Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
CVE-2026-32775
plur1bu5/CVE-2025-2945-pgadmin-rce
Authenticated RCE in pgAdmin 4 (8.10–9.1) via eval() injection in the Query Tool. This is an updated PoC with compatibility fixes for pgAdmin 9.x auth changes | language: Python
cianananan/Umbraco-Template-RCE-PoC
Proof-of-concept code to exploit Umbraco CMS's template editor allowing arbitrary C# code injection. | language: C#
ather182/phantom_exploitV1
PHANTOM EXPLOIT v1.0 - Advanced penetration testing tool with zero-day exploitation, RCE, and multi-platform support (Windows/Linux/Android). Features AES encryption, anti-VM, and Telegram C2. For educational use only. C...
Chromium: CVE-2026-3909 Out of bounds write in Skia
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
zcode-r/rce-engine
language: TypeScript
HD0x01/CVE-2026-24061-NSE
The script performs a full Telnet negotiation mirroring the exact byte sequence of a real telnet -a client session. | topics: cve-2026-24061, inetutils, nmap, nse, penetration-testing, telnet, vulnerability-detection | l...
0xdeadbit/CVE-2025-50881
API SAS Use It Flow RCE
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_file permissions which allows a guest user to post files in channels where they lack upload_file permissio
CVE-2026-4265；2d5e81bb83d5b5e5a7e1c330656076ae；Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_file permissions which allows a guest user to post files in...
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker to cause a request panic via a specially crafted User
CVE-2026-25783；956f96a4343be12ed12d8fec09b5cb86；Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker to cau...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
dpopsuev/locus
Spatial context scanner — architecture graphs, dependency analysis via CLI and MCP server | language: Go | stars: 0 | forks: 0 | updated 2026-03-15T21:23:54Z | pushed 2026-03-15T21:24:34Z
mathislef34/Udemy_Formation_Scanner
language: Python | stars: 1 | forks: 0 | updated 2026-03-15T21:23:59Z | pushed 2026-03-15T21:23:56Z
mshari505/suppoer_stock_scanner
language: HTML | stars: 0 | forks: 0 | updated 2026-03-15T21:24:16Z | pushed 2026-03-15T21:24:13Z
jcongithub/momentum-scanner
language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:24:31Z | pushed 2026-03-15T21:24:27Z
brandonwise/agentwise
🛡️ Security scanner for AI agents. Finds vulnerabilities in MCP servers, agent configs, and tool setups. Written in Rust. | language: Rust | stars: 0 | forks: 0 | updated 2026-03-15T21:25:06Z | pushed 2026-03-15T21:25:02...
dannyzumwalt/job-scanner
A local-first, CLI-first job listing scanner that ingests jobs from structured sources, normalizes and deduplicates records, scores listings against your preferences, and generates ranked reports. | language: Python | st...
R3pt0rs/badDNS
This is just a list of bad sites that ask you to install "virus scanners" on your mobile device and other fun stuff like "new" flash players. | stars: 0 | forks: 0 | updated 2026-03-15T21:26:17Z | pushed 2026-03-15T21:26...
surendrababu-sec/pqc-soc-readiness
A cryptographic vulnerability scanner assessing post-quantum readiness from a SOC perspective. | stars: 0 | forks: 0 | updated 2026-03-15T21:26:26Z | pushed 2026-03-15T21:26:23Z
sittiponpu774/market-scanner-api
language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:26:38Z | pushed 2026-03-15T21:26:34Z
conceptkitchen/graded
AI Prompt Security Scanner - Trust grades for the AI age. Like restaurant health inspections for AI prompts. | language: TypeScript | stars: 0 | forks: 0 | updated 2026-03-15T21:27:03Z | pushed 2026-03-15T21:27:00Z