Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
pawpic/CVE-2026-38526-POC
Proof of Concept of CVE-2026-38526 in Krayin CRM <= v2.2.x. Arbitrary File Upload leading to Remote Code Execution | language: Python
pateldhyeyit/CVE-2026-37149
CVE-2026-37149 - SQL Injection vulnerability in the scost parameter of search_products.php in GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0.
0xBlackash/CVE-2026-20253
CVE-2026-20253 | language: Python
12hrformat/CVE-2026-35273-POC
language: Python
mirackayikci/CVE-2026-55584
CVE-2026-55584 — phpSysInfo IP Allowlist Bypass
0xBlackash/CVE-2026-47729
CVE-2026-47729 | language: Python
AmesianX/CVE-2026-53435
An offensive security researcher + an AI vs. a fresh n-day: building the first public PoC for CVE-2026-53435 in one Friday night. Raw 8h20m log inside. | language: Python
v4ltonn/CVE-2026-42530
Scanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP/3 QPACK encoder stream Use-After-Free (CVSS 9.2) | language: Python
joshuavanderpoll/CVE-2026-49772
CVE-2026-49772 — The Events Calendar (WordPress) unauthenticated blind SQLi PoC | topics: blind-sql-injection, cve, cve-2026-49772, exploit, poc, proof-of-concept, sql-injection, sqli, the-events-calendar, wordpress, wor...
joshuavanderpoll/CVE-2026-54806
Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806) | topics: cve, cve-2026-54806, deserialization, exploit, php-object-injection, poc, proof-of-concept, rce, remote-code-execution,...
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
terraform-az-modules/terraform-azurerm-nsg
This Terraform module is used to create Azure Network Security Group on AZURE. An Azure Network Security Group (NSG) is a fundamental Azure security tool that acts as a basic, stateful packet filtering firewall to contro...
hackkaranja/usb-security-tool
language: JavaScript | stars: 0 | forks: 0 | updated 2026-03-22T12:48:30Z | pushed 2026-03-22T12:48:27Z
Chandanpanchal/phishing-url-detector
A simple cyber security tool that detects potential phishing urls by analyzing https usage ,suspicious keywords and ip-based patters. | language: JavaScript | stars: 0 | forks: 0 | updated 2026-03-20T09:51:29Z | pushed 2...
Gracieogoo/pyVault
A comprehensive python security tool kit featuring password management, file encryption, network scanning and security analysis | language: Python | stars: 1 | forks: 0 | updated 2026-03-20T09:58:03Z | pushed 2026-03-20T...
Setpendecim/security-tools
安全工具集合 | stars: 0 | forks: 0 | updated 2026-03-20T06:41:13Z | pushed 2026-03-20T06:41:10Z
farez998/Incident-Response-WLan-Security-Tool
stars: 0 | forks: 0 | 2026-03-20T06:47:25Z
xlees/gym-blue-team
蓝队gym小游戏 | language: Python | stars: 0 | forks: 0 | updated 2017-09-19T09:47:07Z | pushed 2017-09-19T09:47:06Z
satan1a/ThreatHuntingInBlue
蓝队视角下的威胁狩猎 | stars: 0 | forks: 0 | updated 2020-07-18T13:15:49Z | pushed 2020-07-18T13:15:50Z
ORG-MARS/DBJ
大宝剑-信息收集和资产梳理工具(红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配) | stars: 0 | forks: 0 | updated 2021-03-12T07:02:00Z | pushed 2021-03-12T01:01:45Z
HotSec/blue-auto
蓝队自动化工具 | stars: 0 | forks: 0 | updated 2022-08-01T11:27:17Z | pushed 2022-08-01T11:27:18Z