Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes
io_uring/rw: free potentially allocated iovec on cache put failure
Coff0xc/catchclaw
OpenClaw Security Assessment Tool | OpenClaw安全评估工具 | 31 Attack Chains | 23 Nuclei Templates | Full RCE Chain | Secret Extraction | Rogue Node | Interactive Shell | Shodan/FOFA Discovery | topics: ai-security, automation,...
ffasterss/CVE-2026-31891
SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()
HackNow-uz/RedEye
🔴 AI-Powered Universal Web Server Log Attack Detector — Scans Nginx, Apache, IIS, Caddy, Traefik logs for SQLi, XSS, RCE, SSRF and more | language: Go
watchtowrlabs/watchtowr-vs-telnetd-CVE-2026-32746
language: Python
Ruby JSON has a format string injection vulnerability
CVE-2026-33210；6f25f0927878e9a073b6faa6b6918e32
AVideo has SSRF in Scheduler Plugin via callbackURL Missing `isSSRFSafeURL()` Validation
CVE-2026-33237；8879002354c6b889065193a4fd3d3897
Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SSRF (Server Side Request Forgery) attacks and obtain u
CVE-2026-3511；680022b79b0768a4912e85b2525b0ac3；Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SSRF (Se...
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all versions up to, and including, 1.6.10.0 due to insuffic
CVE-2026-3658；8ded44e20bcc2297a598f2d06263e59b；The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all versions...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
ming-moyin/Stars_Falling
渗透测试工具启动器，支持工具分类管理、批量执行、拖拽排序，帮助高效管理和启动各类安全工具 | language: Python | stars: 4 | forks: 0 | updated 2026-02-15T09:42:01Z | pushed 2026-02-15T09:41:57Z
MICHAEL-888/Phantom
一款r3层强大的Windows平台反Rootkit安全工具。 | language: C++ | stars: 3 | forks: 1 | updated 2026-02-24T15:26:01Z | pushed 2025-11-14T10:45:39Z
haothtrteen/EmojiShell
一个专注于 Emoji 混淆技术 的 Shell 脚本安全工具库，通过将敏感代码转换为颜文字、符号组合和动态字体，实现 视觉迷惑 与 逆向防御 的平衡。 | language: Shell | stars: 2 | forks: 1 | updated 2026-02-26T02:58:25Z | pushed 2026-07-31T06:18:23Z
nidhogg1024/SecTool
安全从业者的交互式工具箱 - 面向红队/渗透测试/Bug Bounty 的多平台安全工具集 | topics: bug-bounty, pentesting, red-team, security, toolkit, typescript, vue | language: TypeScript | stars: 0 | forks: 0 | updated 2026-03-02T09:13:34Z | pushed 2026-03-02...
ONLYYE/Yscan
Yscan 是一款集 Web 资产扫描、图形化 Nuclei POC 管理、漏洞验证与数据整理于一体的实战型安全工具，界面简洁，功能强大，助你快速识别互联网暴露面中的薄弱点与攻击面。 | stars: 101 | forks: 3 | updated 2026-03-02T15:14:50Z | pushed 2026-01-13T02:29:34Z
Owenwoow/MyBlog
这是一个记录个人成长与技术探索的博客，主要分享计算机学习笔记与日常折腾电子产品的记录。内容涵盖开发环境搭建、网络搭建、云计算、网络安全、工具使用心得等，以持续总结与反思的方式沉淀知识。 | topics: astro, fuwari | language: Astro | stars: 1 | forks: 0 | updated 2026-03-04T03:23:37Z | pushed 2026-03-09T00:49:32Z | ...
25smoking/Argus
Argus 取名自希腊神话中的"百眼巨人" (Argus Panoptes)这是一款专为应急响应、威胁狩猎设计的现代化跨平台安全工具，致力于提供更隐蔽、更强大、更智能的威胁检测能力。 | language: YARA | stars: 30 | forks: 7 | updated 2026-03-17T08:46:13Z | pushed 2025-12-14T17:44:24Z
968626/Firewall-Policy-Analysis-and-Optimization-System
防火墙策略分析与优化系统是一款专业的网络安全工具，旨在帮助安全管理人员高效地分析、审计和优化防火墙规则配置。通过智能算法检测规则中的潜在问题，并提供可操作的优化建议，从而提升网络安全防护能力。信息安全毕业设计 | stars: 1 | forks: 0 | updated 2026-03-04T06:01:33Z | pushed 2026-02-02T01:45:40Z
lsxllk/Net_Protect
# 网络安全保护工具 (Net_Protect) 一个功能强大的Windows平台网络安全工具，实时检测并防御各类网络攻击，支持IPv4/IPv6双栈防护，提供直观的GUI界面和邮件通知功能。 ## 🎯 核心功能 ### 1. 实时攻击检测 - **ARP欺骗检测**：监控ARP表变化，识别ARP缓存投毒攻击 - **DNS欺骗检测**：分析DNS响应，防止域名劫持 - **IP欺骗检测**：识别伪造源IP地址的攻击 - **DoS/D...
AugustineFulgur/mSS-GUI
基于mitmproxy的安全工具，支持请求自动加解密、webpack优化、流量关键字查询。 | topics: pentest, python, security-tools, webpack | language: Python | stars: 90 | forks: 3 | updated 2026-03-19T09:00:35Z | pushed 2026-01-05T07:01:36Z