Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
JohenLastGen-JLG/CVE-2026-11961
CVE-2026-11961 — UserRegistration: WordPress User Registration <= 5.2.2 Privilege Escalation. Misconfigured Membership Roles → Unauthenticated Admin Creation → Site Compromise. CVSS 8.1 | language: Python
codeb0ssx/CVE-2026-70559-PoC
CVE-2026-70559 | topics: codeb0ss, cve-2026-70559, cve-2026-70559-poc, dinky, realcodeb0ss, thecodeb0ss
HORKimhab/CVE-2026-64561
CVE-2026-64561 | language: C
Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()
Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport
Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()
xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Cycloethane/Diffguard
DiffGuard — 面向开发者的本地桌面安全工具：审查 Git Diff、监控 AI 编程助手的权限请求，深度集成 OpenCode | language: Python | stars: 2 | forks: 0 | updated 2026-09-02T15:43:30Z | pushed 2026-09-02T15:40:54Z
Acczdy/Test-tools
第一代本地 Web 安全工具箱；新版请使用 SecBox-Web | stars: 5 | forks: 0 | updated 2026-08-13T00:46:03Z | pushed 2026-08-13T00:45:59Z | homepage: https://github.com/Acczdy/SecBox-Web
mumuuuuuuuuu/Security-Tools-Learning
网络安全工具学习笔记。 | language: Python | stars: 0 | forks: 0 | updated 2026-08-27T02:58:51Z | pushed 2026-08-27T02:57:39Z
Duojiyi/5.6-JAILBREAK-NERV-codex-instruct-5.6
NERV-BREAK-5.6 — GPT-5.6 破甲框架。三层纵深防御：上下文重构让拒绝无法触发，23条篡改规则实时消除拒绝保持对话不中断，文件路由绕过云端审核。31个MCP安全工具 + 28个技能模块 + Kali四后端集成。Codex CLI 即装即用。 | stars: 1 | forks: 2 | updated 2026-09-05T04:54:40Z | pushed 2026-08-02T09:15:29Z
bismarckliu/vps-guard-lite
面向 Ubuntu 和 Debian 的轻量级 VPS 基础安全工具 | language: Shell | stars: 28 | forks: 1 | updated 2026-08-27T07:53:59Z | pushed 2026-08-23T09:33:14Z
Sukimjin/Security-Learning-Notes
网络安全学习笔记 | DVWA漏洞复现 + 等保2.0 + 安全工具实操 | topics: cybersecurity, dengbao, dvwa, infosec, network-security, owasp, penetration-testing, security | language: Python | stars: 0 | forks: 0 | updated 2026-08-26T13:31:34Z | pushe...
cloudmayorhinge/nordvpn-total-free
NordVPN 中文破解版是一款解除订阅限制的网络隐私与安全工具，旨在提供虚拟专用网络（VPN）加密、网络节点连接及解除地理位置限制等功能。 | topics: privacy-tool, trial-version, vpn-client | language: Rust | stars: 1 | forks: 0 | updated 2026-08-16T09:52:22Z | pushed 2026-08-16T09:51:55Z
Claude Code skill: turn confirmed vulnerabilities into submission-ready DOCX reports | 漏洞报告成稿 skill（SRC/0day 提交稿、分层验证门、Step 式 PoC、截图铁律）
创建者: v-yun
Claude Code skill: turn confirmed vulnerabilities into submission-ready DOCX reports | 漏洞报告成稿 skill（SRC/0day 提交稿、分层验证门、Step 式 PoC、截图铁律）
大模型驱动的漏斗式漏洞审计工具，深入代码调用链寻幽探微。
创建者: Glosc
大模型驱动的漏斗式漏洞审计工具，深入代码调用链寻幽探微。
A powerful, professional-grade tool for compressing and obfuscating web shells and exploit code. Designed for security researchers, penetration testers, and red teams.
创建者: d4w0d
A powerful, professional-grade tool for compressing and obfuscating web shells and exploit code. Designed for security researchers, penetration testers, and red teams.