Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
joshuavanderpoll/CVE-2026-3891
Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload (CVE-2026-3891) PoC | topics: cve, cve-2026-3891, exploit, exploits, pentest-tool, pentesting, python, rce, security, security-tools, vulnerabilities, ...
otuva/CVE-2026-29000
language: Python
Chromium: CVE-2026-3942 Incorrect security UI in PictureInPicture
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3941 Insufficient policy enforcement in DevTools
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3940 Insufficient policy enforcement in DevTools
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3939 Use after free in WebView
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3938 Insufficient policy enforcement in Clipboard
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3937 Incorrect security UI in Downloads
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3936 Use after free in WebView
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3935 Incorrect security UI in WebAppInstalls
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
YingxueSec/Floweye-yyyxxx.cc
FlowEye（流量之眼） 是一款专为安全测试人员打造的 Web 化被动漏洞扫描平台。通过与 Burp Suite 无缝集成，FlowEye 能够实时接收并分析 HTTP 流量，自动进行多维度漏洞检测，帮助安全研究人员高效发现 Web 应用安全风险。 | stars: 78 | forks: 5 | updated 2026-03-16T01:29:43Z | pushed 2026-02-10T08:35:51Z
ctkqiang/FirmwareVuln
固件漏洞扫描器是一个用 C 语言和 GTK+3 开发的嵌入式设备固件转储与漏洞扫描工具。目标是支持多种设备（Arduino 与非 Arduino）的固件提取，并集成静态/动态分析模块以检测已知漏洞。 | topics: arduino, c, embedded, embedded-systems, ft232h | language: C | stars: 1 | forks: 0 | updated 2026-03-08T13:37:...
zmh2000829/vul_test
漏洞扫描测试靶场 | language: C | stars: 0 | forks: 0 | updated 2026-03-09T11:47:59Z | pushed 2026-03-17T15:44:07Z
Y5neKO/ClosureVulnScanner
基于Python的Web综合漏洞扫描器. | language: Python | stars: 57 | forks: 2 | updated 2026-03-10T01:27:45Z | pushed 2026-03-10T01:27:42Z
zzmlb/secgate
One-command Linux server security gateway: auth gateway + attack dashboard + vulnerability scanner + AI assistant. 一条命令部署的 Linux 服务器安全网关：认证网关 + 攻击看板 + 漏洞扫描 + AI 助手 | topics: ai-security, authentication, cybersecurity, de...
cirosantilli/china-dictatroship-7
反中共政治宣传库。Anti Chinese government propaganda. https://github.com/cirosantilli/china-dictatorship 的备份backup. 住在中国真名用户的网友请别给星星，不然你要被警察请喝茶。常见问答集，新闻集和饭店和音乐建议。卐习万岁卐。冠状病毒审查郝海东新疆改造中心六四事件法轮功 996.ICU709大抓捕巴拿马文件邓家贵低端人口西藏骚乱。Friends ...
xiguayiqiu/GYscan
GYscan是一款基于Go语言开发的现代化综合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。 | topics: golang, gyscan, hydra, kali, meidusha, sqlmap | stars: 85 | forks: 12 | updated 2026-08-02T05:09...
youki992/VscanPlus
[VscanPlus内外网漏洞扫描工具]已更新HW热门漏洞检测POC。基于veo师傅的漏扫工具vscan二次开发的版本，端口扫描、指纹检测、目录fuzz、漏洞扫描功能工具，批量快速检测网站安全隐患。An open-source, cross-platform website vulnerability scanning tool that helps you quickly detect website security vulnera...
laolaohe/s1mple-web-vuln-scanner
实现一个 基础Web漏洞扫描器，可以检测： SQL Injection XSS Open Redirect Sensitive Information Leak HTTP Security Headers | language: Python | stars: 0 | forks: 0 | updated 2026-03-11T03:22:19Z | pushed 2026-03-11T03:22:16Z
fxa-2013/vulnerabilities_scan
梦鉴-网络安全评估系统，Mj_scan是一款强大的多功能漏扫系统，包括资产管理、端口扫描、指纹探测、漏洞扫描、密码爆破等功能，具备强大的指纹库和漏洞库 | stars: 14 | forks: 0 | updated 2026-07-30T01:12:02Z | pushed 2026-07-30T01:11:58Z