https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T12:14:55.484673+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-69598 EUVD-2026-69598 2026-10-28T12:14:55.487486+00:00 EUVD-2026-69598 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19246 fkie_cve-2018-19246 2026-10-28T12:14:55.487527+00:00

PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion.

 https://cve.radiocsirt.org/vuln/ghsa-pc5h-m95g-v6rh GHSA-pc5h-m95g-v6rh — LFI in PHP-Proxy 5.1.0 2026-10-28T12:14:55.487558+00:00

Affected: Packagist: athlon1600/php-proxy

PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the `aeb067ca0aa9a3193dce3a7264c90187` app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion.

 https://cve.radiocsirt.org/vuln/gsd-2018-19246 gsd-2018-19246 2026-10-28T12:14:55.487583+00:00 gsd-2018-19246