XML External Entity

A defect in XML parsers that dereference external entity declarations, letting attackers read local files, trigger SSRF, or exhaust resources.

See a verified XML External Entity exploit

Pentrova surfaces XML External Entity findings with a replayable PoC artifact and the chain resolver escalates confirmed findings into business impact.

Join the waitlist Read the glossary entry

/* When JS is disabled the IntersectionObserver never runs, so the `opacity: 0` initial state of reveal elements would hide content permanently. Snap everything visible. */ .scroll-reveal, [data-reveal], .reveal-group > .reveal { opacity: 1 !important; transform: none !important; animation: none !important; } .section-rule { transform: scaleX(1) !important; }