https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T10:18:36.928698+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-141820 EUVD-2026-141820 2026-10-15T10:18:36.931450+00:00 EUVD-2026-141820 https://cve.radiocsirt.org/vuln/fkie_cve-2006-3549 fkie_cve-2006-3549 2026-10-15T10:18:36.931483+00:00

services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via (1) http, (2) https, and (3) ftp URL in the url parameter, which is requested from the server.

 https://cve.radiocsirt.org/vuln/ghsa-3w95-3q7c-6v47 GHSA-3w95-3q7c-6v47 2026-10-15T10:18:36.931515+00:00

services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via (1) http, (2) https, and (3) ftp URL in the url parameter, which is requested from the server.

 https://cve.radiocsirt.org/vuln/gsd-2006-3549 gsd-2006-3549 2026-10-15T10:18:36.931534+00:00 gsd-2006-3549