Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
EaEa0001/servu-cve-2026-28318-poc
SolarWinds Serv-U CVE-2026-28318: unauthenticated Content-Encoding: deflate crash. Root-cause analysis (invalid free of an interior pointer -> heap corruption) + DoS-only PoC. Fixed in 15.5.4 Hotfix 1. | language: Python
HORKimhab/CVE-2026-0542
CVE-2026-0542 - Draft - ServiceNow | homepage: https://thehackernews.com/2026/06/servicenow-flaw-exploited-to-gain.html
JoakimBulow/CVE-2026-48962
CVE-2026-48962 - IO::Compress - Code Execution
HORKimhab/CVE-2026-442_
CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44294, CVE-2026-44295 - protobuf.js | language: Python | homepage: https://thehackernews.com/2026/06/six-proto6-vulnerabilities-in.html
hakaioffsec/CVE-2026-44706
Chatwoot SQL injection in FilterService | language: Python
EQSTLab/CVE-2026-40897
Math.js Expression Parser RCE | language: Dockerfile
robinxiang/CVE-2026-4480
Exploit CVE-2026-4480 | language: Python
flyingllama87/p4wned
Perforce security research and tools - CVE-2026-6043 | topics: metasploit, nodejs, nuclei-templates, offsec, p4d, perforce, python3, scanner | language: Python | homepage: https://morganrobertson.net/p4wned/
HORKimhab/CVE-2026-44963
CVE-2026-44963 - Draft - Veeam | homepage: https://thehackernews.com/2026/06/veeam-backup-replication-rce-flaw-lets.html
hnytgl/CVE-2026-42588
CVE-2026-42588 - Apache ActiveMQ Jolokia 远程代码执行漏洞利用 (RCE Exploit) | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
ZooNJarway/ZooNJarway.github.io
渗透测试实验记录 | language: CSS | stars: 0 | forks: 1 | updated 2026-03-13T11:32:39Z | pushed 2026-03-14T15:26:08Z
yasuoz99/SQL_Hunter
SQL_Hunter 是一款面向 Web 应用安全测试场景的 Burp Suite 扩展插件，专注于 SQL 注入风险的辅助识别、请求分析与检测流程增强。插件可结合 Burp 的代理、重放与扫描能力，对目标请求中的参数位置、输入特征及响应差异进行自动化分析，帮助安全测试人员快速发现潜在的 SQL 注入风险点，提升漏洞验证效率与测试覆盖范围。该插件适用于常规渗透测试、安全评估、代码上线前验证及攻防演练中的 Web 数据交互安全检查场景 |...
kevinyang11103/vquvJvcbvo
【Java计算机毕业设计分享】基于Python的终端防护对抗后渗透框架设计与实现，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-03-13T16:05:10Z | pushed 2026-03-13T16:05:06Z
Ech0Dev0/Penetration_test_Resources
网络安全、渗透测试相关资源收集整理 | stars: 4 | forks: 0 | updated 2026-03-14T03:16:07Z | pushed 2026-03-14T03:16:04Z
lzy756/pen-agents
基于大语言模型的多Agent协作渗透测试框架 | Multi-Agent Penetration Testing Framework powered by LLM | language: Python | stars: 0 | forks: 0 | updated 2026-03-14T03:23:39Z | pushed 2026-03-14T03:23:36Z
tldrw/scoop-security
Scoop bucket for Penetration Testing and Cybersecurity related tools. 用于渗透测试和网络安全相关工具下载、安装和自动更新的Scoop软件仓库。 | topics: cybersecurity, cybersecurity-tools, pentesting, pentesting-tools, scoop, scoop-bucket, security, securi...
NN-Opencyber/niuniu-blog
牛牛的博客 - 攻防渗透大师的网络安全日志 | stars: 0 | forks: 0 | updated 2026-03-14T13:32:58Z | pushed 2026-03-19T13:00:25Z
hyhforevertop/Mazesec-writeups
Mazesec团队自制靶机题解仓库，专注于分享HackMyVM平台的自制靶机PDF题解，涵盖渗透测试实战与安全研究，供学习交流使用。 | topics: ctf, cybersecurity, hackmyvm, infosec, penetration-testing, red-team, writeups | language: HTML | stars: 107 | forks: 15 | updated 2026-08-11T0...
3886370410/IUgbWCvAvI
【Java计算机毕业设计分享】基于Shiro框架的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-03-14T17:28:05Z | pushed 2026-03-14T17:28:02Z
enh123/DirectoryFuzz
渗透测试目录扫描字典 | language: Python | stars: 69 | forks: 9 | updated 2026-03-18T13:14:25Z | pushed 2026-03-18T13:14:21Z