Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
EQSTLab/CVE-2026-0603
Hibernate ORM Second-Order SQL Injection | language: HTML
bakos-sandor-nx/teamcity-cve-2026-63077-remediation
JetBrains TeamCity On-Premises CVE-2026-63077 Emergency Hardening & Patch Runbook Package
renzi25031469/CVE-2026-19478
Superman-L/CVE-2026-16723
fastjson jsontype利用 | language: Java
xrzcc/s26-m1q-ghostlock-selinux
GhostLock CVE-2026-43499 research for Galaxy S26 (SM-S942U1/m1q): SELinux Permissive achieved, KASLR + tracefs port, uid=0 boundary documented | language: C
open-flaw/CVE-2026-56848
language: JavaScript
XiaoBaiLovesStirring/ghostlock-custom
GhostLock (CVE-2026-43499) adaptation for non-Android Linux 6.x ARM64 | language: C
DeadExpl0it/CVE-2026-19598-PoC
Proof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9. | language: Python
BiuTrap/CVE-2026-64849
CVE-2026-64849 PoC | topics: cve, cve-2026-64849, poc
CypherHippie/CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization
EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. | language: Java
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
EricRoosevelt/epc-digital-delivery-control-tower
Vendor-neutral BIM digital-delivery prototype: IFC inventory, IDS validation, deterministic BCF 3.0 issues, and a Power BI/Speckle control tower. | topics: bcf, bim, construction-tech, digital-delivery, ids, ifc, ifcopen...
pq0khqbiue/YCLshWIqXt
2022计算机毕设一套 终稿 （论文+程序源代码+使用说明）一款支持通过规则扩展进行终端防护对抗的后渗透框架设计与实现_596a004a-efc5-4543-a2ed-82b6a5ad11f5.zip | stars: 1 | forks: 0 | updated 2026-08-23T11:05:24Z | pushed 2026-08-23T11:05:16Z
F0ran9/AI-PENTEST
AI 驱动的多 Agent 自动化渗透测试平台：LLM 协调员+监察员编排专项子 Agent，授权边界内自动完成侦察→漏洞检测→利用验证→取证报告。Web 渗透 + C2 双作业线，45+ 原生工具，Docker 一键部署 | topics: ai, automation, c2, docker, fastapi, llm, multi-agent, offensive-security, penetration-testing, pe...
MrLiuCoder715/LaborUnionDefend
勞資糾紛權利救濟網站：不當解僱、違法調職、拒付加班費案例攻防策略、權利救濟行動指南、企業勞資糾紛報表查詢 | language: TypeScript | stars: 0 | forks: 0 | updated 2026-08-23T06:27:32Z | pushed 2026-08-23T06:27:18Z
ibislon/oYvNOWDjoZ
2022软件工程毕设一套 终稿 基于python的web安全漏洞渗透测试系统设计与实现（论文+前后端程序源代码）41.zip | stars: 1 | forks: 0 | updated 2026-08-23T04:23:55Z | pushed 2026-08-23T04:23:45Z
FamousRebel/pentest-interview-workbench
渗透测试面试答题工作台 (PWA) | language: Vue | stars: 0 | forks: 0 | updated 2026-08-23T18:43:31Z | pushed 2026-08-23T18:40:18Z | homepage: https://famousrebel.github.io/pentest-interview-workbench/
d0ppxmu8ez/lQMmCMHfMJ
2022计算机毕设一套 终稿 （论文+程序源代码+使用说明）一款支持通过规则扩展进行终端防护对抗的后渗透框架设计与实现_596a004a-efc5-4543-a2ed-82b6a5ad11f5.zip | stars: 0 | forks: 0 | updated 2026-08-23T01:47:42Z | pushed 2026-08-23T01:47:32Z
Ranger-netizen-dotcom/HoneyPrompt
**HoneyPrompt（蜜诱）— 主动智能体防御平台**：面向 AI 渗透智能体的主动防御蜜罐系统，用"提示词注入反制提示词注入"，实现 命中采集 → 画像聚合 → 告警 → 分级反制 的完整闭环。 | stars: 0 | forks: 0 | updated 2026-08-23T02:48:50Z | pushed 2026-08-23T02:48:45Z
nib82096oz/GGqSkYGRrK
2022算机毕设一套 终稿 基于web渗透技术的注入漏洞扫描工具及防护方法的研究与实现_（论文+python源代码+可执行文件）1.zip | stars: 1 | forks: 0 | updated 2026-08-23T02:51:30Z | pushed 2026-08-23T02:51:10Z
longcipher/onecipher
AI Native Security Tool for Wallet && Password management. | topics: ai-agent, ai-native, password-manager, wallet | language: Rust | stars: 4 | forks: 3 | updated 2026-09-05T13:25:29Z | pushed 2026-09-05T13:25:25Z | hom...