<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://cloudsecpress.com/category/vulnerabilities/does-your-tanstack-start-app-let-attackers-inject/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-16T05:18:22Z</news:publication_date><news:title>Does Your TanStack Start App Let Attackers Inject Scripts via Server Functions?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/cloud-security/can-aws-security-agent-autonomously-exploit-33-of/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T16:31:05Z</news:publication_date><news:title>Can AWS Security Agent autonomously exploit 33 of 37 CVEs without PoC hints?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/does-drupal-field-ui-flaw-require-contributed/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T12:42:48Z</news:publication_date><news:title>Does Drupal Field UI Flaw Require Contributed Modules to Exploit?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/data-breaches/how-did-centerpoint-energy-lose-over-1-million/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T10:30:08Z</news:publication_date><news:title>How Did CenterPoint Energy Lose Over 1 Million Customer Records?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/do-tls-library-disagreements-on-name-constraints/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T05:40:02Z</news:publication_date><news:title>Do TLS Library Disagreements on Name Constraints Expose Your Network?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/is-your-unpatched-visual-studio-or-ssms/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T05:13:29Z</news:publication_date><news:title>Is Your Unpatched Visual Studio or SSMS Vulnerable to Network-Based Code Injection?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/can-admins-run-arbitrary-commands-on-stirling-pdf/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-15T01:05:03Z</news:publication_date><news:title>Can Admins Run Arbitrary Commands on Stirling-PDF Before 2.13.2 via SQL Import?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/does-cve-2026-102225-expose-windows-systems-to/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T21:32:02Z</news:publication_date><news:title>Does CVE-2026-102225 Expose Windows Systems to Remote Code Execution?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/can-unauthenticated-users-write-files-via-checkov/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T20:13:05Z</news:publication_date><news:title>Can unauthenticated users write files via Checkov 3.3 path traversal?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/can-malicious-file-names-trigger-os-command/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T16:05:18Z</news:publication_date><news:title>Can malicious file names trigger OS command injection in Python thumbnail v1.5?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/does-cve-2026-96230-expose-blazor-dev-servers-to/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T14:42:37Z</news:publication_date><news:title>Does CVE-2026-96230 Expose Blazor Dev Servers to Cross-Site Scripting?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/how-does-cve-2026-70181-threaten-asp-net-core/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T09:23:09Z</news:publication_date><news:title>How does CVE-2026-70181 threaten ASP.NET Core memory limits?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/can-stale-iotlb-cache-in-linux-vhost-let-guests/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T07:15:21Z</news:publication_date><news:title>Can stale IOTLB cache in Linux vhost let guests escape to host and gain root?</news:title></news:news></url><url><loc>https://cloudsecpress.com/category/vulnerabilities/does-cve-2026-97749-expose-outlook-users-to/</loc><news:news><news:publication><news:name>CloudSec Press</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-14T06:28:47Z</news:publication_date><news:title>Does CVE-2026-97749 Expose Outlook Users to Remote Code Execution?</news:title></news:news></url></urlset>