Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
nafiez/Metasploit-CVE-2026-54121-Certighost
A Metasploit auxiliary module that escalates from any low-privileged domain user to full domain compromise by abusing the AD CS enrollment "chase" fallback. The CA can be coerced into authenticating back to attacker-cont...
Chromium: CVE-2026-17719 Use after free in Input
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17723 Use after free in Media
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17752 Use after free in Views
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17758 Heap buffer overflow in Dawn
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17809 Insufficient validation of untrusted input in Extensions
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17810 Uninitialized Use in Dawn
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17812 Inappropriate implementation in DigitalCredentials
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17819 Inappropriate implementation in WebAppInstalls
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17822 Inappropriate implementation in Chrome for iOS
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
项目理解与技术响应总体方案:深刻剖析业主单位的核心诉求、整体技术架构设计与重点难点解决方案。 废标条款预警与正偏离优势分析:列举废标项风险排查清单(星号条款*),并提炼 3-5 项形成技术与商务正偏离的分数加分点。 项目实施进度与质量售后保障:给出项目甘特图里程碑规划、质量管理体系 (ISO9001/CMMI) 及 7x24 售后维保响应机制。 项目团队配备与应急响应承诺:提供拟派项目经理及核心技术团队资质履历,并附带突发状况下应急救援与兜底承诺。
创建者: WT-Agent
项目理解与技术响应总体方案:深刻剖析业主单位的核心诉求、整体技术架构设计与重点难点解决方案。 废标条款预警与正偏离优势分析:列举废标项风险排查清单(星号条款*),并提炼 3-5 项形成技术与商务正偏离的分数加分点。 项目实施进度与质量售后保障:给出项目甘特图里程碑规划、质量管理体系 (ISO9001/CMMI) 及 7x24 售后维保响应机制。 项目团队配备与应急响应承诺:提供拟派项目经理及核心技术团队资质履...
法律事实梳理与适用法条:归纳法律案情核心事实,精准列举适用的具体法律法规及相关司法解释条文。 法律风险评估与合规漏洞:深入剖析潜在的法律诉讼风险、违约责任、举证隐患及合同防范漏洞。 维权诉讼策略与证据收集清单:提供清晰的谈判诉讼维权步骤,列出关键证据链收集指南与管辖法院建议。 合同条款修改与免责防范:给出具体的合同条款重写修改建议、免责声明及争议解决最佳预防机制。
创建者: WT-Agent
法律事实梳理与适用法条:归纳法律案情核心事实,精准列举适用的具体法律法规及相关司法解释条文。 法律风险评估与合规漏洞:深入剖析潜在的法律诉讼风险、违约责任、举证隐患及合同防范漏洞。 维权诉讼策略与证据收集清单:提供清晰的谈判诉讼维权步骤,列出关键证据链收集指南与管辖法院建议。 合同条款修改与免责防范:给出具体的合同条款重写修改建议、免责声明及争议解决最佳预防机制。
蜜罐记账公开体验站
创建者: jay-aviation
蜜罐记账公开体验站
纯前端节点/订阅分流预处理工具:套用「绕过大陆」模板,一键导出 Clash Meta / sing-box / Xray 配置。无后端,数据只留在浏览器。
创建者: yzhiheng05
纯前端节点/订阅分流预处理工具:套用「绕过大陆」模板,一键导出 Clash Meta / sing-box / Xray 配置。无后端,数据只留在浏览器。
🎯
创建者: Chris-biu
XRED.TEAM
创建者: 1y0n
Oktos 是一款红队后渗透平台,作为
安全守护者技能库:代码审计、密钥检测、依赖扫描、认证审查
创建者: skills-repo
安全守护者技能库:代码审计、密钥检测、依赖扫描、认证审查
AI 安全与对抗可视化实验室 — 对抗样本/红队/越狱/偏见/水印/护栏等 8 个交互式模块
创建者: wangzifan396-wzf
AI 安全与对抗可视化实验室 — 对抗样本/红队/越狱/偏见/水印/护栏等 8 个交互式模块
一个会操作浏览器、会抓包改包、会按照方法论执行、会自己验证漏洞的自动化渗透测试 Agent
创建者: yzdily
一个会操作浏览器、会抓包改包、会按照方法论执行、会自己验证漏洞的自动化渗透测试 Agent
漏洞更新
创建者: xiaoqi20231006
漏洞更新