Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
A flaw has been found in Tenda i3 1.0.0.6(2204). Affected is the function formwrlSSIDget of the file /goform/wifiSSIDget. Executing a manipulation of the argument index can lead to stack-based buffer overflow. The attack
CVE-2026-3970；9f1f242ea220888b7a519aad131a95cf；A flaw has been found in Tenda i3 1.0.0.6(2204). Affected is the function formwrlSSIDget of the file /goform/wifiSSIDget. Executing a manipulation of the argument index can ...
A vulnerability has been found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument index/GO leads to stack-based buff
CVE-2026-3971；2e018d2b313fa5e84f8c67eb2b674b53；A vulnerability has been found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of ...
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously
CVE-2023-43010；b0135f58dee2beacc574ce952f26c87d；The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS ...
A vulnerability has been found in AutohomeCorp frostmourne up to 1.0. This affects the function scriptEngine.eval of the file ExpressionRule.java of the component Oracle Nashorn JavaScript Engine. Such manipulation of th
CVE-2026-3968；a560b916091602261b60a921475c915a；A vulnerability has been found in AutohomeCorp frostmourne up to 1.0. This affects the function scriptEngine.eval of the file ExpressionRule.java of the component Oracle Nas...
A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107. Affected by this vulnerability is the function getDownloadFilePath of the file /src/main/java/com/genersoft/iot/vmp/media/abl/ABLMediaNodeSe
CVE-2026-3966；ed5cdb85ed5e267672cac17ef0bba7eb；A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107. Affected by this vulnerability is the function getDownloadFilePath of the file /src/main/java...
A flaw has been found in Alfresco Activiti up to 7.19/8.8.0. Affected by this issue is the function deserialize/createObjectInputStream of the file activiti-core/activiti-engine/src/main/java/org/activiti/engine/impl/var
CVE-2026-3967；cdea59280c17f2d061369652aa5b85ca；A flaw has been found in Alfresco Activiti up to 7.19/8.8.0. Affected by this issue is the function deserialize/createObjectInputStream of the file activiti-core/activiti-en...
HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21,
CVE-2026-2808；039ffed7f77a6a7375668b50285d36c2；HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerabil...
A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interface. The manipulation of the argument command lea
CVE-2026-3965；e49c22fe5e7e82a780aaf8ad3e97de52；A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interfac...
A weakness has been identified in OpenAkita up to 1.24.3. This impacts the function run of the file src/openakita/tools/shell.py of the component Chat API Endpoint. Executing a manipulation of the argument Message can le
CVE-2026-3964；a0ae8b30496a2c96535d4b32fb91723c；A weakness has been identified in OpenAkita up to 1.24.3. This impacts the function run of the file src/openakita/tools/shell.py of the component Chat API Endpoint. Executin...
FilipeGaudard/CVE-2026-30945-PoC
language: Python
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
R3pt0rs/badDNS
This is just a list of bad sites that ask you to install "virus scanners" on your mobile device and other fun stuff like "new" flash players. | stars: 0 | forks: 0 | updated 2026-03-15T21:26:17Z | pushed 2026-03-15T21:26...
surendrababu-sec/pqc-soc-readiness
A cryptographic vulnerability scanner assessing post-quantum readiness from a SOC perspective. | stars: 0 | forks: 0 | updated 2026-03-15T21:26:26Z | pushed 2026-03-15T21:26:23Z
sittiponpu774/market-scanner-api
language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:26:38Z | pushed 2026-03-15T21:26:34Z
conceptkitchen/graded
AI Prompt Security Scanner - Trust grades for the AI age. Like restaurant health inspections for AI prompts. | language: TypeScript | stars: 0 | forks: 0 | updated 2026-03-15T21:27:03Z | pushed 2026-03-15T21:27:00Z
xxFranxx121/scanner-codigos
prueba de scaneo de nais codigos | language: HTML | stars: 0 | forks: 0 | updated 2026-03-15T21:27:08Z | pushed 2026-03-15T21:27:05Z
schluchtenscheisser/spot-altcoin-scanner
language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:27:09Z | pushed 2026-03-15T21:27:06Z
icors2/SmartsheetScanner
language: JavaScript | stars: 1 | forks: 0 | updated 2026-03-15T21:28:48Z | pushed 2026-03-15T21:05:28Z
anirudhabhowmik-ai/Scanner-Frontend
Web Application For Scan Document | language: HTML | stars: 0 | forks: 0 | updated 2026-03-15T21:28:54Z | pushed 2026-03-15T21:29:21Z | homepage: https://scanner-frontend-ten.vercel.app
oz10000/100-w-r-scanner-validado-ok
language: Python | stars: 0 | forks: 0 | updated 2026-03-15T21:29:02Z | pushed 2026-03-15T21:28:59Z
youhouz/patoune
Patoune - Super app animaux de compagnie (Scanner produits + Garde animaux + Messagerie) | language: JavaScript | stars: 0 | forks: 0 | updated 2026-03-15T21:29:43Z | pushed 2026-03-15T21:29:38Z | homepage: https://pepet...