Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message
netfilter: synproxy: add mutex to guard hook reference counting
tc3650/CVE-2026-43499-armv7
language: C
chaitanyagarware/CVE-2026-54520
CVE-2026-54520 / GHSA-cm8g-8jfq-887p: ai-agent-automation workflow path traversal advisory landing page | topics: cve, ghsa, security-advisory, vulnerability-research | homepage: https://github.com/vmDeshpande/ai-agent-a...
chaitanyagarware/CVE-2026-54519
CVE-2026-54519 / GHSA-qv97-83w4-ff86: ai-agent-automation memory authorization advisory landing page | topics: cve, ghsa, security-advisory, vulnerability-research | homepage: https://github.com/vmDeshpande/ai-agent-auto...
chaitanyagarware/CVE-2026-50181
CVE-2026-50181 / GHSA-fg23-3346-88f5: Langroid path traversal advisory landing page | topics: cve, ghsa, security-advisory, vulnerability-research | homepage: https://github.com/langroid/langroid/security/advisories/GHSA...
chaitanyagarware/CVE-2026-50131
CVE-2026-50131 / GHSA-xw9q-2mv6-9fr8: Fedify incomplete SSRF mitigation advisory landing page | topics: cve, ghsa, security-advisory, vulnerability-research | homepage: https://github.com/fedify-dev/fedify/security/advis...
0xBlackash/CVE-2026-43499
CVE-2026-43499 | language: Python
mirackayikci/CVE-2026-52658
CVE-2026-52658 — AureusERP Stored XSS
Usman0220/CVE-2026-33017-Langflow-RCE
CVE-2026-33017 - Langflow < 1.9.0 Unauthenticated RCE PoC | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
zzomega/NCRT
一个集成化越狱红队测试平台 | stars: 0 | forks: 0 | updated 2026-06-29T11:06:54Z | pushed 2026-06-26T03:59:57Z
xiaokan0231-max/examined-life
用 AI 审视自己的人生：一套完整方法论（复盘决策、建人物档案、AI 红队自审、写成小说）+ 本地档案阅读器。所有示例均为虚构。 | language: HTML | stars: 0 | forks: 0 | updated 2026-07-12T12:07:40Z | pushed 2026-07-12T12:07:36Z
Z2E-Agent/z2e-mcp
Z2E-MCP is built on a multi-agent architecture that utilizes MCP and runs over 100+ security tools. | language: Go | stars: 0 | forks: 0 | updated 2026-07-07T11:59:56Z | pushed 2026-07-07T11:59:43Z
johnhuang-TSA/supply-chain-agent-3d
供應鏈攻防戰 - AI Agent 作戰指揮中心 3D 教育訓練網站 (single-file Three.js) | language: HTML | stars: 0 | forks: 0 | updated 2026-06-11T13:14:19Z | pushed 2026-06-11T13:13:51Z
Industry-International/Attack-Defense-ResourcePacks
攻防战地图资源包 | stars: 0 | forks: 0 | updated 2026-06-12T11:03:45Z | pushed 2026-06-12T11:08:06Z
Allen402/court
法庭攻防戰 | language: HTML | stars: 0 | forks: 0 | updated 2026-06-13T18:24:12Z | pushed 2026-06-13T18:23:08Z
atk7r/Guanlan
Guanlan（观澜）是一个面向授权攻防演练与暴露面治理的 OSINT 资产测绘、验证和报告工具。 | language: Python | stars: 2 | forks: 0 | updated 2026-06-13T21:15:59Z | pushed 2026-06-13T21:15:55Z
Bouquets-ai/StrikeAgent-Web
StrikeAgent 产品展示站点 —— 面向攻防的智能体平台介绍页（纯前端，无后端 API）。 | language: TypeScript | stars: 0 | forks: 0 | updated 2026-06-14T04:31:17Z | pushed 2026-06-14T04:32:29Z
brentberli/jyqJbCUmMl
【Java计算机毕业设计分享】基于SpringBoot+Vue浏览器攻防平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-06-14T05:41:16Z | pushed 2026-06-14T05:41:12Z
fgfhr/OpenWAF-Sec-SecondaryDev
基于 OpenResty 开源 WAF 二次开发，联动 DVWA 完成 OWASP Top10 全场景攻防测试 | stars: 0 | forks: 0 | updated 2026-06-15T10:07:45Z | pushed 2026-06-15T10:07:41Z