momo安全漏洞库

多模块数据检索平台

登录 注册
共聚合 7403 条情报 漏洞监控 4712 / 网安开源项目 2691
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
izxci/CVE-2026-8809
Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter | language: Python
Alardiians/gitea-CVE-2026-28699
Lab + writeup for CVE-2026-28699: Gitea OAuth2 scope enforcement bypass via HTTP Basic auth | topics: access-control, authentication, authorization-bypass, bug-bounty, cve, cve-2026-28699, exploit, gitea, golang, http-ba...
thesw0rd/CVE-2026-27886-PoC-Account-Takeover
Account takeover full PoC for CVE-2026-27886 in Strapi CMS | language: Python
rootdirective-sec/CVE-2026-46645-Analysis-Lab
language: Python
g0thamRabb1t/dirtyfrag-cve-2026-43284-auditd-detection
This repository contains a lab validation report and detection artefacts for DirtyFrag CVE-2026-43284, a Linux local privilege escalation issue related to the XFRM/ESP page-cache write path. The focus is on auditd teleme...
0xBlackash/CVE-2026-11645
CVE-2026-11645 | language: HTML
webshellseo8/CVE-2026-10795-POC
CVE-2026-10795 The UpdraftPlus POC | language: Python
GonSarrabia/Minimus-Junior-Backend-Exercise
Junior Backend Candidate Exercise: Packaging the dasel CLI (v3.3.1) with Melange, fixing CVE-2026-33320, and building a minimal container image using Apko. | language: Shell
xxconi/CVE-2026-6279
CVE-2026-6279: Avada (Fusion) Builder <= 3.15.2 – Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX Handler (fusion-builder) | language: Python
criann/check-cve-2026-23111
Script to check if system are vulnable to cve-2026-23111 | language: Shell
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
5771323yang/lvqkfIZvzK
【Java计算机毕业设计分享】基于Python的网络渗透检测系统,MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-03-09T21:01:59Z | pushed 2026-03-09T21:01:56Z
SurrealSky/web_security
web以及二进制安全,渗透测试,漏洞挖掘,工控安全学习笔记 | language: Python | stars: 45 | forks: 6 | updated 2026-08-15T12:49:08Z | pushed 2026-08-14T03:51:11Z
78778443/xssplatform
一个经典的XSS渗透管理平台 | language: PHP | stars: 731 | forks: 199 | updated 2026-03-12T02:10:27Z | pushed 2026-03-12T02:10:22Z
wangziling-rgb/web-pentestagent
一个让Ai模型进行完全自动化web渗透测试的项目。你只需要提供域名或网址。 | stars: 1 | forks: 0 | updated 2026-03-12T02:47:29Z | pushed 2026-03-12T03:00:58Z
liusihao36/dirbuster-python
一个用于渗透测试学习的多线程目录爆破工具 | stars: 0 | forks: 0 | updated 2026-03-12T03:15:18Z | pushed 2026-03-12T03:15:15Z
ShuiGuozhi-lab/-shentouceshi
自动化渗透测试系统 | stars: 0 | forks: 0 | updated 2026-03-12T06:37:06Z | pushed 2026-03-12T06:37:03Z
78778443/permeate
一个用于渗透透测试演练的WEB系统,用于提升寻找网站能力,也可以用于web安全教学 | language: JavaScript | stars: 286 | forks: 63 | updated 2026-03-12T07:07:28Z | pushed 2026-03-12T03:07:25Z
gtasb/Burp-AI-Analyzer
一个基于langchain4j开发的ai辅助渗透测试助手 | language: Java | stars: 21 | forks: 1 | updated 2026-07-31T13:14:00Z | pushed 2026-07-31T13:12:36Z
laoqingting/PentestAgent
渗透测试智能体 | language: Python | stars: 0 | forks: 0 | updated 2026-03-12T11:45:45Z | pushed 2026-03-12T11:45:41Z
nuoy58053-byte/auto-recon
一键自动化渗透测试情报收集工具(Subfinder + Masscan + Shodan + Nuclei + BloodHound) | language: Python | stars: 0 | forks: 0 | updated 2026-03-12T13:49:56Z | pushed 2026-03-12T13:49:50Z