Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Support method injection of JSON testers
Something like this:
```java
@JdbcTest
@AutoConfigureJsonTesters
class SampleTests {
@Test
void sampleTest(@Autowired BasicJsonTester jsonTester) {
assertThat(jsonTester.from("{}")).hasJsonPath("$");
...
Morrizzzzz/rce_notebooks
In this repo I am storing a couple of simple notebooks for data analysis purposes of the Rijksdienst van het Cultureel Erfgoed (Dutch Heritage Agency). | language: Jupyter Notebook
DedsecTeam-BlackHat/CVE-2026-23550
language: Shell
JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201
Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, bypassing LockDown mode protection by exploiting ImageIO (CVE-2025-43300), then WebKit(CVE-2025-24201) and Core Media(CVE-2025-24085) to achieve sandbox escap...
Add support for loading META-INF/resources from jars referenced via a Class-Path manifest entry
Spring Boot 1.4.7
Background:
Due to path length restrictions on Windows, IntelliJ has a "dynamic classloading" feature. When enabled, it creates a file called "classpath.jar" and puts the classpath of the applicati...
SSLBundle overriden by Spring-starter-oauth2-client
situation:
I have a springboot 3..4.5 application that connects to ibm-mq servers and uses restClients to make rest calls
the ibm-mq clients are configured using SSLBundle like this:
spring.ssl.bundle.jks.bundle-name.pr...
fealonelei/SafeClaw
If you ask any AI model "Are there many security issues with OpenClaw now?" It will answer "definitely". The "ClawJacked" Vulnerability (March 2026) Malicious "Skills" & Supply Chain Attacks Prompt Injection leading to R...
synthes-us/digital-consciousness-framework
Jurisprudential frameworks for gradient consciousness recognition, digital personhood rights, and non-biological entity protections. SCTT, RCE, FRPDC, and EMPA.
FinnLidbetter/janus-rce
language: Rust
JDK21 virtual threads tomcat_threads_current_threads is -1
springboot4.0 and JDK 21 when use virtual threads，the tomcat thread prometheus metrics value is -1, there are
tomcat_threads_busy_threads = -1
tomcat_threads_config_max_threads = -1
tomcat_threads_current_threads - 1
...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。