Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Chromium: CVE-2026-3932 Insufficient policy enforcement in PDF
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3931 Heap buffer overflow in Skia
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3930 Unsafe navigation in Navigation
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3929 Side-channel information leakage in ResourceTiming
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3928 Insufficient policy enforcement in Extensions
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3927 Incorrect security UI in PictureInPicture
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3926 Out of bounds read in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3925 Incorrect security UI in LookalikeChecks
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3924 Use after free in WindowDialog
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-3923 Use after free in WebMIDI
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for mo...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Mstce/Onyx
Onyx 是一款安全测试工具集，集合多种渗透测试常用的功能和工具，赋能攻防、渗透等场景。整合空间测绘、漏洞扫描、主机探测、信息收集、小程序反编译等能力，提供一站式的渗透测试工作台，告别需要到处切换工具、网站的麻烦 | stars: 91 | forks: 3 | updated 2026-03-20T08:03:13Z | pushed 2026-01-25T10:05:31Z
hackbyteSec/Ai-Hacker-getshell
在线Ai智能漏洞扫描，提交网址或IP自动GetShell，包括有shell在线管理、poc/?day漏洞管理等诸多可视化界面。由黑客字节社区提供 | language: HTML | stars: 10 | forks: 0 | updated 2026-03-18T08:51:17Z | pushed 2026-02-09T08:12:50Z | homepage: https://scan.hackbyte.io
nexaclaw/security-scanner
🔍 安全扫描 - 漏洞扫描、风险评估、修复建议 | Nexa Claw - https://nexaclaw.cn/ | stars: 0 | forks: 0 | updated 2026-03-12T12:07:15Z | pushed 2026-03-12T12:07:12Z | homepage: https://nexaclaw.cn
ChenChen753/Nuclei_Gui
基于 PyQt5 的 Nuclei 漏洞扫描图形化工具，支持 POC 管理、FOFA/Hunter/Shodan 资产搜索、AI 辅助分析、漏洞报告生成等功能 | language: Python | stars: 38 | forks: 3 | updated 2026-03-16T06:19:52Z | pushed 2026-02-28T09:47:52Z
kevinyang11103/jtHYVrBDOR
【Python计算机毕业设计分享】基于Python的web渗透漏洞扫描工具研究与应用，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-03-12T22:49:17Z | pushed 2026-03-12T22:49:13Z
SecNN/AiScan-N
AiScan-N 来了！这是一款基于人工智能驱动的Ai自动化网络安全（运维）工具，专注于网络安全评估、漏洞扫描、运维、应急响应、渗透测试自动化，Ai大模型工具集【CLI Agent】 ，Ai驱动的安全检测技术，提升安全测试（运维）效率，专为企业和个人用户打造，尤其适合初学者（小白）快速上手使用，让你轻松迈入智能安全攻防时代！适用场景 ：如（红队演练、CTF比赛、Web应用渗透测试、内网横向移动、密码破解与暴力攻击、流量分析与威胁检测、A...
Ropemakers5302/Qinglong-RCE-Scanner
Qinglong RCE Scanner 是一个功能强大的自动化安全工具，专门用于检测和利用 Qinglong (青龙) 面板中的远程代码执行 (RCE) 漏洞。它提供全面的漏洞扫描、交互式利用以及批量检测功能 | language: Python | stars: 5 | forks: 0 | updated 2026-03-16T14:25:51Z | pushed 2026-03-02T23:45:52Z
giaoimgiao/heike-Ulrattack
ULRATTACK 是一个高自动化的网页AI Agent ，让AI思考、规划和执行任务的智能系统。通过 Docker 容器化沙箱环境，ULRATTACK 能够安全地执行从侦察、漏洞扫描、漏洞利用到后渗透攻击的全流程作。 | language: Python | stars: 22 | forks: 5 | updated 2026-07-14T08:39:28Z | pushed 2026-06-25T11:32:02Z
selinuxG/Golin
弱口令检测、 漏洞扫描、端口扫描（协议识别，组件识别）、web目录扫描、等保工具（网络安全等级保护现场测评工具）内置3级等保核查命令、基线核查工具、键盘记录器 | language: Go | stars: 1764 | forks: 258 | updated 2026-03-18T07:47:55Z | pushed 2026-02-28T06:33:38Z
kevinyang11103/xRIjCVimww
【Java计算机毕业设计分享】基于SSM的漏洞扫描器管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-03-14T16:00:25Z | pushed 2026-03-14T16:00:22Z