Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
dinosn/cve-2026-82329-jfrog-artifactory
CVE-2026-82329 JFrog Artifactory unauthenticated auth-bypass: reproducible Docker lab + URL-parameter validator PoC + patch-diff analysis | language: Python
maxprog-svg/CVE-2026-33017
CVE-2025-62593 — Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine.
slapah/ghostlock-h8q
GhostLock CVE-2026-43499 port for Galaxy Z Fold 8 (h8q) | language: C
gabrielftanaka/CVE-2026-82221
PoC for Unauthenticated Reflected Cross-Site Scripting (XSS) in RegistrationMagic WordPress Plugin
HackSpeak/CVE-2026-82592
D-Link DIR-825M formDiskFormat stack overflow + command injection RCE PoC (CVE-2026-82592); for authorized security testing
cwjchoi01/CVE-2026-36130
CVE-2026-36130
cwjchoi01/CVE-2026-31321
CVE-2026-31321
Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC
language: Shell
Kihara-1/postgresql-cve-2026-14662
PostgreSQL の全文検索(tsvector/tsquery)に見つかった範囲外書き込み脆弱性 CVE-2026-14662 を、修正前(18.4)と修正後(18.6)を Docker で並べて動かして検証した記録と発表資料 | language: PLpgSQL
Trachinus/CVE-2026-27472-and-CVE-2026-27474
PoC for CVE-2026-27472 and CVE-2026-27474
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Croesus-K/InjectArena
攻心 · InjectArena — 中文可自部署的 LLM 提示注入攻防闯关靶场，攻防双向评分 | topics: ai-security, chinese, ctf, fastify, llm, llm-security, nodejs, owasp, prompt-injection, security, self-hosted | language: JavaScript | stars: 0 | forks: 0 | upda...
ZhangGZ-medical/evidence-debate_diy
Evidence Debate Skill - 对抗式循证辩论工作流（穷尽文献/全文优先/迭代攻防/GRADE分级/可证伪条件/多版本交付） | language: Python | stars: 0 | forks: 0 | updated 2026-09-01T07:52:25Z | pushed 2026-09-01T07:47:42Z
"The Eye That Sees All" — High-Performance File Integrity Monitoring (FIM), Process Lineage Sentinel, Authentication Auditor, and RCE/Webshell Detector for Linux.
创建者: gondimcodes
"The Eye That Sees All" — High-Performance File Integrity Monitoring (FIM), Process Lineage Sentinel, Authentication Auditor, and RCE/Webshell Detector for Linux.
Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。
创建者: wgpsec
Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。
php webshell
创建者: devilbhai
php webshell
Stopen OODA-driven automated penetration testing agent with 3-protocol WebShell : AntSword/Behinder/Godzilla, C2 framework, cyberspace search, JS discovery, Reflexion engine, YAML custom tools, 12 LLM providers, vulnerability & PoC management, and MCP bridge. WebUI , SQLite.
创建者: swfk2154
Stopen OODA-driven automated penetration testing agent with 3-protocol WebShell : AntSword/Behinder/Godzilla, C2 framework, cyberspace search, JS discovery, Reflexion engine, YAML custom tools, 12 LLM provi...
VULNCLAW 渗透测试平台｜AGPL-3.0-or-later WITH Classpath-exception-2.0 开源；37 BaseEngines × AI v100 编排；DAG 流水线；分布式 master-worker；Burp Suite 桥 v1.0.8；MCP 原生接口；商业授权见 README
创建者: AAAAAAAAAA6-FY
VULNCLAW 渗透测试平台｜AGPL-3.0-or-later WITH Classpath-exception-2.0 开源；37 BaseEngines × AI v100 编排；DAG 流水线；分布式 master-worker；Burp Suite 桥 v1.0.8；MCP 原生接口；商业授权见 README
@Qtzuu的渗透工具箱 —— 假设驱动的授权红队渗透测试技能框架：11个域 + 状态机攻击链 + 证据账本引擎
创建者: lanyz1
@Qtzuu的渗透工具箱 —— 假设驱动的授权红队渗透测试技能框架：11个域 + 状态机攻击链 + 证据账本引擎
@Qtzuu的渗透工具箱 —— 假设驱动的授权红队渗透测试技能框架：11个域 + 状态机攻击链 + 证据账本引擎
创建者: lanyz1
@Qtzuu的渗透工具箱 —— 假设驱动的授权红队渗透测试技能框架：11个域 + 状态机攻击链 + 证据账本引擎
Pixiv FANBOX 批量下载器，支持 Python 命令行与桌面 GUI，按免费/付费投稿和图片、音频、视频等文件类型筛选，支持任务队列、多线程下载（最多 8 线程）、失败重试与安全写入，不绕过付费限制。Pixiv FANBOX batch downloader with Python CLI and desktop GUI. Supports free/paid post filters, image/audio/video downloads, queued tasks, up to 8 concurrent workers, retries, and safe file writes without bypassing paid restrictions.
创建者: 1wu-davy-2
Pixiv FANBOX 批量下载器，支持 Python 命令行与桌面 GUI，按免费/付费投稿和图片、音频、视频等文件类型筛选，支持任务队列、多线程下载（最多 8 线程）、失败重试与安全写入，不绕过付费限制。Pixiv FANBOX batch downloader with Python CLI and desktop GUI. Supports free/paid post filters, ima...