terra-nova83/cve-2026-0915-json-patch.-v2.0Provides a security patch for CVE-2026-0915, adding strict JSON schema validation, input sanitization, and rate limiting to prevent injection and DoS…
cyberwulfy200-dev/cve-2026-0915-json-patch.-v2.0Enterprise-grade JSON validator security patch that fixes CVE-2026-0915 with strict schema validation, input sanitization, rate limiting, and…
arian-gogani/enforcement-coverageFinds API routes carrying weaker authorization than their siblings. Recovered CVE-2026-45316 from source. Includes the negative results.
commando-x/vuln-bankIntentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…
42crunch/api-security-audit-actionAutomates static API security auditing of OpenAPI contracts in CI/CD, running 300+ checks for authentication, authorization, and data constraints,…
ransomleak/training-application-securityInteractive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…
mukul975/cve-mcp-serverProduction-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan,…
owasp/threat-dragonAn open source threat modeling tool from OWASP
shoucheng3/apache__camel_cve-2018-8041_2-20-3Open source integration framework for defining routing and mediation rules via DSLs (Java, XML, YAML) to connect various systems consuming or…
shoucheng3/jenkinsci__docker-commons-plugin_cve-2022-20617_1-17Jenkins plugin providing shared API for Docker credential management, registry authentication, daemon configuration, and image fingerprinting across…
studiomeyer-io/mcp-stdio-shellguardDefense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security…
git-pkgs/proxyA lightweight caching proxy for package registries.
infobyte/faradayOpen Source Vulnerability Management Platform
teycir/apihunterAsync API security scanner in Rust for CORS, CSP, GraphQL, JWT, OpenAPI, and active API posture checks.
fariszr/knockerKnocker, a knock based access control service for your homelab
irgoncalves/f5-waf-quick-patch-cve-2021-44228This tool creates a custom signature set on F5 WAF and apply to policies in blocking mode
semgrep/semgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.
seqra/opentaintFormal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…
