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54253-aem-forms-xxe-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54253-aem-forms-xxe-rce/Critical severity (CVSS 10) — web · CVE-2025-54253. Status: Weaponized. Affects: Adobe Experience Manager (AEM) Forms (JEE). Tags: adobe, aem, aem-forms, xxe, xml-external-entity, jndi, ldap, rce, python, cve-2025-54254.webCriticaladobeaemaem-formsxxexml-external-entityjndildaprcepythoncve-2025-54254GRASSMARLIN XML External Entity (XXE) Out-of-Band File Exfiltration (CVE-2026-6807)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-6807-grassmarlin-xxe-file-exfil/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-6807-grassmarlin-xxe-file-exfil/High severity — network · CVE-2026-6807. Status: Weaponized. Affects: GRASSMARLIN (CISA/ICS-CERT network visualization tool). Tags: grassmarlin, xxe, ics-scada, xml-external-entity, oob-exfiltration, cwe-611.networkHighgrassmarlinxxeics-scadaxml-external-entityoob-exfiltrationcwe-611