<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://packettribune.com/topic/cyber-attacks/tor-exit-node-policy-flaws-enabled-ssh-redirects/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T11:52:05Z</news:publication_date><news:title>Tor Exit Node Policy Flaws Enabled SSH Redirects and Plaintext Email Exposure</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/xpro-elementor-addons-csrf-vulnerability-cve-2026/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T07:43:45Z</news:publication_date><news:title>Xpro Elementor Addons CSRF Vulnerability CVE-2026-114177 Hits v1.7.10 and Earlier</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/os-command-injection-in-codecatalyst-blueprints/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T06:03:28Z</news:publication_date><news:title>OS Command Injection in CodeCatalyst Blueprints SDK Exposes Local Merge Strategies</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/oracle-brm-elastic-charging-engine-cloud-rmi-vuln/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T05:10:02Z</news:publication_date><news:title>Oracle BRM Elastic Charging Engine Cloud RMI Vuln Enables Unauthenticated Full System Control</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/gitlab-patches-critical-remote-code-execution-in/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T22:57:44Z</news:publication_date><news:title>GitLab Patches Critical Remote Code Execution in Self-Managed Instances</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/virtualenv-21-14-3-high-severity-command/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T16:55:40Z</news:publication_date><news:title>virtualenv 21.14.3 High-Severity Command Injection in Zsh Activate Script</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/hmailserver-api-flaw-allows-authenticated-users/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T16:09:49Z</news:publication_date><news:title>hMailServer API Flaw Allows Authenticated Users to Hijack Mail Routing</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/wordpress-falang-plugin-stored-xss-via-missing/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T11:05:04Z</news:publication_date><news:title>WordPress Falang Plugin Stored XSS via Missing Capability Check</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/oneplus-oxygenos-binder-flaw-allows-arbitrary/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T09:23:26Z</news:publication_date><news:title>OnePlus OxygenOS Binder Flaw Allows Arbitrary Command Execution</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/npm-follow-redirects-cve-2026-111756-cross-origin/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T08:56:43Z</news:publication_date><news:title>npm follow-redirects CVE-2026-111756: Cross-origin redirect flaw steals auth tokens via array headers</news:title></news:news></url><url><loc>https://packettribune.com/topic/cyber-attacks/identity-theft-scheme-targets-us-servicemembers/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T08:56:32Z</news:publication_date><news:title>Identity Theft Scheme Targets US Servicemembers and Veterans</news:title></news:news></url><url><loc>https://packettribune.com/topic/malware/safepay-ransomware-exploits-veeam-and-sonicwall/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T08:21:11Z</news:publication_date><news:title>SafePay Ransomware Exploits Veeam and SonicWall Flaws to Destroy Backups</news:title></news:news></url><url><loc>https://packettribune.com/topic/malware/pegasus-zero-click-infects-serbian-academic-days/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:42:40Z</news:publication_date><news:title>Pegasus Zero-Click Infects Serbian Academic Days Before Snap Vote</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/tenda-ac19-web-service-suffers-critical-stack/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:16:37Z</news:publication_date><news:title>Tenda AC19 Web Service Suffers Critical Stack Overflow via Firewall Config Input on Firmware 16.03.10.07</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/php-all-installations-vulnerable-to-two-cvss-9-2/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:54:24Z</news:publication_date><news:title>PHP: All Installations Vulnerable to Two CVSS 9.2 Flaws Fixed in Oct 21 Patch</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/php-rce-flaws-leak-ahead-of-october-21-patch/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:02:47Z</news:publication_date><news:title>PHP RCE flaws leak ahead of October 21 patch release for versions 5-8</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/totolink-x2000r-crypto-signature-failure-cve-2026/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T03:48:48Z</news:publication_date><news:title>Totolink X2000R Crypto Signature Failure CVE-2026-10141 Risks Network Integrity</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/vllm-remote-dos-via-uncontrolled-resource/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T02:27:26Z</news:publication_date><news:title>vLLM Remote DoS via Uncontrolled Resource Consumption in Multimodal Processing</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/ibm-qradar-siem-out-of-bounds-read-vulnerability/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T22:28:00Z</news:publication_date><news:title>IBM QRadar SIEM Out-of-Bounds Read Vulnerability Exposes Remote Attackers</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/apache-tomcat-fips-mode-bypass-leaves-server-non/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T19:58:32Z</news:publication_date><news:title>Apache Tomcat FIPS Mode Bypass Leaves Server Non-Compliant on Startup Failure</news:title></news:news></url><url><loc>https://packettribune.com/topic/cloud-security/google-cloud-platform-service-disruption-impacts/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T19:42:15Z</news:publication_date><news:title>Google Cloud Platform Service Disruption Impacts European Financial Institutions</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/markdown-it-denial-of-service-flaw-in-smartquotes/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T15:22:08Z</news:publication_date><news:title>Markdown-it Denial of Service Flaw in Smartquotes Rule</news:title></news:news></url><url><loc>https://packettribune.com/topic/cloud-security/data-guardian-and-offline-ai-tools-enhance-eu/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T12:19:07Z</news:publication_date><news:title>Data Guardian and offline AI tools enhance EU sovereign cloud oversight</news:title></news:news></url></urlset>