Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
George0Papasotiriou/6.-CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write
language: C
George0Papasotiriou/CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection
language: Python
George0Papasotiriou/CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing
language: HTML
George0Papasotiriou/CVE-2026-9999-Serverless-Event-Injection-to-Code-Overwrite
language: Python
George0Papasotiriou/CVE-2026-9999-Serverless-Function-Event-Injection-Path-Traversal-Code-Overwrite
language: Python
George0Papasotiriou/CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation
language: Python
George0Papasotiriou/CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape
A prompt injection in a code‑review bot that executes AI‑generated fixes in a sandbox. The sandbox uses a blacklist to prevent dangerous commands, but a polyglot payload bypasses the filter and achieves remote code execu...
TrevoCastles/CVE-2026-31431-copy-fail
language: Python
MonkeySeC-sys/Kangaroo
Kangaroo is a exploit built on CVE-2026-32746. i made this for security researchers, IT professionals, DevOps. so they can understand it better. DO NOT USE THIS FOR ILLEGAL USE, IF YOU DO... YOU MAY BE SUBJECT TO ARREST,...
theopaid/CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field
Security Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft (openclaw-dashboard)
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
accelerator-s/ai_ids_infra
language: Python | stars: 5 | forks: 1 | updated 2026-07-31T05:59:57Z | pushed 2026-07-31T05:59:41Z
jackylawck/jo-ehrp-onboarding-assistant
An AI-powered onboarding automation tool for Jumbo Orient, parsing multi-page scanned forms & IDs with multimodal OCR, source grounding, and JO eHRP schema mapping under ISO 42001 & PDPO compliance. | topics: hr-tech, ju...
G3G4X5X6/book-ptes
渗透测试执行标准（经典） | language: CSS | stars: 0 | forks: 0 | updated 2026-07-29T01:35:51Z | pushed 2026-07-29T01:35:46Z
anye1991/ChainForge
渗透工具 | language: Python | stars: 0 | forks: 0 | updated 2026-07-29T01:46:37Z | pushed 2026-07-29T01:46:33Z
MyIsmeee/YunSee-tool
渗透常用toolGUI集成 | language: CSS | stars: 1 | forks: 0 | updated 2026-07-29T05:17:40Z | pushed 2026-07-29T05:17:22Z
crailstubler-wq/ai-wechat-workflow
AI 驱动的公众号运营工作流方法论：v7.4 八步主流程 + 增强版多 Agent 协作（TeamCreate + 对抗式红队审查 + 主编复核）+ 专家团架构实战 + ADLR 文档审查 + 经验沉淀法 | stars: 2 | forks: 0 | updated 2026-07-30T03:35:34Z | pushed 2026-07-30T03:35:24Z
hello-world-3511/SilverFox-C2
多协议、跨平台、插件化 C2 平台 | Go + C | 红队安全研究 | language: HTML | stars: 1 | forks: 0 | updated 2026-07-29T05:16:32Z | pushed 2026-07-28T18:02:13Z
jingminglong/autopen-db-landing-page
汽车渗透门户 | language: TypeScript | stars: 0 | forks: 0 | updated 2026-07-28T07:17:49Z | pushed 2026-07-28T07:17:14Z
MWDLH/pentest-field-operator
给 AI Agent 的渗透测试实战操作系统——基于证据决策，像高级工程师一样思考，而不是机械执行工具清单 | language: Python | stars: 2 | forks: 0 | updated 2026-07-30T08:24:33Z | pushed 2026-07-30T08:22:36Z
WWindy/LARLPT-An-LLM-Augmented-Reinforcement-Learning-Framework-for-Autonomous-Penetration-Testing
面向自动化渗透测试的双层增强学习框架 | stars: 0 | forks: 0 | updated 2026-07-28T10:11:19Z | pushed 2026-07-28T10:11:00Z