Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Chromium: CVE-2026-15132 Uninitialized Use in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15115 Insufficient validation of untrusted input in WebAppInstalls
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15113 Use after free in Autofill
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15109 Uninitialized Use in ANGLE
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15133 Use after free in InterestGroups
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15131 Insufficient data validation in Navigation
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15130 Insufficient policy enforcement in Navigation
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15129 Use after free in Views
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15128 Inappropriate implementation in Forms
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15127 Inappropriate implementation in WebGL
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
TikTok dedicated IP VPS:原生家宽IP绕过限流,0播放破零起号
创建者: aihon334
TikTok dedicated IP VPS:原生家宽IP绕过限流,0播放破零起号
暗网公开信息收集与威胁情报提取
创建者: Threat-Intelligence-monitor
暗网公开信息收集与威胁情报提取
京东商品评论爬虫,支持获取**带图评论**和**全部评论(含无图文字评论)**,通过 Edge 浏览器自动化绕过 H5ST 签名风控。
创建者: BH6340
京东商品评论爬虫,支持获取**带图评论**和**全部评论(含无图文字评论)**,通过 Edge 浏览器自动化绕过 H5ST 签名风控。
MemShellParty 命令行客户端 + MCP 服务器:生成 Java 内存马、盲探测、连马验证、执行命令、传输文件,给 AI Agent和安全测试人员使用。
创建者: 7-e1even
MemShellParty 命令行客户端 + MCP 服务器:生成 Java 内存马、盲探测、连马验证、执行命令、传输文件,给 AI Agent和安全测试人员使用。
通用 MCP 红队 agent:对准任意 MCP server 的 SSE 端点,自动完成侦察→假设→攻击→验证→报告,产出可重放 PoC。DVMCP 只是回归 fixture,不是产品目标。
创建者: AKArrok
通用 MCP 红队 agent:对准任意 MCP server 的 SSE 端点,自动完成侦察→假设→攻击→验证→报告,产出可重放 PoC。DVMCP 只是回归 fixture,不是产品目标。
WEBSHELL COLECTION
创建者: PrCK27
WEBSHELL COLECTION
安卓手机远控项目——安卓端
创建者: wurenjia
安卓手机远控项目——安卓端
Stateless engineering monorepo: app runtime & compositor (webshell), benchmark runner, formatting, benchmark store, docs/wiki, provenance
创建者: stateless-engineering
Stateless engineering monorepo: app runtime & compositor (webshell), benchmark runner, formatting, benchmark store, docs/wiki, provenance
针对web渗透的agent
创建者: CuteeCat
针对web渗透的agent
Web shell for the stateless-engineering benchmark suite: discovery, health, spawn-on-demand
创建者: stateless-engineering
Web shell for the stateless-engineering benchmark suite: discovery, health, spawn-on-demand