Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15123 Insufficient data validation in DOM
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15121 Use after free in WebRTC
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15122 Insufficient validation of untrusted input in Codecs
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15120 Use after free in Core
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15119 Inappropriate implementation in GetUserMedia
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15118 Use after free in Input
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-15117 Use after free in Payments
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-13037 Use after free in WebView
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-13032 Use after free in WebGL
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
网络安全服务与系统集成项目管理平台
创建者: kurumi29
网络安全服务与系统集成项目管理平台
网络安全的笔记之类的
创建者: SylverQG
网络安全的笔记之类的
Full penetration test — FTP anonymous login, WebDAV file upload, PHP webshell RCE, bash reverse shell, SUID wget privilege escalation to root. Includes vulnerability summary and remediation.
创建者: malathi-cyber-sketch
Full penetration test — FTP anonymous login, WebDAV file upload, PHP webshell RCE, bash reverse shell, SUID wget privilege escalation to root. Includes vulnerability summary and remediation.
Rshell是一款开源的golang编写的支持多平台的C2框架,旨在帮助安服人员渗透测试、红蓝对抗。
创建者: Rubby2001
Rshell是一款开源的golang编写的支持多平台的C2框架,旨在帮助安服人员渗透测试、红蓝对抗。
密探渗透测试工具包含资产信息收集,子域名爆破,搜索语法,资产测绘(FOFA,Hunter,quake, ZoomEye),指纹识别,敏感信息采集,文件扫描、端口扫描、弱口令破解、jwt密钥爆破、sesionkey加解密、批量信息权重查询、密码字典等功能
创建者: kkbo8005
密探渗透测试工具包含资产信息收集,子域名爆破,搜索语法,资产测绘(FOFA,Hunter,quake, ZoomEye),指纹识别,敏感信息采集,文件扫描、端口扫描、弱口令破解、jwt密钥爆破、sesionkey加解密、批量信息权重查询、密码字典等功能
合规优先的SRC漏洞挖掘Skill | Compliance-first SRC hunting skill for AI assistants
创建者: 2718043361-gif
合规优先的SRC漏洞挖掘Skill | Compliance-first SRC hunting skill for AI assistants
基于天狐渗透工具箱二次开发的一体化信息收集工具
创建者: jiege56
基于天狐渗透工具箱二次开发的一体化信息收集工具
确定性故事生成引擎:基于因果逻辑审计的叙事生成工具,保持角色性格与剧情发展完全一致,彻底消除逻辑漏洞与设定冲突,适用于游戏叙事、影视剧本创作、互动小说、IP内容生产、AIGC内容生成场景。
创建者: nohn3043-arch
确定性故事生成引擎:基于因果逻辑审计的叙事生成工具,保持角色性格与剧情发展完全一致,彻底消除逻辑漏洞与设定冲突,适用于游戏叙事、影视剧本创作、互动小说、IP内容生产、AIGC内容生成场景。
SecMentor 网络安全学习辅助项目,用于安全知识整理、实验脚本与学习案例汇总
创建者: ftz-0416
SecMentor 网络安全学习辅助项目,用于安全知识整理、实验脚本与学习案例汇总
2026年网络安全宣传周小游戏
创建者: baobaotql
2026年网络安全宣传周小游戏