Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Nixon-H/PHP-Unrestricted-Upload-RCE
A Critical (CVSS 10.0) RCE vulnerability in a PHP e-commerce platform. The app trusts client-side MIME types and preserves extensions during upload. Attackers can bypass checks to upload web shells, gaining full system a...
Auto-configuration overrides authorization server configuration applied by Customizer<HttpSecurity> beans
Spring Boot's auto configuration should use [`HttpSecurity.oauth2AuthorizationServer`](https://docs.spring.io/spring-security/reference/servlet/oauth2/authorization-server/getting-started.html#oauth2AuthorizationServer-d...
Z3YR0xX/CVE-2026-1560-Authenticated-Remote-Code-Execution-in-Lazy-Blocks-4.2.0
language: Python
Lingzesec/CVE-2026-24061-GUI
CVE-2026-24061 GNU Inetutils telnetd 身份验证绕过漏洞检测与利用 GUI 工具 | language: Python
yunmengya/cnnvd-bulletin-auto-submit
CNNVD漏洞通报保送自动提交脚本 | language: JavaScript
setuju/telnetd
Idk what to do here, ill edit soon, but its for the telnetd CVE-2026-24061 | language: Perl
tesweva/Nextjs-RCE-Exploit-Kit
Nextjs RCE Exploit Kit | topics: demo, nextjs-rce-exploit-kit, self | language: Go
Add logging to show the show the address and port of started gRPC server
<!--
Thanks for raising a Spring Boot issue. Please take the time to review the following
categories as some of them do not apply here.
🙅 "Please DO NOT Raise an Issue" Cases
- Question
STOP!! Please ask questions about...
OAuth2AuthorizationServerWebSecurityConfiguration should use HttpSecurity.oauth2AuthorizationServer
Spring Boot's auto configuration should use [`HttpSecurity.oauth2AuthorizationServer`](https://docs.spring.io/spring-security/reference/servlet/oauth2/authorization-server/getting-started.html#oauth2AuthorizationServer-d...
Provide protobuf gradle plugin support
We need something like #49353 for Gradle, probably our plugin reacting to the protobuf plugin. The current start.spring.io generated config is:
```gradle
Project
plugins {
id 'java'
id 'org.springframework.boot' ver...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。