Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
ikarolaborda/CVE-2026-40176
language: PHP
fevar54/CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit
Vulnerability: Logic flow weakness in Remote Access and Mobile Access | language: Python
jfs-jfs/CVE-2026-37064
User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endp...
jfs-jfs/CVE-2026-37065
Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion | language: Shell
jfs-jfs/CVE-2026-37066
Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 allows and authenticated attacker with super administrator role to disclose sensi...
jfs-jfs/CVE-2026-37067
Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially craf...
jfs-jfs/CVE-2026-37068
Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated user with the role of super administrator to overwrite any php file in the applic...
jfs-jfs/CVE-2026-37069
Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the applicatio...
jfs-jfs/CVE-2026-37070
Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any uploaded files by other users as long as it knows the path and filename via a s...
jfs-jfs/CVE-2026-37071
Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator ac...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
abhijithp65/Malware-Classification
language: Jupyter Notebook | stars: 2 | forks: 0 | updated 2026-03-18T06:34:18Z | pushed 2026-03-18T06:34:15Z
kurtpayne/skillscan-security
Security scanner for AI agent skills and MCP tool bundles — prompt injection, IOC matching, malware detection, ML classifier | topics: ai-agent, ai-security, llm-security, mcp, prompt-injection, security, skill-scanner, ...
Nguyenlam876/Malware-Forensics
This project explores the foundational aspects of malware, including its various types, impact, and common infection vectors. Furthermore, it provides a detailed examination of malware architecture and components. | star...
Amrita1412/malware-reverse-engineering-python
stars: 0 | forks: 0 | updated 2026-03-18T06:53:14Z | pushed 2026-03-18T06:53:11Z
siddhantkumbhar107/pdf-malware-Toolkit
A Python-based toolkit to analyze and detect malicious content in PDF files. | stars: 0 | forks: 0 | updated 2026-03-18T07:05:54Z | pushed 2026-03-18T07:05:51Z
donijo1216/azazel
Monitor Docker containers with Azazel to capture syscalls, file access, and network events in real time for malware analysis and AI oversight. | topics: active-cyber-defense, deception-defense, deception-technology, deco...
sLotsss/Malware-Forensic
stars: 0 | forks: 0 | updated 2026-03-18T07:09:45Z | pushed 2026-03-18T07:09:42Z
Vikas-Jais/NotTheNet
Simulate internet services in isolated environments to aid malware analysis with improved DNS handling and network emulation features. | topics: blue-team, dns, fake-internet, fakenet, github-config, incident-response, i...
velugubantlachaitanya/SynthAPT
Simulate complex cyberattack paths with a playbook-driven framework that replicates malware behavior for testing detections and investigations. | topics: ai, blockchain-network, chef-cookbook, computer-vision, data-gener...
Ammarss11/ferrox
Demonstrate modern stealer evasion techniques in Rust for security research and academic study of advanced malware behaviors. | topics: amrex, anti-analysis, anti-vm, arena-allocator, criterion, cryptography, hdr-histogr...