CVE-2025-9316

This repository contains a functional Python exploit for CVE-2025-9316, an unauthenticated XXE vulnerability in N-able N-central. The exploit chains with CVE-2025-11700 to read sensitive files by leveraging a DTD server and SOAP requests.

This repository contains a functional Go-based exploit for CVE-2025-11700, an XXE vulnerability in N-able N-central. The exploit demonstrates a multi-step attack to extract a session ID, upload an XXE payload, and trigger the vulnerability to read arbitrary files.