https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:51:26.702471+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223890 EUVD-2026-223890 2026-10-04T08:51:26.769398+00:00 EUVD-2026-223890 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27564 fkie_cve-2024-27564 2026-10-04T08:51:26.769444+00:00

pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. NOTE: the references section has an archived copy of pictureproxy.php from its original GitHub location, but the repository name might later change because it is misleading.

 https://cve.radiocsirt.org/vuln/ghsa-xm2p-hxq8-xj3q GHSA-xm2p-hxq8-xj3q 2026-10-04T08:51:26.769485+00:00

A Server-Side Request Forgery (SSRF) in pictureproxy.php of ChatGPT commit f9f4bbc allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the urlparameter.

 https://cve.radiocsirt.org/vuln/gsd-2024-27564 gsd-2024-27564 2026-10-04T08:51:26.769503+00:00 gsd-2024-27564