GitHub监控消息提醒！！！

更新了：CVE-2025
描述：We are expected to investigate a critical alert reporting a Windows OLE zero-click RCE exploitation (CVE-2025-21298) delivered via a malicious RTF attachment.
URL：https://github.com/Arkha-Corvus/LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-

标签：#CVE-2025

GitHub

GitHub - Arkha-Corvus/LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-: We are expected to investigate…

We are expected to investigate a critical alert reporting a Windows OLE zero-click RCE exploitation (CVE-2025-21298) delivered via a malicious RTF attachment. - Arkha-Corvus/LetsDefend-SOC336-Windo...

GitHub监控消息提醒！！！

更新了：sql注入
描述：一个基于sqlmap API的高并发SQL注入漏洞扫描框架，支持多文件处理、结果存储、报告生成和数据可视化。
URL：https://github.com/fanwin/SqlmapAuto

标签：#sql注入

GitHub

GitHub - fanwin/SqlmapAuto: 一个基于sqlmap API的高并发SQL注入漏洞扫描框架，支持多文件处理、结果存储、报告生成和数据可视化。

一个基于sqlmap API的高并发SQL注入漏洞扫描框架，支持多文件处理、结果存储、报告生成和数据可视化。 - fanwin/SqlmapAuto

GitHub监控消息提醒！！！

更新了：信息收集
描述：information-collection-system 网络安全信息收集系统
URL：https://github.com/1841109483/information-collection-system

标签：#信息收集

GitHub

GitHub - 1841109483/information-collection-system: information-collection-system 网络安全信息收集系统

information-collection-system 网络安全信息收集系统. Contribute to 1841109483/information-collection-system development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：渗透测试
描述：面向 Windows 的 Scoop 第三方桶，收录常用 CTF、安全与渗透测试工具，便于快速安装、更新与管理。
URL：https://github.com/gandli/scoop-ctf

标签：#渗透测试

GitHub监控消息提醒！！！

更新了：反序列化
描述：基于vue3+element-plus+javascript-stringify的js序列化反序列化输入框组
URL：https://github.com/is-zhou/vue-serialize-input

标签：#反序列化

GitHub

GitHub - is-zhou/vue-serialize-input: 基于vue3+element-plus+javascript-stringify的js序列化反序列化输入框组

基于vue3+element-plus+javascript-stringify的js序列化反序列化输入框组 - is-zhou/vue-serialize-input

GitHub监控消息提醒！！！

更新了：sql注入
描述：dzzoffice后台sql注入
URL：https://github.com/Yohane-Mashiro/dzzoffice_sql

标签：#sql注入

GitHub

GitHub - Yohane-Mashiro/dzzoffice_sql: dzzoffice后台sql注入

dzzoffice后台sql注入. Contribute to Yohane-Mashiro/dzzoffice_sql development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：RCE
描述：🔍 Explore a working PoC for CVE-2025-32433, demonstrating its impact and providing insights for security professionals and developers.
URL：https://github.com/isikgoktepe0/Python-Web-Application-Firewall-WAF-

标签：#RCE

GitHub

GitHub - isikgoktepe0/Python-Web-Application-Firewall-WAF-: Advanced Python Web Application Firewall (WAF) - Web uygulama güvenliği…

Advanced Python Web Application Firewall (WAF) - Web uygulama güvenliği için gelişmiş bir firewall çözümü. SQL Injection, XSS, Path Traversal, RCE saldırılarına karşı koruma, rate limiting, IP bloc...

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-59489 Unity Vulnerability Checker
URL：https://github.com/taptap/cve-2025-59489

标签：#CVE-2025

GitHub

GitHub - taptap/cve-2025-59489: CVE-2025-59489 Unity Vulnerability Checker

CVE-2025-59489 Unity Vulnerability Checker. Contribute to taptap/cve-2025-59489 development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Comprehensive demonstration of CVE-2025-32421 Eclipse technique - a sophisticated race condition attack against Next.js 15.0.4 that bypasses the original CVE-2024-46982 patch.
URL：https://github.com/hidesec/CVE-2025-32421

标签：#CVE-2025

GitHub

GitHub - hidesec/CVE-2025-32421: Comprehensive demonstration of CVE-2025-32421 Eclipse technique - a sophisticated race condition…

Comprehensive demonstration of CVE-2025-32421 Eclipse technique - a sophisticated race condition attack against Next.js 15.0.4 that bypasses the original CVE-2024-46982 patch. - hidesec/CVE-2025-32421

GitHub监控消息提醒！！！

更新了：RCE
描述：포켓몬스터를 C 언어로 구현하고, 이를 직접 익스플로잇 해보는 실습입니다. 목표는 RCE 입니다.
URL：https://github.com/m0nk3ygod/Pokemon_cli_-_exploit

标签：#RCE

GitHub

GitHub - m0nk3ygod/Pokemon_cli_-_exploit: 포켓몬스터를 C 언어로 구현하고, 이를 직접 익스플로잇 해보는 실습입니다. 목표는 RCE 입니다.

포켓몬스터를 C 언어로 구현하고, 이를 직접 익스플로잇 해보는 실습입니다. 목표는 RCE 입니다. - m0nk3ygod/Pokemon_cli_-_exploit

GitHub监控消息提醒！！！

更新了：渗透测试
描述：一个功能强大的浏览器扩展程序，专门用于检测Web系统中的权限越权漏洞，适用于Web渗透测试。
URL：https://github.com/phpcalm/exceed

标签：#渗透测试

GitHub

GitHub - phpcalm/exceed: 一个功能强大的浏览器扩展程序，专门用于检测Web系统中的权限越权漏洞，适用于Web渗透测试。

一个功能强大的浏览器扩展程序，专门用于检测Web系统中的权限越权漏洞，适用于Web渗透测试。. Contribute to phpcalm/exceed development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：⚠️ Patch CVE-2025-10585 now to fix a critical type-confusion vulnerability in Chrome’s V8 engine, preventing active exploitation in the wild.
URL：https://github.com/m3m0o/portabilis-ieducar-user-type-privilege-escalation

标签：#CVE-2025

GitHub

GitHub - m3m0o/portabilis-ieducar-user-type-privilege-escalation: Proof of concept for exploitation of the vulnerability described…

Proof of concept for exploitation of the vulnerability described in CVE-2025-11554, which concerns the possibility of a privilege escalation through arbitrary requests to user types change endpoint...

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-60378 — Stored HTML Injection in RISE — Ultimate Project Manager & CRM < 3.9.4 (Invoices & Messaging)
URL：https://github.com/ajansha/CVE-2025-60378

标签：#CVE-2025

GitHub

GitHub - ajansha/CVE-2025-60378: CVE-2025-60378 — Stored HTML Injection in RISE — Ultimate Project Manager & CRM < 3.9.4 (Invoices…

CVE-2025-60378 — Stored HTML Injection in RISE — Ultimate Project Manager & CRM < 3.9.4 (Invoices & Messaging) - ajansha/CVE-2025-60378

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：CVE-2025-60374: Stored Cross-Site Scripting (XSS) in Perfex CRM Chatbot
URL：https://github.com/ajansha/CVE-2025-60374

标签：#CVE-2025

GitHub

GitHub - ajansha/CVE-2025-60374: CVE-2025-60374: Stored Cross-Site Scripting (XSS) in Perfex CRM Chatbot

CVE-2025-60374: Stored Cross-Site Scripting (XSS) in Perfex CRM Chatbot - ajansha/CVE-2025-60374

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：⚠️ Patch CVE-2025-10585 now to fix a critical type-confusion vulnerability in Chrome’s V8 engine, preventing active exploitation in the wild.
URL：https://github.com/Marinafabregat/CVE-2025-41088-Stored-XSS-in-Xibo-Signage-s-Xibo

标签：#CVE-2025

GitHub

GitHub - Marinafabregat/CVE-2025-41088: Stored Cross-Site Scripting (XSS) in Xibo Signage's Xibo CMS v4.1.2, due to a lack of proper…

Stored Cross-Site Scripting (XSS) in Xibo Signage's Xibo CMS v4.1.2, due to a lack of proper validation of user input. - Marinafabregat/CVE-2025-41088

GitHub监控消息提醒！！！

更新了：应急响应
描述：一个综合性的灾害风险管理平台，集成了风险评估、实时监测、预警发布、应急响应等功能。
URL：https://github.com/alanbulan/BS

标签：#应急响应

GitHub

GitHub - alanbulan/BS: 一个综合性的灾害风险管理平台，集成了风险评估、实时监测、预警发布、应急响应等功能。

一个综合性的灾害风险管理平台，集成了风险评估、实时监测、预警发布、应急响应等功能。. Contribute to alanbulan/BS development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：Detection for CVE-2025-11371
URL：https://github.com/rxerium/CVE-2025-11371

标签：#CVE-2025

GitHub

GitHub - rxerium/CVE-2025-11371: Detection for CVE-2025-11371

Detection for CVE-2025-11371. Contribute to rxerium/CVE-2025-11371 development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.
URL：https://github.com/DanielMadsenDK/ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

标签：#CVE-2025

GitHub

GitHub - DanielMadsenDK/ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script: This script automatically detects and remediates…

This script automatically detects and remediates **CVE-2025-11449** and **CVE-2025-11450** security vulnerabilities in ServiceNow UI Macros. These critical vulnerabilities could allow arbitrary cod...

GitHub监控消息提醒！！！

更新了：红队
描述：大模型安全研究与运营平台 (LLM Guardian) 不仅仅是一个批量测试工具，而是一个集“红队（攻击模拟）”、“蓝队（防御分析）”和“风控（治理与评估）”于一体的综合性平台。
URL：https://github.com/Liao330/LLM_Guardian

标签：#红队

GitHub监控消息提醒！！！

更新了：横向移动
描述：WindowsAD环境下使用GPO进行横向移动
URL：https://github.com/gege-eng/Tetris-for-Exemption-Application-Materials

标签：#横向移动

GitHub

gege-eng/Tetris-for-Exemption-Application-Materials

游戏界面由20行×10列的域组成，7种不同形状的四格方块（I/T/O/J/L/S/Z型）随机从顶部生成下落，并且在一个方块生成后，玩家可以知道下一个方块的形状。死亡判定线：Y ≥ 15（当方块堆叠高度触达此线时游戏结束） 在本问题中玩家使用的是简化版的操作规则，只能进行以下三种操作： • 横向移动：左右平移 • 旋转操作：支持0°、90°、180°、270°四向旋转 • 瞬间落地：瞬间抵达当...