Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
shinthink/CVE-2026-54390
CVE-2026-54390 — JTL Shop Smarty SSTI RCE | Pre-Auth Template Injection via fetch('string:' . ) | 5.2.0-5.7.1 | topics: cve, exploit, jtl-shop, mass-scanner, rce, smarty, ssti | language: Python
oscerd/CVE-2026-40860
Reproducer for CVE-2026-40860 — Apache Camel camel-jms/sjms/amqp JMS ObjectMessage unsafe deserialization (RCE) | topics: apache-camel, cve, proof-of-concept, security, vulnerability | language: Java
cain66666/openclaw-hardening-check
Offline, read-only hardening check for a self-hosted OpenClaw install — gateway exposure, auth, CVE-2026-25253. Never prints secrets, makes no network calls. | language: JavaScript
oscerd/CVE-2026-40859
Reproducer for CVE-2026-40859 — Apache Camel camel-netty-http / camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE) | topics: apache-camel, cve, proof-of-concept, security, vulnerability |...
Dr-D25/CVE-2026-49049
language: Shell
0x77FSec/CVE-2026-23744
language: Python
oscerd/CVE-2026-40858
Reproducer for CVE-2026-40858 — Apache Camel camel-infinispan remote aggregation repository unsafe deserialization (RCE) | topics: apache-camel, cve, proof-of-concept, security, vulnerability | language: Java
bugresearch/CVE-2026-50980
oPanel DNS-Based Cross-Site Scripting (XSS) & Session Hijacking | language: Python
bugresearch/CVE-2026-50979
oPanel Authanticated Remote Code Execution via 'advenced/curl' Component | language: Python
L4V4D0/CVE-2026-29519-Lucee-Reflected-XSS
Proof of Concept for Reflected XSS in Lucee CFML (CVE-2026-29519)
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
haoliyang/llm-redteam-range
llm-redteam-range 是一个开源的 LLM 红队教学靶场，以 DeepSeek为后端，用一个 Go 单二进制 + 浏览器，练习 **提示词注入、人设瓦解、编码绕过、间接注入、输出过滤绕过 等真实大模型攻击手法。每关藏一个 flag，诱导模型说出来即过关。 | stars: 0 | forks: 0 | updated 2026-07-12T03:55:43Z | pushed 2026-07-12T03:55:39Z
PAOPAO789/red-team
红队agent 训练中 | language: Python | stars: 0 | forks: 0 | updated 2026-07-12T09:32:42Z | pushed 2026-07-12T09:32:36Z
veriyoung/ai-redteam
AI安全自动化红队测试工具 - 像写单元测试一样测试你的AI安全 | topics: adversarial-attacks, ai-safety, ai-security, cybersecurity, jailbreak, llm, llm-security, owasp, pentesting, prompt-injection, python, red-team, security-tools | language: Pytho...
brentberli/JukgRZxEhs
【Python计算机毕业设计分享】基于Python的web渗透漏洞扫描工具研究与应用，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-07-11T15:04:26Z | pushed 2026-07-11T15:04:19Z
2681244490-droid/vulscan-platform
企业级 Web 漏洞扫描平台，提供目标管理、漏洞扫描、报告生成等功能。 技术栈： - 后端：Rust + Actix-web + PostgreSQL + SQLx - 前端：React + TypeScript + Ant Design + Vite + Tailwind CSS - 功能模块：认证服务、扫描引擎、任务调度、插件系统 | language: Rust | stars: 1 | forks: 0 | updated 20...
xiabai2004/RayScan
RayScan 2.0 — 开箱即用的 Web 漏洞扫描器 | SQLi/XSS/命令注入/LFI/SSRF/XXE/RCE/API安全 | 多引擎聚合(Nuclei/sqlmap/ffuf)+MSF验证链+Profile扫描配置 | CLI+Web UI双模式 | Metasploitable 2实战验证发现83漏洞 | topics: bug-bounty, command-injection, dvwa, lfi-detectio...
rfgg45634/sftool
一个简易的安全工具，正在不断更新中 | language: Python | stars: 0 | forks: 0 | updated 2026-07-12T00:36:26Z | pushed 2026-07-12T00:36:23Z
JinChengZ18/resume-grill
An Agent Skill for grilling resumes: feed it one or more resume PDFs and it produces a three-piece interview kit: an interview guide, a printable scorecard, and Q&A attack-defense cards.拷打你简历的 Agent Skill：喂进一份或多份简历 PDF，产...
w-sega/Kafka_Scan_Gui
一个基于 Python Tkinter 的 Kafka 图形化测试工具，用于批量检测 Kafka 目标、获取 topic 列表，可选获取 topic 消息详情，在内网攻防中快速证明kafka成果。 | language: Python | stars: 1 | forks: 0 | updated 2026-07-15T16:45:36Z | pushed 2026-07-10T10:55:17Z
SecLeap/offensive-security
攻防与渗透测试 | stars: 1 | forks: 0 | updated 2026-08-06T07:01:12Z | pushed 2026-07-11T05:16:36Z