alibi
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
api-securitycode-analysisconfiguration-auditing+7
1118 days ago
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
screambby/cve-2025-52099Proof-of-concept for CVE-2025-52099, an integer overflow in SQLite 3.50.0's setupLookaside function leading to heap-buffer-overflow.
dynamorio/dynamorioRuntime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…
trailofbits/gosentrySecurity-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
shoucheng3/hibernate__hibernate-validator_cve-2019-10219_6-0-17-finalReference implementation of Bean Validation 2.0 (JSR-380) providing annotation-driven metadata model and API for JavaBean and method validation with…
shoucheng3/nahsra__antisamy_cve-2017-14735_1-5-6Java library for fast, configurable HTML sanitization from untrusted sources. Uses policy-driven scanning to remove malicious JavaScript and CSS,…
shoucheng3/nahsra__antisamy_cve-2016-10006_1-5-3Fast, configurable HTML sanitization library for preventing XSS and malicious code injection from untrusted user input. Provides a policy-driven API…
vesjolyjd/kaspersky_cve-2024-3094Security review of CVE-2024-3094 (XZ Utils backdoor) including threat modeling, static/dynamic code analysis, fuzzing with AFL++, and a…
nidhihcl/external_expat_2.1.0_cve-2022-43680C library for stream-oriented XML parsing with a focus on vulnerability analysis and exploitation of CVE-2022-43680, enabling fuzzing and…
cure53/dompurifyDOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…
zunak/cve-2024-22640Proof-of-concept exploit for CVE-2024-22640, a ReDoS vulnerability in TCPDF <=6.7.4 triggered by crafted HTML color input, with demonstration code.
halcy0nic/cve-2023-40296Proof of Concept for CVE-2023-40296
tarantula-team/cve-2019-19203An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced…
microcosm-cc/bluemondaybluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
owasp/cheatsheetseriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
kevinbackhouse/djvulibre-poc-cve-2025-53367Proof-of-concept exploit for CVE-2025-53367, a vulnerability in the DjVuLibre library. Demonstrates exploitation of a memory corruption bug in DjVu…
satheesh575555/external_expat_aosp10_r33_cve-2022-25236Patched version of Expat XML parser for AOSP10, addressing CVE-2022-25236. Provides source code for vulnerability analysis and educational review of…
sudo-wp/sudowp-dropzone-elementorSecure fork of Startklar Elementor Addons. Patched CVE-2024-5153 & File Upload vulnerabilities.