Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
abraxas/CVE-2026-45140
CVE-2026-45140 - chamilo - Critical 9.8 - Unauthenticated POST /plugin/CStudio/editor/import-project... - Remote Code Execution | language: Python
abraxas/CVE-2026-75827
CVE-2026-75827 - getgrav - High 8.8 - Unauthenticated GET /poc-form - Arbitrary File Write | language: Python
abraxas/CVE-2026-82226
CVE-2026-82226 - Tickera - Critical 9.8 - Unauthenticated POST /cart/ - PHP Object Injection | language: Python
abraxas/CVE-2026-84753
CVE-2026-84753 - WPFunnels - Critical 9.8 - Unauthenticated POST /?rest_route=/mint-mail/v1/mint-form-... - PHP Object Injection | language: Python
ghoxtbyte/CVE-2026-18464
Security advisory and research notes for CVE-2026-18464 affecting the WP Maps Pro WordPress plugin. | topics: cve, cve-2026-18464, cwe-400, cybersecurity, denial-of-service, dos, security-research, vulnerability-research...
ghoxtbyte/CVE-2026-16265
Security advisory and research notes for CVE-2026-16265 affecting the WP Maps WordPress plugin. | topics: cve, cve-2026-16265, cwe-400, cybersecurity, denial-of-service, dos, security-research, vulnerability-research, we...
arvindear/wp2shell-PoC
CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept | topics: cve-2026-60137, cve-2026-63030, wp2shell, wp2shell-exploit, wp2shell-poc | language: Python
abraxas/CVE-2026-77991
CVE-2026-77991 - joomlaeventmanager.net - Critical - Privileged POST /administrator/index.php - Remote Code Execution | language: Python
yzy0okrkv1hngo0r/CVE-2026-55781-poc
Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field. | language: Python
Minime794/copyfail
Copy-Fail-Exploit-CVE-2026-31431 | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Github推送中心
创建者: LJunP
故障诊断与受控处置 Agent 平台：三段分离让绕过 Policy 在类型系统层面不成立；M0–M8 全交付，六轮冻结评测
Github推送中心
创建者: wzmwayne
抖音 Web 访客凭据（ttwid / UIFID_TEMP）的组装与校验：ttwid 走公开注册端点，UIFID_TEMP 手工获取；不包含任何风控绕过实现
Github推送中心
创建者: kali0914
网络安全空间
Github推送中心
创建者: joolan
轻量级**多协议监控系统**（HTTP / Ping / TCP / SSH / Telnet / FTP / VNC / MySQL / PostgreSQL / Redis / Memcached / MongoDB / ZooKeeper / AMQP / MQTT），无需安装代理。支持登录链执行、变量系统（支持连字符变量名）、SSL证书检测、域名证书管理、API签名、预请求脚本、代理设置（含连通性测试）、...
Github推送中心
创建者: bbylw
security-audit（安全审计） 一个面向编码智能体（coding-agent）的技能，能让你的智能体化身安全审计员。它通过侦察、覆盖驱动的漏洞搜寻、候选验证、结构化输出、独立记录核验，以及目标中立的报告生成，来编排多个相互隔离的智能体。
Github推送中心
创建者: Induxsoft
Entorno de alojamiento de paquetes Devkron System Foundation
Github推送中心
创建者: huxiaoyaoOh
基于 Go 标准库的高并发 HTTP 存活探测工具，专为护网红队场景设计，零依赖、单文件、跨平台
owenmao-builder/f1-racecraft
F1 Racecraft — 赛事复盘、车手数据、可视化换胎策略实验室与三维攻防演示 | language: JavaScript | stars: 0 | forks: 0 | updated 2026-09-20T04:50:02Z | pushed 2026-09-20T04:49:58Z | homepage: https://owenmao-builder.github.io/f1-racecraft/
Nolai2010/CodeDefencer-Knowledge
面向 AI Agent 与安全工程师的网络攻防知识库 + AI 生成代码安全审查 Skill（CodeDefencer Agent 知识层） | language: PowerShell | stars: 0 | forks: 0 | updated 2026-09-18T15:52:13Z | pushed 2026-09-18T15:52:09Z
pis10/agent-security-lab
开源 AI 红队靶场：在仿真业务产品中实战 Agent 攻防 | An open-source AI red-team lab for LLM agent security | topics: agent, ai-security, ctf, llm, mcp, prompt-injection, red-team, security-training, vulnerable-app | language: TypeScript | s...