Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
p3Nt3st3r-sTAr/QinglongPanels-RCE
language: Python
Vlangf/VulnAPI
Test vulnerable web app with 12 intentional security flaws (SQLi, XSS, RCE, SSTI, XXE, etc.) and 9 API types (GraphQL, gRPC, REST, SOAP, OData, JSON-RPC, XML-RPC, WebSocket, WebDAV) for security testing | language: Pytho...
puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE
this is a metasploit exploit module for CVE-2024-25096 and CVE-2023-3452 | language: Ruby
Potential typo in Spring Boot 4.1.0 Release Notes
I noticed something that looks a little funny in the dependency upgrades section of the Spring Boot 4.1.0 [release notes](https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-4.1.0-M3-Release-Notes).
> Spring...
moltengama/CVE-2026-22686-RemoteCodeExecution-RCE-PoC
language: Python
rce/unifand
language: Rust
Dev tools causes misconfigured command-line application to exit with 0
I have a really simple spring application that's misconfigured:
```java
@SpringBootApplication()
public class SimpleApplication implements CommandLineRunner {
public static void main(String[] args) {
v...
Jvr2022/CVE-2026-29786
PoC for CVE-2026-29786 demonstrating a node-tar hardlink path traversal that allows overwriting files outside the extraction directory. | language: JavaScript
0xPreDa/Symfony-RCE
Little App to exploit Symfony RCE easily | language: Python
0xAshwesker/CVE-2026-21858
CVE-2026-21858
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。