Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
ChPratik/CVE-2026-50522
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
dnlid/CVE-2026-43499
CVE-2026-43499: Linux kernel futex PI use-after-free research package | language: C
soralis0912/CVE-2026-43499-pmg110-root
language: C
soralis0912/CVE-2026-43499-warhol-root
language: C
5kr1pt/glpi-logbleed
PoC for CVE-2026-53629, blind SQL injection in the GLPI history log filter | topics: cve-2026-53629, glpi, poc, security, sql-injection, vulnerability-research | language: Python | homepage: https://medium.com/@5kr1pt/re...
riddhimaan-sth404/CVE-2026-57973
CVE-2026-57973 is a medium-severity (CVSS 6.3) TOCTOU race condition flaw in Windows Subsystem for Linux (WSL2). It allows a local, low-privileged attacker to bypass security boundaries and perform unauthorized kernel-le...
zer0dayf/CVE-2026-65008
CVE-2026-65008 | language: Python
javokhir-sec/CVE-PoC-Hub
🛡️ CVE Proof-of-Concept Hub — 21 security advisories · 80+ vulnerabilities · 19 CVEs under review · 1 PUBLISHED (CVE-2026-66412) | topics: bug-bounty, cve, exploit, poc, proof-of-concept, security, vulnerability | langua...
marcgoam/CVE-2026-54121-CertiGhost
CVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse. | language: Python
ChPratik/CVE-2026-9830
The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowin...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
aquverdy2h/UFFlhboCUi
【Java计算机毕业设计分享】基于Jboss的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-08-02T06:17:07Z | pushed 2026-08-02T06:16:09Z
kkld1684qw/BrTdpLxnkh
【Python计算机毕业设计分享】基于Python的Web安全渗透测试系统，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-08-02T06:52:45Z | pushed 2026-08-02T06:52:24Z
id650bchqk/GYbUIccCmF
【Java计算机毕业设计分享】基于Python的后渗透框架设计与实现，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-08-02T08:44:22Z | pushed 2026-08-02T08:43:59Z
hello-xiaoniao/WMP-pentest-automation
ai自动化渗透小程序，解决了微信小程序更新后偏移值改变导致的注入失败 | stars: 56 | forks: 9 | updated 2026-08-19T02:57:20Z | pushed 2026-08-17T04:45:01Z
tqjeff/qingtianzhu-toolbox
擎天柱工具箱 · AI 安全技能路由器(渗透优先) — 逆向/渗透/CTF 一体,融合 41 个安全仓库方法论,读 AI-AUTO-SETUP.md 即自动装配 | stars: 0 | forks: 0 | updated 2026-08-02T15:37:45Z | pushed 2026-08-02T15:07:30Z
kkbo8005/mitan
密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（聚合测绘，FO FA，Hunter，Quake,Zoomeye,DayDayMap,censys,shodan, 零零信安），指纹识别，敏感信息采集，文件扫描、端口扫描、弱口令破解、jwt密钥爆破、Sessionkey,heapdump, 微信小程序，密码本，随机用户，社工字典,AI渗透（MCP、代码审计）等功能 | stars: 1985 | forks: 135 | ...
jiege56/RedTeam-Recon
基于天狐渗透工具箱二次开发的一体化信息收集工具 | language: Python | stars: 2 | forks: 0 | updated 2026-08-04T20:25:57Z | pushed 2026-08-03T14:25:46Z
litsasuk/Makit
一个快速启动渗透测试脚本、程序和工具的控制台 | language: Python | stars: 1 | forks: 0 | updated 2026-08-03T09:23:22Z | pushed 2026-08-03T09:22:18Z
do-whilefor/Jase-SecKit
面向授权安全测试、AI 辅助渗透测试与漏洞研究的可复用 Security Skills 。 | topics: ai-security, bug-bounty, claude-code | language: Python | stars: 7 | forks: 1 | updated 2026-08-24T01:04:46Z | pushed 2026-08-24T01:04:42Z | homepage: https://githu...
Wzzm-123/web-scanner
一个从零开始编写的Web漏洞扫描器，支持多线程、数据库存储和报告生成。 | language: Python | stars: 3 | forks: 0 | updated 2026-09-06T12:57:24Z | pushed 2026-09-06T12:55:14Z