Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack. In the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then the new value will be written at locatio
CVE-2006-10003；08a629c1422d73a81d8a1249882c0138；XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack. In the case (stackptr == stacksize - 1), the stack will NOT be expande...
XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes. A :utf8 PerlIO layer, parse_stream() in Expat.xs could overflow the
CVE-2006-10002；7e0e13384af53badb7d07244a054080a；XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes. A :utf8 PerlIO laye...
Improper Authentication vulnerability in Secomea GateManager (webserver modules) allows Authentication Bypass.This issue affects GateManager: 11.4;0.
CVE-2025-14716；35ec7add9320964b52b5d1b8834953cf
lennertdefauw/CVE-2026-24291
Windows privilege escalation using RegPwn | language: C#
LennertDefauw1/CVE-2026-24291
Windows privilege escalation | language: C#
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Howard Website LLMs.Txt allows Reflected XSS.This issue affects Website LLMs.Txt: from n/a through 8.2.6.
CVE-2026-27068；0a13942aa66cbf0e938e4437849be84f
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPEverest Everest Forms Pro allows Stored XSS.This issue affects Everest Forms Pro: from n/a through 1.9.10.
CVE-2026-27070；635c70af29c31cbd4db98a13f8407c43
Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor allows Upload a Web Shell to a Web Server.This issue affects Mobile App Editor: from n/a through 1.3.1.
CVE-2026-27067；8cbfe7dd81574711b7d49aaa57750990
rootdirective-sec/CVE-2026-27541-Analysis-Lab
language: Shell
junfuture1103/cfs_cf_rce_poc
cfs_cf_rce_poc
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
trymonoly/Kali-Mcp-Toolkit
整个项目都为 Vibe coding开发，plan和task都包含在项目中，为你的 Agent 提供 Kali 武器库。内置安全工具、反弹 Shell 终端支持，并通过 MCP 协议实现自主工程化。 | language: Python | stars: 5 | forks: 1 | updated 2026-03-08T11:53:21Z | pushed 2026-03-02T19:02:58Z
Vincent12222/TOOLS
自己结合AI制作的一些安全工具 | language: Python | stars: 0 | forks: 0 | updated 2026-03-09T10:14:30Z | pushed 2026-03-09T10:26:38Z
kohlersbtuh15/accesskey_tools
阿里云aliyun/腾讯云tencentcloud/华为云huaweicloud/aws等各种云厂商的accesskey运维安全工具，accesskey利用工具，包括但不限于创建ecs、ecs查询和命令执行、oss查询和批量下载等各种功能,aws accesskey rce;remote command execute | topics: accesskey, accesskeysecret, alibabacloud, aliyun,...
TaoKe-One/CatchCore
CatchCore 是一款综合性内网安全检测和运维工具，专门针对企业内部网络进行快速资产发现、识别、检测和漏洞评估。通过集成多个开源安全工具，实现自动化漏洞探测、修复验证和资产管理的完整闭环。 | language: Python | stars: 1 | forks: 0 | updated 2026-03-11T07:36:13Z | pushed 2025-11-14T15:07:13Z
alipay/ant-application-security-testing-benchmark
xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box". | topics: application, benchmark, dast, evaluation, iast, sast, sca, security, testing | language: Java | stars: 485 | for...
OldSuns/SnapLock
一款智能安全工具，离开时自动监控并拍照锁屏防止他人操作电脑 | language: HTML | stars: 163 | forks: 13 | updated 2026-03-13T05:29:29Z | pushed 2025-08-31T20:10:48Z
jiaodai1001/secure-file-tool
一个用于本地文件加密、完整性校验与安全共享的开源安全工具。 | language: Python | stars: 1 | forks: 0 | updated 2026-03-14T09:12:24Z | pushed 2026-03-14T09:12:20Z
birdhan/SecurityTools
渗透测试工具包 | 开源安全测试工具 | 网络安全工具 | topics: cve, exploit, poc | stars: 372 | forks: 55 | updated 2026-03-22T16:59:41Z | pushed 2026-02-03T07:51:36Z
z50n6/ChiXiao
一款专为红蓝工程师和渗透测试人员打造的现代化、跨平台安全工具箱。它集成了工具管理、智能研判、资产测绘与攻防辅助等核心功能，旨在解决传统渗透测试中工具分散、环境配置繁琐、协作效率低下等痛点，构建个人专属的“数字化武器库” | stars: 61 | forks: 8 | updated 2026-08-08T09:26:15Z | pushed 2026-06-12T11:32:50Z
farfarfun/nltsecret
加密和安全工具包 - 提供加密、解密和安全相关功能 | topics: cryptography, encryption, farfarfun, python, secret, security | language: Python | stars: 0 | forks: 0 | updated 2026-08-03T03:13:27Z | pushed 2026-08-03T03:13:16Z | homepage: https://...