<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://packettribune.com/topic/vulnerabilities/wasmtime-async-callback-stack-overflow-cve-2026/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T20:36:44Z</news:publication_date><news:title>Wasmtime Async Callback Stack Overflow CVE-2026-115384 Risks Host Compromise in Old Versions</news:title></news:news></url><url><loc>https://packettribune.com/topic/cyber-attacks/connectwise-oauth-abuse-storm-0940s-artex-ai/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T18:42:44Z</news:publication_date><news:title>ConnectWise OAuth Abuse: Storm-0940’s ARTEX AI Agents Hit 2,900 Sign-Ins Per Minute</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/jupyter-server-gateway-bypass-allows-unauthorized/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T18:01:55Z</news:publication_date><news:title>Jupyter Server Gateway Bypass Allows Unauthorized Kernel Execution</news:title></news:news></url><url><loc>https://packettribune.com/topic/cyber-attacks/serengeti-iii-disrupts-bec-and-ransomware/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T17:00:54Z</news:publication_date><news:title>Serengeti III Disrupts BEC and Ransomware Networks Across Africa</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/amazons-php2shell-rce-patches-arrived-four-days/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T15:37:15Z</news:publication_date><news:title>Amazon&#x27;s PHP2Shell RCE Patches Arrived Four Days After Threat Actors Tested Flaws</news:title></news:news></url><url><loc>https://packettribune.com/topic/cyber-attacks/tor-exit-node-policy-flaws-enabled-ssh-redirects/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T11:52:05Z</news:publication_date><news:title>Tor Exit Node Policy Flaws Enabled SSH Redirects and Plaintext Email Exposure</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/xpro-elementor-addons-csrf-vulnerability-cve-2026/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T07:43:45Z</news:publication_date><news:title>Xpro Elementor Addons CSRF Vulnerability CVE-2026-114177 Hits v1.7.10 and Earlier</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/os-command-injection-in-codecatalyst-blueprints/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T06:03:28Z</news:publication_date><news:title>OS Command Injection in CodeCatalyst Blueprints SDK Exposes Local Merge Strategies</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/oracle-brm-elastic-charging-engine-cloud-rmi-vuln/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T05:10:02Z</news:publication_date><news:title>Oracle BRM Elastic Charging Engine Cloud RMI Vuln Enables Unauthenticated Full System Control</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/gitlab-patches-critical-remote-code-execution-in/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T22:57:44Z</news:publication_date><news:title>GitLab Patches Critical Remote Code Execution in Self-Managed Instances</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/virtualenv-21-14-3-high-severity-command/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T16:55:40Z</news:publication_date><news:title>virtualenv 21.14.3 High-Severity Command Injection in Zsh Activate Script</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/hmailserver-api-flaw-allows-authenticated-users/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T16:09:49Z</news:publication_date><news:title>hMailServer API Flaw Allows Authenticated Users to Hijack Mail Routing</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/wordpress-falang-plugin-stored-xss-via-missing/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T11:05:04Z</news:publication_date><news:title>WordPress Falang Plugin Stored XSS via Missing Capability Check</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/oneplus-oxygenos-binder-flaw-allows-arbitrary/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T09:23:26Z</news:publication_date><news:title>OnePlus OxygenOS Binder Flaw Allows Arbitrary Command Execution</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/npm-follow-redirects-cve-2026-111756-cross-origin/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T08:56:43Z</news:publication_date><news:title>npm follow-redirects CVE-2026-111756: Cross-origin redirect flaw steals auth tokens via array headers</news:title></news:news></url><url><loc>https://packettribune.com/topic/cyber-attacks/identity-theft-scheme-targets-us-servicemembers/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T08:56:32Z</news:publication_date><news:title>Identity Theft Scheme Targets US Servicemembers and Veterans</news:title></news:news></url><url><loc>https://packettribune.com/topic/malware/safepay-ransomware-exploits-veeam-and-sonicwall/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T08:21:11Z</news:publication_date><news:title>SafePay Ransomware Exploits Veeam and SonicWall Flaws to Destroy Backups</news:title></news:news></url><url><loc>https://packettribune.com/topic/malware/pegasus-zero-click-infects-serbian-academic-days/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:42:40Z</news:publication_date><news:title>Pegasus Zero-Click Infects Serbian Academic Days Before Snap Vote</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/tenda-ac19-web-service-suffers-critical-stack/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:16:37Z</news:publication_date><news:title>Tenda AC19 Web Service Suffers Critical Stack Overflow via Firewall Config Input on Firmware 16.03.10.07</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/php-all-installations-vulnerable-to-two-cvss-9-2/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:54:24Z</news:publication_date><news:title>PHP: All Installations Vulnerable to Two CVSS 9.2 Flaws Fixed in Oct 21 Patch</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/php-rce-flaws-leak-ahead-of-october-21-patch/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:02:47Z</news:publication_date><news:title>PHP RCE flaws leak ahead of October 21 patch release for versions 5-8</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/totolink-x2000r-crypto-signature-failure-cve-2026/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T03:48:48Z</news:publication_date><news:title>Totolink X2000R Crypto Signature Failure CVE-2026-10141 Risks Network Integrity</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/vllm-remote-dos-via-uncontrolled-resource/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T02:27:26Z</news:publication_date><news:title>vLLM Remote DoS via Uncontrolled Resource Consumption in Multimodal Processing</news:title></news:news></url><url><loc>https://packettribune.com/topic/vulnerabilities/ibm-qradar-siem-out-of-bounds-read-vulnerability/</loc><news:news><news:publication><news:name>Packet Tribune</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T22:28:00Z</news:publication_date><news:title>IBM QRadar SIEM Out-of-Bounds Read Vulnerability Exposes Remote Attackers</news:title></news:news></url></urlset>