<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://honeypotdaily.com/category/vulnerabilities/can-local-attackers-hijack-storybook-dev-servers/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T19:03:16Z</news:publication_date><news:title>Can local attackers hijack Storybook dev servers to run code?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/does-virtualenv-21-14-1-allow-arbitrary-code/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T16:59:20Z</news:publication_date><news:title>Does virtualenv 21.14.1 allow arbitrary code execution via crafted paths?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/how-cisco-sql-injection-flaw-exposes-unified-cm/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T16:38:03Z</news:publication_date><news:title>How Cisco SQL Injection Flaw Exposes Unified CM and Emergency Responder</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/how-does-cisco-address-improper-input-validation/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T16:35:39Z</news:publication_date><news:title>How Does Cisco Address Improper Input Validation in Communications Software?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-85683-allow-unauthenticated/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T09:05:23Z</news:publication_date><news:title>How does CVE-2026-85683 allow unauthenticated JavaScript injection in WordPress?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/which-php-versions-get-emergency-patch-for/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T06:32:04Z</news:publication_date><news:title>Which PHP Versions Get Emergency Patch for Unconfirmed 9.2 RCE Vulnerabilities?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-71195-allow-authenticated-users/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T06:07:00Z</news:publication_date><news:title>How does CVE-2026-71195 allow authenticated users to manipulate OpenStack Manila shares?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/will-totolink-x2000rs-lack-of-signature-checks/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:34:19Z</news:publication_date><news:title>Will Totolink X2000R&#x27;s lack of signature checks enable authenticated firmware hijacking?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/how-exposed-is-your-network-to-the-totolink/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:07:58Z</news:publication_date><news:title>How exposed is your network to the Totolink X2000R remote code execution flaw?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/will-your-php-servers-survive-the-leaked-rce/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T03:31:05Z</news:publication_date><news:title>Will your PHP servers survive the leaked RCE flaws hitting Oct 21?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/does-your-perl-stack-use-vulnerable-imager-file/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T01:02:09Z</news:publication_date><news:title>Does your Perl stack use vulnerable Imager::File::GIF libraries?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/does-totolink-x2000r-firmware-contain-a-critical/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T00:46:50Z</news:publication_date><news:title>Does TOTOLINK X2000R firmware contain a critical stack overflow risk?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-101767-expose-oracle-e-business/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T00:22:50Z</news:publication_date><news:title>How Does CVE-2026-101767 Expose Oracle E-Business Suite to Unauthenticated RCE?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/does-gpac-mp4box-ac-4-parsing-flaw-expose-your/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T23:06:29Z</news:publication_date><news:title>Does GPAC MP4Box AC-4 Parsing Flaw Expose Your Media Workflows?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/does-your-apache-tomcat-instance-risk/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T20:07:20Z</news:publication_date><news:title>Does your Apache Tomcat instance risk unauthenticated access due to CVE-2026-101296 JNDI realm flaw?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/cyber-attacks/how-amazon-ciso-says-ai-shrinks-attack-timelines/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T15:25:16Z</news:publication_date><news:title>How Amazon CISO says AI shrinks attack timelines to minutes</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/what-allows-unauthenticated-remote-code-execution/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T14:06:25Z</news:publication_date><news:title>What allows unauthenticated remote code execution on FortiSIEM via port 27918?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/does-cve-2026-9589s-9-3-cvss-score-indicate/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T11:50:00Z</news:publication_date><news:title>Does CVE-2026-9589&#x27;s 9.3 CVSS Score Indicate Severe Config Risks for Unblu Spark 7.0-8.36.1 Authenticated Users?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/can-authenticated-users-run-root-commands-on/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T10:33:52Z</news:publication_date><news:title>Can authenticated users run root commands on Advantech ADAM-3600?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/are-your-nginx-gateways-exposed-to-f5s-latest/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T04:06:06Z</news:publication_date><news:title>Are your NGINX gateways exposed to F5’s latest critical memory flaws?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/is-your-plex-server-being-used-for-crypto-mining/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T02:50:14Z</news:publication_date><news:title>Is your Plex server being used for crypto mining via Plex2Shell exploits?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/does-cve-2026-109395-allow-crafted-lzf-streams-to/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T01:57:46Z</news:publication_date><news:title>Does CVE-2026-109395 allow crafted LZF streams to crash Java Virtual Machines in Ning compress-lzf?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/are-unpatched-plex-servers-being-hijacked-for/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T00:04:44Z</news:publication_date><news:title>Are unpatched Plex servers being hijacked for crypto and proxy abuse?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-109437-enable-unauthenticated/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T23:12:45Z</news:publication_date><news:title>How Does CVE-2026-109437 Enable Unauthenticated Code Execution in Cognition &lt; 0.13.0?</news:title></news:news></url><url><loc>https://honeypotdaily.com/category/malware/will-federal-civilian-workers-data-be-safe-after/</loc><news:news><news:publication><news:name>Honeypot Daily</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T22:03:28Z</news:publication_date><news:title>Will federal civilian workers&#x27; data be safe after DHS mandates DeepSeek removal?</news:title></news:news></url></urlset>