momo安全漏洞库

多模块数据检索平台

登录 注册
共聚合 9360 条情报 漏洞监控 5554 / 网安开源项目 3806
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
jackalkarlos/EvilAhenk
CVE-2026-6508 LiderAhenk Merkezi Yönetim Sistemi mimarisinde, uç birimler (agents) arası tüm istemcilerin birbirleri üzerinde 'root' yetkisiyle kod çalıştırılmasına (unauthorized rce & lateral movement) olanak tanıyan kr...
portbuster1337/CVE-2026-52806
Gogs RCE via argument injection in git rebase (CWE-88) — Python PoC. CVE-2026-52806 | topics: argument-injection, cwe-88, exploit, gogs, pentest, rce, security | language: Python | homepage: https://www.rapid7.com/blog/p...
mmoobbeeiidat-design/Hack-The-Box-Nexus-Findings-Report
HTB_Nexus Penetration Test Report – Comprehensive security assessment documenting credential leakage from Gitea, CVE-2026-38526 exploitation in Krayin CRM, and privilege escalation via Gitea template sync directory trave...
imbas007/CVE-2026-48282
language: Python
0xjohnnydev/CVE-2026-20637-AppleSEPKeyStore-UAF
CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4) | topics: cve-2026-20637, ios, kernel, macos, security-research, use-after-free | language: Objective-C | homepage: https...
zeroxjf/CVE-2026-20637-AppleSEPKeyStore-UAF
CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4) | topics: cve-2026-20637, ios, kernel, macos, security-research, use-after-free | language: Objective-C | homepage: https...
Desireeontrial76/yellowkey-bitlocker
Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585. | topics: bitlocker, bitlocker-bypass, bitlocker-drive-encryption, bitlocker-dr...
Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC
Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go. | topics: authentication-bypass, cpanel, cpanel-exploit, cve, cve-2026-41940, cve-exploit, exploit, poc...
Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail
Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive. | topics: af-alg, container-security, copy-fail, cve-2026-31431, educational,...
Liverwortenuresis371/copyfail-rs
Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication. | topics: af-alg, auditd, copyfail, cve, cve-2026-31431, detection-engineering, ebpf...
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
lfz97/HackerTeam
HackerTeam 是一个面向专业渗透测试人员的 AI 驱动多智能体agent渗透测试自动化平台。它将大语言模型与本地命令执行能力结合,通过标准化的 PTES(渗透测试执行标准)工作流,自动化完成从信息收集到后渗透的完整攻击链。 | language: Go | stars: 13 | forks: 0 | updated 2026-09-09T09:07:12Z | pushed 2026-09-09T09:05:49Z
ijabyregra/WltrmQPFuE
【Java计算机毕业设计分享】基于Shiro框架的渗透测试管理系统,MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-07-03T16:56:53Z | pushed 2026-07-03T16:56:49Z
ijabyregra/XDGxeFbhzv
【Java计算机毕业设计分享】基于Jboss的渗透测试研究平台,MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-07-03T17:08:15Z | pushed 2026-07-03T17:08:11Z
eyebite4/mScHSwKKkK
【Java计算机毕业设计分享】基于Shiro框架的渗透测试管理系统,MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-07-04T06:51:17Z | pushed 2026-07-04T06:51:13Z
ctkqiang/QianKunQuan
乾坤圈 (QianKunQuan) 是一款功能强大的网络安全扫描工具,专为渗透测试人员、安全研究人员和系统管理员设计。它结合了高效端口扫描、服务识别、版本检测和CVE漏洞关联等核心功能,帮助您快速评估目标系统的安全状况。 | topics: china, chinese, ctkqiang, cyber, cybersecurity, go, golang, mysql, nmap, scanner, tcp, udp | langua...
eyebite4/dlOENJJQnD
【Java计算机毕业设计分享】基于Jboss的渗透测试研究平台,MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-07-04T07:05:11Z | pushed 2026-07-04T07:05:08Z
Q16G/aster
基于 ReAct 框架的安全分析 Agent,在终端中完成代码审计、渗透测试、主机防护 | language: Go | stars: 83 | forks: 7 | updated 2026-07-12T16:42:58Z | pushed 2026-07-12T16:42:36Z
sandhyaman/wpCbpZXHku
【Java计算机毕业设计分享】基于Python的终端防护对抗后渗透框架设计与实现,MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-07-04T11:57:41Z | pushed 2026-07-04T11:57:37Z
cao20031021/sec-study-notes
渗透测试流程、网络安全笔记等 | stars: 0 | forks: 0 | updated 2026-07-05T00:08:23Z | pushed 2026-07-05T00:08:19Z
Prohao42/aimy-skill
aimy-skill 是一个轻量级、可嵌入 AI Agent 的渗透测试辅助技能,专为授权环境下的自动化信息收集和基础漏洞探测设计。它可以被 AI 助手(如 AutoGPT、LangChain 应用)调用,也可以独立命令行运行。 | language: Python | stars: 168 | forks: 15 | updated 2026-09-10T16:16:31Z | pushed 2026-09-07T16:13:40Z