POC_CVE-2026-35037

Laboratorio SSRF CVE-2026-35037 Ech0 Este repositorio contiene un laboratorio de reproducción local y aislado para CVE-2026-35037, una vulnerabilidad SSRF no autenticada en el endpoint GET /api/website/title de Ech0. El laboratorio utiliza un servidor de evidencia local controlado en lugar de...

CVE-2026-77151

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...

EUVD-2026-63578

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...

CVE-2026-77151 lin-snow Ech0 crypto.go MD5Encrypt risky encryption

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...

CVE-2026-77151

lin-snow Ech0 (versions up to 5.4.1 ) is affected by a cryptographic weakness in the MD5Encrypt function located in internal/util/crypto/crypto.go. The use of MD5 as a hashing algorithm is considered a risky cryptographic practice, as MD5 is known to be collision-prone and unsuitable for security...

CVE-2026-77151 lin-snow Ech0 crypto.go MD5Encrypt risky encryption

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...

PT-2026-79117

Name of the Vulnerable Software and Affected Versions lin-snow Ech0 versions prior to 5.4.2 Description A security flaw exists in the MD5Encrypt function within the internal/util/crypto/crypto.go file. This issue involves the use of a risky cryptographic algorithm, which could allow for remote...

GO-2026-5603 Ech0 has SSRF via DNS Resolution Bypass in Webhook URL Validation in github.com/lin-snow/ech0

Ech0 has SSRF via DNS Resolution Bypass in Webhook URL Validation in github.com/lin-snow/ech0. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

GO-2026-4838 Ech0 authenticated user-list exposed data via public `/api/allusers` endpoint in github.com/lin-snow/ech0

Ech0 authenticated user-list exposed data via public /api/allusers endpoint in github.com/lin-snow/ech0...