momo安全漏洞库

共聚合 10664 条情报漏洞监控 6212 / 网安开源项目 4452

来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。

popyue/CVE-2025-47812

GitHub Repos/search popyue/CVE-2025-47812 发布时间 2026-02-22 入库 2026-03-14 02:42

RCE for WingFTP v4.7.3 | language: Python

SpringMVC nested RouterFunctions are not created properly

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49289 发布时间 2026-02-22 入库 2026-02-23 02:53

Hello! Currently, I'm migrating over the non-reactive RouterFunctions with Spring Boot 4.0.3 using this code: ```java @Bean public RouterFunction<ServerResponse> testEndpoints() { return RouterFunctions....

Outdated JDK requirement for CLI

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49284 发布时间 2026-02-22 入库 2026-02-23 00:53

Conflicting Java version requirements across the documentation: README.adoc states "You also need JDK 25.", build-plugin documentation states Java 17 is the default compiler level, and the CLI INSTALL says JDK v1.8 or ab...

parameciumzhang/Tell-Me-Root

GitHub Repos/search parameciumzhang/Tell-Me-Root 发布时间 2026-02-22 入库 2026-03-14 02:41

基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具 | language: Python

weekevy/SweetRice-CMS-1.5.1-RCE-Exploit

GitHub Repos/search 低危 weekevy/SweetRice-CMS-1.5.1-RCE-Exploit 发布时间 2026-02-22 入库 2026-03-14 02:42

SweetRice CMS 1.5.1 Authenticated RCE Exploit - Python tool exploiting file upload vulnerability in SweetRice CMS 1.5.1 leading to remote code execution. Includes reverse shell automation and full exploitation workflow. ...

dxlerYT/CVE-2026-26331

GitHub Repos/search dxlerYT/CVE-2026-26331 发布时间 2026-02-22 入库 2026-03-14 02:41

Proof of Concept for an arbitrary command injection vulnerability in yt-dlp’s --netrc-cmd option (GHSA-g3gw-q23r-pgqm / CVE-2026-26331). Demonstrates shell command execution via maliciously crafted URLs in affected versi...

Add support for auto-configuring ExpressionJwtGrantedAuthoritiesConverter

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#48490 发布时间 2026-02-22 入库 2026-02-22 22:52

Currently, the auto-configured `JwtAuthenticationConverter` (defined in `OAuth2ResourceServerJwtConfiguration`) uses a `JwtGrantedAuthoritiesConverter`. It would be nice if an `ExpressionJwtGrantedAuthoritiesConverter` w...

Missing constructor for type after upgrading to Spring Boot 4.0.1

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49231 发布时间 2026-02-22 入库 2026-02-22 19:51

When selecting a record type that is mapped as JSONB (e.g. via Hibernate’s `@Type(JsonBinaryType.class))`, the following error occurs: ``` org.springframework.dao.InvalidDataAccessApiUsageException: org.hibernate.query...

hexissam/CVE-2026-1731

GitHub Repos/search hexissam/CVE-2026-1731 发布时间 2026-02-22 入库 2026-03-14 02:41

CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability | language: Python

dkstar11q/Ashwesker-CVE-2026-20045

GitHub Repos/search dkstar11q/Ashwesker-CVE-2026-20045 发布时间 2026-02-22 入库 2026-03-14 02:41

CVE-2026-20045

优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。

当前条件下没有命中网安开源项目。

github安全推送