Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
AVideo has SSRF in Scheduler Plugin via callbackURL Missing `isSSRFSafeURL()` Validation
CVE-2026-33237；8879002354c6b889065193a4fd3d3897
Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SSRF (Server Side Request Forgery) attacks and obtain u
CVE-2026-3511；680022b79b0768a4912e85b2525b0ac3；Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SSRF (Se...
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all versions up to, and including, 1.6.10.0 due to insuffic
CVE-2026-3658；8ded44e20bcc2297a598f2d06263e59b；The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all versions...
XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack. In the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then the new value will be written at locatio
CVE-2006-10003；08a629c1422d73a81d8a1249882c0138；XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack. In the case (stackptr == stacksize - 1), the stack will NOT be expande...
XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes. A :utf8 PerlIO layer, parse_stream() in Expat.xs could overflow the
CVE-2006-10002；7e0e13384af53badb7d07244a054080a；XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes. A :utf8 PerlIO laye...
Improper Authentication vulnerability in Secomea GateManager (webserver modules) allows Authentication Bypass.This issue affects GateManager: 11.4;0.
CVE-2025-14716；35ec7add9320964b52b5d1b8834953cf
lennertdefauw/CVE-2026-24291
Windows privilege escalation using RegPwn | language: C#
LennertDefauw1/CVE-2026-24291
Windows privilege escalation | language: C#
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Howard Website LLMs.Txt allows Reflected XSS.This issue affects Website LLMs.Txt: from n/a through 8.2.6.
CVE-2026-27068；0a13942aa66cbf0e938e4437849be84f
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPEverest Everest Forms Pro allows Stored XSS.This issue affects Everest Forms Pro: from n/a through 1.9.10.
CVE-2026-27070；635c70af29c31cbd4db98a13f8407c43
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Nu11ified/fivemtotal
Virus and malware detection for FiveM | language: TypeScript | stars: 0 | forks: 0 | updated 2026-03-16T13:06:54Z | pushed 2026-03-16T13:06:45Z
Herimnx/Exe-To-Base64-ShellCode-Convert
Hidden malware uses techniques like UAC bypass and antivirus bypass to avoid detection. Crypters and shellcode loaders help deploy FUD payloads, while memory exclusion ensures smooth execution without interference. | top...
mabt/an4scan
Magento 2 Malware Scanner - Detect skimmers, backdoors, webshells, DB injections and suspicious files | language: Python | stars: 0 | forks: 1 | updated 2026-03-16T13:11:37Z | pushed 2026-03-16T13:11:33Z
Do-Bach-2006/malware-detection-tools
tools to detect malwares. Using for lab and training purpose | language: Python | stars: 0 | forks: 0 | updated 2026-03-16T13:12:27Z | pushed 2026-03-16T13:12:23Z
romainmarcoux/malicious-hash
Aggregation of lists of malicious hashes of malware that can be integrated into FortiGate firewalls and other products. | topics: blocklist, blocklists, firewall, fortigate, fortinet, malware, malware-protection | stars:...
kasuncsb/Live-Malware-DB
A collection of latest malware samples | topics: malware, malware-analysis, malware-research, malware-sample | language: Python | stars: 1 | forks: 0 | updated 2026-03-18T07:11:49Z | pushed 2026-03-18T07:11:45Z
Lamecknshimbi/MalNotch_Website
🌐 Build and manage a secure website for real-time malware detection and analysis with MalNotch_Website. | topics: css-lang, css-language, flowerednotch, flowerednotch-development, flowerednotch-project, flowerednotch-web...
masteribro/dynamic-malware-detection
A behavioral-based malware analysis tool that monitors and classifies program activities in real-time using sandboxing techniques. | language: Python | stars: 0 | forks: 0 | updated 2026-03-16T13:21:31Z | pushed 2026-03-...
MARCELOFF1010/ByteFence-Anti-Malware-No-Trial
🛡️ Detect and remove malware on Windows systems with ByteFence Anti-Malware for enhanced security and stable operation. | topics: antimalware-for-windows-pc, bytefence-anti-malware-project, bytefence-anti-malware-windows...
ahandev10/ESET-Internet-Security-No-Trial
🛡️ Protect your Windows devices with ESET Internet Security, offering real-time malware detection, network monitoring, and robust privacy features. | topics: eset-antivirus-for-windows, eset-internet-security-antivirus-f...