Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
merlin-rce/Auto_car_ET2
Experience-rookie/struts-s2-052-deserialization-rce-lab
Proof-of-Concept exploit for Apache Struts S2-052 (CVE-2017-9805) XML Deserialization Remote Code Execution. Created while solving the INE eWPTX Practice Range lab. Includes custom payloads, reverse shell exploit script,...
PentesterTN/CopyHack
CopyHack - 500+ pentest one-liners and commands you'll actually use. Recon, SQLi, XSS, LFI, RCE, SSRF, PrivEsc, AD, Cloud, Containers, Shells, Cracking, and more. | topics: active-directory, bug-bounty, cheat-sheet, ctf,...
PentesterTN/HackSheet
HackSheet - 500+ pentest one-liners and commands for every hacking scenario. Recon, SQLi, XSS, LFI, RCE, SSRF, PrivEsc, AD, Cloud, Containers, Shells, and more. | topics: active-directory, bug-bounty, cheat-sheet, ctf, c...
retX0/CVE-2026-20660
language: Python
RootX111/cve-2026-29000
cve-2026-29000 exploit | language: Python
snakeserg1990/RCE-2-WF
Прошивка USB Wi-Fi PRO EKF Connect (TYWE3S) под esphome
typeconfused/CVE-2026-29000
pac4j-jwt JwtAuthenticator Authentication Bypass | language: Java
A weakness has been identified in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This vulnerability affects the function Upload of the file business/business-system/src/main/java/com/glowxq/system/admin
CVE-2026-4201；5d9c1bebf6c19bbe2aa1e95608429c16；A weakness has been identified in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This vulnerability affects the function Upload of the file business/busine...
A vulnerability was determined in hypermodel-labs mcp-server-auto-commit 1.0.0. Affected by this vulnerability is the function getGitChanges of the file index.ts. This manipulation causes command injection. The attack ca
CVE-2026-4198；cdab9c10efb83b136f31ddb0784ebc08；A vulnerability was determined in hypermodel-labs mcp-server-auto-commit 1.0.0. Affected by this vulnerability is the function getGitChanges of the file index.ts. This manip...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
mkomanmkbxnhjxxkhdkhmxnb/vuln-scanner-dashboard
🛡️ Automate vulnerability scanning with a user-friendly dashboard that integrates top security tools for efficient assessments and real-time tracking. | topics: api, blockchain, bootstrap, dashbaord, ethereum, ethical-ha...
mohitdtr/Advanced-Cyber-Security-Toolkit
A Python GUI based Cyber Security Toolkit with multiple tools like Port Scanner, IP Scanner, File Organizer and Password Hashing. | language: Python | stars: 0 | forks: 0 | updated 2026-03-16T21:21:47Z | pushed 2026-03-1...
nix914/awesome-security-pipeline
🔍 Explore a curated list of open-source security tools, organized by CI/CD pipeline stage, to enhance your application’s security from commit to production. | topics: appsec, awesome, checkov, cicd, container-security, d...
DaSonOfPoseidon/BrowseShield
BrowseShield is a extension-based security tool developed by team MAD J for the Spring 2026 University of Missouri Capstone project | language: JavaScript | stars: 0 | forks: 0 | updated 2026-03-18T16:00:12Z | pushed 202...
lianted/liandev.github.io
Personal Portfolio | Full-Stack Developer & Cybersecurity Enthusiast. Featuring web projects (React/Node.js), security tools (C/C++), and technical write-ups. | stars: 0 | forks: 0 | updated 2026-03-16T21:32:45Z | pushed...
Pane0005/BreadHub
BreadAv is a lightweight open-source antivirus written in Python. It provides basic malware detection, real-time file monitoring, and system scanning in a simple graphical interface. The project is intentionally minimal ...
nnhitheesh-ai/scaling-octo-waffle
stars: 0 | forks: 0 | 2026-03-16T16:22:17Z
lrasata/cdk-lrasata-website
Production-grade static website infrastructure on AWS, built with CDK TypeScript. Covers CloudFront + WAF + ACM + Route53 with multi-environment deployments. | topics: aws, aws-cdk, aws-cloudformation, certificate-manage...
dalisecurity/Fray
AI-native security toolkit — fray go target.com scans everything. 7,600+ payloads, 98 WAF vendors, 36+ recon checks. Zero config | topics: attack-surface, bugbounty, cloudflare, mcp, mcp-server, owasp, payload-database, ...
gix314/crispy-waffle
baiter baiter baiter more like a master baiter | language: Lua | stars: 0 | forks: 0 | updated 2026-03-16T16:49:47Z | pushed 2026-03-16T16:49:43Z