Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
mbanyamer/CVE-2026-27574-OneUptime-RCE
language: Python
ITATA93/G_Analizador_RCE
Antigravity satellite project — migrated from AG_* with GEN_OS mirror | language: Python
DevTools should change default session cookie name to be unique per port
**Problem**
Session cookies are scoped by host and path only, not by port. Running multiple apps on localhost on different ports (e.g. 8080 and 8081) shares the same cookies, so one app’s session cookie can override the...
hungnqdz/CVE-2026-26746
b1gchoi/CVE-2026-2441_POC
language: HTML
Caused by: java.lang.ClassNotFoundException: org.apache.catalina.core.ApplicationContext$DispatchData
Spring Boot 4.0.3 runnable JAR on:
```
openjdk 25.0.1 2025-10-21
OpenJDK Runtime Environment (build 25.0.1+8-27)
OpenJDK 64-Bit Server VM (build 25.0.1+8-27, mixed mode, sharing)
```
in some circumstances throws:
```
...
NAP3XD/CVE-2023-33869-RCE-PoC
Remote Code Execution (RCE) proof of concept on a enphase solar inverter | language: Python
maycuatroi1/dbs401-cve-lab
DBS401 CVE Lab: SQL Injection → RCE via PostgreSQL COPY FROM PROGRAM (educational) | language: Python
Ahmed-makawi/AD_Foothold_Misconfigs_Cheatsheet
A step-by-step reproduction guide for common Active Directory Foothold misconfigurations used in penetration testing labs. Covers AS-REP Roasting, Kerberoasting, Password in Description, SMB Null Sessions, LLMNR Poisonin...
vmpprotect/DLink-RCE
An authenticated command injection vulnerability exists in the D-Link DVG-N5402GF router. The web-based diagnostic Ping Test functionality fails to properly sanitize user input in the Ping Destination field. An authentic...
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。