Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
CsEnox/Gitlab-Redis-Deserialization-RCE
Gitlab Deserialisation RCE through Redis Compromise | language: Ruby
bad-antics/rce-shield
🛡️ RCE Shield — Remote Code Execution hardening toolkit for PC gamers. Scans game launchers, anti-cheat, mods, overlays, peripherals & network for vulnerabilities. | topics: anti-cheat, cybersecurity, ebpf, gaming-securi...
dxlerYT/CVE-2026-25731
Proof of Concept for a Server-Side Template Injection (SSTI) vulnerability in Calibre’s Templite engine (GHSA-xrh9-w7qx-3gcc). Demonstrates arbitrary Python code execution via user-supplied HTML export templates in affec...
Conflicting JDK requirements documented across different files
Conflicting Java version requirements across the documentation: README.adoc states "You also need JDK 25.", build-plugin documentation states Java 17 is the default compiler level, and the CLI INSTALL says JDK v1.8 or ab...
Feature: Integrate flight-recorder-starter natively in Spring Boot Actuator
Hello Spring Boot team :)
🎁 Enhancement
It would be great if the project https://github.com/mirkosertic/flight-recorder-starter would be integrated directly as part of the Spring Boot Actuator offering, so that things ...
security-tools-monkey/cebus-mcp-scanner
It is a lightweight Python-based security scanner for Model Context Protocol (MCP) projects. It performs static and configuration analysis of MCP tools, servers, and Docker environments: detecting common security issues ...
decalage2/detect_CVE-2026-21509
YARA rule and python script to detect potential exploits for the CVE-2026-21509 vulnerability in MS Office | language: Python
richardpaimu34/CVE-2026-2848
federiconeri/review-skill-safety
Claude Code skill that audits third-party skills for security before installation. Catches prompt injection, RCE, data exfiltration, and other attack patterns. | topics: ai-safety, claude, claude-code, claude-code-skill,...
sched/mmcid: Don't assume CID is CPU owned on mode switch
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。