Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
piffd0s/ntoskrnl-metadata
eprocess offset puller for relevant member offsets and function addresses for cve-2026-40369 | language: Python
liamromanis101/cifswitch-check
Detection script for CIFSwitch - CVE-2026-46243 | topics: cifs, containers, cve-2026-46243, docker-security, kubernetes-security, linux | language: Shell
0xABCD01/CVE-2026-48866
CVE-2026-48866 — Gravity Forms <= 2.10.0.1 Arbitrary File Deletion via Path Traversal (CVSS 9.6) | topics: cve, cve-2026-48866, exploit, poc | language: Python
Polosss/By-Poloss..-..CVE-2026-10580
Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover
horrister/axios-supply-chain-cve-2026-26555
In-depth analysis of cve-2026-26555 | language: Shell
horrister/beyondtrust-cve-2026-1232
language: Python
ikarolaborda/CVE2026-42926
Controlled NGINX HTTP/2 frame injection lab for CVE-2026-42926 patch validation and defensive research | topics: cve-2026-42926, cybersecurity, defensive-security, docker, docker-compose, frame-injection, http2, nginx, p...
Gumbraise/CVE-2026-30849-PoC
Proof-of-Concept checker/exploit for MantisBT SOAP auth bypass (CVE-2026-30849 / GHSA-phrq-pc6r-f6gh) | topics: cve, cve-2026-30849, mantis, mantisbt, poc, proof-of-concept | language: TypeScript | homepage: https://gith...
asdasddqwdq29-a11y/CVE-2026-41940
Redacted cPanel/WHM authentication bypass analysis and authorized checker
asdasddqwdq29-a11y/CVE-2026-34197
Apache ActiveMQ RCE via Jolokia vulnerability analysis and reproduction notes | language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
thecosmicexplorer/tools
Daily CVE scanners and offensive security tools for bug bounty & red team — one new tool pushed every day | topics: bug-bounty, cve, penetration-testing, python, red-team, security | language: Python | stars: 0 | forks: ...
MariaMancuso05/Semantic-Password-Analyzer
AI-powered password security tool that analyzes semantic predictability instead of simple regex patterns. It detects obfuscated common words and explains why your password isn't as clever as you think. | language: CSS | ...
sec0ps/va-pt
The VAPT Toolkit provides a streamlined way to install, configure, and maintain a complete penetration testing environment with 50+ security tools and custom automation frameworks organized across multiple categories. | ...
microsoft/dusseldorf
Dusseldorf is an out-of-band security tool to help in security research. | language: TypeScript | stars: 52 | forks: 11 | 2026-03-18T21:09:47Z
kpirnie/webscanner
A fully self-contained Docker image that orchestrates 20 security tools — Nuclei, ZAP, Dalfox, Arjun, WPScan, sqlmap, Nikto, testssl.sh, Shodan, and more — into a single 16-step scan pipeline. Passive recon, parameter di...
Shadow21AR/forge
Public build console for .NET security tools. Inspect repos, trigger builds, download releases | language: Astro | stars: 0 | forks: 0 | updated 2026-03-21T18:51:19Z | pushed 2026-03-21T18:51:16Z | homepage: https://forg...
BehemothCipher/BehemothCipher.github.io
IT Field Engineer & Security Software Developer — building security tools, automation, and desktop apps | language: HTML | stars: 0 | forks: 0 | updated 2026-03-22T20:28:18Z | pushed 2026-03-22T20:28:15Z
m4x1m03/mlsec-comp-platform
Creating a platform for MLSEC challenge where people can submit ML malware detection models and evasive samples which are then put against eachother and ranked | language: Python | stars: 0 | forks: 0 | updated 2026-03-1...
Guilherme-Santos-Barros/Projeto-Dio-simulando-um-malware-de-captura-de-dados
stars: 1 | forks: 0 | updated 2026-03-18T18:41:29Z | pushed 2026-03-18T18:41:22Z
psychoSherlock/Isolens
Isolens Sandbox: Intelligent Dynamic Malware Analysys Sandbox (Mini Project) | language: Python | stars: 0 | forks: 3 | updated 2026-03-18T18:43:58Z | pushed 2026-03-18T18:43:54Z