Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Azure Portal Information Disclosure Vulnerability
codeb0ssx/Ultimate-wp2shell
wp2shell — Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with batch-route confusion for unauthenticated remote code execution on WP 6.9.0–6.9.4 / 7....
seguridadentrerios/CVE-2026-42533
Vulnerabilidad en NGINX | language: Shell
razureink/cve-2026-41940-cpanel_authbypass_reproduction
CVE Reproduction: cve-2026-41940-cpanel_authbypass_reproduction | language: Python
razureink/cve-2026-34486-tomcat_encrypt_bypass_reproduction
CVE Reproduction: cve-2026-34486-tomcat_encrypt_bypass_reproduction | language: Python
razureink/cve-2026-21509-office_security_bypass_reproduction
CVE Reproduction: cve-2026-21509-office_security_bypass_reproduction | language: Python
razureink/cve-2026-0770-langflow_rce_reproduction
CVE Reproduction: cve-2026-0770-langflow_rce_reproduction | language: Python
vulnquest58/PressVector
PressVector - Advanced WordPress Vulnerability Scanner CVE-2026-63030 (REST batch route confusion) / CVE-2026-60137 (SQLi) Developer: Vulnquest | language: Python
ekomsSavior/wp2shell
CVE-2026-63030 (RCE) + CVE-2026-60137 (SQLi) | language: Python
onesmiledx/CVE-2026-43499
A modified method to root Android device with locked bootloader via new exploit. (Only for Samsung now or smthing like that devices cuz i ported it to N970U1), Fork of https://github.com/localhosts-A/CyberMeowfia
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
atk7r/Guanlan
Guanlan（观澜）是一个面向授权攻防演练与暴露面治理的 OSINT 资产测绘、验证和报告工具。 | language: Python | stars: 2 | forks: 0 | updated 2026-06-13T21:15:59Z | pushed 2026-06-13T21:15:55Z
Bouquets-ai/StrikeAgent-Web
StrikeAgent 产品展示站点 —— 面向攻防的智能体平台介绍页（纯前端，无后端 API）。 | language: TypeScript | stars: 0 | forks: 0 | updated 2026-06-14T04:31:17Z | pushed 2026-06-14T04:32:29Z
brentberli/jyqJbCUmMl
【Java计算机毕业设计分享】基于SpringBoot+Vue浏览器攻防平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-06-14T05:41:16Z | pushed 2026-06-14T05:41:12Z
fgfhr/OpenWAF-Sec-SecondaryDev
基于 OpenResty 开源 WAF 二次开发，联动 DVWA 完成 OWASP Top10 全场景攻防测试 | stars: 0 | forks: 0 | updated 2026-06-15T10:07:45Z | pushed 2026-06-15T10:07:41Z
brentberli/WsXHtdMYoD
【Java计算机毕业设计分享】基于SpringBoot+Vue浏览器攻防平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-06-16T15:08:30Z | pushed 2026-06-16T15:03:59Z
hack007x/MoonVeil
集成多种攻防技术与检测手段，帮助安全测试人员高效执行信息收集、漏洞挖掘、利用验证， 提升渗透测试的自动化与体系化水平，为安全团队快速发现潜在风险与攻击面提供有力支持。 | stars: 37 | forks: 1 | updated 2026-06-17T03:41:51Z | pushed 2026-06-15T14:37:51Z
cyclotr0nzxj/ai-awd
⚔️ AI 攻防大乱斗 — 让 AI Agent 互相进行网络安全攻防竞技的桌面平台。Desktop arena where AI agents battle each other in cyber attack-defense matches. | topics: ai-agent, attack-defense, ctf, cybersecurity, desktop-app, electron, multiplayer | lan...
WayneMoore1006/multivariate-wizards-Ch6-7
學習遇到困難嗎?將艱澀難懂的多變量做成遊戲，增加讀書效率、回饋感!!! 多變量巫師對戰是一款將多變量統計期末考古題轉化為填空對戰遊戲的雙語學習平台，支援 1 vs Bot、線上 1 vs 1、歷史長廊與即時答題攻防。 | language: TypeScript | stars: 0 | forks: 0 | updated 2026-06-17T11:17:41Z | pushed 2026-06-17T11:17:06Z
brentberli/BRkZdNsCmy
【Java计算机毕业设计分享】基于SpringBoot+Vue浏览器攻防平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-06-18T21:04:10Z | pushed 2026-06-18T21:04:04Z
Vyrdin/Vyrdin
個人雲安全與Linux運維代碼存檔、攻防實驗腳本與架構實踐記錄 | stars: 1 | forks: 0 | updated 2026-07-09T08:12:05Z | pushed 2026-07-08T11:42:52Z