<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://offset.md/</loc></url>
  <url><loc>https://offset.md/blog/</loc></url>
  <url><loc>https://offset.md/advisories/</loc></url>
  <url><loc>https://offset.md/contact/</loc></url>
  <url><loc>https://offset.md/pgp/</loc></url>
  <url><loc>https://offset.md/mirrors/</loc></url>
  <url><loc>https://offset.md/blog/fhir-ssrf-credential-theft</loc></url>
  <url><loc>https://offset.md/blog/praisonai-template-injection-ai-agents</loc></url>
  <url><loc>https://offset.md/blog/statamic-six-cuts</loc></url>
  <url><loc>https://offset.md/blog/vikunja-instance-wide-data-breach</loc></url>
  <url><loc>https://offset.md/blog/avideo-twenty-more-ways-in</loc></url>
  <url><loc>https://offset.md/blog/parse-server-auth-bypass-partial-authdata</loc></url>
  <url><loc>https://offset.md/blog/ella-networks-5g-core</loc></url>
  <url><loc>https://offset.md/blog/avideo-unauth-rce-chain</loc></url>
  <url><loc>https://offset.md/blog/kysely-sqli-in-query-builder</loc></url>
  <url><loc>https://offset.md/blog/glances-command-injection-process-names</loc></url>
  <url><loc>https://offset.md/cves/parse-server-join-table-role-escalation</loc></url>
  <url><loc>https://offset.md/cves/parse-server-keycloak-audience-bypass</loc></url>
  <url><loc>https://offset.md/cves/parse-server-livequery-clp-bypass</loc></url>
  <url><loc>https://offset.md/cves/parse-server-protected-fields-dot-notation</loc></url>
  <url><loc>https://offset.md/cves/parse-server-rate-limit-batch-bypass</loc></url>
  <url><loc>https://offset.md/cves/parse-server-sqli-dot-notation</loc></url>
  <url><loc>https://offset.md/cves/parse-server-sqli-increment-nested-field</loc></url>
  <url><loc>https://offset.md/cves/parse-server-sqli-increment-subkey</loc></url>
  <url><loc>https://offset.md/cves/parse-server-stored-xss-html-renderable</loc></url>
  <url><loc>https://offset.md/cves/parse-server-stored-xss-svg-upload</loc></url>
</urlset>
