<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"><url><loc>https://redteamlog.com/category/vulnerabilities/gitlab-integer-overflow-flaw-enables-remote-code/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T17:54:07Z</news:publication_date><news:title>GitLab integer overflow flaw enables remote code execution on self-managed servers</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/mem0-sql-injection-in-1-0-8-enables-databricks/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T11:30:30Z</news:publication_date><news:title>mem0 SQL Injection in &lt;1.0.8 Enables Databricks Warehouse Command Execution via Memory Inputs</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/openai-ai-finds-critical-php-flaws-affecting-most/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T11:11:39Z</news:publication_date><news:title>OpenAI AI Finds Critical PHP Flaws Affecting Most Web Servers</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/php2shell-rce-flaws-in-php-exploited-days-before/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T10:12:52Z</news:publication_date><news:title>PHP2Shell RCE flaws in PHP exploited days before patches</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/access-control-flaws-in-25-open-source-tools/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T07:14:11Z</news:publication_date><news:title>Access Control Flaws in 25 Open-Source Tools Exposed by Anthropic Analysis</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/oracle-solaris-ips-critical-flaw-grants/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T05:06:29Z</news:publication_date><news:title>Oracle Solaris IPS Critical Flaw Grants Unauthenticated Remote Control Over Versions 11.3 and 11.4</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/oracle-weblogic-server-critical-vulnerability/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T04:53:13Z</news:publication_date><news:title>Oracle WebLogic Server Critical Vulnerability Enables Remote Data Theft Without Credentials</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/oracle-soa-suite-http-vulnerability-enables-low/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T04:32:27Z</news:publication_date><news:title>Oracle SOA Suite HTTP Vulnerability Enables Low-Priv Users to Alter or Delete Critical Data in Versions 12.2 and 14.1</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/oracle-identity-manager-connector-unauthenticated/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T03:58:28Z</news:publication_date><news:title>Oracle Identity Manager Connector: Unauthenticated LDAP Bug Enables Full Data Access</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/mikrotik-routeros-token-replay-bug-enables/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-22T01:15:08Z</news:publication_date><news:title>MikroTik RouterOS Token Replay Bug Enables Session Hijacking via Fixed Salts</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/pillow-cve-2026-112897-leaks-heap-memory-via/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T09:37:36Z</news:publication_date><news:title>Pillow CVE-2026-112897 leaks heap memory via crafted TIFF images</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/ibm-app-connect-enterprise-critical-cve-2026/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T07:16:37Z</news:publication_date><news:title>IBM App Connect Enterprise Critical CVE-2026-92559 Enables Remote Sensitive Data Theft via Unrestricted Network Bindings</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/openstack-manila-cross-project-share-manipulation/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T06:26:45Z</news:publication_date><news:title>OpenStack Manila Cross-Project Share Manipulation Enables Data Exfiltration</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/totolink-x2000r-http-update-flaw-lets/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:34:19Z</news:publication_date><news:title>Totolink X2000R HTTP Update Flaw Lets Authenticated Users Replace System Software Without Verification</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/totolink-x2000r-mcli-stack-overflow-grants/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T04:07:58Z</news:publication_date><news:title>Totolink X2000R Mcli Stack Overflow Grants Authenticated Remote Code Execution</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/php-rce-flaws-leak-early-teams-urged-to-prep-for/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T03:21:04Z</news:publication_date><news:title>PHP RCE flaws leak early: Teams urged to prep for Oct 21 patches amid 9.2 severity risk</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/totolink-x2000r-boa-web-server-stack-overflows/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T01:58:46Z</news:publication_date><news:title>Totolink X2000R boa web server stack overflows enable arbitrary code execution with CVSS 9.1 critical rating</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/totolink-x2000r-pppoe-dns-flaws-grant/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T00:46:50Z</news:publication_date><news:title>Totolink X2000R PPPoE DNS Flaws Grant Authenticated Users Critical Code Execution Access</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/oracle-ebs-tcf-servlets-vulnerable-to/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-21T00:39:16Z</news:publication_date><news:title>Oracle EBS TCF Servlets Vulnerable to Unauthenticated RCE in Versions 12.2.3-15</news:title></news:news></url><url><loc>https://redteamlog.com/category/vulnerabilities/apache-tomcat-buffer-under-read-may-leak-data/</loc><news:news><news:publication><news:name>RedTeam Log</news:name><news:language>en</news:language></news:publication><news:publication_date>2026-10-20T19:01:11Z</news:publication_date><news:title>Apache Tomcat Buffer Under-Read May Leak Data Between Requests</news:title></news:news></url></urlset>