Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
87achrafg-stack/CVE-2026-48907
language: Python
87achrafg-stack/CVE-2026-6279
language: Python
minanagehsalalma/cve-2026-34473-unauthenticated-dos-zte-routers
Technical breakdown of CVE-2026-34473, an unauthenticated denial of service affecting 17+ ZTE router models. | topics: cve, firmware, root-cause-analysis, router-security, vulnerability-research, zte | language: HTML | h...
romain-deperne/CVE-2026-40864
JupyterHub XSRF bypass via cross-origin form POST (Sec-Fetch-Mode: no-cors) — CWE-352 | language: HTML
romain-deperne/CVE-2026-41490
SQL Injection in Dagster database I/O managers via dynamic partition keys (DuckDB/Snowflake/BigQuery/DeltaLake) — High | language: Python
romain-deperne/CVE-2026-48017
Remote Code Execution in DbGate via functionName injection in the loadReader endpoint — CVSS 8.8 | language: Python
minc-nice-100/http2-bomb-analysis-paper
HTTP/2 Bomb: HPACK indexed-reference amplification + flow-control stall. A high school student's full protocol analysis (LaTeX). CVE-2026-49975, CVE-2026-47774. | topics: amplification-attack, cve-2026-47774, cve-2026-49...
xxconi/CVE-2026-22356
CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE
v1c0mmrt/redis-cve-2026-23479-scanner
CVE-2026-23479 Redis Use-After-Free vulnerability detection tool | language: Python
BishopFox/CVE-2026-22557-check
Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557 | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
gadievron/raptor
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adve...
vasantia808/learning-rust
Notes and projects from my Rust learning journey, with a focus on systems programming and security tooling | stars: 0 | forks: 0 | updated 2026-03-20T04:04:46Z | pushed 2026-03-20T04:04:43Z
SagarBiswas-MultiHAT/Python-Notebooks
Python Notebooks; two companion notebooks: "The Pythonic Odyssey" (core Python: basics → OOP, file I/O, virtualenvs, advanced patterns) and "Python for CyberSecurity" (security tooling + hands-on projects). Includes prac...
appsecsanta/security-tools
Free, open-source security scanning tools — HTTP headers, DNS, SSL/TLS, subdomains. Self-host on Cloudflare Workers. | topics: appsec, cloudflare-workers, dns-security, infosec, open-source, penetration-testing, security...
dshearer/modelhawk
Protocol for connecting AI harnesses to security tools | language: TypeScript | stars: 0 | forks: 0 | updated 2026-03-17T22:56:00Z | pushed 2026-03-17T22:56:52Z
cvemula1/NHInsight
NHInsight — Open-source security tool to find risky non-human identities, tokens, and CI/CD access paths across AWS, Azure, GCP, GitHub, Kubernetes, and GitHub Actions. | topics: aws, azure, gcp, github, githubactions, i...
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges. | topics: adversarial-ml, ai, blue-tea...
MuhammadIsakiPrananda1/portofolio-neverland-studio
Full-stack cybersecurity portfolio platform — React 19 + TypeScript frontend, Laravel 11 REST API, Docker-orchestrated. Features CTF playground, isolated VM environment, OpenVPN access with hourly IP rotation, 23 securit...
jazzblue75-sketch/Cybersecurity-Porfolio
My cybersecurity learning portfolio including Linux practice, TryHackMe labs, security tools, and hands-on exercises. | stars: 0 | forks: 0 | updated 2026-03-17T23:15:09Z | pushed 2026-03-17T23:15:06Z
luckyPipewrench/pipelab.org
PipeLab — security tools for AI agents | language: HTML | stars: 0 | forks: 0 | updated 2026-03-21T16:20:40Z | pushed 2026-03-21T17:03:49Z