#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
satheesh575555/external_expat_aosp10_r33_cve-2022-23990C library for parsing XML, specifically patched for CVE-2022-23990, providing a reference implementation for vulnerability analysis and secure coding…
trinadh465/openssl-1.1.1g_cve-2022-4304OpenSSL toolkit providing TLS/SSL protocols and general-purpose cryptographic library with command-line tools for key generation, certificate…
renweimeng/vlun-agent-xVulnAgent-X: A Layered Agentic Framework for Repository-Level Vulnerability Detection
rootd4ddy/cve-2023-31584Public disclosure for CVE-2023-31584.
trinadh465/frameworks_base_aosp10_r33_cve-2023-21284Android framework patch for CVE-2023-21284, addressing a security vulnerability in AOSP 10.
trinadh465/platform_frameworks_base_cve-2023-21288Android platform framework repository containing a patch or analysis for CVE-2023-21288, a vulnerability in the Android framework.
satheesh575555/external_aac_aosp10_r33_cve-2022-20130Android AAC codec vulnerability analysis and patch for CVE-2022-20130, focusing on memory corruption in external AAC library.
ill-deed/langflow-cve-2025-3248-multi-targetLangflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can…
shoucheng3/asf__cxf_cve-2019-17573_3-2-11Web services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, WS-Trust, and JAX-WS/JAX-RS APIs.
davidholiday/cve-2007-4559Educational demonstration of CVE-2007-4559 Python tarfile symlink attack with a script showing why os.path.realpath() fails to prevent extraction…
shoucheng3/nahsra__antisamy_cve-2017-14735_1-5-6Java library for fast, configurable HTML sanitization from untrusted sources. Uses policy-driven scanning to remove malicious JavaScript and CSS,…
theratpack/grails-javamelody-sample-appGrails sample application using the Javamelody 1.44 plugin to illustrate the CVE-2013-4378 vulnerability.
trinadh465/platform_packages_providers_mediaprovider_cve-2023-40127Android MediaProvider vulnerability analysis and patch for CVE-2023-40127, focusing on security assessment and remediation.
trinadh465/platform_system_netd_aosp10_r33_cve-2023-40084Android netd vulnerability analysis and exploitation research for CVE-2023-40084, focusing on the platform's network daemon.
trinadh465/external_aac_aosp10_r33_cve-2023-21282Analyzes and patches a specific Android vulnerability (CVE-2023-21282) in the AAC audio codec, providing a patched AOSP10 source tree for security…
trinadh465/openssl-1_0_1g_cve-2015-1791OpenSSL 1.0.1g source code with CVE-2015-1791 patch, providing SSL/TLS and cryptographic library for secure communications.
shoucheng3/jenkinsci__workflow-cps-plugin_cve-2022-25173_2646-v6ed3b5b01ff1Exploit for CVE-2022-25173 targeting Jenkins Pipeline Groovy Plugin's CPS interpreter sandbox bypass, enabling arbitrary code execution within…
jaloon/spring-webmvc5Fork spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819
