#1Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.
Kitploit recommended
jibaru/cve-2025-66478-github-patcherGo-based automation tool that scans GitHub repositories for vulnerable Next.js versions (CVE-2025-66478) and automatically creates pull requests with…
kavin71725/cve-2025-12543-fix-for-wildflyDocker base image with backported Host header validation fix for CVE-2025-12543 in Undertow 1.4.x, enabling secure deployment of WildFly 11…
amir-malek/react-cve-2025-55182Detects and fixes CVE-2025-55182 (React2Shell) in React Server Components and Next.js apps. Scans package versions, suggests safe upgrades, and…
michalashurov/writeup-cve-2024-3094Technical analysis and writeup of CVE-2024-3094, the XZ Utils backdoor. Explores the supply-chain attack, exploitation mechanics, and detection…
trerb/ai-ide-config-guardScan a repo for AI-IDE config files that can trigger RCE via Claude Code hooks, Cursor rules, MCP auto-registration. Detects CVE-2025-59536,…
otakuliu/cve-2026-22807_rangeEducational Python target range simulating CVE-2026-22807, an AI supply chain RCE via TOCTOU in model loading. Includes vulnerable library, PoC…
thomrgn/xzutils_backdoor_obfuscationScript to obfuscate a payload the same way as it was done by the XZ utils attack (CVE-2024-3094)
name/log4j-remediationDiscover and remediate Log4Shell vulnerability [CVE-2021-45105]
ikram124/cve-2024-3094-analysisSecurity analysis project: Real-world CVE breakdown
m1lo25/cs50finalprojectInvestigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources,…
s41r4j/cve-2025-48384GIT vulnerability | Carriage Return and RCE on cloning
tiger3080/cve-2025-9267Seagate Toolkit for Windows (Installer <2.35.0.6) is vulnerable to insecure DLL loading. The installer loads DLLs from the working directory without…
h4mr3r/cve-2024-5082Proof-of-concept exploit for CVE-2024-5082, a remote code execution vulnerability in Sonatype Nexus Repository Manager 2 via crafted Maven artifacts…
niclas-zone/ci/trivyGitLab CI component for Trivy scanning
shakilkhatri/scanner-for-cve-2025-55182-vulnerabilityCVE-2025-55182 Detector. Find which of your GitHub repositories are exposed to the critical React/Next.js RCE vulnerability and generate a clean…
openexecution-coder/demo-cve-2026-4821Demonstrates AI agent-driven CVE remediation with cryptographic provenance tracking, showcasing detection, analysis, human approval, and verification…
joaoleonello/cve-2024-32002-pocProof of Concept for CVE-2024-32002: Git submodule path injection vulnerability.
surri/audit-axiosScan local repos for vulnerable axios versions (CVE-2026-40175) and patch interactively
