Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
randeepajayasekara/CVE-2026-20127
Walkthrough of the CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN from first malformed peering request to root on the management plane. | topics: authentication-bypass, cve, vulnerability
Gentle-bae/UploadRanger
Professional file upload vulnerability testing tool with 263+ bypass techniques, proxy capture, dynamic scanning（专业的文件上传漏洞检测工具，支持263+绕过技术、代理抓包、动态扫描） | language: Python
xf-uncle/CVE_monitor
监控CVE漏洞，生成CNNVD信息脚本 | language: Python
Rohitberiwala/CVE-2026-28372-telnetd-Privilege-Escalation
This Proof‑of‑Concept demonstrates a **Local Privilege Escalation** vulnerability in GNU inetutils `telnetd`. `telnetd` improperly passes client‑controlled environment variables to `login(1)`. By setting: | language: Pyt...
Rohitberiwala/SSTI-to-RCE-Python-Eval-Bypass
A Proof-of-Concept (PoC) exploit demonstrating Server-Side Template Injection (SSTI) in a Python Flask application. The exploit uses hex encoding to bypass strict regex filters and achieve Remote Code Execution (RCE) via...
Rohitberiwala/CVE-2025-60787-MotionEye-RCE
Professional PoC for CVE-2025-60787: Remote Code Execution in MotionEye (<= 0.43.1b4). This exploit demonstrates an OS Command Injection vulnerability through client-side validation bypass, allowing attackers to execute ...
SafeBreach-Labs/CVE-2026-24061
Exploitation of CVE-2026-24061 | language: Python
anpa1200/vulnerable-cloud-lab
Intentionally vulnerable GCP infrastructure for security training — Terraform deployment of DVWA, Cloud Function (SSRF/RCE), public storage bucket, overprivileged SA, and more. | language: Shell
dharna123/RCE
language: HTML
Makufff/Project-Cyber-RCE
language: TeX
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。