Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
realalexandergeorgiev/artifactory-CVE-2026-82329-poc.py
CVE-2026-82329 — JFrog Artifactory unauthenticated authentication bypass ("phantom join key" -> forged service admin token) | language: Python
ByteV0rtex/CVE-2026-65330
CVE-2026-65330 PoC — setxattr PAC bypass via fixed #0x307a diversifier (iOS 26.6 / 23G71) | topics: cve, cve-2026, ios, kernel, poc, reverse-engineering, security, security-research, vulnerability | language: C
ByteV0rtex/CVE-2026-65343
CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) | topics: cve, cve-2026, ios, kernel, poc, reverse-engineering, security, security-research, vulnerability | language: Objective-C
ByteV0rtex/CVE-2026-65349
CVE-2026-65349 PoC — getattrlist OOB write in vfs_attr_pack_internal (iOS 26.6 / 23G71) | topics: cve, cve-2026, ios, kernel, poc, reverse-engineering, security, security-research, vulnerability | language: C
ByteV0rtex/CVE-2026-64788
CVE-2026-64788 PoC — IOGPUFamily Use-After-Free (iOS 26.6 / 23G71) | topics: cve, cve-2026, ios, kernel, poc, reverse-engineering, security, security-research, vulnerability | language: Objective-C
ynsmroztas/CVE-2026-82329-JFrog-Artifactory-Auth-Bypass
CVE-2026-82329 — JFrog Artifactory (self-hosted) Auth Bypass | language: Python
poxsky/CVE-2026-38577-by-deepak-Anmol
CVE-2026-38577
paparojonathan/CVE-2026-9335-keras-hdf5-externallink
CVE-2026-9335: KerasFileEditor and load_weights follow h5py ExternalLinks, disclosing arbitrary local HDF5 file contents in keras ≤ 3.14.0. Advisory + verified PoCs. | language: Python
EXEcution-py/CVE-2026-9055
byt3l0rd/CVE-2026-73570
language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
N0va-7/qwen3-finetune-backdoor-poc
《Qwen3-8B 微调后门攻防实测》随文复现材料：微调后门 PoC，payload 无害（弹出计算器）。AI 供应链安全研究 | topics: ai-security, backdoor, llm, poc, supply-chain-security | language: Python | stars: 0 | forks: 0 | updated 2026-09-01T14:16:05Z | pushed 2026-09-01...
cat-night-school/CNS-Gomoku
🐾 给所有爱下棋、爱撸猫的朋友。 《猫猫夜校-五子之棋》不只是一个五子棋游戏，它是一个小小的在线棋室，也是一个温暖的猫猫社区。 在这里，你可以： · 🤖 挑战四种难度的 AI，从随机落子到攻防兼备的“超凡大师”。 · 🌐 创建专属房间，约上好友下一盘跨越距离的棋局。 · 💬 在聊天室语音/图文畅聊，不用担心敏感词，只有温柔的提醒。 · 🏆 冲击连胜榜，让你的 ID 闪耀在排行榜上。 · ⭐ 在留言板留下你的足迹，顺便给本期打个分！ 整个...
tajleonbennis-maker/redteam-elite-pack
RedTeam Elite Pack — 轻量红队快速评估工具：固化已验证 garak 攻击为精英包 + 脱离 garak 的复现引擎 + 易读报告 + 极简 Web | language: Python | stars: 0 | forks: 0 | updated 2026-08-31T15:13:07Z | pushed 2026-08-31T14:58:23Z
alayaliuxuan-gif/PhD-Research-Architect
设计目标 这不是“帮你写论文”的 Prompt，而是一套博士科研推理系统。它把科研项目按以下链条组织： **研究兴趣 → 问题 → 证据空白 → 可操作化构念 → 可证伪假设 → 估计目标 → 实验设计 → 数据质量 → 统计/因果推断 → 生物医学 AI → 结果解释 → SCI 红队审查** | stars: 0 | forks: 0 | updated 2026-08-31T16:39:46Z | pushed 2026-08-3...
kwekre/red-evasions
红队绕过技术库：WAF/过滤器绕过、双重解码、AMSI 检测（本地模拟器可运行 PoC + 防御要点） | topics: amsi, defense, evasion, offensive-security, pentest, red-team, security, waf, xss | language: Python | stars: 0 | forks: 0 | updated 2026-09-01T07:34:50Z | pu...
shawn1232/chronoalloc-lab
可审计的知识增强型大语言模型四资产配置复刻、截止时点检索与时间身份泄漏红队。 | topics: asset-allocation, backtesting, financial-research, knowledge-base, llm-agents, reproducible-research, research-audit, temporal-leakage | language: Python | stars: 0 | fork...
Yean-Sec/StrikeAgent_AtkBrain-Flash
由夜安团队研发开发的AI渗透测试平台，涵盖红队打点、SRC、CTF，特别是在红队领域有极为亮眼的存在 | stars: 0 | forks: 1 | updated 2026-09-02T08:38:14Z | pushed 2026-09-02T08:38:00Z
zhangdaxia237/shentou
zms-渗透测试 | stars: 0 | forks: 0 | updated 2026-09-02T01:48:56Z | pushed 2026-09-02T01:48:53Z
nightlye/reverse-skill
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, ...
l0yuee/SecLogAnalyster
Fast, pandas-friendly threat hunting over forensic acquisitions. Built for DFIR/malware analysis workflows: point it at scattered acquisition directories from multiple hosts, get back a queryable, huntable case workspace...