Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
jnMetaCode/shellward
首个中文 OpenClaw 安全插件 | 身份证号/手机号/银行卡号自动保护 | 中文注入攻击检测 | 数据外泄链拦截 | 17个真实CVE漏洞库(持续更新) | 8层防御 零依赖 | topics: ai-agent, ai-security, bilingual, chinese, chinese-pii, data-protection, llm-security, openclaw, openclaw-plugin, pii-d...
DeadExpl0it/CVE-2025-12057-WordPress-Exploit-PoC
PoC for CVE-2025-12057 - Unauthenticated Arbitrary File Upload in WavePlayer WordPress plugin leading to RCE | language: Python
eeeeeeeeeevan/CVE-2026-25857
language: Python
Statmatic is a Laravel and Git powered content management system (CMS). Prior to 6.6.2, stored XSS in the control panel color mode preference allows authenticated users with control panel access to inject malicious JavaS
CVE-2026-32612；e9db9966f508b6da7060a7db060a7dee；Statmatic is a Laravel and Git powered content management system (CMS). Prior to 6.6.2, stored XSS in the control panel color mode preference allows authenticated users wit...
PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions tha
CVE-2026-32597；f0a7b5375cabed962c0efb40e72a0877；PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS to...
soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22.0.11, 23.5.3, and 25.3.0, The Fr (scalar field) types for BN254 and BLS12-381 in soroban-sdk compared values using their raw U256 representation without first
CVE-2026-32322；f5e565c5cb2ebe551df579e78721cc5a；soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22.0.11, 23.5.3, and 25.3.0, The Fr (scalar field) types for BN254 and BLS12-381 in soroban-sdk compared values us...
Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algori
CVE-2026-32320；d3b4e01ae000cfc2f2a5ddcb77c866e6；Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-len...
Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS me
CVE-2026-32319；df92465fc1ef4287fc130425761b8044；Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under ...
OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL — containing the plaintext reset token — at INFO log level, which is ena
CVE-2026-32598；9572e555b28f55b9847a1b7555fb035a；OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL — containing the plainte...
OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the Markdown viewer component renders Mermaid diagrams with securityLevel: "loose" and injects the SVG output via innerHTML. This con
CVE-2026-32308；5e0efb744b58b068a8a1e110e93d316c；OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the Markdown viewer component renders Mermaid diagrams with securityLevel: "loose" an...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。