ley · original post · 2026-03-24 21:59:13
I discovered a vulnerability in the XML parsers in the XMPP servers Prosody and ejabberd that can bring down any server without protection — and such protection isn't in place anywhere. I have a Python script that, given a domain, can take down any private server, and if I put in some effort, it might even be able to take down a large one. I don't know what to do about this.