Tools

mdvpat/cve-2026-52832-poc-exploit-nuclio-dashboard

Nuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so…

owasp/docksec

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

aquasecurity/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

trailofbits/claude-code-devcontainer

Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.

opsxcq/exploit-cve-2016-10033

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

lijiejie/log4j2_vul_local_scanner

Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-2021-45046)

learner202649/cve-2026-40217-poc

The code for personally reproducing the corresponding vulnerability

facebook/mcpguard-dynamic

Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)

ycseo-git/cve-2025-55182

a.k.a. React2Shell

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

safedep/vet

Protect against malicious open source packages 🤖

gensecaihq/react2shell-scanner

Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm/pnpm/yarn lockfiles, Docker images, SBOMs,…

crazycatmyopic/cve

Docker Deskop giving issue CVE-2024-26308 for maven [reproduce]

brianwrf/cve-2018-11788

Apache Karaf XXE Vulnerability (CVE-2018-11788)

otsmane-ahmed/ci-supplychain-guard

Static analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…

praetorian-inc/titus

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

zupit/horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.