Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
HORKimhab/CVE-2026-60004
CVE-2026-60004 | language: Python | homepage: https://x.com/NightRang3r/status/2082167303190241483
tc4dy/CVE-2026-61511
CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, fir...
233laoliu/mt6985-CVE-2026-43499
CVE-2026-43499 exploit adapter for MT6985 MediaTek Dimensity 9300 (vivo PD2241) | language: Python
777erp/CVE-2026-49176_BOF
CVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session) | language: C++
neebuchesno1/CVE-2026-54121
codeb0ssx/Ultimate-CVE-2026-61511
vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execut...
codeb0ssx/-Ultimate-CVE-2026-61511
vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execut...
extratao/CVE-2026-51302-PoC
Clickbait. The CVE is AI slop.
theopaid/CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat
Security Advisory: Unchecked Room Lookup Leads to Server Crash (Let's Chat)
theopaid/CVE-2026-66750-Insufficient-Access-Controls-Allow-for-Unauthorized-File-Downloads-Let-s-Chat
Security Advisory: Insufficient Access Controls Allow for Unauthorized File Downloads (Let's Chat)
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
APK爆毒免杀处理方案 -
创建者: scdnai
APK爆毒免杀处理方案 -
AI渗透测试信息收集 Agent，基于 LangGraph 状态驱动工作流，支持自然语言对话和 CLI 直扫。集成被动信息收集、主动扫描、NVD/CVE 向量知识库、漏洞匹配与 Markdown 报告生成，支持环境自检、缓存管理和快速同步 CVE 数据。
创建者: wnm795
AI渗透测试信息收集 Agent，基于 LangGraph 状态驱动工作流，支持自然语言对话和 CLI 直扫。集成被动信息收集、主动扫描、NVD/CVE 向量知识库、漏洞匹配与 Markdown 报告生成，支持环境自检、缓存管理和快速同步 CVE 数据。
AI-SAST: AI自动扫描漏洞
创建者: pqfhappy
AI-SAST: AI自动扫描漏洞
Pallas Bot 4.0 官方扩展：MAA 远控
创建者: PallasBot
Pallas Bot 4.0 官方扩展：MAA 远控
窗帘行业每日情报 Skill：行业知识、报告、热点、竞品、供应链与招投标信息收集，自动生成中文 PDF。
创建者: wl13643464077-dev
窗帘行业每日情报 Skill：行业知识、报告、热点、竞品、供应链与招投标信息收集，自动生成中文 PDF。
安全漏洞审计报告集 | Security Vulnerability Assessment Reports
创建者: hackliu
安全漏洞审计报告集 | Security Vulnerability Assessment Reports
MintKangaroo/Cyber-Offensive-and-Defensive-Exercise
공방(攻防) 통합 사이버 레인지 — 11개 ICS/OT 섹터 디지털 트윈, EDR/SIEM, 69 CTF 챌린지, 다중 팀 대회 운영(Range/Match 격리·초기화·안전통제) | topics: blue-team, ctf, cyber-range, ics-security, mitre-attack, ot-security, purple-team, red-team, security-training...
zzzjiushi/web_scanner
一个轻量级模块化 Web 漏洞扫描器（DAST），实现了 SQL 注入,XSS,命令注入等诸多漏洞的 自动化检测，具备可扩展的插件化架构。 | language: Python | stars: 0 | forks: 0 | updated 2026-07-16T09:57:57Z | pushed 2026-07-16T09:57:45Z
gshhwht/python-security-scanner
基于python开发的漏洞扫描小工具 | language: Python | stars: 1 | forks: 0 | updated 2026-07-19T05:10:46Z | pushed 2026-07-19T05:01:59Z
gutddts/SentinelScan
🔍 全栈漏洞扫描管理平台 — React + FastAPI，支持端口扫描/HTTP头检测/SSL验证/漏洞检测，可视化仪表盘与PDF报告 | language: TypeScript | stars: 1 | forks: 0 | updated 2026-07-21T10:20:16Z | pushed 2026-07-21T09:55:22Z