Ultimately, the hunters came across an "old and unpatched service with a known XML External Entity (XXE) vulnerability." The ...