Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Chromium: CVE-2026-16423 Use after free in UI
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16422 Insufficient validation of untrusted input in Certificate
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16421 Inappropriate implementation in WebAudio
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16420 Type Confusion in WebAudio
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16419 Out of bounds read and write in ANGLE
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16418 Stack buffer overflow in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16417 Uninitialized Use in Skia
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16416 Integer overflow in Chromecast
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16415 Insufficient validation of untrusted input in Extensions
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16414 Insufficient validation of untrusted input in Chromecast
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
j0x3n/china-cloudflare-ips
Automatically updated IP sets for proxy routing across China and major CDN/edge networks. | language: Python | stars: 0 | forks: 0 | updated 2026-08-11T19:05:10Z | pushed 2026-08-11T19:04:10Z
brentberli/wApmFEelTA
【Python计算机毕业设计分享】基于Python的注入漏洞扫描工具研究及防护实现，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-07-13T15:19:17Z | pushed 2026-07-13T15:17:55Z
Fausto-404/AlterHive
AlterHive（幻巢）是一款面向攻防演练、红蓝对抗和安全研究场景的高交互智能欺骗蜜罐平台。平台以虚拟拓扑、会话记忆、规则引擎和多 Agent 欺骗规划为核心，将攻击者/渗透Agent引导进可控的“子网幻象”环境中，帮助防守方观察攻击意图、拖延攻击节奏、保护真实目标。 | topics: adaptive-honeypot, agent-security, ai-security, blue-team, honeypot, llm-s...
cocodot2026/model-id-cheatsheet
Community map of relay model ids to real models (Opus/Sonnet/Haiku tiers). PRs welcome. | topics: api-relay, cheatsheet, china, claude, llm | stars: 0 | forks: 0 | updated 2026-07-12T10:23:53Z | pushed 2026-07-12T10:23:4...
yeche43562/CIC_IDS_data_analysis
stars: 0 | forks: 0 | updated 2026-07-12T11:12:32Z | pushed 2026-07-12T11:12:18Z
kenzzark/polengshui-skill
可能AI最大的价值就是给你泼冷水，让 AI 停止默认迎合，执行证据化反方审查：泼冷水、红队、证据审计、premortem 与决策复盘。 | topics: adversarial-review, agent-skills, ai-agent, chinese, claude-code, codex, cognitive-bias, critical-thinking, decision-making, evidence-audit, l...
hunterhkkk/hunterhk_Farmwork_professional
添加Toolscall功能,日志功能,更智能的AI,增加知识库，添加状态管理器，增加事件系统，重构红队工具管理器，重构核心引擎，重构工作流引擎，添加文件管理器English:Add Toolscall functionality, logging functionality, smarter AI, expand the knowledge base, add a state manager, enhance the event sys...
haoliyang/llm-redteam-range
llm-redteam-range 是一个开源的 LLM 红队教学靶场，以 DeepSeek为后端，用一个 Go 单二进制 + 浏览器，练习 **提示词注入、人设瓦解、编码绕过、间接注入、输出过滤绕过 等真实大模型攻击手法。每关藏一个 flag，诱导模型说出来即过关。 | stars: 0 | forks: 0 | updated 2026-07-12T03:55:43Z | pushed 2026-07-12T03:55:39Z
PAOPAO789/red-team
红队agent 训练中 | language: Python | stars: 0 | forks: 0 | updated 2026-07-12T09:32:42Z | pushed 2026-07-12T09:32:36Z
veriyoung/ai-redteam
AI安全自动化红队测试工具 - 像写单元测试一样测试你的AI安全 | topics: adversarial-attacks, ai-safety, ai-security, cybersecurity, jailbreak, llm, llm-security, owasp, pentesting, prompt-injection, python, red-team, security-tools | language: Pytho...