Intelligence Digest
威胁情报
统一威胁情报视图，聚合漏洞监控、网安开源项目与官方源情报
漏洞监控
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
2957总量
网安开源项目
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
1546总量
威胁情报
来自 360、奇安信、斗象等官方站点的公开情报聚合。
234总量
NetVanguard-cmd/CVE-2026-3055
clearly3/druid_sessions_magic
一个发现druid弱口令或者未授权后的后渗透工具 | stars: 2 | forks: 0 | updated 2026-04-04T01:13:30Z | pushed 2026-04-03T09:53:33Z
OpenClaw最新完整漏洞，实时可查！（附高危列表）
NetVanguard-cmd/CVE-2026-27597
yarin6/web-vulnerability-scanner-project
Web漏洞扫描系统 | stars: 0 | forks: 0 | 2026-04-03T14:56:17Z
每周勒索威胁摘要
1. Qilin勒索团伙公布了新的受害者 2. Dragonforce勒索团伙公布新的受害公司 3. Akira勒索团伙公布新的受害公司
NetVanguard-cmd/CVE-2026-27507
yarin6/web-vulnerability-scanner
Web漏洞扫描系统 | stars: 0 | forks: 0 | 2026-04-03T14:46:31Z
每周高级威胁情报解读(2026.03.13~03.19)
海莲花组织针对我国重点目标钓鱼攻击活动分析；Boggy Serpens 持续瞄准关键基础设施；Operation GhostMail 活动利用Zimbra Webmail XSS漏洞针对乌克兰目标；Contagious Trader：Lazarus针对加密货币用户的大规模恶意软件活动
NetVanguard-cmd/CVE-2026-4447
issakk/cf_ips
stars: 1 | forks: 0 | updated 2026-04-09T23:10:31Z | pushed 2026-04-09T23:10:27Z
GSocket Backdoor Delivered Through Bash Script, (Fri, Mar 20th)
Yesterday, I discovered a malicious Bash script that installs a GSocket backdoor on the victim's computer. I don't know the source of the script not how it is delivered to the victim.
NetVanguard-cmd/CVE-2026-0745
s1g0day/ReportGenX
渗透测试报告生成工具 | language: Python | stars: 155 | forks: 21 | updated 2026-04-24T02:07:46Z | pushed 2026-04-24T02:12:13Z
ISC Stormcast For Friday, March 20th, 2026 https://isc.sans.edu/podcastdetail/9858, (Fri, Mar 20th)
NetVanguard-cmd/CVE-2026-26198
dmwlqzu2551/biyesheji2118
基于SpringBoot+Vue的java基于云平台的信息安全攻防实训平台 | language: JavaScript | stars: 0 | forks: 0 | updated 2026-04-03T07:32:38Z | pushed 2026-04-03T07:32:32Z
每日安全动态推送(26/3/19)
通过 snap-confine 与 systemd-tmpfiles 交互导致的 Root 权限提升漏洞分析；利用自定义字体投毒 AI 助手：利用渲染与 DOM 差异的攻击；联发科芯片曝严重安全漏洞：45秒即可窃取手机PIN码与加密资产
CVE-2026-5160
tangjie1/tang-darkweapon
唐门·暗之器 — 网络安全可视化工具集 · FOFA 资产测绘 + Nuclei 漏洞扫描 · Python + PyQt6 | language: Python | stars: 8 | forks: 1 | updated 2026-04-08T16:41:30Z | pushed 2026-04-02T07:43:14Z
OpenClaw热潮之下，Lua窃密软件精心伪装乘虚而入
前段时间兴起的 OpenClaw 热潮引发大量关注，不少人纷纷尝试安装体验。一些攻击者也嗅到了可趁之机，将恶意软件用 OpenClaw 相关话题进行伪装，诱使不明真相的用户运行使用，最终实现敏感数据窃取等目的。
0xBlackash/CVE-2026-22241
CVE-2026-22241
Zer08Bytes/AegisScan
AegisScan是一款“自动化”的“渗透测试”扫描工具。 | stars: 48 | forks: 3 | updated 2026-04-03T03:48:36Z | pushed 2026-04-02T14:39:27Z
ISC Stormcast For Thursday, March 19th, 2026 https://isc.sans.edu/podcastdetail/9856, (Thu, Mar 19th)
cyberheartmi9/CVE-2026-4631-cockpit-RCE
Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection | language: Python
hsgezz554/biyesheji2118
基于SpringBoot+Vue的java基于云平台的信息安全攻防实训平台 | language: JavaScript | stars: 0 | forks: 0 | updated 2026-04-03T03:34:06Z | pushed 2026-04-03T03:34:01Z
Interesting Message Stored in Cowrie Logs, (Wed, Mar 18th)
This activity was found and reported by BACS student Adam Thorman as part of one of his assignments which I posted his final paper [1] last week. This activity appeared to only have occurred on the 19 Feb 2026 where at ...
Nxploited/CVE-2026-0920
LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter | language: Python
zhpqrb06708/biyesheji2118
【计算机毕业设计_软赛】基于SpringBoot+Vue的java基于云平台的信息安全攻防实训平台【毕业设计源码 毕业设计论文 毕业设计完整项目 可运行 二次开发 前后端 毕业设计、本科毕业设计、毕业设计源码、毕业设计论文、java 毕业设计、springboot 毕业设计、vue 毕业设计、wms、仓储管理系统、仓库管理系统、智能仓储、物流管理系统、库存管理、出入库管理、供应链管理、springboot、vue、vue3、elemen...
Scans for "adminer", (Wed, Mar 18th)
A very popular target of attackers scanning our honeypots is "phpmyadmin". phpMyAdmin is a script first released in the late 90s, before many security concepts had&#;x26;#;xc2;&#;x26;#;xa0;been discovered. It&#;x26;#;39;...