ÉchelonÉCHELON
Archives

$ digest —date 2026-03-22

21 éléments sélectionnés

!Vulns(6)

[CRITICAL] CVE-2026-33502 — AVideo has Unauthenticated SSRF via plugin/Live/test.php
Vulns
GitHub Advisoryscore 100
CVE-2016-20024 — ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exploit world-writable
Vulns
NVDCVSS 9.8score 98
CVE-2016-20026 — ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager application. Attackers can authenticate with hard
Vulns
NVDCVSS 9.8score 98
Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager
Vulns
The Hacker Newsscore 75
Critical Quest KACE Vulnerability Potentially Exploited in Attacks
Vulns
SecurityWeekscore 75
Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw
Vulns
Dark Readingscore 65

>Tools(3)

[CRITICAL] GHSA-f67f-hcr6-94mf — Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow
Tools
GitHub Advisoryscore 100
Trivy vulnerability scanner breach pushed infostealer via GitHub Actions
Tools
Bleeping Computerscore 75
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Tools
CrowdStrike Blogscore 75

?Tutorials(1)

19 Web Dev Projects – HTML, CSS, JavaScript Tutorial
Tutorials
David Bombalscore 92

#News(11)

ChatGPT For The Dark Web
News
John Hammondscore 93
The world still needs people who care - CodePen founder Chris Coyier interview [Podcast #212]
News
David Bombalscore 89
FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks
News
The Hacker Newsscore 75
Google adds ‘Advanced Flow’ for safe APK sideloading on Android
News
Bleeping Computerscore 75
Tycoon2FA Phishing-as-a-Service Platform Persists Following Takedown
News
CrowdStrike Blogscore 75
Feds Disrupt IoT Botnets Behind Huge DDoS Attacks
News
Krebs on Securityscore 65
Cyber OpSec Fail: Beast Gang Exposes Ransomware Server
News
Dark Readingscore 65
Friday Squid Blogging: Jumbo Flying Squid in the South Pacific
News
Schneier on Securityscore 65
Proton Mail Shared User Information with the Police
News
Schneier on Securityscore 65
Risky Business #829 -- Sneaky lobsters: Why AI is the new insider threat
News
Risky Businessscore 50
SN 1070: CISA's Free Internet Scanning - Malware Disguised as a VPN
News
Security Nowscore 50