Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
romain-deperne/CVE-2026-34975
CRLF email header injection in Plunk raw MIME construction — CVE-2026-34975 / CVSS 8.5 | topics: cve, proof-of-concept, vulnerability-research | language: Python
romain-deperne/CVE-2026-34940
OS command injection in KubeAI via an Ollama model URL — CVE-2026-34940 / CVSS 8.7 | topics: cve, proof-of-concept, vulnerability-research
romain-deperne/CVE-2026-34160
Unauthenticated SSRF in the Chamilo LMS PENS plugin — CVE-2026-34160 / CVSS 8.6 | topics: cve, proof-of-concept, vulnerability-research
romain-deperne/CVE-2026-33980
KQL injection in adx-mcp-server via table_name — CVE-2026-33980 / CVSS 8.3 | topics: cve, proof-of-concept, vulnerability-research | language: Python
romain-deperne/CVE-2026-33715
Unauthenticated SSRF and open email relay in Chamilo LMS — CVE-2026-33715 / CVSS 7.2 | topics: cve, proof-of-concept, vulnerability-research | language: Python
romain-deperne/CVE-2026-32247
Cypher injection in Graphiti via unsanitized node_labels — CVE-2026-32247 / CVSS 8.1 | topics: cve, proof-of-concept, vulnerability-research | language: Python
romain-deperne/CVE-2026-77262
Arbitrary file read in mcp-atlassian via confluence_upload_attachment — CVE-2026-77262 / GHSA-p6hp-93wp-fh6p | topics: cve, proof-of-concept, vulnerability-research | language: Python
ruik-tech/ghostlock-s25fe
GhostLock (CVE-2026-43499) for the Galaxy S25 FE (W.I.P) | language: C
0x00phantom-hat/CVE-2026-11991-Exploit
language: Python
moksh-nfsu/CVE-2026-36392
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
ITroyeSivan/Saker
万物皆是插件，万物皆可自定义——基于DeepSeek Harness的安全测试工作台，提示词、工具、MCP、技能、知识库、WebShell均可模块化编排，覆盖渗透测试与代码审计。 | topics: ai-agent, code-audit, deepseek-harness, mcp, pentest, red-team, security-tools | language: JavaScript | stars: 5 | forks...
wanshuiyin/Anti-Autoresearch
Don't trust an autoresearch paper at face value. Reviewer-side integrity forensics (self-consistency + fabrication), deterministic verdict. 61 signals: 46 integrity hack-patterns (families A–H, verdict-bearing) + 13 zero...
blackshixin-rgb/essence
看透本质的 Claude Skill — 剥掉叙事拆到底层驱动力,逼出一句可证伪的本质,红队证伪后只给一个杠杆点 | topics: ai-agent, claude-code, claude-skills, first-principles, mental-models | stars: 0 | forks: 0 | updated 2026-09-06T06:37:22Z | pushed 2026-09-06T06:37:15Z
henry2026a/bishe-springboot-vue-js-1788668486
【毕设分享】基于springboot+vue.js的基于云平台的信息安全攻防实训平台附带文章源码部署视频讲解等.md | stars: 0 | forks: 0 | updated 2026-09-06T04:22:13Z | pushed 2026-09-06T04:22:09Z
que3sui/skilltree
建木 SkillTree —— 绩点之外的能力证据：四 agent（勘察→取证→红队→仲裁）按开源 rubric 评测学生真实项目仓库，点亮可申诉的技能图谱 · 一〇七杯智能体赛道 | topics: assessment, education, llm-agents, multi-agent, react, rubric, skill-tree, typescript | language: TypeScript | stars: 0...
qiyan233/TGSEC-Qtzuu2
TGSEC社区 学习渗透套件 — 按攻击面组织的渗透测试知识库,可直接喂给AI自动配置使用 | stars: 0 | forks: 0 | updated 2026-09-05T17:06:25Z | pushed 2026-09-04T18:03:41Z
oja64064/lisazhu-hk-residential-ips
香港住宅IP VPS哪家好：从线路类型到套餐选择，一篇讲清怎么挑不踩坑 | stars: 1 | forks: 0 | updated 2026-09-06T02:30:18Z | pushed 2026-09-06T02:30:13Z
wmz913/lisa-hk-residential-ips
丽萨主机香港住宅IP：HGC与iCable双ISP家宽VPS怎么选，附全套餐价格与避坑要点 | stars: 1 | forks: 0 | updated 2026-09-06T01:23:53Z | pushed 2026-09-06T01:23:47Z
gcj667/lisazhu-hk-ips
香港原生IP VPS购买：丽萨主机三条线路怎么选，建站、解锁流媒体和TikTok运营一次说清 | stars: 1 | forks: 0 | updated 2026-09-06T01:39:46Z | pushed 2026-09-06T01:39:41Z
TGSEC社区 学习渗透套件 — 按攻击面组织的渗透测试知识库,可直接喂给AI自动配置使用
创建者: qiyan233
TGSEC社区 学习渗透套件 — 按攻击面组织的渗透测试知识库,可直接喂给AI自动配置使用