#1Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.
Kitploit recommended
weltregie/liblzma-scanScans liblzma from xu-utils for backdoor (CVE-2024-3094)
batzionb/webpack-cve-2024-43788Analyzes and demonstrates the webpack CVE-2024-43788 vulnerability, providing detection and exploitation insights for security researchers.
trinadh465/external_zlib_aosp10_r33_cve-2018-25032Patch for zlib addressing CVE-2018-25032 in AOSP10 r33, providing a fix for the identified vulnerability.
sondermc/git-cveissuesvulnerabilities, CVE-2022-41903, and CVE-2022-23521, that affect versions 2.39 and older. Git for Windows was also patched to address an additional,…
skulkarni-mv/goissue_kirkstonego CVE-2023-24538 patch issue resolver - Kirkstone
scabench/jsonorg-fp2simple application with a (unreachable!) CVE-2022-45688 vulnerability
scabench/jsonorg-fp3simple application with a (unreachable!) CVE-2022-45688 vulnerability
shoucheng3/codehaus-plexus__plexus-archiver_cve-2023-37460_4-7-1Java library for creating and extracting archives (ZIP, tar, JAR) with integrated security patch for a reported vulnerability, used as a dependency…
scabench/jsonorg-fp1simple application with a (unreachable!) CVE-2022-45688 vulnerability
shoucheng3/codehaus-plexus__plexus-archiver_cve-2018-1002200_3-5Java library for creating and extracting archives (ZIP, TAR, JAR) with support for various compression formats. Note: version 3.5 contains a fix for…
jpmartins/minimalreproducerContext of CVE-2021-26291 minimal replicator
peterthomasawen/opensslupgrade1.1.1q-ubuntuA script to change OpenSSL versions on Ubuntu to 1.1.1q to protect against CVE-2022-2097.
shaikusaf/external_expact_aosp10_r33_cve-2022-25313C library for stream-oriented XML parsing, providing handlers for parsing structures in documents. Includes xmlwf tool and supports UTF-16 encoding.
samaujs/cve-2011-1475Check with Maven on CVE-2011-1475
trinadh465/external_zlib_cve-2022-37434General-purpose data compression library implementing the zlib, deflate, and gzip formats, with thread-safe functions and cross-platform build…
sionnx/cve-2003-0282Portable zipfile extraction utility with broad OS support, decryption, and security fixes for path traversal and symlink vulnerabilities.
9pings/fad-checkerBuildless dependency auditor that scans 10 ecosystems offline, reporting CVEs prioritized by CISA KEV and EPSS, EOL packages, licenses, committed…
