momo安全漏洞库

共聚合 4764 条情报漏洞监控 2974 / 网安开源项目 1552 / 威胁情报 238

漏洞监控

来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。

2974总量

网安开源项目

优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。

1552总量

威胁情报

来自 360、奇安信、斗象等官方站点的公开情报聚合。

238总量

0xgh057r3c0n/CVE-2026-22812

GitHub Repos/search 0xgh057r3c0n/CVE-2026-22812 发布时间 2026-02-01 入库 2026-03-14 02:41

OpenCode < v1.0.216 - Unauthenticated RCE | language: Python

本页此列暂无更多数据

Elias966/edex-ui-fixed

GitHub Repos/search Elias966/edex-ui-fixed 发布时间 2026-02-01 入库 2026-03-14 02:42

this is just an updated version of the latest version of edex-ui that fixes the vulnarabilty Cross-site websocket hijacking enables remote command execution (RCE), i also implemented a test to see if the app is vulnerabl...

Nevtech05/DC-1_VulnHub.com_WriteUp

GitHub Repos/search Nevtech05/DC-1_VulnHub.com_WriteUp 发布时间 2026-02-01 入库 2026-03-14 02:42

OSCP-style penetration test walkthrough of the VulnHub DC-1 machine (Drupal 7 → RCE → root). | topics: ctf-solutions, cybersecurity-lab, drupalgeddon, ethical-hacking-labs, pentesting-guides, privilege-escalation-linux, ...

[Feature] Create docker image CLI for crypto tools

GitHub Issues/apache/shiro apache/shiro#2325 发布时间 2026-02-01 入库 2026-02-20 12:43

### Search before asking - [x] I had searched in the [issues, **including closed issues**](https://github.com/apache/shiro/issues?q=is%3Aissue) and found no similar issues. ### Feature Request It would be nice to hav...

contacurso/rce

GitHub Repos/search contacurso/rce 发布时间 2026-02-01 入库 2026-03-14 02:42

erer

quyenheu/XMLDecoder-Deserialization-Vulnerability

GitHub Repos/search quyenheu/XMLDecoder-Deserialization-Vulnerability 发布时间 2026-02-01 入库 2026-03-14 02:42

XMLDecoder is a Java class used to reconstruct Java objects from XML representations.If an application deserializes user-controlled XML using XMLDecoder.readObject(), an attacker can craft a malicious payload that result...

SimoesCTT/SCTT-2026-33-0007-The-OLE-Vortex-Laminar-Bypass

GitHub Repos/search SimoesCTT/SCTT-2026-33-0007-The-OLE-Vortex-Laminar-Bypass- 发布时间 2026-01-31 入库 2026-03-14 02:41

Microsoft just released emergency patches for CVE-2026-21509, a zero-day in the Office Suite that bypasses OLE/COM mitigations when a user simply opens a file. They think their "Service-side change" for Office 2021+ is a...

sastraadiwiguna-purpleeliteteaming/Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

GitHub Repos/search 高危 sastraadiwiguna-purpleeliteteaming/Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation 发布时间 2026-01-31 入库 2026-03-14 02:41

Origin CyberAnatomy Spoofing via Malicious WebView - Dissecting CVE-2026-0628 Chromium Extension Privilege Escalation This research provides a comprehensive technical dissection of CVE-2026-0628, a high-severity privileg...

otakuliu/CVE-2026-22807_Range

GitHub Repos/search otakuliu/CVE-2026-22807_Range 发布时间 2026-01-31 入库 2026-03-14 02:41

CVE-2026-22807的靶场 | language: Python

SimoesCTT/SCTT-2026-33-0004-FortiCloud-SSO-Identity-Singularity

GitHub Repos/search SimoesCTT/SCTT-2026-33-0004-FortiCloud-SSO-Identity-Singularity 发布时间 2026-01-31 入库 2026-03-14 02:41

While Fortinet's January 27, 2026 mitigation for **CVE-2026-24858** focuses on blocking specific accounts like `cloud-noc@mail.io`, it fails to address the **Temporal Vulnerability** of the SAML state machine. | language...