Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The "at" variant of getxattr() and listxattr() are missing from the audit read class. Calling getxattrat() or
CVE-2026-23241；e48ddd7e37f2d90749da86baf5fd24d0；In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The "at" variant of getxattr() and listxattr() are missing fro...
A flaw was found in libsoup, a library used by applications to send network requests. This vulnerability occurs because libsoup does not properly validate hostnames, allowing special characters to be injected into HTTP h
CVE-2026-3632；6b72ed0c1acdee01ef0e372cafea3e89；A flaw was found in libsoup, a library used by applications to send network requests. This vulnerability occurs because libsoup does not properly validate hostnames, allowin...
A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the `soup_message_new()` function, could inject arbitrary headers and additional request data. This vulnerability, known as CRLF (Car
CVE-2026-3633；5d4db0b2c0e16606853d560c2bb5a28c；A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the `soup_message_new()` function, could inject arbitrary headers and additional reque...
A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage Return Line Feed (CRLF) sequence due to improper input sanitization in the `soup_message_headers_se
CVE-2026-3634；32957ce382cbb6a8357c4046019c3bbf；A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage Return Line Feed (CRLF) sequence due to improper inp...
monarchfish/cve-2025-55182-poc
Proof-of-concept for CVE-2025-55182 (React2Shell): unauthenticated RCE in React Server Components / Next.js via Flight protocol deserialization. | language: TypeScript
Nothingness1312/RCE-Lab-Platform
RCE Lab Platfrom - Latihan Remote Code Execution (RCE) berbasis CTF, dengan vulnerability nyata, multi-level challange, dan setup cepat via docker | language: CSS
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
Pre-auth SSH DoS via unbounded zlib inflate
SFTP root escape via component-agnostic prefix check in ssh_sftpd
Request smuggling via first-wins Content-Length parsing in inets httpd
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
decodedjustice-design/housingtrack-scanner
Automated availability scanner for ARCH + Market Rate Housing Tracker | language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:20:23Z | pushed 2026-03-15T21:20:19Z
lecaomaia47maiaxx/scanner-b3-ia
language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:20:27Z | pushed 2026-03-15T21:20:23Z
shinf1x/perfora
Tool for cutting film strips scanned via flatbed scanner | language: Rust | stars: 0 | forks: 0 | updated 2026-03-15T21:20:38Z | pushed 2026-03-15T21:25:50Z
w20gb/binance-sideways-scanner-Vercel-feishu
language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:20:39Z | pushed 2026-03-15T21:20:36Z
crg2298/insider-form4-scanner
language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:21:12Z | pushed 2026-03-15T21:21:09Z
ddanyro/market-scanner
language: HTML | stars: 0 | forks: 0 | updated 2026-03-15T21:21:25Z | pushed 2026-03-15T21:21:21Z
probnakka-sys/futures-scanner-bot
Crypto futures scanner bot | language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:21:37Z | pushed 2026-03-15T21:21:34Z
VOVAN1980/drainshield
DrainShield — Web3 wallet approval risk scanner and revoke tool (Flutter, BSC first). | topics: bsc, crypto-security-mcp, defi, flutter, wallet-security-seeds, web | language: Dart | stars: 0 | forks: 0 | updated 2026-03...
ergon-automation-labs/ergon_email_triage
Email scanner bot for IMAP inbox pattern matching and routing | language: Elixir | stars: 0 | forks: 0 | updated 2026-03-15T21:22:47Z | pushed 2026-03-15T21:22:43Z
raouda237/budgetNah
BudgetNah is an Android app for easily managing family income and expenses. It offers a clear dashboard, transaction categorization, and a receipt scanner via camera with OCR. It also features an automatic dark mode to e...