momo安全漏洞库

多模块数据检索平台

登录 注册
共聚合 7118 条情报 漏洞监控 4617 / 网安开源项目 2501
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
4minx/CVE-2026-14266
CVE-2026-14266 - XZ Heap Buffer Overflow PoC Generator for 7-Zip | language: Python
oscerd/CVE-2026-49099
PoC reproducer for CVE-2026-49099 (Apache Camel camel-salesforce): the non-Camel-prefixed sObjectQuery header escapes the HTTP header filter and overrides the producer's configured SOQL (SOQL injection / broken access co...
securelayer7/WordPresShell
Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core) | topics: cve-2026-60137, cve-2026-63030, poc, rce, wordpress | language: Python
dinosn/CVE-2026-25243-debugfree
language: Python
Colere-Sys/wp2shell-poc
Analysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030 | language: Python
oscerd/CVE-2026-48206
Reproducer for CVE-2026-48206: Apache Camel camel-jira IssueKey (and other non-Camel-prefixed) header injection driving arbitrary JIRA issue operations with the endpoint's service-account credentials (fixed in 4.14.8/4.1...
Dynamo2k1/CVE-2026-33017
language: Python
NULL200OK/WP2Shell
WP2Shell - CVE-2026-63030 / CVE-2026-60137 This tool exploits a critical SQL injection vulnerability in the WordPress REST API `/wp-json/batch/v1` endpoint, allowing unauthenticated attackers to execute arbitrary SQL que...
gagaltotal/CVE-2026-42533-nginx
CVE-2026-42533 Nginx | topics: cve, cve-2026-42533, cve-2026-42533-poc, cve-2026-42533-scanner, go, golang, golang-cli, nginx, nginx-server | language: Go
Max78000/CVE-2026-0560-lollms
Test server and PoC
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
zfz-725/KubeGuard
精简版 KubeArmor — Kubernetes + eBPF 运行时安全工具 | language: C | stars: 0 | forks: 0 | updated 2026-07-20T08:14:57Z | pushed 2026-07-20T08:14:16Z
pinglanlab/PBox
凭阑红蓝工具箱PBox是由凭阑实验室安全团队开发的一款面向Windows系统的图形化(GUI)安全渗透集成工具箱。它旨在解决安全研究人员和渗透测试工程师在日常工作中需要单独下载、配置多种工具及其复杂运行环境的痛点。 | language: Python | stars: 7 | forks: 0 | updated 2026-07-22T09:47:09Z | pushed 2026-07-18T08:25:26Z
Knaithe/Shroud
多级代理工具,支持树状拓扑、五层加密、SOCKS5/端口转发/Tor/SSH隧道,专为渗透测试设计 | language: Go | stars: 1 | forks: 0 | updated 2026-07-07T12:44:16Z | pushed 2026-07-07T12:43:18Z
gehewu/Cortex
一个多角色渗透测试Agent | stars: 0 | forks: 0 | updated 2026-07-07T16:56:17Z | pushed 2026-07-07T16:56:09Z
xiaomandujia/glowing-octo-funicular
基于ai构建的网络安全小插件,Web渗透测试工具集 — 信息收集/漏洞检测/安全头审计/字典攻击 | language: Python | stars: 0 | forks: 0 | updated 2026-07-08T03:39:21Z | pushed 2026-07-08T03:39:16Z
1neptune/yakit-trae-tutorial
Yakit + Trae AI 自动化渗透测试教程 含MCP集成配置与实战案例 | stars: 0 | forks: 0 | updated 2026-07-08T07:46:24Z | pushed 2026-07-08T07:47:46Z
Exllo-Lv/Security-Learning
渗透测试学习笔记/poc/exp合集 | language: Python | stars: 2 | forks: 0 | updated 2026-08-12T01:52:50Z | pushed 2026-08-12T01:52:46Z
2007-ygp/sqlilabs-waf-bypass
SQLi-Labs WAF绕过实战 - 长亭雷池SafeLine渗透测试与绕过技术研究 | stars: 0 | forks: 0 | updated 2026-07-08T08:41:58Z | pushed 2026-07-08T08:41:26Z
ssr6125/SRC-Hunter
AI 驱动的自动化 SRC / 渗透测试辅助平台:FOFA 资产搜集 + LLM 多 Worker 自主挖掘、审核与情报沉淀。单进程部署,仅供授权测试与研究。 | topics: ai-agent, automation, bug-bounty, fastapi, fofa, llm, penetration-testing, pentest, python, red-team, security, src, vue, vulnerab...
lone-tree-bird/pyvulnlab
基于 Flask + MySQL 的轻量级 Web 渗透测试靶场,内置 6 个常见 Web 漏洞(SQL注入、XSS、越权、信息泄露等),用于网络安全教学和漏洞验证。 | language: Python | stars: 0 | forks: 0 | updated 2026-07-08T12:50:18Z | pushed 2026-07-08T12:49:40Z