Intelligence Digest
威胁情报
统一威胁情报视图,聚合漏洞监控、网安开源项目与官方源情报
漏洞监控
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
3185总量
网安开源项目
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
1553总量
威胁情报
来自 360、奇安信、斗象等官方站点的公开情报聚合。
245总量
Introduce additional @Nested tests in test suite
Since #12470 has been resolved and due to the general support for automatically inheriting test configuration from enclosing classes for JUnit Jupiter `@Nested` tests in Spring Framework 5.3, it would be good to have mor...
本页此列暂无更多数据
本页此列暂无更多数据
yallasec/CVE-2026-21627---Tassos-Novarain-Framework-plg_system_nrframework-Exploit---Joomla
Vulnerability: Unauthenticated Arbitrary PHP File Inclusion via ajaxTaskInclude() | language: Python
Using @AutoConfigureWebTestClient prevents separate configuration of spring.test.webtestclient.timeout from taking effect
Spring Boot 4 introduced the `@AutoConfigureWebTestClient` Annotation.
Using this annotation prevents binding of the configuration property `spring.test.webtestclient.timeout` from other properties sources (`application...
estebanzarate/CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC
Unauthenticated remote code execution vulnerability in Wing FTP Server <= 7.4.3. | topics: cve-2025-47812 | language: Python
kolteq/nodes-proxy-get-rce-fix
Fix the Kubernetes Nodes/Proxy GET RCE, by using Istio Service Mesh! | topics: helm, kubernetes, security | homepage: https://kolteq.com
Several reactive starters do not depend on springt-boot-reactor
I noticed this while troubleshooting why `spring.reactor.context-propagation=auto` wasn't working for me after upgrading to 4.0.
IMHO, all starters for reactive technologies should also bring in Boot's reactor module.
av4nth1ka/jinjava-cve-2026-25526-poc
lab setup + exploits for CVE-2026-25526 | topics: cve, cve-2026-25526, java, jinjava | language: Java
Default value of AutoConfigureWebTestClient.timeout should be null
Spring Boot 4 introduced the `@AutoConfigureWebTestClient` Annotation.
Using this annotation prevents binding of the configuration property `spring.test.webtestclient.timeout` from other properties sources (`application...
kriskimmerle/wheelaudit
Python Wheel File Security Scanner — scan .whl files for security issues before installation. Detects path traversal (CVE-2026-24049), RECORD tampering, command shadowing, secrets, zip bombs. Zero deps. | language: Pytho...
BiranPeretz/docling-core-CVE-2026-24009
Technical write-up and PoC for CVE-2026-24009, demonstrating unsafe YAML loading in docling-core and practical mitigation paths. | language: Python