Intelligence Digest
威胁情报
统一威胁情报视图，聚合漏洞监控、网安开源项目与官方源情报
漏洞监控
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
3114总量
网安开源项目
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
1553总量
威胁情报
来自 360、奇安信、斗象等官方站点的公开情报聚合。
243总量
Chromium: CVE-2026-2650 Heap buffer overflow in Media
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for mo...
本页此列暂无更多数据
本页此列暂无更多数据
Chromium: CVE-2026-2649 Integer overflow in V8
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for mo...
Chromium: CVE-2026-2648 Heap buffer overflow in PDFium
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for mo...
HTTP Service interface read-timeout ignored for WEB_CLIENT client type
`read-timeout` config option is ignored for WEB_CLIENT client type
springboot-version: `4.0.2`
java-version: `25`
TestController - a mock remote server, sleeping for 10 seconds to simulate slow response
```java
@RestCon...
Maven plugin does not set '-parameters' option when processing AOT code despite respecting other compiler-plugin configuration
AOT-generated code is currently compiled without parameter names. It would be useful to have parameters available for functionality that heavily relies on reflection.
In Spring Data's AOT repository query methods with S...
tron0x8/apex
Advanced PHP Exploitation Scanner - Static analysis framework for detecting SQL Injection, XSS, RCE, Command Injection, File Inclusion and more vulnerabilities in PHP applications | topics: bugbounty, cybersecurity, hack...
Shiva-destroyer/OpenClaw-Hardened
A security-first fork of OpenClaw. Hardened against prompt injection, steganography, and RCE with chaos-tested defenses. | language: TypeScript
Ckokoski/moatbot-security
Security-hardened AI agent platform addressing OpenClaw/Moltbot vulnerabilities (CVE-2026-25253) | language: TypeScript
Paketo integration doesn't work with Docker's new overlayfs storage driver
Docker Engine 29 switched the default storage backend from `overlay2` to `overlayfs`, see [this documentation](https://docs.docker.com/engine/storage/drivers/).
GitHub Actions [switched to Docker 29](https://github.com...
sid-203/Network-Vulnerability-Analysis-and-Secure-System-Design
Analysed a real enterprise vulnerability scan identifying critical RCE risks in Redis, WebLogic and SSH. Designed a secure, segmented network architecture aligned with DevSecOps and Zero Trust principles to reduce attack...