momo安全漏洞库

共聚合 10783 条情报漏洞监控 6288 / 网安开源项目 4495

来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。

diedromeo/CVE-2026-62201-OpenClaw-SSRF

GitHub Repos/search diedromeo/CVE-2026-62201-OpenClaw-SSRF 发布时间 2026-09-09 入库 2026-09-09 15:08

Deep-dive analysis of CVE-2026-62201: OpenClaw sandbox exec-server network policy bypass (SSRF). Root cause, vulnerable vs patched code, exploitation, detection, remediation.

jithinkrishnanrs/stylesmuggler-ioc-toolkit

GitHub Repos/search jithinkrishnanrs/stylesmuggler-ioc-toolkit 发布时间 2026-09-09 入库 2026-09-09 13:41

StyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells, persistence artifacts, and known indicators of compromise. | topics: adobe-...

Supersonic/TLPE

GitHub Repos/search Supersonic/TLPE 发布时间 2026-09-09 入库 2026-09-09 13:30

CVE-2026-49881, using insecure context creation in Android 17's Telecom service to execute arbitrary code as UID 1000 system_server from an unprivileged app | language: Kotlin

karollooool/CVE-2026-83991-writeup-and-poc

GitHub Repos/search karollooool/CVE-2026-83991-writeup-and-poc 发布时间 2026-09-09 入库 2026-09-09 09:53

CVE-2026-83991: Windows Cloud Files access-check bypass | language: C | homepage: https://x.com/karollooool/status/2097504394170216772

abraxas/CVE-2026-19089-WooCommerce-Tyche

GitHub Repos/search abraxas/CVE-2026-19089-WooCommerce-Tyche 发布时间 2026-09-09 入库 2026-09-09 09:09

CVE-2026-19089 WooCommerce Tych Remote Command Execution | language: Python

ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape

Microsoft MSRC CVE-2026-86098 发布时间 2026-09-09 入库 2026-09-09 15:08

undici vulnerable to Denial of Service via orphaned RetryHandler response body

Microsoft MSRC CVE-2026-18149 发布时间 2026-09-09 入库 2026-09-09 15:08

undici vulnerable to downstream response splitting via retry interceptor

Microsoft MSRC CVE-2026-18540 发布时间 2026-09-09 入库 2026-09-09 15:08

Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize

Microsoft MSRC CVE-2026-85769 发布时间 2026-09-09 入库 2026-09-09 15:08

Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload

Microsoft MSRC CVE-2026-85197 发布时间 2026-09-09 入库 2026-09-09 15:08

优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。

绕过人机验证的github注册机，万人骑ip随便注册

GitHub 开源项目 1b9efa7d34393329 更新 2026-09-08 入库 2026-09-09 00:01

创建者: ciouskeila-hue 绕过人机验证的github注册机，万人骑ip随便注册

绕过 HelloTalk 6.4.0 注册时的网易易盾设备风控拦截（Xposed 模块）

GitHub 开源项目 168bc5002bed0368 更新 2026-09-08 入库 2026-09-09 00:01

创建者: Kimu00662 绕过 HelloTalk 6.4.0 注册时的网易易盾设备风控拦截（Xposed 模块）

绕过人机验证的github注册机，万人骑ip随便注册

GitHub 开源项目 6b89f1d3b0cad558 更新 2026-09-08 入库 2026-09-09 00:01

创建者: ciouskeila-hue 绕过人机验证的github注册机，万人骑ip随便注册

fastjson vulnerability scanner - detect fastjson in JARs and Spring Boot fat-JARs, check exposure to CVE-2026-16723, and verify whether you already run the official patch 1.2.84. Zero-dependency offline CLI. fastjson 漏洞检测与排查工具：一条命令扫描依赖，支持 fat-JAR 与 shaded 依赖，并判定是否已升到官方补丁版本 1.2.84。

GitHub 开源项目 74fca31ce112ed58 更新 2026-09-08 入库 2026-09-09 00:01

创建者: xiaoqiMikko fastjson vulnerability scanner - detect fastjson in JARs and Spring Boot fat-JARs, check exposure to CVE-2026-16723, and verify whether you already run the official patch 1.2.84. Zero-dependency offline ...

一个综合性的灾害风险管理平台，集成了风险评估、实时监测、预警发布、应急响应等功能。

GitHub 开源项目 b38c587211b91bb2 更新 2026-09-08 入库 2026-09-09 00:01

创建者: alanbulan 一个综合性的灾害风险管理平台，集成了风险评估、实时监测、预警发布、应急响应等功能。

SKILL.md

GitHub 开源项目 747982a49ae46ab6 更新 2026-09-08 入库 2026-09-09 00:01

创建者: galact-byte 个人自用 Agent Skill 库(

Filename wordlist generator for file-upload bypass testing. Eevery Upload_Bypass technique, plus ready-to-use webshells and clean samples

GitHub 开源项目 07253cbbbf0f3efe 更新 2026-09-08 入库 2026-09-08 21:55

创建者: Justice-Reaper Filename wordlist generator for file-upload bypass testing. Eevery Upload_Bypass technique, plus ready-to-use webshells and clean samples

佛跳墙 · m-ui 的多平台客户端:Windows / Linux(软路由网关模式)/ Android(手机与电视),内嵌 sing-box,TUN、规则分流、fake-ip、禁 IPv6 且不让 v6 绕过隧道、多订阅回退刷新、可编辑的默认规则与可视化规则组、应用内升级

GitHub 开源项目 fda96abe582c7ce7 更新 2026-09-08 入库 2026-09-08 21:55

创建者: Maoyangui 佛跳墙 · m-ui 的多平台客户端:Windows / Linux(软路由网关模式)/ Android(手机与电视),内嵌 sing-box,TUN、规则分流、fake-ip、禁 IPv6 且不让 v6 绕过隧道、多订阅回退刷新、可编辑的默认规则与可视化规则组、应用内升级

远控项目

GitHub 开源项目 65349e077876e194 更新 2026-09-08 入库 2026-09-08 21:55

创建者: BSVV 远控项目

计算机基础与网络安全自学笔记：Linux/Python/C/MySQL 速查 + Kali/Metasploit 安全笔记

GitHub 开源项目 8b9d2b234c9b3f9e 更新 2026-09-08 入库 2026-09-08 21:55

创建者: fishlmg 计算机基础与网络安全自学笔记：Linux/Python/C/MySQL 速查 + Kali/Metasploit 安全笔记

github安全推送