Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
HydraSoft/CVE-2026-41089-Netlogon-RCE
Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon service affecting Domain Controllers. | topics: active-direct...
Paradoxis/CVE-2026-57239
Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxit PDF Reader updater service. | topics: cve-2026-3775, cve-2026-3780, cve-2026-5723...
NicPWNs/CVE-2026-62183
Apache Syncope: User self-service privilege escalation | topics: apache, apache-syncope, cve, cve-2026-62183, privilege-escalation | language: Shell | homepage: https://www.cve.org/CVERecord?id=CVE-2026-62183
syxlox/CVE-2026-50369
language: Python
HORKimhab/CVE-2026-6875
CVE-2026-6875 | language: Python | homepage: https://securityaffairs.com/195723/ai/attackers-exploit-critical-servicenow-rce-flaw-cve-2026-6875.html
iqx6889/CVE-2026-52813-Gogs-RCE
CVE-2026-52813 (Gogs Path Traversal → Git Hooks RCE) defensive writeup: root-cause & patch analysis, Sigma/SIEM detection rules, IOCs, non-intrusive version scanner. No weaponized PoC. | language: Python
geecjdj/CVE-2026-43499
CVE-2026-43499 | language: C
csinexus/mcpshield
Drop-in fix for the unpatched MCP STDIO command-injection flaw (CVE-2026-30623 family) | language: Python
mhtsec/CVE-2026-63030
WordPress 未授权RCE EXP | CVE-2026-63030 | language: Python
ctn-Qvo/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN
CVE-2026-0073-Android-ADBD-bypass-POC汉化版 | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Industry-International/Attack-Defense-Map-KubeJS
攻防战地图的kubejs | language: JavaScript | stars: 0 | forks: 1 | updated 2026-07-17T05:22:13Z | pushed 2026-07-17T05:23:28Z
MWDLH/ai-security-expert
AI 全栈安全攻防矩阵 v1.0 — 面向 AI Agent 的全栈安全攻防知识库。覆盖基础设施、LLM 应用、供应链投毒与 Agent 安全 6 个层面共 21 个攻击面，每个面提供可执行 PoC、加固方案和应急响应闭环。 | language: Shell | stars: 6 | forks: 0 | updated 2026-08-04T09:50:06Z | pushed 2026-07-07T01:14:30Z
SuYK-666/Smart_Attack_Team_Scheduling_Lab
本项目面向信息安全综合实验，构建企业仿真网络靶场，实现资产发现、攻击图建模、智能目标选择、多团队协同调度、仿真回传与可视化展示，用于验证自动化攻防流程、安全策略差异和攻击路径重规划效果。 | language: JavaScript | stars: 5 | forks: 0 | updated 2026-07-12T14:12:58Z | pushed 2026-07-12T14:12:54Z
gatsby-sec/llm-sec-range
🛡️ 大模型攻防渗透测试靶场 · 提示注入CTF / OWASP LLM Top10 / 脆弱Agent / 资料聚合。目标模型可切换：DeepSeek直连、OpenRouter中转站(国产+国外十余款小模型)、本地Ollama(DeepSeek-R1 8B离线)。一键本地部署。 | topics: agent-security, ai-security, ctf, deepseek, jailbreak, llm-red-teamin...
owenbrave/ktZtafSP
【Java计算机毕业设计分享】基于SpringBoot的云安全攻防训练系统，Java开发 Python开发 深度学习 二次开发 毕业设计 实战项目【附源码、文档报告、代码讲解、部署教程、开题、任务书】 | stars: 1 | forks: 0 | updated 2026-07-07T10:40:28Z | pushed 2026-07-07T10:40:22Z
FirmWisp/nlink
VoidLink 内核 rootkit 隐藏模块，该POC仅供安全攻防学习使用 | language: C | stars: 28 | forks: 0 | updated 2026-07-30T10:10:58Z | pushed 2026-07-30T10:09:40Z
Dujltqzv/Some-Many-Books
个人收藏书籍列表 PDF下载 百度云 电子书下载 ==礠緢舝揽躋瑥玮獺捈遍縤湑玤怃顷橲誕鞀覄琤镾忺鬵齶陛飙驨庤憗诡熇荝蹿巾鴡饌斄碀遯遠傪囷詊偍澐匁庾曾戢悒猄迵徬摵宬甂孺郳糣螨吮覘綔氊豀纴嫤惗跚銸莻箤惉輘芴蛣謙蘲脐冇穖謥貛璕掸災廟釨儼滘茧懦蝾谘睃玿鱪飄雓棽歗闸譐争癒搉谠栝陶林焉訨寵贶盼珲洝箒赤瓱鵸磕韡溋阩棉兤诚厐噆熙狿蝕垧岊嶳邏銟甚榞鱗粿濜堘殤腙驡饅騀窍剷蜐喽帎鏹苟茙銲墏烅颓秎麗碦桝鐤轊滓滯鷝忮紤壄讴潢杗霅眤拗稧燽諦镎韴磰矝秖癯僰劅潓...
owl234/ARL-Next
🚀 自动化资产侦察与漏洞监控平台 (ARL-Next)。重构自经典 ARL，全面升级 Puppeteer + Nuclei 引擎，打通「天眼查/ICP ➔ 资产发现 ➔ 漏洞扫描 ➔ 威胁情报追踪」安全闭环。支持 Docker 极简部署，AI 二开友好。 | topics: asm, attack-surface-management, bugbounty, cve, docker, docker-compose, flask, fof...
gaoyuann/RedTeam-Platform
信息系统渗透智能化测试平台 — Qt5/C++ 前端重构 | language: C++ | stars: 0 | forks: 0 | updated 2026-07-07T09:31:35Z | pushed 2026-07-07T09:31:21Z
sonale458/Malwarebytes-Premium-2026
Manage your Malwarebytes Premium setup on Windows with this reference guide for scan schedules, maintenance, and license organization. | topics: anticensorship, antivirus, autofilter, chinalist, endpoint-security, geosit...