Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Chromium: CVE-2026-16421 Inappropriate implementation in WebAudio
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16420 Type Confusion in WebAudio
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16419 Out of bounds read and write in ANGLE
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16418 Stack buffer overflow in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16417 Uninitialized Use in Skia
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16416 Integer overflow in Chromecast
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16415 Insufficient validation of untrusted input in Extensions
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16414 Insufficient validation of untrusted input in Chromecast
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-16413 Out of bounds write in ANGLE
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for mo...
BiiTts/POC-CVE-2026-65971
Proof-of-concept and technical write-up for CVE-2026-65971 — SQL injection via the sortDirection Livewire property in power-components/livewire-powergrid (< 6.10.4) | topics: cve, cve-2026-65971, laravel, livewire, poc, ...
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
WorkBuddy skill: 在 Windows 上绕过 fcntl 缺陷,用开放 API 手动安装小红书 RedSkill 商店技能。
创建者: john-song666
WorkBuddy skill: 在 Windows 上绕过 fcntl 缺陷,用开放 API 手动安装小红书 RedSkill 商店技能。
一份涵盖文件上传漏洞原理、upload-labs靶场实战、防护方案与心得的系统学习笔记。 适合Web安全入门者阅读,同样可作为面试准备的技术展示材料。
创建者: xzhibo99-code
一份涵盖文件上传漏洞原理、upload-labs靶场实战、防护方案与心得的系统学习笔记。 适合Web安全入门者阅读,同样可作为面试准备的技术展示材料。
涵盖 SSRF、SSTI、XXE 三种服务端侧漏洞的原理、实战、防护与心得的系统学习笔记。 适合 Web 安全入门者阅读,同样可作为面试准备的技术展示材料。
创建者: xzhibo99-code
涵盖 SSRF、SSTI、XXE 三种服务端侧漏洞的原理、实战、防护与心得的系统学习笔记。 适合 Web 安全入门者阅读,同样可作为面试准备的技术展示材料。
一个基于 Qwen3.6 的防御型网络安全告警研判助手,可以分析本地安全日志,识别可疑行为,并生成 AI 辅助的事件分析报告和处置建议。
创建者: Ezcanpro
一个基于 Qwen3.6 的防御型网络安全告警研判助手,可以分析本地安全日志,识别可疑行为,并生成 AI 辅助的事件分析报告和处置建议。
白璧是一个非常强大的封号工具,依照白璧制作者请求,破解白璧为白璧找出漏洞
创建者: KookyC
白璧是一个非常强大的封号工具,依照白璧制作者请求,破解白璧为白璧找出漏洞
给 AI Agent 的渗透测试实战操作系统——基于证据决策,像高级工程师一样思考,而不是机械执行工具清单
创建者: MWDLH
给 AI Agent 的渗透测试实战操作系统——基于证据决策,像高级工程师一样思考,而不是机械执行工具清单
AI 驱动的公众号运营工作流方法论:v7.4 八步主流程 + 增强版多 Agent 协作(TeamCreate + 对抗式红队审查 + 主编复核)+ 专家团架构实战 + ADLR 文档审查 + 经验沉淀法
创建者: crailstubler-wq
AI 驱动的公众号运营工作流方法论:v7.4 八步主流程 + 增强版多 Agent 协作(TeamCreate + 对抗式红队审查 + 主编复核)+ 专家团架构实战 + ADLR 文档审查 + 经验沉淀法
面向 AI 生成代码的安全审查 skill,以及一套按「发现难度」而非漏洞类型分档的评测基准方法论
创建者: laolaohe
面向 AI 生成代码的安全审查 skill,以及一套按「发现难度」而非漏洞类型分档的评测基准方法论
个人网络安全渗透测试学习空间 My Cyber Security & Penetration Testing Learning Workspace
创建者: MostimarkQ
个人网络安全渗透测试学习空间 My Cyber Security & Penetration Testing Learning Workspace
跨境宠物帮带信息收集网站交互设计稿
创建者: czc6666
跨境宠物帮带信息收集网站交互设计稿