Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
testardou/CVE-2026-15253
Easy Media Replace <= 0.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
dylan-chainguard/cve-2026-22732-poc
language: Shell
xiaoqiMikko/netty-resolver-dns-check
CVE-2026-45674 / CVE-2026-47691 / CVE-2026-45673: offline checker for DNS cache poisoning in io.netty:netty-resolver-dns - and whether your app actually uses that resolver. Spring WebClient on Reactor Netty uses it by de...
Hunt-Benito/the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss
language: Python
SyntaxMethod/CVE-2026-41089-Netlogon-RCE-PoC
CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing. | topics: active-directory, active-directory-security, cve, cve-2026-41089, cybersecurity, cybersecurity-education, cyber...
TheMalwareGuardian/CVE-2026-79298
CVE-2026-79298 - Incomplete remediation of UEFI Secure Boot bypass in Howyar SysReturn. The IA-32 boot path (BOOTia32.efi) was never patched after CVE-2024-7344, shipping the same revoked custom PE loader until July 2026...
franklincg/secdim-assurance-drift-challenge
SecDim Challenge Builder repro inspired by CVE-2026-88861: AAL1 MFA bypass at privileged credential boundary | language: Go
Dingo97/CVE-2026-20516
Write-up and proof of concept for CVE-2026-20516: MediaTek Android TV MiracastService confused deputy vulnerability. | homepage: https://dingo97.github.io/research/CVE-2026-20516/
het-P301204/AfterLife
Revocation persistence detection lab: when the password reset succeeds but the attacker never leaves. Reproduces the Strapi CVE-2026-22706 conditional-revocation bug, its fix, a three-rule detection pack, and the naive r...
HORKimhab/CVE-2026-51990
CVE-2026-51990 - Draft or TODO
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
网络安全学习笔记与漏洞复现记录
创建者: 0xbyte-cc
网络安全学习笔记与漏洞复现记录
为漏洞挖掘任务准备的两个MCP服务:Document MCP, Code MCP
创建者: HK-AI-Security-Lab
为漏洞挖掘任务准备的两个MCP服务:Document MCP, Code MCP
抓取 · 爬取 · 绕过反爬 · 读取 PDF· 搜索网页
创建者: ouli-1242
抓取 · 爬取 · 绕过反爬 · 读取 PDF· 搜索网页
RU: Открытый стенд для исследования безопасности, поиска и проверки уязвимостей, анализа атак и разработки защитных механизмов.EN: An open environment for security research, vulnerability discovery and validation, attack analysis, and defensive mechanism development.中文:用于安全研究、漏洞发现与验证、攻击分析及防御机制开发的开放环境。
创建者: SmartVoltISA
RU: Открытый стенд для исследования безопасности, поиска и проверки уязвимостей, анализа атак и разработки защитных механизмов.EN: An open environment for security research, vulnerability discovery and ...
VUST 协议仿真套件,提供可配置网络服务仿真、蜜罐审计、多端点部署和 PCAP 取证。
创建者: vustcc
VUST 协议仿真套件,提供可配置网络服务仿真、蜜罐审计、多端点部署和 PCAP 取证。
🎯
创建者: dollmarker
agentrouter.org
创建者: ZhiGangCai
请求头注入插件:DSH 插件,按 host 规则注入 HTTP 请求头(多条规则各自独立头集合,同名头覆盖原值),默认对
自动化渗透测试平台,检测网络中的目标和可利用漏洞
创建者: zhou10
自动化渗透测试平台,检测网络中的目标和可利用漏洞
自动化渗透测试平台,检测网络中的目标和可利用漏洞
创建者: zhou10
自动化渗透测试平台,检测网络中的目标和可利用漏洞
Machine learning-based Webshell detection system for php code
创建者: robinguo23
Machine learning-based Webshell detection system for php code