<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://blog.securelayer7.net/owasp-ai-testing-guide/</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-13T10:59:03.000Z</news:publication_date>
      <news:title>OWASP AI Testing Guide (AITG): Complete Guide</news:title>
      <news:keywords>Security News</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/atomic-agents-stack-dashboard-path-traversal-arbitrary-file-read</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-13T14:28:51.699Z</news:publication_date>
      <news:title>atomic-agents-stack: Dashboard HTTP Server Path Traversal Allows Arbitrary File Read</news:title>
      <news:keywords>Security Research</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-12243-nltk-percent-encoded-path-traversal</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-13T20:49:05.050Z</news:publication_date>
      <news:title>CVE-2026-12243: nltk Arbitrary File Read via Percent-Encoded Path Traversal</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-32257-winter-cms-stored-xss-brand-settings-custom-styles</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-12T14:49:51.936Z</news:publication_date>
      <news:title>CVE-2026-32257: Winter CMS Stored XSS via Backend Brand Settings Custom Styles</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-46369-nimiq-blockchain-validity-store-off-by-one-transaction-replay</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-12T15:31:18.641Z</news:publication_date>
      <news:title>CVE-2026-46369: nimiq-blockchain Validity Store Off-by-One Transaction Replay</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-48798-sshdotnet-scpclient-recursive-download-path-traversal</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-12T15:29:52.124Z</news:publication_date>
      <news:title>CVE-2026-48798: SSH.NET ScpClient Recursive Download Path Traversal</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-54526-argo-workflows-artifactgc-podspecpatch-bypass</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-13T14:30:21.885Z</news:publication_date>
      <news:title>CVE-2026-54526: Argo Workflows ArtifactGC.PodSpecPatch Allow-List Bypass</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-54917-seaweedfs-s3-iceberg-path-traversal-cross-bucket</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-12T19:30:21.715Z</news:publication_date>
      <news:title>CVE-2026-54917: SeaweedFS Path Traversal in S3 and Iceberg REST Gateways</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-55071-stata-mcp-ado-package-install-command-injection</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-12T19:29:02.004Z</news:publication_date>
      <news:title>CVE-2026-55071: stata-mcp Stata Command Injection via Unsanitized Package Name</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-55072-pimcore-classdefinition-uid-regex-sql-injection</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-13T13:49:11.700Z</news:publication_date>
      <news:title>CVE-2026-55072: Pimcore ClassDefinition UID Regex Missing End Anchor Allows SQL Injection</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-55074-ansible-jailexec-symlink-jail-escape-put-file</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-12T23:28:58.207Z</news:publication_date>
      <news:title>CVE-2026-55074: ansible-jailexec Jail Escape via Symlink Following in put_file</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-73654-triggerdev-prototype-pollution-run-metadata</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-13T21:08:54.459Z</news:publication_date>
      <news:title>CVE-2026-73654: @trigger.dev/core Prototype Pollution via Run Metadata Operations</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/sipsorcery-sctp-sack-oob-read-dos</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-12T19:50:21.266Z</news:publication_date>
      <news:title>SIPSorcery SCTP SACK Chunk Out-of-Bounds Read DoS</news:title>
      <news:keywords>Security Research</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/sipsorcery-turnserver-udp-dos-uncaught-exception</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-12T19:48:49.807Z</news:publication_date>
      <news:title>SIPSorcery TurnServer UDP Receive Loop Denial of Service</news:title>
      <news:keywords>Security Research</news:keywords>
    </news:news>
  </url>
</urlset>