momo安全漏洞库

多模块数据检索平台

登录 注册
共聚合 4983 条情报 漏洞监控 3185 / 网安开源项目 1553 / 威胁情报 245

漏洞监控

来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。

3185总量

网安开源项目

优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。

1553总量

威胁情报

来自 360、奇安信、斗象等官方站点的公开情报聚合。

245总量
Introduce additional @Nested tests in test suite
Since #12470 has been resolved and due to the general support for automatically inheriting test configuration from enclosing classes for JUnit Jupiter `@Nested` tests in Spring Framework 5.3, it would be good to have mor...
本页此列暂无更多数据
本页此列暂无更多数据
yallasec/CVE-2026-21627---Tassos-Novarain-Framework-plg_system_nrframework-Exploit---Joomla
Vulnerability: Unauthenticated Arbitrary PHP File Inclusion via ajaxTaskInclude() | language: Python
Using @AutoConfigureWebTestClient prevents separate configuration of spring.test.webtestclient.timeout from taking effect
Spring Boot 4 introduced the `@AutoConfigureWebTestClient` Annotation. Using this annotation prevents binding of the configuration property `spring.test.webtestclient.timeout` from other properties sources (`application...
estebanzarate/CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC
Unauthenticated remote code execution vulnerability in Wing FTP Server <= 7.4.3. | topics: cve-2025-47812 | language: Python
kolteq/nodes-proxy-get-rce-fix
Fix the Kubernetes Nodes/Proxy GET RCE, by using Istio Service Mesh! | topics: helm, kubernetes, security | homepage: https://kolteq.com
Several reactive starters do not depend on springt-boot-reactor
I noticed this while troubleshooting why `spring.reactor.context-propagation=auto` wasn't working for me after upgrading to 4.0. IMHO, all starters for reactive technologies should also bring in Boot's reactor module.
av4nth1ka/jinjava-cve-2026-25526-poc
lab setup + exploits for CVE-2026-25526 | topics: cve, cve-2026-25526, java, jinjava | language: Java
Default value of AutoConfigureWebTestClient.timeout should be null
Spring Boot 4 introduced the `@AutoConfigureWebTestClient` Annotation. Using this annotation prevents binding of the configuration property `spring.test.webtestclient.timeout` from other properties sources (`application...
kriskimmerle/wheelaudit
Python Wheel File Security Scanner — scan .whl files for security issues before installation. Detects path traversal (CVE-2026-24049), RECORD tampering, command shadowing, secrets, zip bombs. Zero deps. | language: Pytho...
BiranPeretz/docling-core-CVE-2026-24009
Technical write-up and PoC for CVE-2026-24009, demonstrating unsafe YAML loading in docling-core and practical mitigation paths. | language: Python