Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
lamaper/CVE-2026-52199
oscerd/CVE-2026-46588
Reproducer for CVE-2026-46588: Apache Camel camel-couchdb CouchDb* header injection (operation confusion) subverting a write-only endpoint into read + delete of arbitrary documents (fixed in 4.14.8/4.18.3/4.21.0) | topic...
0Linear/CVE-2026-62958
language: Python
oscerd/CVE-2026-46587
Reproducer for CVE-2026-46587: Apache Camel camel-couchbase CCB_* header injection enabling document disclosure, tampering, and TTL-forced data destruction (fixed in 4.14.8/4.18.3/4.21.0) | topics: apache-camel, cve, pro...
ctn-Qvo/CVE-2026-43499-so-build
language: C
arpit-bansal15/cve-2026-48282-pentest-lab
c0gnit00/CVE-2026-59827
Blog on CVE-2026-59827, Unsafe H2 query ouput deserialization
oscerd/CVE-2026-46585
Reproducer for CVE-2026-46585: Apache Camel camel-lucene QUERY header injection enabling authorization bypass / index data exfiltration (fixed in 4.14.8/4.18.3/4.21.0) | topics: apache-camel, cve, proof-of-concept, secur...
0xjohnnydev/WebKit-NavigationAPI-SOP-Bypass
WebKit NavigateEvent.canIntercept SOP bypass via cross-port interception — iOS 26.3.1 BSI (CVE-2026-20643) | language: HTML
HORKimhab/CVE-2026-15410
CVE-2026-15410 - More: https://github.com/HORKimhab/poc-cve-collection | language: Python | homepage: https://thehackernews.com/2026/07/two-sonicwall-sma-1000-zero-days.html
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
LeisureLinux/ebook-procfs-hardening
开源电子书：Linux /proc 攻防纵深。攻击链 → 五层防御 → Prometheus + eBPF 可观测性 → 容器安全 → CIS/NIST 合规。附一键审计脚本。 | topics: bastion-host, cis-benchmark, container-security, devsecops, ebpf, kernel-security, linux-hardening, linux-security, nist-...
sunjuan189-34r/ai-cyber-war-game
AI 网络攻防兵棋推演 — 企业级 GenAI 部署(RAG 助手 + 运营 Agent)的红蓝对抗安全评估,对标 OWASP LLM Top 10 / NIST AI RMF / MITRE ATLAS | stars: 1 | forks: 0 | updated 2026-08-10T04:53:19Z | pushed 2026-07-23T14:53:34Z
TrueFurina/xuandun-cyber-range
玄盾 XUANDUN · AI 攻防靶场系统 — 面向红蓝对抗训练的 AI 攻防靶场 / 多智能体强化学习 | language: JavaScript | stars: 4 | forks: 0 | updated 2026-08-28T11:14:43Z | pushed 2026-08-16T02:52:52Z | homepage: https://github.com/TrueFurina/xuandun-cyber-rang...
d0ctorsec/RedTeamAttackChainMapper
一款红队攻防资产管理小工具，解决攻防资产没有图形化的问题，以图文信息管理信息，方便制定攻击方向。 | language: HTML | stars: 41 | forks: 6 | updated 2026-08-29T09:38:34Z | pushed 2026-08-04T03:27:00Z
Wenruyuan/world-geography-game
世界地理战略推演游戏——回合制战略博弈，75 城手绘世界地图，双人对战/人机对战，隐藏信息盲下，连锁攻击，1.5× 攻防模型。 World Geography Strategic Simulation — Turn-based strategy game with 75 hand-placed world cities. PvP & PvE modes, fog-of-war planning, chain attacks, recip...
daojiao007/web3-attack-matrix
Web3安全攻防测试矩阵-5类链上攻击完整验证 | language: Solidity | stars: 0 | forks: 0 | updated 2026-07-28T09:51:44Z | pushed 2026-07-28T09:51:05Z
zhangbeilin22-sketch/agentguard-lab
面向大模型 Agent 的提示词注入攻防与安全评测实验室，支持工具调用审计、权限控制、敏感数据防泄漏和批量评测。 | language: Python | stars: 2 | forks: 1 | updated 2026-07-25T07:12:38Z | pushed 2026-07-16T03:08:43Z
Swyu22/ChesSight
国际象棋攻防可视化训练器 — real-time attack/defense visualization chess trainer | language: JavaScript | stars: 1 | forks: 0 | updated 2026-09-06T07:18:18Z | pushed 2026-09-06T07:18:15Z
buzhimingdeaikun/Security-Tools
本仓库记录了我学习 Python 网络安全开发的完整过程，包含 30 天从基础到实战的练习代码与安全工具。 | language: Python | stars: 1 | forks: 0 | updated 2026-07-16T12:16:01Z | pushed 2026-07-15T14:02:18Z
flclash-us/privacy-tools-xmnrl2
隐私保护与安全工具集 - 广告拦截、DNS加密、防追踪、密码管理全攻略 | language: HTML | stars: 0 | forks: 0 | updated 2026-07-17T06:44:56Z | pushed 2026-07-17T06:44:51Z | homepage: https://flclash-us.github.io/privacy-tools-xmnrl2/