Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
1beelze/CVE-2026-14894
language: Python
ExDev994/CVE-2026-0740-mass
PoC untuk CVE-2026-0740: Ninja Forms File Uploads <= 3.3.26 — Unauthenticated Arbitrary File Upload yang dapat mengarah ke RCE. | language: Python
dua2z3rr/CVE-2026-29000-PoC
CVE-2026-29000 - pac4j-jwt (< 4.5.9 / < 5.7.9 / < 6.3.3) JwtAuthenticator authentication bypass PoC | language: Python
Resolvdd/CVE-2026-38526-PoC-htb-nexus
A PoC script for CVE-2026-38526, RCE via a file upload vulnerability in the /admin/tinymce/upload endpoint of webkul krayin 2.2.x | language: Python
ozcanpng/CVE-2026-23744
CVE-2026-23744 MCPJam Inspector unauthenticated RCE PoC | topics: cve, cve-2026-23744, exploit, mcp, mcpjam, mcpjam-inspector, poc, rce, research, security | language: Python
shinthink/CVE-2026-56291
Balbooa Forms (com_baforms) < 2.4.1 — Unauthenticated File Upload to RCE via form.uploadAttachmentFile | CVSS 9.8 | CISA KEV | topics: cisa-kev, cve, exploit, file-upload, joomla, rce | language: Python
Resolvdd/CVE-2026-38526-PoC-htb-nexus
A PoC script for CVE-2026-38526, RCE via a file upload vulnerability in the /admin/tinymce/upload endpoint of webkul krayin 2.2.x | language: Python
shinthink/CVE-2026-15282
Instant Appointment <= 1.2 — Unauthenticated Arbitrary File Upload to RCE via add_service_front AJAX | CVSS 9.8 | topics: cve, exploit, file-upload, mass-scanner, rce, wordpress | language: Python
gkdgkd123/CVE-2026-29145-Everything
language: Shell
cybertechajju/CVE-2026-59734-POC
OS Command Injection in Health Check → Remote Code Execution | language: Shell
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
bleryana/splunk-threat-hunting-projects
Threat hunting using Splunk (Windows Event Log analysis, Event ID 4625 investigation) | stars: 0 | forks: 0 | updated 2026-03-20T00:44:49Z | pushed 2026-03-20T00:44:46Z
SparshLadani/Threat-Hunting-AI-Agent
language: Jupyter Notebook | stars: 0 | forks: 0 | updated 2026-03-20T01:18:32Z | pushed 2026-03-20T01:18:27Z
ArginAslanian/KQL
KQL for Microsoft Sentinel threat hunting. | stars: 0 | forks: 0 | updated 2026-03-20T04:43:17Z | pushed 2026-03-20T04:43:14Z
ousachev28/Threat-Hunting-Port-of-Entry
stars: 0 | forks: 0 | updated 2026-03-20T07:32:26Z | pushed 2026-03-20T07:32:23Z
Saravanan-Patrick/Project-01-Real-World-Threat-Hunting
Real World Threat Hunting - 40,372 Sysmon Logs | Splunk Cloud | 84 Attacker IP's | 12,431 RDP Brute Force | Lateral Movement Detected | MITRE ATT&CK Mapped | topics: blue-team, cybersecurity, incident-response, lateral-m...
0W3RTY/KQL-Elite-Hunting
Advanced KQL threat hunting queries and detection logic for Microsoft Security. Mapped to MITRE ATT&CK framework. | stars: 0 | forks: 0 | updated 2026-03-20T10:16:42Z | pushed 2026-03-20T10:16:39Z
Yamato-Security/suzaku
Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs. | topics: aws, azure, cloudtrail, detection, dfir, engineering, entra, forensics, gcp, hunting, id, incident, log, monitor...
killex007-pftw/blue-team-writeups
Blue Team writeups covering SOC alerts, Incident Response, Threat Hunting and Malware Analysis — LetsDefend & HackTheBox. Built as part of my cybersecurity portfolio. | topics: blue-team, cybersecurity, dfir, hackthebox,...
BadSamuraiDev/bs-lists
Cybersecurity lists of TLDs, domains and URLs for threat hunting and posture policy (warn or block) | topics: blocklist, blocklists, browsers, cybersecurity, file-list, infosec, list, lists, lots, pastebin, phishing, rmm...
Reinhard1268/threat-hunting-platform
language: Python | stars: 1 | forks: 0 | updated 2026-03-20T14:19:10Z | pushed 2026-03-20T14:18:04Z