<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">
<url><loc>https://www.hunt-benito.com/blog/rendering-code-outside-the-sandbox-cve-2026-76036-critical-dawn-webgpu-buffer-overflow-in-chrome-on-android/</loc><lastmod>2026-08-21</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudys-wr3000-mesh-mqtt-broker/</loc><lastmod>2026-08-20</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdbs-cowork-via-the-anton-agents-scratchpad-exec/</loc><lastmod>2026-08-15</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-denial-of-service-in-elixirs-html_sanitize_ex/</loc><lastmod>2026-08-13</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/two-dots-and-a-slash-cve-2026-18907-path-traversal-in-tecno-hi-browser-turns-a-download-into-an-arbitrary-file-write/</loc><lastmod>2026-08-11</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-ss-wifissidset-form-handler/</loc><lastmod>2026-08-07</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/one-multiply-too-many-cve-2026-70638-integer-overflow-in-llamacpps-android-jni-heap-allocation/</loc><lastmod>2026-08-07</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/e-is-for-exploit-cve-2026-17543-sql-injection-in-phps-pgsql-extension-via-the-e-backslash-breakout/</loc><lastmod>2026-08-06</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/one-quote-too-many-cve-2026-17351-how-a-backslash-broke-pgadmins-ai-assistant-read-only-guard-twice/</loc><lastmod>2026-08-01</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/mcp-as-a-backdoor-cve-2026-66012-how-a-missing-authorization-check-in-siyuans-mcp-endpoint-turns-anonymous-readers-into-administrators/</loc><lastmod>2026-07-26</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/one-byte-short-of-null-cve-2026-10672-out-of-bounds-read-in-zephyrs-lwm2m-firmware-update-client/</loc><lastmod>2026-07-18</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/samsung-bixby-command-execution-cve-2026-21055-improper-component-export-enables-local-privilege-escalation/</loc><lastmod>2026-07-12</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/trust-no-model-cve-2026-58116-remote-code-execution-in-llama-factorys-webui-via-a-hardcoded-trust_remote_code/</loc><lastmod>2026-07-02</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/stripprefix-and-the-one-slash-that-broke-auth-cve-2026-48020-traefik-route-level-authentication-bypass/</loc><lastmod>2026-06-27</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/email-is-not-identity-cve-2026-49757-account-takeover-in-ashauthentications-oauth2oidc-strategies/</loc><lastmod>2026-06-21</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router/</loc><lastmod>2026-06-13</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/mediatek-wlan-heap-overflow-cve-2026-20452-remote-code-execution-on-millions-of-wi-fi-routers/</loc><lastmod>2026-07-20</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/lwip-snmpv3-stack-overflow-cve-2026-8836-critical-unauthenticated-rce-in-a-billion-embedded-devices/</loc><lastmod>2026-06-13</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/the-evolution-of-web-scraping-from-lwpsimple-to-headless-browsers/</loc><lastmod>2026-06-13</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/copy-fail-cve-2026-31431-the-732-byte-script-that-roots-every-linux-since-2017/</loc><lastmod>2026-06-13</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/stig-manager-reflected-xss-cve-2026-41200-critical-oidc-error-handling-flaw-enables-session-theft/</loc><lastmod>2026-06-13</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/getting-started-with-can-bus-reverse-engineering-on-linux/</loc><lastmod>2026-06-13</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce/</loc><lastmod>2026-04-10</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/race-condition-attacks-in-web-applications-beyond-double-spend/</loc><lastmod>2026-04-08</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/building-an-android-root-level-geolocation-c2-agent-with-jni/</loc><lastmod>2026-04-08</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/bypassing-android-ssl-certificate-pinning-with-frida/</loc><lastmod>2026-04-08</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/citrix-bleed-3-unauthenticated-memory-leak-in-netscaler-cve-2026-3055/</loc><lastmod>2026-04-04</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/best-google-play-store-alternatives-in-2025/</loc><lastmod>2026-03-31</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/set-up-an-android-reverse-engineering-environment-part2/</loc><lastmod>2026-03-31</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://www.hunt-benito.com/blog/set-up-an-android-reverse-engineering-environment/</loc><lastmod>2026-03-31</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url>
</urlset>
