<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>cybercrime.club</title><link>https://cybercrime.club/tags/tsr/</link><description>Infrastructure security news for people who build infrastructure.</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Sun, 10 May 2026 11:09:15 -0400</lastBuildDate><atom:link href="https://cybercrime.club/tags/tsr/" rel="self" type="application/rss+xml"/><item><title>cPanel Ships Second Emergency TSR in 10 Days: CVE-2026-29201, 29202, 29203 Patch RCE, Arbitrary File Read, DoS</title><link>https://cybercrime.club/posts/cpanel-cve-2026-29201-29202-29203-second-tsr-10-day-storm/</link><pubDate>Sun, 10 May 2026 11:09:15 -0400</pubDate><guid>https://cybercrime.club/posts/cpanel-cve-2026-29201-29202-29203-second-tsr-10-day-storm/</guid><description>cPanel released its second emergency Technical Security Release in 10 days on May 8, patching three new flaws — including a CVSS 8.8 Perl injection in create_user and a chmod-based privilege escalation — barely a week after the CVE-2026-41940 authentication-bypass meltdown.</description><category>vulnerability</category></item></channel></rss>