Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
portbuster1337/CVE-2026-33712
CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch | topics: cve, cve-2026-33712, exploit, poc, security, ssrf, typebot | language: Python
learner202649/CVE-2026-47102-PoC
The code for personally reproducing the corresponding vulnerability | language: Shell
totekuh/CVE-2026-36356
CVE-2026-36356: MeiG Smart FORGE_SLT711 GoAhead - Unauthenticated OS Command Injection (RCE as root) | language: Python
sermikr0/CVE-2026-38427
CVE-2026-38427 — Integer Wraparound → Heap Buffer Overflow in Tasmota fetch_jpg() uint16_t (Tasmota <= 15.3.0.3) | topics: cve, esp32, heap-overflow, integer-overflow, iot, security, tasmota, vulnerability | language: Py...
sermikr0/CVE-2026-38426
CVE-2026-38426 — strcpy() Stack Buffer Overflow in Tasmota fetch_jpg() boundary[40] (Tasmota <= 15.3.0.3) | topics: buffer-overflow, cve, esp32, iot, security, strcpy, tasmota, vulnerability
sermikr0/CVE-2026-38422
CVE-2026-38422 — Remote Code Execution via Combined Buffer Overflows in Tasmota fetch_jpg() (Tasmota <= 15.3.0.3) | topics: buffer-overflow, cve, esp32, iot, rce, security, tasmota, vulnerability
learner202649/CVE-2026-47101-PoC
The code for personally reproducing the corresponding vulnerability | language: Shell
kx00007/CVE-2026-35196
Second CVE still Remote Code Execution
tstephens1080/palo-alto-cve-2026-0265-checker
Python script to sweep a fleet of Palo Alto firewalls and Panoramas via SSH, check PAN-OS version against CVE-2026-0265 (Authentication Bypass via Cloud Authentication Service), detect whether CAS is actually configured,...
xShadow-Here/CVE-2026-4885
Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload → RCE | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
ryanliupie/Detection-Engineering
Personal Notes on Security (DFIR) | stars: 0 | forks: 0 | updated 2026-03-16T01:19:23Z | pushed 2026-03-16T01:18:52Z
redzeptech/bozkurt-izi-main
Modular Windows DFIR Framework for artifact analysis, timeline reconstruction, and automated incident response. Specializes in RDP forensics, normalized event correlation (JSONL), and integrity-verified evidence packagin...
LETHAL-FORENSICS/macos-collector
macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR | topics: apple, dfir, dfir-tools, digital-forensics, forensic-tools, incident-response, macos | language: Shell | stars: 37 | forks: 3 | update...
reuteras/dfirws
Do DFIR work in a Windows Sandbox | topics: malware-analysis, powershell, windows-sandbox | language: PowerShell | stars: 21 | forks: 3 | updated 2026-03-20T12:34:25Z | pushed 2026-03-20T12:34:21Z | homepage: https://reu...
jfrancci/iris-ransomwarelive-module
IrisRansomwareLive enriches DFIR-IRIS cases with real-time ransomware threat intelligence sourced from Ransomware.live. | language: Python | stars: 0 | forks: 0 | updated 2026-03-20T20:26:18Z | pushed 2026-03-20T20:26:14...
mthcht/ForensicArtifacts2DFIR-orc-config
topics: artifact, converter, dfir, forensics | language: Python | stars: 0 | forks: 0 | updated 2026-03-21T07:11:11Z | pushed 2026-03-21T07:11:08Z
shakibul742/DFIR-Journey
My journey learning Digital Forensics & Incident Response (DFIR) — daily notes, tools, labs, and investigations. | stars: 0 | forks: 0 | updated 2026-03-21T17:33:44Z | pushed 2026-03-21T17:33:41Z
notanonymouse/Digital-Forensics-CTI-Library
A collection of my research, checklists and learning resources for DFIR and Threat Intelligence. | stars: 0 | forks: 0 | updated 2026-03-16T07:35:19Z | pushed 2026-03-16T07:35:15Z
valITino/dfireballz
AI-native digital forensics & cybercrime investigation platform. 7 MCP servers (Volatility3, Ghidra, Wireshark, OSINT, threat-intel & more) orchestrated by Claude, ChatGPT, or Ollama — fully containerized, chain-of-custo...
glantheman/GhostLens
A Windows forensic triage tool that spins up a local web dashboard on a potentially compromised host. Designed for IR first-responders who need a fast "first aid" assessment, not a replacement for enterprise DFIR suites,...