momo安全漏洞库

多模块数据检索平台

登录 注册
共聚合 10650 条情报 漏洞监控 6207 / 网安开源项目 4443
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
DeAurity/ghost-hoock
GhostLock stripped to one primitive: SELinux off on Galaxy A17 (BZA5) via futex PI UAF (CVE-2026-43499). No root, no cred patch, no rwforge. | language: Makefile
tc4dy/CVE-2026-82329-PoC-Exploit
🧰 CVE-2026-82329 – JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) | Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTforge, admin token, user create, mass scan, stealth, interact...
isaca0315/CVE-2026-44351-poc
language: JavaScript
isaca0315/CVE-2026-65013-BOLA-IDOR
language: JavaScript
suce0155/CVE-2026-32996
A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. | language: C#
Oscar-Collado/langflow-CVE-2026-17633-PoC
PoC for CVE-2026-17633 — Authenticated RCE in IBM Langflow OSS 1.0.0–1.10.3 via custom_component endpoint. Includes CVE-2026-17632 AST scanner bypass research. | language: Python
kurtulusakyuz/IonStack_S21
Exploit chain research targeting CVE-2026-43499 on Samsung Galaxy S21 | language: C
cflowsec/CVE-2026-12944
Langflow 1.10.0 urllib SSRF POC | topics: cve, exploit | language: Python
FUNFACTOR1/CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day
CVE-2026-82090 · CVSS 9.2 CRITICAL · 0-click stored XSS in Mozilla Pocket — all versions (v0 → v8.33.0.0) · 18-year forever-day · no patch · MITRE published
Ish3ng0m4/CVE-2026-38526-KrayinCRM
Authenticated Arbitrary File Upload leading to Remote Code Execution Technical analysis and controlled reproduction of CVE-2026-38526 in Webkul Krayin CRM 2.2.x. | language: Python
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
Github推送中心
创建者: chenlong548 DKail 是一个轻量级的本地网络安全监控系统,通过原生代码实现核心安全监控功能,无需依赖复杂的外部平台。它专注于提供实时、高效的网络安全监控能力,帮助用户及时发现和响应安全威胁。
Github推送中心
创建者: yuanguin37 GKN-Phantom 是一个面向 OpenClaw AI Agent 框架的工业级自动化渗透测试技能包。v5.0.0 配备 28 个检测模块,覆盖 38 种漏洞类型,支持 25+ 种 WAF 识别与绕过策略,20+ 条攻击链模式,在严格的 Scope Guard · Risk Gate · Rate Limiter 三重安全模型下,执行全生命周期安全验证:从零触碰被动侦察、主动资产发现、分层漏洞检测、交...
111lanyan111/ad-wazuh-siem-lab
AD Domain + Wazuh SIEM Attack Detection Lab - 攻防检测家庭实验室 | topics: active-directory, security, siem, wazuh | language: PowerShell | stars: 0 | forks: 0 | updated 2026-09-15T12:07:31Z | pushed 2026-09-15T11:16:52Z
jiapunk/hormuz-blockade
荷姆茲封鎖戰 · Hormuz Blockade — 佈雷與反艦飛彈的海峽攻防網頁遊戲 / A single-file strait-defense web game | language: HTML | stars: 0 | forks: 0 | updated 2026-09-17T04:21:23Z | pushed 2026-09-17T04:21:17Z
Ghr07h/Norns
Norns 是一套用于开放任务求解的 Agent 模式,基础 Norns Loop 基于 Claude Code Plugin 架构实现,额外提供非耦合的 Nornsd 服务、Well 客户端用于任务管理。通过 RedTeam 相关支持提供企业攻防领域的能力扩展。 | stars: 0 | forks: 0 | updated 2026-09-17T07:35:11Z | pushed 2026-09-17T07:35:07Z
icysun/AI_Pent_Bot
自主渗透解题 Agent | TSecBench 六大能力域 AI 攻防跑分 Agent(实测 21,200/23,000 = 92.17%) | language: Python | stars: 1 | forks: 0 | updated 2026-09-17T15:11:05Z | pushed 2026-09-17T08:18:35Z
WU-AetherCore/airgeddon-evil-twin-lab
Airgeddon Evil Twin Lab - WiFi安全攻防实战实验室:Evil Twin自动化钓鱼系统(Web控制台一键攻击+密码自动验证)+ 8篇详细中文教程 + 一键部署脚本。仅限授权测试与学习。 | language: Python | stars: 0 | forks: 0 | updated 2026-09-17T09:07:41Z | pushed 2026-09-17T09:07:37Z
skc-stack/ctf-platform
分散式資安 攻防演練平台 | language: PHP | stars: 0 | forks: 0 | updated 2026-09-22T03:00:34Z | pushed 2026-09-22T09:04:06Z
nsdkoo/delta-force-godot
基于 Godot 4 的俯视 2D 战术对战原型:20v20 攻防 + 票选指挥官 + 战术标记 + 据点票数结算,核心是指挥链驱动的小队 AI | language: GDScript | stars: 0 | forks: 0 | updated 2026-09-21T00:59:33Z | pushed 2026-09-21T00:59:29Z
skeleton2024/ironclad-decision-engine
对抗式理性决策引擎:递归任务拆解 + 红队审计 + 蒙特卡洛仿真 | language: Python | stars: 1 | forks: 0 | updated 2026-09-15T16:10:29Z | pushed 2026-09-15T16:10:25Z