Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
shinthink/CVE-2026-13001
Podlove Podcast Publisher Unauthenticated File Upload RCE via is_image() vs extract_file_extension() Mismatch | CVSS 9.8 | topics: 0day, cve, exploit, file-upload, pentest, podlove, security, vulnerability, wordpress | l...
oscerd/CVE-2026-46591
Reproducer for CVE-2026-46591: Apache Camel camel-neo4j Cypher injection via property names in CamelNeo4jMatchProperties, enabling authorization bypass / cross-label data exfiltration (fixed in 4.14.8/4.18.3/4.21.0) | to...
FzRsLLaSheR/CVE-2026-14960-CVE-2026-14961
ndouglas-cloudsmith/CVE-2026-53359
A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.
repo-ranger21/security-portfolio-chris-peterson
My portfolio showcasing vulnerability research (CVE-2026-11989, CVE-2026-11395) and automated threat orchestration engineering (Lucius Engine, TalonVigil).
seqra/cve-2026-58138
language: Python
lamaper/CVE-2026-52199
oscerd/CVE-2026-46588
Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read + delete of arbitrary documents (fixed in 4.14.8/4.18.3/4.21.0) | topic...
0Linear/CVE-2026-62958
language: Python
oscerd/CVE-2026-46587
Reproducer for CVE-2026-46587: Apache Camel camel-couchbase CCB_* header injection enabling document disclosure, tampering, and TTL-forced data destruction (fixed in 4.14.8/4.18.3/4.21.0) | topics: apache-camel, cve, pro...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
ctfd3219/red-ICS
面向红队的全自动企业资产侦察与攻击面测绘流水线。输入一个公司名，自动完成组织侦察、OSINT被动收集、子域名/端口/云服务发现、CDN穿透、APP反编译及Host碰撞，输出结构化资产报告。 | language: Python | stars: 5 | forks: 2 | updated 2026-07-08T01:27:04Z | pushed 2026-06-27T09:57:35Z
RM3836/security-toolkit
🔐 7天安全挑战：端口扫描、SSH管理、流量分析、Web漏洞扫描、IDS、渗透测试框架、蜜罐系统 | language: Python | stars: 0 | forks: 0 | updated 2026-06-01T12:48:05Z | pushed 2026-06-01T12:48:00Z
kevinyang11101gg/RqwenywTcE
【Python计算机毕业设计分享】基于Python的漏洞扫描系统，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-06-02T15:05:59Z | pushed 2026-06-02T15:01:00Z
lhm-107/vulnerability-scanning-project
漏洞扫描与渗透测试实训项目成果 | stars: 0 | forks: 0 | updated 2026-06-05T05:18:45Z | pushed 2026-06-05T05:18:42Z
hnytgl/TelerikUI-RCE
这是一个增强版的 Telerik UI 远程代码执行漏洞扫描工具，支持多种测试模式和自定义配置。 | language: Python | stars: 2 | forks: 0 | updated 2026-06-06T06:28:17Z | pushed 2026-06-06T06:28:13Z
wulongovo/web-vuln-scanner
AI-Powered Web Vulnerability Scanner - Python自动化Web漏洞扫描器，集成LLM智能payload生成和漏洞分析 | topics: ai, bug-bounty, ethical-hacking, lfi, penetration-testing, python, security, sqli, vulnerability-scanner, web-security, xss | langu...
Adapt-web/ai-security-monitor
本项目是一个面向个人网站的轻量级安全监控系统，基于阿里云平台搭建，使用AI工具辅助开发，实现了漏洞扫描、日志分析、自动告警等功能。 | stars: 0 | forks: 0 | updated 2026-06-07T04:59:04Z | pushed 2026-06-07T04:59:00Z | homepage: https://github.com/Adapt-web/ai-security-monitor
zhangshilin-cn/webScan
webScan 是一款基于 Kali Linux 和 AI 多智能体协作的网站安全风险自动化监测评估系统，输入 URL 后通过 5 个并行智能体协同执行信 息收集、爬虫、漏洞扫描、弱口令检测和安全事件分析，最终输出包含资产画像、五维风险评分、漏洞详情与整改建议的 Markdown + HTML 双格式报告。 | language: Python | stars: 1 | forks: 0 | updated 2026-06-09T01:...
Samantha09/secops-agent
漏洞扫描 | language: Java | stars: 0 | forks: 0 | updated 2026-06-10T17:02:08Z | pushed 2026-06-10T17:02:03Z
mako-zbh/escan
简易的漏洞扫描、资产识别流水线工具 | language: Python | stars: 0 | forks: 0 | updated 2026-08-11T01:11:45Z | pushed 2026-08-11T01:11:38Z