Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Christbowel/CVE-2026-41900-POC
OpenLearnX Unauthenticated RCE | language: Python
novaek/CVE-2026-0073-Research
CVE-2026-0073 is an RCE with a CVSS severity score of 8.3, and here we will explain how it works.
TheMalwareGuardian/CVE-2026-33439
First publicly shared exploit implementation for CVE-2026-33439 (OpenAM pre-auth RCE via jato.clientSession deserialization). | topics: cve-2026-33439, exploit, java-deserialization | language: Python
isagoakira/ghes-cve-scanner
GHES CVE Scanner — Defensive security tool for detecting CVE-2026-3854 (Git Push RCE) and CVE-2026-4821 (Management Console proxy injection) in GitHub Enterprise Server. Zero external dependencies, Python 3.8+. | languag...
guzrex/CVE-2026-42879
FacturaScripts RCE Exploit - Proof of Concept | language: Python
xp1tr/CVE-2026-39387
BoidCMS <= 2.1.2 RCE Exploit | language: Python
rohithronanki/CVE-2026-34159-Vulnerability-Research-Analysis-Detection
Critical buffer validation bypass in deserialize_tensor() (llama.cpp < b8492). Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPH_COMPUTE. ASLR bypass + RCE over TCP 50052.
dinosn/CVE-2026-42779
CVE-2026-42779: Apache MINA AbstractIoBuffer.resolveClass() deserialization filter bypass to RCE (CVSS 9.8) | language: Java
Sl4cK0TH/CVE-2026-42167-PoC
Pre-Auth RCE in ProFTPD via mod_sql is_escaped_text() bypass (CVE-2026-42167) | language: Python
fckoo/mcpjaminspector-unauth-rce
CVE-2026-23744 RCE in MCPJam inspector <= 1.4.2 | language: Python
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
lxQingFeng/WeakPasswordTest
弱口令检测工具是一款用于检测网络服务弱口令的安全工具,支持 SSH 的弱口令检测。该工具能够批量检测目标主机的弱密码问题,并生成直观的 HTML 格式检测报告。 | language: Python | stars: 1 | forks: 0 | updated 2025-08-06T14:37:49Z | pushed 2025-08-06T11:43:34Z
DASCTF-Offical/Docker-Template-For-DataSecurity
DataSecurity类 Docker + 安全工具 基础镜像 | topics: image | language: Python | stars: 9 | forks: 1 | updated 2026-09-06T08:56:27Z | pushed 2026-09-06T08:56:18Z
xingfuhoumei/Enterprise-MCP-Server
企业级MCP服务器:目录浏览;文件搜索;备份管理;CSV处理;JSON处理;HTTP请求;API测试;文件下载;系统信息;进程监控;网络连接;安全工具:哈希计算;文件完整性;数据验证 | language: Python | stars: 0 | forks: 0 | updated 2025-08-09T12:19:41Z | pushed 2025-08-09T12:19:38Z
Bbdolt/Bbdolt_Tools
Bbdolt_Tools 是一个基于 Python 开发的安全工具集合,提供了流量、接口分析功能。该工具采用模块化设计,具有友好的图形界面,支持主题切换,易于扩展。 | language: Python | stars: 0 | forks: 0 | updated 2025-09-13T16:15:02Z | pushed 2025-09-01T13:04:28Z
ccscscs1212/security-tools
一套 Python 自动化安全工具脚本,用于端口检测、日志分析、代码审计、密码策略评估与报告生成 | language: Python | stars: 0 | forks: 0 | updated 2025-09-18T04:09:23Z | pushed 2025-09-18T04:09:20Z
wanheiqiyihu/Wafrog-POC-Manager
一个专为Afrog安全工具设计的POC模板管理工具,支持官方POC格式的创建、编辑、导入、导出和管理。 | language: Python | stars: 7 | forks: 2 | updated 2025-09-28T02:22:41Z | pushed 2025-08-06T17:07:06Z
adminlove520/securitytools
安全工具 | topics: redteam-tools, security-tools | stars: 5 | forks: 1 | updated 2025-09-28T07:59:41Z | pushed 2025-09-28T07:59:38Z | homepage: http://securitytools.hopeless99.top/
kd21621/email-protection-tools
2025年你必须了解的15款顶级邮件认证安全工具 | stars: 1 | forks: 0 | updated 2025-10-14T08:27:20Z | pushed 2025-10-14T08:26:48Z
eaopen/eap-security-tool
企业应用安全工具平台:聚焦演示与评估,Docker Compose 一键部署;中小企业开箱即用,覆盖 DevSecOps/代码与依赖安全/Web 扫描与漏洞管理的关键能力。 | language: Shell | stars: 2 | forks: 0 | updated 2025-10-17T15:42:21Z | pushed 2025-10-14T14:48:56Z
ctkqiang/sm3file
SM3File 是一个使用中国国密算法 SM3 哈希函数和 SM4 分组密码(CBC 模式)进行文件加密和解密的安全工具。 | topics: china, chinese, crypttography, ctkqiang, cybersecurity, sm3 | language: C | stars: 2 | forks: 0 | updated 2025-10-17T16:51:30Z | pushed 2025-08-24T1...