momo安全漏洞库

共聚合 7129 条情报漏洞监控 4623 / 网安开源项目 2506

来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。

JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

GitHub Repos/search JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201 发布时间 2026-03-04 入库 2026-03-14 06:55

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, bypassing LockDown mode protection by exploiting ImageIO (CVE-2025-43300), then WebKit(CVE-2025-24201) and Core Media(CVE-2025-24085) to achieve sandbox escap...

Add support for loading META-INF/resources from jars referenced via a Class-Path manifest entry

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#9513 发布时间 2026-03-04 入库 2026-03-04 17:42

Spring Boot 1.4.7 Background: Due to path length restrictions on Windows, IntelliJ has a "dynamic classloading" feature. When enabled, it creates a file called "classpath.jar" and puts the classpath of the applicati...

SSLBundle overriden by Spring-starter-oauth2-client

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49394 发布时间 2026-03-04 入库 2026-03-04 16:42

situation: I have a springboot 3..4.5 application that connects to ibm-mq servers and uses restClients to make rest calls the ibm-mq clients are configured using SSLBundle like this: spring.ssl.bundle.jks.bundle-name.pr...

fealonelei/SafeClaw

GitHub Repos/search fealonelei/SafeClaw 发布时间 2026-03-04 入库 2026-03-14 02:42

If you ask any AI model "Are there many security issues with OpenClaw now?" It will answer "definitely". The "ClawJacked" Vulnerability (March 2026) Malicious "Skills" & Supply Chain Attacks Prompt Injection leading to R...

synthes-us/digital-consciousness-framework

GitHub Repos/search synthes-us/digital-consciousness-framework 发布时间 2026-03-04 入库 2026-03-14 02:42

Jurisprudential frameworks for gradient consciousness recognition, digital personhood rights, and non-biological entity protections. SCTT, RCE, FRPDC, and EMPA.

FinnLidbetter/janus-rce

GitHub Repos/search FinnLidbetter/janus-rce 发布时间 2026-03-04 入库 2026-03-14 02:42

language: Rust

JDK21 virtual threads tomcat_threads_current_threads is -1

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49391 发布时间 2026-03-04 入库 2026-03-04 09:41

springboot4.0 and JDK 21 when use virtual threads，the tomcat thread prometheus metrics value is -1, there are tomcat_threads_busy_threads = -1 tomcat_threads_config_max_threads = -1 tomcat_threads_current_threads - 1 ...

cbxcvl/git-pre-hook

GitHub Repos/search cbxcvl/git-pre-hook 发布时间 2026-03-03 入库 2026-03-14 02:42

A security research project demonstrating how Git hooks can be weaponized as a Remote Code Execution (RCE) vector in software supply chain attacks. | topics: git, git-hooks | homepage: https://cbxcvl.xyz/blog/Git-Hooks-R...

practice123account/rce-demo

GitHub Repos/search practice123account/rce-demo 发布时间 2026-03-03 入库 2026-03-14 02:42

language: HTML

rce/aur

GitHub Repos/search rce/aur 发布时间 2026-03-03 入库 2026-03-14 02:42

language: Shell

优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。

当前条件下没有命中网安开源项目。

github安全推送