momo安全漏洞库

共聚合 7054 条情报漏洞监控 4597 / 网安开源项目 2457

来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。

dxlerYT/CVE-2026-26331

GitHub Repos/search dxlerYT/CVE-2026-26331 发布时间 2026-02-22 入库 2026-03-14 02:41

Proof of Concept for an arbitrary command injection vulnerability in yt-dlp’s --netrc-cmd option (GHSA-g3gw-q23r-pgqm / CVE-2026-26331). Demonstrates shell command execution via maliciously crafted URLs in affected versi...

Add support for auto-configuring ExpressionJwtGrantedAuthoritiesConverter

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#48490 发布时间 2026-02-22 入库 2026-02-22 22:52

Currently, the auto-configured `JwtAuthenticationConverter` (defined in `OAuth2ResourceServerJwtConfiguration`) uses a `JwtGrantedAuthoritiesConverter`. It would be nice if an `ExpressionJwtGrantedAuthoritiesConverter` w...

Missing constructor for type after upgrading to Spring Boot 4.0.1

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49231 发布时间 2026-02-22 入库 2026-02-22 19:51

When selecting a record type that is mapped as JSONB (e.g. via Hibernate’s `@Type(JsonBinaryType.class))`, the following error occurs: ``` org.springframework.dao.InvalidDataAccessApiUsageException: org.hibernate.query...

hexissam/CVE-2026-1731

GitHub Repos/search hexissam/CVE-2026-1731 发布时间 2026-02-22 入库 2026-03-14 02:41

CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability | language: Python

dkstar11q/Ashwesker-CVE-2026-20045

GitHub Repos/search dkstar11q/Ashwesker-CVE-2026-20045 发布时间 2026-02-22 入库 2026-03-14 02:41

CVE-2026-20045

CsEnox/Gitlab-Redis-Deserialization-RCE

GitHub Repos/search CsEnox/Gitlab-Redis-Deserialization-RCE 发布时间 2026-02-22 入库 2026-03-14 02:42

Gitlab Deserialisation RCE through Redis Compromise | language: Ruby

bad-antics/rce-shield

GitHub Repos/search bad-antics/rce-shield 发布时间 2026-02-22 入库 2026-03-14 02:42

🛡️ RCE Shield — Remote Code Execution hardening toolkit for PC gamers. Scans game launchers, anti-cheat, mods, overlays, peripherals & network for vulnerabilities. | topics: anti-cheat, cybersecurity, ebpf, gaming-securi...

dxlerYT/CVE-2026-25731

GitHub Repos/search dxlerYT/CVE-2026-25731 发布时间 2026-02-21 入库 2026-03-14 02:41

Proof of Concept for a Server-Side Template Injection (SSTI) vulnerability in Calibre’s Templite engine (GHSA-xrh9-w7qx-3gcc). Demonstrates arbitrary Python code execution via user-supplied HTML export templates in affec...

Conflicting JDK requirements documented across different files

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49284 发布时间 2026-02-21 入库 2026-02-22 05:46

Conflicting Java version requirements across the documentation: README.adoc states "You also need JDK 25.", build-plugin documentation states Java 17 is the default compiler level, and the CLI INSTALL says JDK v1.8 or ab...

Feature: Integrate flight-recorder-starter natively in Spring Boot Actuator

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49283 发布时间 2026-02-21 入库 2026-02-22 04:46

Hello Spring Boot team :) 🎁 Enhancement It would be great if the project https://github.com/mirkosertic/flight-recorder-starter would be integrated directly as part of the Spring Boot Actuator offering, so that things ...

优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。

当前条件下没有命中网安开源项目。

github安全推送