local-file-read 2 PHP Object Injection Leads to Arbitrary File Write | Archived Jul 27, 2026 SVG XXE Leads to Local File Disclosure | Educated Jun 26, 2026