https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T21:58:32.374425+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-275018 EUVD-2026-275018 2026-10-27T21:58:32.377427+00:00 EUVD-2026-275018 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25184 fkie_cve-2018-25184 2026-10-27T21:58:32.377460+00:00

Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.php to access sensitive system files like configuration and initialization files.

 https://cve.radiocsirt.org/vuln/ghsa-7p22-frc8-w9h8 GHSA-7p22-frc8-w9h8 2026-10-27T21:58:32.377493+00:00

Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.php to access sensitive system files like configuration and initialization files.