Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
LazyTitan33/DNS-Exfilnspector
Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator | topics: blind-rce, burpsuite, burpsuite-extension, collaborator, decode, dns, exfiltration, rce | language: Pytho...
Tomcat's default max part count is too low in 4.0.x
### Description
When upgrading from Spring Boot 3.5.11 to 4.0.3, a multipart request containing multiple parts starts failing with a `413 Payload Too Large` error.
I investigated the issue and found that it can be reso...
hilwa24/CVE-2026-24061
Tell Me Root (Batch Scanning Tool for the CVE-2026-24061 Telnet Authentication Bypass) | topics: cve-2026-24061, telnetd-rce | language: Python
hilwa24/CVE-2026-23760_SmarterMail-Auth-Bypass-and-RCE
SmarterMail Auth Bypass & RCE Exploit | topics: cve-2026-23760, smartermail-auth-bypass, smartermail-rce, smartermail-vulnerable | language: Python
Multipart request fails with 413 in Spring Boot 4.0.3(not in 3.5.11): Bug, intentional change, or incorrect test implementation?
### Description
When upgrading from Spring Boot 3.5.11 to 4.0.3, a multipart request containing multiple parts starts failing with a `413 Payload Too Large` error.
I investigated the issue and found that it can be reso...
cybertechajju/CVE-2026-1357-POC
language: Python
haroohameed/rce
language: HTML
Spring Boot 3 -> 4 Migration Guide misses information on migrating properties under spring.jackson.parser
# Problem
The [Migration Guide for Spring Boot 3 to 4](https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-4.0-Migration-Guide) misses information on how to migrate properties under `spring.jackson.parser`. ...
Missing Response Headers since 4.0.3
Hi,
We updated from Spring Boot 4.0.2 to 4.0.3 and noted that suddenly response headers were missing. We used a simple demo projected created with the Spring Initializr to test this. A simple security chain adds some he...
Deprecate RootUriTemplateHandler in favor of DefaultUriBuilderFactory
`RootUriTemplateHandler` was added in Spring Boot 1.4 before `DefaultUriBuilderFactory` existed. The logic to prepend a root URL now duplicates what `DefaultUriBuilderFactory#initUriComponentsBuilder` is capable of doing...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。