<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://firewallpulse.com/category/vulnerabilities/php-critical-rce-bugs-leaked-online-patches-due/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:37:48Z</news:publication_date><news:title>PHP Critical RCE Bugs Leaked Online; Patches Due Oct 21, 2026 Amid Mass Exploit Warnings</news:title></news:news></url><url><loc>https://firewallpulse.com/category/cyber-attacks/openai-chrome-extension-gets-tab-read-and-action/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T06:12:34Z</news:publication_date><news:title>OpenAI Chrome Extension Gets Tab Read and Action Access, Sparking Enterprise Security Concerns</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/totolink-x2000r-stack-overflow-in-boa/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T02:27:26Z</news:publication_date><news:title>Totolink X2000R Stack Overflow in boa formUploadFile Permits Authenticated Arbitrary Code Execution</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/totolink-x2000r-stack-overflow-in-vpn-filter/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T01:58:46Z</news:publication_date><news:title>Totolink X2000R Stack Overflow in VPN Filter Allows Remote Code Execution</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/ibm-datastage-redis-flaw-lets-anonymous-users/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T00:19:33Z</news:publication_date><news:title>IBM DataStage Redis flaw lets anonymous users inject data and break encryption boundaries</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/ibm-planning-analytics-buffer-overflow-risks/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T22:40:45Z</news:publication_date><news:title>IBM Planning Analytics Buffer Overflow Risks Arbitrary Code Execution</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/pillow-heap-out-of-bounds-read-in-tiff-decoding/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T21:07:06Z</news:publication_date><news:title>Pillow Heap Out-of-Bounds Read in TIFF Decoding Exposes Memory</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/mcp-sdk-vulnerability-allows-http-memory/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T20:43:59Z</news:publication_date><news:title>MCP SDK Vulnerability Allows HTTP Memory Exhaustion via Unbounded Inputs</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/vikrentcar-csrf-flaw-in-versions-up-to-1-4-8/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T16:26:35Z</news:publication_date><news:title>VikRentCar CSRF Flaw in Versions Up to 1.4.8</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/threadx-module-manager-use-after-free-flaw/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T16:21:43Z</news:publication_date><news:title>ThreadX Module Manager Use-After-Free Flaw Exposes Kernel Objects</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/red-hat-strimzi-console-arbitrary-image/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T12:19:07Z</news:publication_date><news:title>Red Hat Strimzi Console: Arbitrary Image Deployment Enables Cluster-Wide Control-Plane Access</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/google-cloud-shell-cross-site-websocket-hijacking/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T10:24:28Z</news:publication_date><news:title>Google Cloud Shell Cross-Site WebSocket Hijacking Patched</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/ys-infoware-ba-workflow-sql-injection-enables/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T08:06:45Z</news:publication_date><news:title>YS-infoware BA-Workflow SQL Injection Enables Authenticated Users to Delete Database Records</news:title></news:news></url><url><loc>https://firewallpulse.com/category/cloud-security/easydmarc-and-gmo-globalsign-integrate-email/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T06:37:42Z</news:publication_date><news:title>EasyDMARC and GMO GlobalSign integrate email authentication with verified branding</news:title></news:news></url><url><loc>https://firewallpulse.com/category/cyber-attacks/ftc-senior-fraud-losses-hit-3b-in-2025-driven-by/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T05:09:23Z</news:publication_date><news:title>FTC: Senior fraud losses hit $3B in 2025, driven by surging investment scams</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/pillow-pdf-rewriting-flaw-triggers-infinite-loops/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T23:12:21Z</news:publication_date><news:title>Pillow PDF rewriting flaw triggers infinite loops and service denial</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/grav-cms-information-disclosure-via-twig-sandbox/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T20:21:05Z</news:publication_date><news:title>Grav CMS Information Disclosure via Twig Sandbox Bypass in Page Frontmatter</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/nocobase-sql-injection-allows-privileged-users-to/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T18:33:30Z</news:publication_date><news:title>NocoBase SQL Injection Allows Privileged Users to Bypass Validation</news:title></news:news></url><url><loc>https://firewallpulse.com/category/vulnerabilities/sqlparse-php-injection-flaw-allows-remote-code/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T16:26:18Z</news:publication_date><news:title>sqlparse PHP Injection Flaw Allows Remote Code Execution</news:title></news:news></url><url><loc>https://firewallpulse.com/category/cloud-security/nscales-35b-valuation-shakes-as-microsoft-cancels/</loc><news:news><news:publication><news:name>Firewall Pulse</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-19T09:35:01Z</news:publication_date><news:title>Nscale&#x27;s $35B Valuation Shakes as Microsoft Cancels 23,000-Chip Essex Deal</news:title></news:news></url></urlset>