Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Chromium: CVE-2026-13943 Uninitialized Use in CSS
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-13939 Insufficient validation of untrusted input in WebShare
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-13936 Inappropriate implementation in Passwords
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-13932 Inappropriate implementation in Sharing
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-13929 Insufficient validation of untrusted input in DevTools
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-13927 Insufficient validation of untrusted input in UI
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for mo...
kx00007/CVE-2026-39938
Pre-authentication LFI Lead to RCE
1beelze/CVE-2026-14894
language: Python
ExDev994/CVE-2026-0740-mass
PoC untuk CVE-2026-0740: Ninja Forms File Uploads <= 3.3.26 — Unauthenticated Arbitrary File Upload yang dapat mengarah ke RCE. | language: Python
dua2z3rr/CVE-2026-29000-PoC
CVE-2026-29000 - pac4j-jwt (< 4.5.9 / < 5.7.9 / < 6.3.3) JwtAuthenticator authentication bypass PoC | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
高中生物渗透作用 2D 交互模拟器 v0.1.0
创建者: doubao432
高中生物渗透作用 2D 交互模拟器 v0.1.0
Find and remove web malware, webshells, and backdoors. A fast, dependency-free malware scanner and quarantine tool by JayHackPro.
创建者: JayHackPro
Find and remove web malware, webshells, and backdoors. A fast, dependency-free malware scanner and quarantine tool by JayHackPro.
一款捷途车机的ADB管理工具，可以绕过限制直接打开ADB
创建者: jyz0501
一款捷途车机的ADB管理工具，可以绕过限制直接打开ADB
基于ESP32‑S3边缘AI与LoRa自组织网络的地震监测与应急响应系统，具备边缘推理、多节点融合定位、断网自治通信和应急告警能力。
创建者: Alisa-luna
基于ESP32‑S3边缘AI与LoRa自组织网络的地震监测与应急响应系统，具备边缘推理、多节点融合定位、断网自治通信和应急告警能力。
PowerArtist 使用过程中积累的 Tcl 脚本与绕过工具
创建者: ZhidongMiao
PowerArtist 使用过程中积累的 Tcl 脚本与绕过工具
飞书 / Lark 文档复刻 Skill:把任何你能查看的 Docx / Wiki 文档克隆到自己的飞书账号,仅需查看权限,不绕过权限。基于 lark-cli。
创建者: yilane
飞书 / Lark 文档复刻 Skill:把任何你能查看的 Docx / Wiki 文档克隆到自己的飞书账号,仅需查看权限,不绕过权限。基于 lark-cli。
通过字典枚举方式对目标站点进行目录遍历，支持状态码识别与超时控制，用于渗透测试前期信息收集阶段
创建者: buzhimingdeaikun
通过字典枚举方式对目标站点进行目录遍历，支持状态码识别与超时控制，用于渗透测试前期信息收集阶段
NLP-based detection of web defacement and obfuscated webshells (ROT13, base64, etc.) for any PHP application.
创建者: yogiex
NLP-based detection of web defacement and obfuscated webshells (ROT13, base64, etc.) for any PHP application.
AgentRouter 自动签到 - 走代理绕过WAF，无需Playwright
创建者: btpp03
AgentRouter 自动签到 - 走代理绕过WAF，无需Playwright
AlterHive（幻巢）是一款面向攻防演练、红蓝对抗和安全研究场景的高交互智能欺骗蜜罐平台。平台以虚拟拓扑、会话记忆、规则引擎和多 Agent 欺骗规划为核心，将攻击者的 SSH、扫描、横向移动、凭据搜索、服务探测等行为引导进可控的“子网幻象”环境中，通过渐进式证据投放、影子资产生成、失败点控制和可视化审计，帮助防守方观察攻击意图、拖延攻击节奏、保护真实目标。
创建者: Fausto-404
AlterHive（幻巢）是一款面向攻防演练、红蓝对抗和安全研究场景的高交互智能欺骗蜜罐平台。平台以虚拟拓扑、会话记忆、规则引擎和多 Agent 欺骗规划为核心，将攻击者的 SSH、扫描、横向移动、凭据搜索、服务探测等行为引导进可控的“子网幻象”环境中，通过渐进式证据投放、影子资产生成、失败点控制和可视化审计，帮助防守方观察攻击意图、拖延攻击节奏、保护真实目标。