Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
xShadow-Here/CVE-2026-8732
WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation | language: Python
0xBlackash/CVE-2026-43494
CVE-2026-43494 | language: C
portbuster1337/CVE-2026-46376
CVE-2026-46376 - FreePBX Unauthenticated UCP Access via Hard-Coded Credentials | topics: cve, cve-2026-46376, exploit, freepbx, hardcoded-credentials, poc, security, voip, vulnerability | language: Python
Bhanunamikaze/BadHost-CVE-2026-48710-Exploit
Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI | topics: auth-bypass, badhost, cve, cve-2026-48710, exploit, fastapi, mcp, openapi, penetration-testing, python, security, starlette, v...
fangbarristerbar/CVE-2026-46840-ORDS-RCE
Oracle REST Data Services (ORDS) Unauthenticated RCE (CVE-2026-46840) | language: Python
mistbarbarianspot/CVE-2026-45659-SharePoint-RCE
CVE-2026-45659 Microsoft SharePoint Server Deserialization RCE.
ex-cal1bur/CVE-2026-42568
An LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule. The username parameter is inserted directly into LDAP search filters without RFC 4515 escaping, allowing authentication bypass. | language: Pyt...
ex-cal1bur/CVE-2026-44595
# CVE-2026-44595 YAMCS Unauthorized User Enumeration via IAM API | language: Python
ex-cal1bur/CVE-2026-44596
YAMCS yamcs-core < 5.12.7 lacks rate limiting on POST /auth/token. An unauthenticated attacker can perform unlimited brute-force attempts against any account. Never returns HTTP 429. Fixed in 5.12.7. | language: Shell
oscerd/CVE-2026-40564
CVE-2026-40564: SSRF via FlinkSessionJob jarURI in apache/flink-kubernetes-operator. Self-contained reproducer that runs on a local kind cluster with one make command. | language: Makefile
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
wallace57/Android-Malware-Detection-Drebinv1-CICMalDroid2020
Android Malware Detection with Dataset Drebin v1 and CICMalDroid 2020 | language: Python | stars: 0 | forks: 0 | updated 2026-03-18T06:33:52Z | pushed 2026-03-18T06:33:47Z
abhijithp65/Malware-Classification
language: Jupyter Notebook | stars: 2 | forks: 0 | updated 2026-03-18T06:34:18Z | pushed 2026-03-18T06:34:15Z
kurtpayne/skillscan-security
Security scanner for AI agent skills and MCP tool bundles — prompt injection, IOC matching, malware detection, ML classifier | topics: ai-agent, ai-security, llm-security, mcp, prompt-injection, security, skill-scanner, ...
Nguyenlam876/Malware-Forensics
This project explores the foundational aspects of malware, including its various types, impact, and common infection vectors. Furthermore, it provides a detailed examination of malware architecture and components. | star...
Amrita1412/malware-reverse-engineering-python
stars: 0 | forks: 0 | updated 2026-03-18T06:53:14Z | pushed 2026-03-18T06:53:11Z
siddhantkumbhar107/pdf-malware-Toolkit
A Python-based toolkit to analyze and detect malicious content in PDF files. | stars: 0 | forks: 0 | updated 2026-03-18T07:05:54Z | pushed 2026-03-18T07:05:51Z
donijo1216/azazel
Monitor Docker containers with Azazel to capture syscalls, file access, and network events in real time for malware analysis and AI oversight. | topics: active-cyber-defense, deception-defense, deception-technology, deco...
sLotsss/Malware-Forensic
stars: 0 | forks: 0 | updated 2026-03-18T07:09:45Z | pushed 2026-03-18T07:09:42Z
Vikas-Jais/NotTheNet
Simulate internet services in isolated environments to aid malware analysis with improved DNS handling and network emulation features. | topics: blue-team, dns, fake-internet, fakenet, github-config, incident-response, i...
velugubantlachaitanya/SynthAPT
Simulate complex cyberattack paths with a playbook-driven framework that replicates malware behavior for testing detections and investigations. | topics: ai, blockchain-network, chef-cookbook, computer-vision, data-gener...