Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Chromium: CVE-2026-17930 Insufficient validation of untrusted input in Extensions
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17942 Side-channel information leakage in SVG
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17944 Inappropriate implementation in Chrome for iOS
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-17969 Inappropriate implementation in Passwords
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-18000 Insufficient policy enforcement in USB
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-18003 Inappropriate implementation in Chrome for iOS
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
5ky9uy/CVE-2026-39875-macOS-CUPS
Unprivileged user to root on macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 / 15.7.8 / 14.8.8.
nabhan-mohy/Dirty-Frag-Research-CVE-2026-43284
Comprehensive technical research on CVE-2026-43284 (Dirty Frag), including Linux kernel internals, root cause analysis, patch analysis, detection engineering, threat hunting, incident response, and Kubernetes security im...
rails/rails-forensics-CVE-2026-66066
language: Ruby
Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell
CVE-2026-63030 Exploit | by gr1tx | topics: exploit | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Catch what AI missed — real-time security for AI-generated code. Detects hallucinated packages, missing security & AI pattern errors. | AI VibeCoding 安全检测插件 — 检测幻觉依赖包、缺失安全措施、AI 常见错误模式，在 AI 生成代码时拦住漏洞。
创建者: Unclecheng-li
Catch what AI missed — real-time security for AI-generated code. Detects hallucinated packages, missing security & AI pattern errors. | AI VibeCoding 安全检测插件 — 检测幻觉依赖包、缺失安全措施、AI 常见错误模式，在 AI 生成代码时拦住漏洞。
使用Hermes AI團隊分析web code並找出對應系統漏洞全紀錄(hermes-ai-web-vuln-analysis)
创建者: jash-git
使用Hermes AI團隊分析web code並找出對應系統漏洞全紀錄(hermes-ai-web-vuln-analysis)
存储桶遍历漏洞利用工具
创建者: jdr2021
存储桶遍历漏洞利用工具
基于贝叶斯网络的网络安全态势感知研判平台，前后端分离 Vue3+FastAPI 项目
创建者: Lhb-dot
基于贝叶斯网络的网络安全态势感知研判平台，前后端分离 Vue3+FastAPI 项目
Blue-team DFIR platform for PCAP triage - YARA scanning, protocol-state attack detection, C2/webshell/miner hunting, GeoIP mapping, and AI-assisted analysis.
创建者: geezsecurity
Blue-team DFIR platform for PCAP triage - YARA scanning, protocol-state attack detection, C2/webshell/miner hunting, GeoIP mapping, and AI-assisted analysis.
opentitan漏洞测试工具
创建者: ttt1016
opentitan漏洞测试工具
🛡️
创建者: web3-ai-game
这是一个关于vulhub所有漏洞复现的文档
创建者: Charing-Men
这是一个关于vulhub所有漏洞复现的文档
这是一个关于vulhub漏洞复现的文档
创建者: Charing-Men
这是一个关于vulhub漏洞复现的文档
Minecraft局域网正版验证绕过工具
创建者: NetheritePickaxe
Minecraft局域网正版验证绕过工具