<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://offset.md/</loc></url>
  <url><loc>https://offset.md/blog/</loc></url>
  <url><loc>https://offset.md/advisories/</loc></url>
  <url><loc>https://offset.md/contact/</loc></url>
  <url><loc>https://offset.md/pgp/</loc></url>
  <url><loc>https://offset.md/mirrors/</loc></url>
  <url><loc>https://offset.md/blog/fhir-ssrf-credential-theft.html</loc></url>
  <url><loc>https://offset.md/blog/praisonai-template-injection-ai-agents.html</loc></url>
  <url><loc>https://offset.md/blog/statamic-six-cuts.html</loc></url>
  <url><loc>https://offset.md/blog/vikunja-instance-wide-data-breach.html</loc></url>
  <url><loc>https://offset.md/blog/avideo-twenty-more-ways-in.html</loc></url>
  <url><loc>https://offset.md/blog/parse-server-auth-bypass-partial-authdata.html</loc></url>
  <url><loc>https://offset.md/blog/ella-networks-5g-core.html</loc></url>
  <url><loc>https://offset.md/blog/avideo-unauth-rce-chain.html</loc></url>
  <url><loc>https://offset.md/blog/kysely-sqli-in-query-builder.html</loc></url>
  <url><loc>https://offset.md/blog/glances-command-injection-process-names.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-join-table-role-escalation.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-keycloak-audience-bypass.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-livequery-clp-bypass.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-protected-fields-dot-notation.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-rate-limit-batch-bypass.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-sqli-dot-notation.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-sqli-increment-nested-field.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-sqli-increment-subkey.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-stored-xss-html-renderable.html</loc></url>
  <url><loc>https://offset.md/cves/parse-server-stored-xss-svg-upload.html</loc></url>
</urlset>
