Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
0xCyberstan/CVE-2026-53360-POC
PoC for CVE-2026-53360: guest-triggered heap out-of-bounds read/write in KVM SEV-SNP Page State Change (PSC) handling. | language: C
Mkps/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC
This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attacker to upload a malicious module via the module update functio...
0xCyberstan/CVE-2026-31694-POC
Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a page-cache page by 24 bytes. PoC plus an unprivileged local-root exploit via /etc/passwd page-cache corruption. Ru...
yayip/CVE-2026-33017
PoC of Langflow CVE-2026-33017 | language: Shell
aquace/CVE-2026-41940-PoC
CVE-2026-41940 authentication bypass vulnerability proof-of-concept | topics: cpanel, cve, cve-2026-41940, cve-2026-41940-poc | language: Python
murrez/CVE-2026-6433
PoC for CVE-2026-6433: WordPress FlipperCode Custom CSS, JS & PHP (≤2.0.7) — unauthenticated SQLi to RCE. Python 3 stdlib; single target or bulk multi-threaded scanning. Authorized testing & research only. | language: Py...
shaheryar773/mitigate-cve-2026-23869-react-server-component-loops
Technical troubleshooting repository for fixing infinite rendering vulnerability loops and resource exhaustion threats under CVE-2026-23869 cleanly.
Nxploited/CVE-2026-12416-CVE-2026-12417
Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter | Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account T...
0xFuffM3/CVE-2026-31635-DirtyDecrypt
language: C
0xBlackash/CVE-2026-31635
CVE-2026-31635 | language: C
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
ANAISMUSE/ssti-scanner
Jinja2 SSTI 漏洞扫描 & RCE Payload 生成器 | language: Python | stars: 0 | forks: 1 | updated 2026-06-12T05:21:25Z | pushed 2026-06-12T05:21:22Z
AukSoryu/xss_scanner
一款功能完整的 XSS 漏洞扫描器，支持反射型、存储型、DOM 型 XSS 检测，具备动态爬虫、上下文感知 Payload、并发扫描、中断恢复、多格式报告等高级特性。 | language: Python | stars: 2 | forks: 1 | updated 2026-06-12T06:01:39Z | pushed 2026-06-12T06:01:34Z
zyjzyj78/wscan
Web漏洞扫描器 | stars: 0 | forks: 1 | updated 2026-06-14T04:37:39Z | pushed 2026-06-14T04:37:35Z
rayabeciga/YxBVdfbJzI
【Python计算机毕业设计分享】基于Python的漏洞扫描系统，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 0 | forks: 0 | updated 2026-06-14T22:07:41Z | pushed 2026-06-14T22:07:37Z
brentberli/vhjaTgZUgS
【Python计算机毕业设计分享】基于Python的web渗透漏洞扫描工具研究与应用，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-06-15T15:14:54Z | pushed 2026-06-15T15:14:33Z
doomispawd/BBLLIBiJbK
【Java计算机毕业设计分享】基于SSM的漏洞扫描器管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 | stars: 1 | forks: 0 | updated 2026-06-15T21:26:02Z | pushed 2026-06-15T21:25:58Z
ma-scanner/lightscan-scanner
一个轻量级web漏洞扫描工具 | language: Jupyter Notebook | stars: 0 | forks: 0 | updated 2026-06-16T01:23:18Z | pushed 2026-06-16T01:23:14Z
z50n6/StiffEyes
Chrome 扩展：页面资产梳理 · 技术指纹识别 · Spring/Webpack 探测 · 云存储漏洞扫描 · 实战 Payload 字典。仅限授权安全测试。 | language: JavaScript | stars: 25 | forks: 2 | updated 2026-09-03T06:51:47Z | pushed 2026-07-22T13:57:05Z
ilovewxl/ezscanf
一个简单的漏洞扫描器 | language: Python | stars: 1 | forks: 0 | updated 2026-06-17T05:45:07Z | pushed 2026-06-17T05:45:04Z
Chhhhhhhhhhhhhhh/WebVulnScanner
Python Web漏洞扫描器 - 支持SQL注入/XSS检测、安全头检查、敏感文件扫描、服务指纹识别，内置SSRF防护 | language: Python | stars: 0 | forks: 0 | updated 2026-06-17T06:46:23Z | pushed 2026-06-17T06:46:19Z