momo安全漏洞库

共聚合 9002 条情报漏洞监控 5367 / 网安开源项目 3635

来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。

Itamar-Yochpaz/CVE-2026-2256-PoC

GitHub Repos/search Itamar-Yochpaz/CVE-2026-2256-PoC 发布时间 2026-03-05 入库 2026-03-14 02:41

language: Python

uname1able/CVE-2026-2636

GitHub Repos/search uname1able/CVE-2026-2636 发布时间 2026-03-05 入库 2026-03-14 02:41

language: C++

AkhilSharma90/Bsides-Workshop-Demo-Agent-RCE-Zero-Click-Attack

GitHub Repos/search 低危 AkhilSharma90/Bsides-Workshop-Demo-Agent-RCE-Zero-Click-Attack 发布时间 2026-03-05 入库 2026-03-14 02:42

Uses CrewAI Multi Agentic System to showcase memory poisoning with RAG workflow for a zero click RCE. | language: HTML

Tests annotated with @DisabledIfDockerUnavailable are always skipped if Testcontainers isn't on the classpath

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49425 发布时间 2026-03-05 入库 2026-03-05 18:49

The condition that backs `@DisabledIfDockerUnavailable` uses `org.testcontainers.DockerClientFactory` but `spring-boot-docker-test-support` only has a `compileOnly` dependency on Testcontainers. If a consumer of `spring-...

Output Docker Compose's logs when start or up fails

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49423 发布时间 2026-03-05 入库 2026-03-05 18:49

When our Docker Compose support calls `docker compose up` (or `docker compose start`) and it fails, we log output like this to the console: ``` 2026-03-05T09:11:09.047Z INFO 54079 --- [utReader-stderr] o.s.boot.docker....

SaikrishAIWizard/RCE_Beam_Load_estimation

GitHub Repos/search SaikrishAIWizard/RCE_Beam_Load_estimation 发布时间 2026-03-05 入库 2026-03-14 02:42

language: Python

Upgrade to MongoDB 5.6.4

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49422 发布时间 2026-03-05 入库 2026-03-05 18:49

Upgrade to [MongoDB 5.6.4](https://github.com/mongodb/mongo-java-driver/releases/tag/r5.6.4).

Upgrade to Elasticsearch Client 9.2.6

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49421 发布时间 2026-03-05 入库 2026-03-05 18:49

Upgrade to [Elasticsearch Client 9.2.6](https://www.elastic.co/docs/release-notes/elasticsearch/clients/java/9-2-6).

AdityaBhatt3010/Command-Injection

GitHub Repos/search AdityaBhatt3010/Command-Injection 发布时间 2026-03-05 入库 2026-03-14 02:42

Command Injection, OS Command Injection, RCE - Exploiting unsanitized user input in a web application to execute arbitrary system commands and retrieve sensitive data. | topics: command-injection, cybersecurity, os-injec...

Upgrade to Spring Pulsar 2.0.4

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49420 发布时间 2026-03-05 入库 2026-03-05 16:47

Upgrade to [Spring Pulsar 2.0.4](https://github.com/spring-projects/spring-pulsar/releases/tag/v2.0.4).

优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。

当前条件下没有命中网安开源项目。

github安全推送