Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
zycoder0day/CVE-2026-8732
CVE-2026-8732 | WP Maps Pro <= 6.1.0 | Unauthenticated Privilege Escalation | language: Python
MuhammedHussein17/libheif-cve-2026-50142
CVE-2026-50142 — Heap allocation vulnerability in libheif HEIF sequence parser
lucastran05/CVE-2026-29000
language: Java
diao111111/CVE-2026-37432
HORKimhab/CVE-2026-23631
CVE-2026-23631-Draft
SrGinebras/CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2
language: Python
iwallplace/CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection
Unauthenticated SSRF in Xiaomi Mi Router 4A Gigabit Edition (firmware 3.0.24) via Host Header Injection — CVE-2026-26898 | language: Python
melbratic/CVE-2026-2256-Threat-Model----ms-agent-Command-Injection
lowilol/CVE-2026-42945-NGINX-Rift-Check-Script
language: Shell
iwallplace/CVE-2026-26897-EcoOnline-DeepLink
Public advisory & PoC for CVE-2026-26897 — Deep Link Bypass in EcoOnline EHS Android (com.airsweb.v10), fixed in 0.2.500 | language: HTML
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
Certora/CertoraProver
The Certora Prover is the state-of-the-art security tool for automated formal verification of smart contracts running on EVM-based chains, Solana and Stellar | topics: blockchain, certora, certora-prover, ethereum, forma...
Yashvishah7/Agentic-AI-Pentesting
A multi-agent autonomous penetration testing framework that integrates LLM reasoning with security tools to identify vulnerabilities, maintain attack paths, and generate structured security reports. | stars: 0 | forks: 0...
Shambhavi-ui/Chatbot
v a security tool that evaluates the effectiveness of a password against brute-force or dictionary attacks. It analyzes factors like length, complexity (mixed character types), and predictability to provide real-time fee...
USH3R/Security-Toolkit.-CONTAINERS
A place for the team to manage Docker images and decide who can see and access images. | language: Shell | stars: 0 | forks: 0 | updated 2026-03-22T20:42:12Z | pushed 2026-03-22T20:42:08Z
daFinndus/reconnoisseur
This will be a an automated reconnaissance toolkit that orchestrates multiple security tools to efficiently map the attack surface of a target and streamline the early phases of a web penetration test. | language: Python...
NxStrip/My-Portfolio
17-year-old Self-taught Security Researcher. Portfolio showcasing VAPT research, CTF achievements, and offensive security tools. | language: HTML | stars: 0 | forks: 0 | updated 2026-03-21T05:28:19Z | pushed 2026-03-21T0...
Jovanka09/go-cloudip
🌍 Detect cloud provider IPs quickly and accurately in Go, supporting major providers with sub-microsecond lookups and automatic updates. | topics: analytics, checker, cli-app, cloud, community-driven, data-structures, do...
filipszaulity/specificproxy
🌐 Specify egress IPs for HTTP proxy requests on machines with multiple IPv6 addresses, enhancing control and flexibility in network configurations. | topics: api-access, automation-tool, connectivity-issues, data-privacy...
LuisAZambrana/proxy
Listado de Ips y dominios para filtrar | stars: 1 | forks: 0 | updated 2026-03-18T06:50:54Z | pushed 2026-03-18T06:50:50Z
ghjkldfdfg/ipSentinel
🌍 Discover your IP details and test network connectivity with IP Sentinel, a lightweight tool built on Cloudflare Workers, featuring privacy checks and modern UI. | topics: awesome, ip-address, ip-location, ip-lookup, ip...