红队攻防
近两年免杀技术年鉴
Python免杀技术实录
AD域攻防系列微课程
免杀技术入门基础知识
深入理解CodeQL代审
开源安全项目二开计划
搞懂攻防内存马研究
深入理解SAST代审测试
C2的发展和技术分析
Fastjson姿势技巧集合
武装你的BurpSuite插件篇
CS4.5二开过HR及内扫
C#安全内网渗透工具集
红队文档书籍PDF资源
邮件钓鱼免杀完全指南
AD内网域技战法总结
渗透测试红队之信息收集
免杀致盲底层驱动BYOVD
SpringBoot常见安全风险
WIN系统红队Rootkit项目2
WIN系统红队Rootkit项目
Ghost Bits项目绕防护神器
自研新型C2(LeekShell)
国外红队通用笔记对抗录
红队钓鱼风险演练平台
Payload渗透测试平台
一键挖掘CVE自动化
红队攻防资产管理小工具
红队多协议代理管理平台
自托管免杀载荷生成平台
红队后渗透作战平台
小迪安全知识库
-
+
home
一键挖掘CVE自动化
一键挖掘CVE自动化
# AutoCVE - 一键挖掘 CVE，筛项目、审源码、验漏洞、出报告，全流程自动化 项目地址：https://github.com/larlarua/AutoCVE [](https://github.com/larlarua/AutoCVE/blob/main/docs/assets/GIF/demo.gif) ## 项目文档 [](https://github.com/larlarua/AutoCVE#-%E9%A1%B9%E7%9B%AE%E6%96%87%E6%A1%A3) ### 📖 [用户使用手册](https://github.com/larlarua/AutoCVE/blob/main/docs/USER_GUIDE.md) [](https://github.com/larlarua/AutoCVE#-%E7%94%A8%E6%88%B7%E4%BD%BF%E7%94%A8%E6%89%8B%E5%86%8C) 涵盖环境部署、模型配置、项目导入、Agent 审计、一键 CVE、漏洞管理和 Skills 管理完整使用说明，并提供各功能界面预览。 ### 🏗️ [架构设计文档](https://github.com/larlarua/AutoCVE/blob/main/docs/ARCHITECTURE_DESIGN.md) [](https://github.com/larlarua/AutoCVE#%EF%B8%8F-%E6%9E%B6%E6%9E%84%E8%AE%BE%E8%AE%A1%E6%96%87%E6%A1%A3) 介绍 AutoCVE 的整体架构、Agent 工作流、工具编排、权限保护、Agent Runtime 以及 ReAct Loop 状态机设计。 ### 🔌 [接口文档](https://github.com/larlarua/AutoCVE/blob/main/docs/API_DOCUMENTATION.md) [](https://github.com/larlarua/AutoCVE#-%E6%8E%A5%E5%8F%A3%E6%96%87%E6%A1%A3) 提供后端 API、数据结构、请求参数及接口调试说明。 ## 核心能力 [](https://github.com/larlarua/AutoCVE#-%E6%A0%B8%E5%BF%83%E8%83%BD%E5%8A%9B) ### 🚀 一键完成 CVE 挖掘 [](https://github.com/larlarua/AutoCVE#-%E4%B8%80%E9%94%AE%E5%AE%8C%E6%88%90-cve-%E6%8C%96%E6%8E%98) 实现从项目筛选、仓库导入、审计任务创建、Agent 漏洞挖掘到 CVE 申报报告生成的全流程自动化。用户仅需复制报告内容并提交，即可完成后续 CVE 申请。 ### 🤖 Multi-Agent 协同审计 [](https://github.com/larlarua/AutoCVE#-multi-agent-%E5%8D%8F%E5%90%8C%E5%AE%A1%E8%AE%A1) 通过 Orchestrator 统一调度 Recon、Scan、Triage、Finding 和 Verification 等 Agent，协同完成信息收集、工具扫描、误报过滤、漏洞深挖与动态验证。 ### 🧩 三种审计模式 [](https://github.com/larlarua/AutoCVE#-%E4%B8%89%E7%A7%8D%E5%AE%A1%E8%AE%A1%E6%A8%A1%E5%BC%8F) 根据不同审计目标灵活选择增强扫描、智能审计或综合审计，兼顾扫描 - [ ] | 审计模式 | 核心 Agent | 适用场景 | |---------|-------------------------|-----------------------------| | ⚡ 增强扫描 | Scan → Triage | 快速分析工具扫描结果并过滤误报 | | 🧠 智能审计 | Finding | 深度挖掘高价值漏洞，适用于 CVE 和 0Day 研究 | | 🔍 综合审计 | Scan → Triage + Finding | 融合工具扫描与源码分析，开展全量审计 | ### 面向 CVE 挖掘的专用 Agent [](https://github.com/larlarua/AutoCVE#-%E9%9D%A2%E5%90%91-cve-%E6%8C%96%E6%8E%98%E7%9A%84%E4%B8%93%E7%94%A8-agent) Finding Agent 是 AutoCVE 的核心审计能力，专为 CVE 挖掘场景设计。它可直接分析项目源码，并结合 ReAct Loop、专项工具调用、Nudge 纠偏及 `FinalizeFinding` 结构化终止机制，最终产出符合 CVE 申报条件的高价值漏洞。 **💬 交互式审计与全过程追踪** **🗂️ 智能漏洞管理与 Skills 扩展** * * * ## 🚀 快速开始 [](https://github.com/larlarua/AutoCVE#-%E5%BF%AB%E9%80%9F%E5%BC%80%E5%A7%8B) ### ⚡ 一行命令部署 [](https://github.com/larlarua/AutoCVE#-%E4%B8%80%E8%A1%8C%E5%91%BD%E4%BB%A4%E9%83%A8%E7%BD%B2) 无需克隆仓库，一行命令即可启动： Linux / macOS / Git Bash : curl -fsSL https://raw.githubusercontent.com/larlarua/AutoCVE/v1.0.4/docker-compose.prod.yml \\ | docker compose -f - up -d Windows PowerShell / CMD : curl.exe -fsSL https://raw.githubusercontent.com/larlarua/AutoCVE/v1.0.4/docker-compose.prod.yml | docker compose -f - up -d ### 🛠️ 源码部署 [](https://github.com/larlarua/AutoCVE#%EF%B8%8F-%E6%BA%90%E7%A0%81%E9%83%A8%E7%BD%B2) 适用于本地开发、功能调试或二次开发： git clone https://github.com/larlarua/AutoCVE.git cd AutoCVE docker compose up -d --build ### 🌐 服务访问 [](https://github.com/larlarua/AutoCVE#-%E6%9C%8D%E5%8A%A1%E8%AE%BF%E9%97%AE) 服务启动完成后，可通过以下地址访问： 服务 访问地址 用途 🖥️ 前端 [http://localhost:3000](http://localhost:3000/) AutoCVE 用户界面 ⚙️ 后端 API [http://localhost:8000](http://localhost:8000/) 后端接口服务 📘 Swagger [http://localhost:8000/docs](http://localhost:8000/docs) API 文档与接口调试 🗄️ Adminer [http://localhost:8080](http://localhost:8080/) 数据库管理 Tip **快速体验完整审计流程** 配置模型 → 导入项目 → 创建审计任务 → 跟踪实时审计 → 管理漏洞 → 编辑或导出报告 * * * ## 🏆 CVE 挖掘成果 [](https://github.com/larlarua/AutoCVE#-cve-%E6%8C%96%E6%8E%98%E6%88%90%E6%9E%9C) [](https://camo.githubusercontent.com/33649e3bc205d761e5a7a81ea4d42a5e76fe21d355a6c259d0763dbc109569ea/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4356452d33302d737563636573733f7374796c653d666f722d7468652d6261646765) [](https://camo.githubusercontent.com/0d1584da1d828f80fbf350dd88e22fdd81eea8dcbd49568f60f337499ee6c224/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f50726f6a656374732d31342d626c75653f7374796c653d666f722d7468652d6261646765) [](https://camo.githubusercontent.com/8769bd4db4d111bf04d718dbb14594d135869fcfff557415bbab1a7c4bf82cf2/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d6178253230435653532d392e392d637269746963616c3f7374796c653d666f722d7468652d6261646765) [](https://camo.githubusercontent.com/ab5bb6cdcecfec3f6daf534a750fcd27da0538744c1891ace69eeacb1df7747e/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f54657374253230506572696f642d37253230446179732d6f72616e67653f7374796c653d666f722d7468652d6261646765) Note AutoCVE 在为期一周的测试中，共发现并提交了 **30 个安全漏洞**，覆盖 **14 个开源项目**。 点击表格中的 CVE 编号可查看官方记录，完整漏洞报告收录于 **[larlarua/vulnerability-reports](https://github.com/larlarua/vulnerability-reports/)**。 **🔍 查看 CVE 成果明细（30）** CVE 编号 项目 项目热度 漏洞类型 CVSS 漏洞内容 [CVE-2026-40904](https://www.cve.org/CVERecord?id=CVE-2026-40904) Chartbrew [](https://camo.githubusercontent.com/9fb653ef3558beea90b4f8e6202a932a6e3a57faa534293e23c2f2cd6bc30866/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6368617274627265772f6368617274627265773f7374796c653d736f6369616c) Improper Access Control **8.1** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-40904/detail_en.md) [CVE-2026-40603](https://www.cve.org/CVERecord?id=CVE-2026-40603) Chartbrew [](https://camo.githubusercontent.com/9fb653ef3558beea90b4f8e6202a932a6e3a57faa534293e23c2f2cd6bc30866/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6368617274627265772f6368617274627265773f7374796c653d736f6369616c) Improper Access Control **6.5** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-40603/detail_en.md) [CVE-2026-40601](https://www.cve.org/CVERecord?id=CVE-2026-40601) Chartbrew [](https://camo.githubusercontent.com/9fb653ef3558beea90b4f8e6202a932a6e3a57faa534293e23c2f2cd6bc30866/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6368617274627265772f6368617274627265773f7374796c653d736f6369616c) Missing Authorization **7.5** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-40601/detail_en.md) [CVE-2026-40600](https://www.cve.org/CVERecord?id=CVE-2026-40600) Chartbrew [](https://camo.githubusercontent.com/9fb653ef3558beea90b4f8e6202a932a6e3a57faa534293e23c2f2cd6bc30866/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6368617274627265772f6368617274627265773f7374796c653d736f6369616c) Improper Access Control **8.1** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-40600/detail_en.md) [CVE-2026-40595](https://www.cve.org/CVERecord?id=CVE-2026-40595) Chartbrew [](https://camo.githubusercontent.com/9fb653ef3558beea90b4f8e6202a932a6e3a57faa534293e23c2f2cd6bc30866/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6368617274627265772f6368617274627265773f7374796c653d736f6369616c) Improper Access Control **7.5** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-40595/detail_en.md) [CVE-2026-42181](https://www.cve.org/CVERecord?id=CVE-2026-42181) Lemmy [](https://camo.githubusercontent.com/e5089773e583e74a7fe34a90b8ebd02a2125930c36ff635a7af171eb53a4a4cf/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4c656d6d794e65742f6c656d6d793f7374796c653d736f6369616c) SSRF **6.5** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-42181/detail_en.md) [CVE-2026-42180](https://www.cve.org/CVERecord?id=CVE-2026-42180) Lemmy [](https://camo.githubusercontent.com/e5089773e583e74a7fe34a90b8ebd02a2125930c36ff635a7af171eb53a4a4cf/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4c656d6d794e65742f6c656d6d793f7374796c653d736f6369616c) SSRF **6.3** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-42180/detail_en.md) [CVE-2026-7290](https://www.cve.org/CVERecord?id=CVE-2026-7290) JeecgBoot [](https://camo.githubusercontent.com/337c37f10c2f57137b112d400c09e0218423d8131abf0af526b014f9ae742332/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a65656367626f6f742f4a65656367426f6f743f7374796c653d736f6369616c) SQL Injection **6.3** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-7290/detail_en.md) [CVE-2026-7291](https://www.cve.org/CVERecord?id=CVE-2026-7291) o2oa [](https://camo.githubusercontent.com/cc42c3d595f04e93f3cf2ab6cb1eb8115e6a7dfcee9212cc572d6cad1b4a08ff/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6f326f612f6f326f613f7374796c653d736f6369616c) SSRF **6.3** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-7291/detail_en.md) [CVE-2026-7292](https://www.cve.org/CVERecord?id=CVE-2026-7292) o2oa [](https://camo.githubusercontent.com/cc42c3d595f04e93f3cf2ab6cb1eb8115e6a7dfcee9212cc572d6cad1b4a08ff/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6f326f612f6f326f613f7374796c653d736f6369616c) RCE **5.6** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-7292/detail_en.md) [CVE-2026-7303](https://www.cve.org/CVERecord?id=CVE-2026-7303) xxl-job [](https://camo.githubusercontent.com/e78adb634c96647839cb2034cefc850845bb6c2a11bca1d31abd9d010b91a745/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f78757875656c692f78786c2d6a6f623f7374796c653d736f6369616c) Improper Access Control **3.7** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-7303/detail.md) [CVE-2026-7305](https://www.cve.org/CVERecord?id=CVE-2026-7305) xxl-job [](https://camo.githubusercontent.com/e78adb634c96647839cb2034cefc850845bb6c2a11bca1d31abd9d010b91a745/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f78757875656c692f78786c2d6a6f623f7374796c653d736f6369616c) SSRF **6.3** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-7305/detail.md) [CVE-2026-7306](https://www.cve.org/CVERecord?id=CVE-2026-7306) xxl-job [](https://camo.githubusercontent.com/e78adb634c96647839cb2034cefc850845bb6c2a11bca1d31abd9d010b91a745/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f78757875656c692f78786c2d6a6f623f7374796c653d736f6369616c) Hard-coded Key **5.6** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-7306/detail.md) [CVE-2026-40610](https://www.cve.org/CVERecord?id=CVE-2026-40610) BentoML [](https://camo.githubusercontent.com/a2820e0eab687bfe1ab2c0382a1ff283649ba3a14aba02b118a137a77d3ad7c8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f62656e746f6d6c2f42656e746f4d4c3f7374796c653d736f6369616c) Link Following **5.5** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-40610/detail_en.md) [CVE-2026-48763](https://www.cve.org/CVERecord?id=CVE-2026-48763) typebot.io [](https://camo.githubusercontent.com/90300c123be90038f1f53de103f78d80ca336673011020abc6725d3ee137ea05/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f626170746973746541726e6f2f74797065626f742e696f3f7374796c653d736f6369616c) Missing Authorization **8.2** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-48763/detail_en.md) [CVE-2026-48764](https://www.cve.org/CVERecord?id=CVE-2026-48764) typebot.io [](https://camo.githubusercontent.com/90300c123be90038f1f53de103f78d80ca336673011020abc6725d3ee137ea05/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f626170746973746541726e6f2f74797065626f742e696f3f7374796c653d736f6369616c) SSRF **8.2** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-48764/detail_en.md) [CVE-2026-48765](https://www.cve.org/CVERecord?id=CVE-2026-48765) typebot.io [](https://camo.githubusercontent.com/90300c123be90038f1f53de103f78d80ca336673011020abc6725d3ee137ea05/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f626170746973746541726e6f2f74797065626f742e696f3f7374796c653d736f6369616c) Authorization Bypass **9.9** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-48765/detail_en.md) [CVE-2026-48766](https://www.cve.org/CVERecord?id=CVE-2026-48766) typebot.io [](https://camo.githubusercontent.com/90300c123be90038f1f53de103f78d80ca336673011020abc6725d3ee137ea05/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f626170746973746541726e6f2f74797065626f742e696f3f7374796c653d736f6369616c) Sensitive Data Exposure **7.6** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-48766/detail_en.md) [CVE-2026-48767](https://www.cve.org/CVERecord?id=CVE-2026-48767) typebot.io [](https://camo.githubusercontent.com/90300c123be90038f1f53de103f78d80ca336673011020abc6725d3ee137ea05/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f626170746973746541726e6f2f74797065626f742e696f3f7374796c653d736f6369616c) Sensitive Data Exposure **7.6** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-48767/detail_en.md) [CVE-2026-45296](https://www.cve.org/CVERecord?id=CVE-2026-45296) OpenReplay [](https://camo.githubusercontent.com/8963fd84246fd794074d4ad1c1032674ae42049e2c03a71437cb37d8675df9f8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6f70656e7265706c61792f6f70656e7265706c61793f7374796c653d736f6369616c) Improper Access Control **7.7** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-45296/detail_en.md) [CVE-2026-46372](https://www.cve.org/CVERecord?id=CVE-2026-46372) SillyTavern [](https://camo.githubusercontent.com/7a6756e4e3b6f5052f3b61d89f13bd1cbcbe044c1895aeb918e5a18a2349e64d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f53696c6c7954617665726e2f53696c6c7954617665726e3f7374796c653d736f6369616c) SSRF **8.5** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-46372/detail_en.md) [CVE-2026-45260](https://www.cve.org/CVERecord?id=CVE-2026-45260) pimcore [](https://camo.githubusercontent.com/22c6a29b476ce9f19acb1c049130a661f889ff8170d4cca3706cc170cc086027/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f70696d636f72652f70696d636f72653f7374796c653d736f6369616c) Missing Authorization **8.1** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-45260/detail_en.md) [CVE-2026-41235](https://www.cve.org/CVERecord?id=CVE-2026-41235) froxlor [](https://camo.githubusercontent.com/d01528d6ebc65742607609b15d8501734d249d05fc0ae83460f55bc67a3e99fd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f66726f786c6f722f66726f786c6f723f7374796c653d736f6369616c) Incorrect Authorization **8.8** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-41235/detail_en.md) [CVE-2026-41236](https://www.cve.org/CVERecord?id=CVE-2026-41236) froxlor [](https://camo.githubusercontent.com/d01528d6ebc65742607609b15d8501734d249d05fc0ae83460f55bc67a3e99fd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f66726f786c6f722f66726f786c6f723f7374796c653d736f6369616c) Link Following **8.8** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-41236/detail_en.md) [CVE-2026-43984](https://www.cve.org/CVERecord?id=CVE-2026-43984) Tautulli [](https://camo.githubusercontent.com/54a23ece15ad3dc5e129de5f8a3843b6411a5d53459e9303c3a18d5186ea77e2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f54617574756c6c692f54617574756c6c693f7374796c653d736f6369616c) Stored XSS **8.9** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-43984/detail_en.md) [CVE-2026-43985](https://www.cve.org/CVERecord?id=CVE-2026-43985) Tautulli [](https://camo.githubusercontent.com/54a23ece15ad3dc5e129de5f8a3843b6411a5d53459e9303c3a18d5186ea77e2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f54617574756c6c692f54617574756c6c693f7374796c653d736f6369616c) CSRF **8.8** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-43985/detail_en.md) [CVE-2026-43986](https://www.cve.org/CVERecord?id=CVE-2026-43986) Tautulli [](https://camo.githubusercontent.com/54a23ece15ad3dc5e129de5f8a3843b6411a5d53459e9303c3a18d5186ea77e2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f54617574756c6c692f54617574756c6c693f7374796c653d736f6369616c) SSRF **9.9** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-43986/detail_en.md) [CVE-2026-54091](https://www.cve.org/CVERecord?id=CVE-2026-54091) filebrowser [](https://camo.githubusercontent.com/563bd986e1f4045a17d02a8525ed4c21f2f83ab2df6d427b3d5bd7345439d44e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f66696c6562726f777365722f66696c6562726f777365723f7374796c653d736f6369616c) Incorrect Authorization **7.5** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-54091/detail_en.md) [CVE-2026-50279](https://www.cve.org/CVERecord?id=CVE-2026-50279) craftcms [](https://camo.githubusercontent.com/d8a7a17100c8239603e61c95e75383f6c77268a71ea851734a658a5b8d404d32/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6372616674636d732f636d733f7374796c653d736f6369616c) Improper Authorization **6.5** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-50279/detail_en.md) [CVE-2026-50280](https://www.cve.org/CVERecord?id=CVE-2026-50280) craftcms [](https://camo.githubusercontent.com/d8a7a17100c8239603e61c95e75383f6c77268a71ea851734a658a5b8d404d32/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6372616674636d732f636d733f7374796c653d736f6369616c) Improper Access Control **6.5** [查看详情](https://github.com/larlarua/vulnerability-reports/blob/main/CVE-2026-50280/detail_en.md) * * * ## ⚠️ 安全与合规 [](https://github.com/larlarua/AutoCVE#%EF%B8%8F-%E5%AE%89%E5%85%A8%E4%B8%8E%E5%90%88%E8%A7%84) Warning 本项目仅限用于已获授权的安全研究、代码审计及学习交流，严禁将其用于任何未经授权的漏洞扫描、渗透测试或安全评估。 请确保仅在获得明确授权的目标与环境中执行扫描、漏洞验证或 PoC 测试。 Important 提交漏洞时，请遵循目标项目的安全政策及漏洞披露规范，包括但不限于： * `SECURITY.md` * GitHub Private Vulnerability Reporting * CNA 提交流程 * 其他负责任的漏洞披露机制 * * * ## 💬 交流与反馈 [](https://github.com/larlarua/AutoCVE#-%E4%BA%A4%E6%B5%81%E4%B8%8E%E5%8F%8D%E9%A6%88) Tip AutoCVE 的设计初衷，是探索 Agent 在自动化 CVE 挖掘场景中的应用与实践。目前，项目仍在持续迭代和完善，架构设计和功能实现都有不少需要打磨的地方。欢迎大家提交 Issue、PR，分享使用反馈或功能建议，共同提升 AutoCVE 的可靠性与实用性。 也欢迎随时来找我交流探讨！无论是技术问题、功能建议，还是 CVE 挖掘过程中遇到的疑问，都可以通过以下方式联系我： * 📧 **Email：** [359111529@qq.com](mailto:359111529@qq.com) * 🐙 **GitHub：** [@larlarua](https://github.com/larlarua) * * * ## 🙏 致谢 [](https://github.com/larlarua/AutoCVE#-%E8%87%B4%E8%B0%A2) Note AutoCVE 项目在开发初期参考并学习了 [DeepAudit](https://github.com/lintsinghua/DeepAudit) 的工程架构，这为本项目的快速起步提供了重要帮助。 谨此向 DeepAudit 项目及其开发者致以诚挚的谢意。 **🧩 关于 AutoCVE 的工程设计** * * * ## License [](https://github.com/larlarua/AutoCVE#license) 本项目基于 [AGPL-3.0](https://github.com/larlarua/AutoCVE/blob/main/LICENSE) 发布。 ## About Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation. ### Topics [react](https://github.com/topics/react "Topic: react") [agent](https://github.com/topics/agent "Topic: agent") [security-audit](https://github.com/topics/security-audit "Topic: security-audit") [multi-agent](https://github.com/topics/multi-agent "Topic: multi-agent") [penetration-testing](https://github.com/topics/penetration-testing "Topic: penetration-testing") [cve](https://github.com/topics/cve "Topic: cve") [vulnerability-detection](https://github.com/topics/vulnerability-detection "Topic: vulnerability-detection") [security-tools](https://github.com/topics/security-tools "Topic: security-tools") [source-code-analysis](https://github.com/topics/source-code-analysis "Topic: source-code-analysis") [vulnerability-research](https://github.com/topics/vulnerability-research "Topic: vulnerability-research") [code-audit](https://github.com/topics/code-audit "Topic: code-audit") [ai-security](https://github.com/topics/ai-security "Topic: ai-security") [fastapi](https://github.com/topics/fastapi "Topic: fastapi") [llm-agent](https://github.com/topics/llm-agent "Topic: llm-agent") ### Resources [Readme](https://github.com/larlarua/AutoCVE#readme-ov-file) ### License [AGPL-3.0 license](https://github.com/larlarua/AutoCVE#AGPL-3.0-1-ov-file) ### Security policy [Security policy](https://github.com/larlarua/AutoCVE#security-ov-file) [Activity](https://github.com/larlarua/AutoCVE/activity) ### Stars **1.1k** stars ### Watchers **5** watching ### Forks [**71** forks](https://github.com/larlarua/AutoCVE/forks) [Report repository](https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Flarlarua%2FAutoCVE&report=larlarua+%28user%29) ## [Releases 5](https://github.com/larlarua/AutoCVE/releases) [ Release v1.0.4Latest 4 days ago ](https://github.com/larlarua/AutoCVE/releases/tag/v1.0.4) [\+ 4 releases](https://github.com/larlarua/AutoCVE/releases) ## [Packages3](https://github.com/users/larlarua/packages?repo_name=AutoCVE) * [autocve-backend](https://github.com/users/larlarua/packages/container/package/autocve-backend) * [autocve-sandbox](https://github.com/users/larlarua/packages/container/package/autocve-sandbox) * [autocve-frontend](https://github.com/users/larlarua/packages/container/package/autocve-frontend) ## [Contributors1](https://github.com/larlarua/AutoCVE/graphs/contributors) * [](https://github.com/larlarua)[**larlarua** cil](https://github.com/larlarua) ## Languages * [Python70.5%](https://github.com/larlarua/AutoCVE/search?l=python) * [TypeScript27.0%](https://github.com/larlarua/AutoCVE/search?l=typescript) * [Shell0.8%](https://github.com/larlarua/AutoCVE/search?l=shell) * [PowerShell0.5%](https://github.com/larlarua/AutoCVE/search?l=powershell) * [CSS0.4%](https://github.com/larlarua/AutoCVE/search?l=css) * [JavaScript0.2%](https://github.com/larlarua/AutoCVE/search?l=javascript) * Other0.6% ## Footer [](https://github.com/)© 2026 GitHub, Inc. ### Footer navigation * [Terms](https://docs.github.com/site-policy/github-terms/github-terms-of-service) * [Privacy](https://docs.github.com/site-policy/privacy-policies/github-privacy-statement) * [Security](https://github.com/security) * [Status](https://www.githubstatus.com/) * [Community](https://github.community/) * [Docs](https://docs.github.com/) * [Contact](https://support.github.com/?tags=dotcom-footer) * Manage cookies * Do not share my personal information
xiaodi
July 9, 2026, 1:26 a.m.
294
0 comment
Forward
Favorites
Last
Next
Scan the QR Code
Copy link
Scan the QR code to share.
Copy link
share
link
type
password
Update password
Validity period
Markdown file
Word document
PDF document
PDF document (print)