Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
MichaelAdamGroberman/CVE-2026-54477
CVE-2026-54477: Admin Panel Missing Security Headers (clickjacking/XSS) - Gardyn (ICSA-26-183-03) | topics: cisa, clickjacking, coordinated-disclosure, cve, gardyn, iot-security, security-research, vulnerability-disclosu...
MichaelAdamGroberman/CVE-2026-55726
CVE-2026-55726: Publicly Listable Azure Blob Storage Container (device logs) - Gardyn (ICSA-26-183-03) | topics: azure-blob-storage, cisa, coordinated-disclosure, cve, gardyn, iot-security, security-research, vulnerabili...
MichaelAdamGroberman/CVE-2026-13768
CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03) | topics: azure-iot-hub, cisa, cve, gardyn, hardcoded-credentials, iot-security, rem...
redr0nin/Code-27-Companion-Hub-Exploits
Proof of concept for CVE-2026-36027 and CVE-2026-36028 | topics: cve-2026-36027, cve-2026-36028, exploits
teteco/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR
The VTEX Checkout Service exposes OrderForm data through the endpoints `/api/checkout/pub/orderForm/{orderFormId}` and `/attachments/*`. These endpoints do not validate the tenant (store account) of the authenticated ses...
watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523
language: Python
7h30th3r0n3/CVE-2026-9082-Drupal-PoC
Drupal Core PostgreSQL SQL Injection PoC - CVE-2026-9082. Ethical PoC for the Drupal vulnerability allowing anonymous SQL injection through the JSON:API module on PostgreSQL-backed sites. | language: Python
gh1mau/masta-cve-2026-48907
cve-2026-48907 scanner | language: Python
entra1337/DirtyClone
Python Proof of Concept for DirtyClone (CVE-2026-43503) - Linux kernel LPE via page-cache corruption | language: Python
c0gnit00/CVE-2026-33017
Python POC, Exploit for CVE-2026-33017 | language: Python
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
YZBRH/CTFOnlinePlatform-CoinCollector
一款国内CTF靶场的全自动签到获取金币的工具,支持NSSCTF,Bugku,攻防世界,CTFHub等靶场 | language: Python | stars: 9 | forks: 2 | updated 2026-03-19T03:40:03Z | pushed 2026-03-19T03:40:00Z
crispvibe/anna-agent-skills
Anna Agent Skills 为 AI 编程助手 (Windsurf/Cursor) 打造的专业技能集,覆盖全栈开发、安全攻防、逆向工程等领域。 | stars: 7 | forks: 3 | updated 2026-03-21T19:22:25Z | pushed 2026-03-18T06:33:33Z | homepage: https://www.anna.tf/
guchangan1/All-Defense-Tool
本项目集成了全网优秀的攻防武器工具项目,包含自动化利用,子域名、目录扫描、端口扫描等信息收集工具,各大中间件、cms、OA漏洞利用工具,爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。 | language: Python | stars: 7882 | forks: 1409 | updated 2026-08-12T07:48:24Z | pushed 2026-08-10T01:29:37Z
zhanglinglingc/lingops
LingOps(灵控) 是一个专为 AWD/AWDP 攻防竞赛设计的竞赛自动化平台,提供 IP探测、WebShell 管理、SSH 终端管理、基线加固、Flag 读取等核心功能,帮助参赛选手在比赛中高效管理多个目标。 | stars: 56 | forks: 1 | updated 2026-08-06T03:33:18Z | pushed 2026-07-09T07:38:50Z
yeasy/ai_security_guide
从原理到实践,全面掌握大语言模型安全攻防之道 | topics: ai, book, guide, llm, security | language: Python | stars: 83 | forks: 12 | updated 2026-08-11T07:13:14Z | pushed 2026-08-11T07:16:09Z | homepage: https://yeasy.gitbook.io/ai_security_gui...
Threekiii/Awesome-Redteam
一个攻防知识库。A knowledge base for red teaming and offensive security. | topics: command-and-control, execution, exploit, initial-access, lateral-movement, privilege-escalation, reconnaissance, red-teaming | language: Python |...
pentoo/pentoo-overlay
Gentoo overlay for security tools as well as the heart of the Pentoo Livecd | language: Shell | stars: 371 | forks: 106 | updated 2026-03-23T00:13:12Z | pushed 2026-03-23T00:13:06Z
carni-ships/SolidSecs
Claude skill to run multiple auditing/security tools over your Solidity contracts | language: Python | stars: 3 | forks: 0 | updated 2026-03-19T23:43:21Z | pushed 2026-03-19T23:43:17Z
joythegost/termux-chowdhury-it
🔥 Termux Home Page for Chowdhury IT Organisation with Security Tools | Owner: Joy | User: Changeable | Auto-start Terminal | stars: 0 | forks: 0 | updated 2026-03-19T23:47:17Z | pushed 2026-03-19T23:47:14Z
DanEmmanuel1/SIEM-DASHBOARD
A full-stack web-based SIEM dashboard built with Python and Flask that aggregates live data from 5 security tools — port scanner, log analyzer, file integrity monitor, vulnerability scanner and password auditor — into on...