Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
yayip/CVE-2026-33017
PoC of Langflow CVE-2026-33017 | language: Shell
aquace/CVE-2026-41940-PoC
CVE-2026-41940 authentication bypass vulnerability proof-of-concept | topics: cpanel, cve, cve-2026-41940, cve-2026-41940-poc | language: Python
murrez/CVE-2026-6433
PoC for CVE-2026-6433: WordPress FlipperCode Custom CSS, JS & PHP (≤2.0.7) — unauthenticated SQLi to RCE. Python 3 stdlib; single target or bulk multi-threaded scanning. Authorized testing & research only. | language: Py...
shaheryar773/mitigate-cve-2026-23869-react-server-component-loops
Technical troubleshooting repository for fixing infinite rendering vulnerability loops and resource exhaustion threats under CVE-2026-23869 cleanly.
Nxploited/CVE-2026-12416-CVE-2026-12417
Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter | Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account T...
0xFuffM3/CVE-2026-31635-DirtyDecrypt
language: C
0xBlackash/CVE-2026-31635
CVE-2026-31635 | language: C
ThemeHackers/CVE-2026-34038
CVE-2026-34038: Authenticated Remote Command Injection in Coolify | language: Python
bayu06802/CVE-2026-48907
Python & template nuclei | language: Python
shinthink/pbck-exploit
📤 Mass exploitation framework for CVE-2026-56290 — Page Builder CK Joomla unauthenticated file upload to RCE | topics: cve-2026-56290, exploit, file-upload, joomla, pagebuilderck, pentesting, python, rce, security-tools,...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
zenmisael/Threat-Hunting
Host-Based EDR + Rootkit Detection + DFIR Tool (Single Binary) | language: Go | stars: 0 | forks: 0 | updated 2026-03-20T04:58:57Z | pushed 2026-03-20T04:58:54Z
vuln000/BlueTeamNote
蓝队笔记--------面向安全事件的实践指南，实战笔记。包含安全事件发现（威胁狩猎）、应急处置（应急响应）、安全数据挖掘、威胁情报等多个方面。 | topics: blueteam, notes, security, tutorial | stars: 22 | forks: 2 | updated 2026-08-08T20:05:56Z | pushed 2026-05-20T03:28:40Z
xyzwebmaster/All-in-One-Whitehat-Security-Tool
Real-time system security monitor with Windows toast notifications and first-run GUI setup. Tracks firmware integrity, drivers, network connections, processes, registry, and security events. Auto-starts on boot. | langua...
HARSHADBALAJI/python-security-toolkit
A suite of custom information security tools including packet sniffers, keyloggers, and pixel manipulators. | topics: cybersecurity, encryption, networking, python | language: Python | stars: 0 | forks: 0 | updated 2026-...
Kuldeep6474/file-integrity-monitor
cybersecurity python sha256 file-integrity hashing security-tools ethical-hacking infosec cryptography file-monitoring | topics: cryptography, cybersecurity, ethical-hacking, file-monitoring, fileintegrity, hashing, pyth...
sinXne0/pentest-mcp
Ethical penetration testing MCP server — 40+ security tools for Claude | language: Python | stars: 0 | forks: 0 | updated 2026-03-20T05:13:42Z | pushed 2026-03-20T05:13:39Z
trmxvibs/Tool-X
Tool-X is an advanced, centralized CLI framework designed to automate the installation and management of 1000+ hacking, OSINT, and security tools for Termux, Linux, and Android terminal environments. | topics: cli, hacki...
FNZubair/Well-Architected-Security-MCP-Server
An AI-powered security assessment tool that connects to Amazon Quick Suite. Users ask natural-language security questions in Quick Suite, and the system automatically analyzes their AWS account using 6 security tools — G...
coder-brzhang/frontend-safe-utils
一个面向前端的 TypeScript 安全工具集，覆盖常见风险场景： - XSS（HTML 注入、危险协议 URL、`innerHTML` 误用） - CSRF（状态变更请求缺少 token） - URL 拼接（手拼 path/query 引发编码和跳转问题） - Open Redirect（`next`/`redirect` 参数被利用） - `postMessage`（未校验 `origin`） - `window.open`（反向...
66RomanReigns/Network-Attack-and-Defence
南京大学计算机科学与技术系 网络攻防实战 专业选修课 个人实现资料 | stars: 0 | forks: 0 | updated 2026-01-20T08:18:32Z | pushed 2026-01-20T08:18:28Z