Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-20
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.
c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP
zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
🛡️
创建者: laserduor
suchenhua/logisme-debate-coach
开源华语辩论 AI 教练知识库：覆盖备赛 / 复盘 / 评判全链路。含 17 篇方法论（攻防分级·逐帧纠偏·话术交付）、3 个核心 Skill、24 位辩手风格卡与模板库。部分内容基于精靈Moon《辩论筑基》与 grill-me 开源改编，CC BY-NC-SA 4.0 许可。 | language: Python | stars: 2 | forks: 0 | updated 2026-09-13T12:27:11Z | pushed...
Yunkun-Ley/AI-Network-Security-Learning
AI网络攻防全栈学习项目 - 涵盖对抗样本、模型防御、安全评估、渗透测试等内容 | stars: 0 | forks: 0 | updated 2026-09-04T08:46:55Z | pushed 2026-09-04T08:46:53Z
monetgames/TankBase
坦克基地 Tank Base - 融合 RPG、塔防与 Roguelite 元素的俯视角坦克攻防游戏 | stars: 0 | forks: 0 | updated 2026-09-05T15:35:19Z | pushed 2026-09-12T14:41:18Z | homepage: https://monetgames.github.io/TankBase/
henry2026a/bishe-Java-springboot-SSM-vue-js-uniapp-20260903-191043-1788521984
【毕设分享】基于Java的springboot_SSM+vue.js+uniapp小程序的基于云平台的信息安全攻防实训平台附带文章源码部署视频讲解等_20260903_191043.md | stars: 0 | forks: 0 | updated 2026-09-04T11:41:20Z | pushed 2026-09-04T11:40:36Z
henry2026a/bishe-Java-springboot-SSM-vue-js-uniapp-20260903-191050-1788522038
【毕设分享】基于Java的springboot_SSM+vue.js+uniapp小程序的基于云平台的信息安全攻防实训平台附带文章源码部署视频讲解等_20260903_191050.md | stars: 0 | forks: 0 | updated 2026-09-04T11:41:44Z | pushed 2026-09-04T11:41:22Z
henry2026a/bishe-Java-springboot-SSM-vue-js-uniapp-1788521939
【毕设分享】基于Java的springboot_SSM+vue.js+uniapp小程序的基于云平台的信息安全攻防实训平台附带文章源码部署视频讲解等.md | stars: 0 | forks: 0 | updated 2026-09-04T11:43:42Z | pushed 2026-09-04T11:39:41Z
henry2026a/bishe-Java-springboot-SSM-vue-js-uniapp-20260903-191058-1788522085
【毕设分享】基于Java的springboot_SSM+vue.js+uniapp小程序的基于云平台的信息安全攻防实训平台附带文章源码部署视频讲解等_20260903_191058.md | stars: 0 | forks: 0 | updated 2026-09-04T11:45:39Z | pushed 2026-09-04T11:42:06Z
Yuxuan2003/Awesome-GUI-Agent-Security
GUI / Computer-Use / Browser Agent 安全论文清单 —— 按攻防轴组织，每篇附中文简介 | topics: agent-security, ai-agent, ai-security, awesome, awesome-list, computer-use-agent, gui-agent, llm-agent, llm-security, paper-list, prompt-injection, tr...
ctkqiang/NezhaAPKExploit
一个自研的 C2（命令与控制）链路研究项目：Ruby 编写指挥中心（服务器 + 操作员终端），Jetpack Compose 编写 Android 后台探针（agent），并配套 msfvenom 风格的一键打包器。整套代码用于学习 C2 通信协议、TCP 粘包/半包处理、前台服务保活、APK 配置注入与重签名 等红队工程概念。 | topics: chinese, ctkqiang, exploitation, ruby | lang...