Tools

rmottanet/unauthscout

UnauthScout is an OSINT (Open Source Intelligence) tool developed in Bash for passive exploration of assets on version control platforms (GitLab and…

owasp/webgoat.net

OWASP WebGoat.NET

nanopathi/external_expat_aosp10_r33_cve-2022-22822tocve-2022-22827

Patched version of the Expat XML parser library addressing multiple CVEs (CVE-2022-22822 through CVE-2022-22827) for AOSP 10 r33, providing…

shoucheng3/codehaus-plexus__plexus-archiver_cve-2018-1002200_3-5

Java library for creating and extracting archives (ZIP, TAR, JAR) with support for various compression formats. Note: version 3.5 contains a fix for…

shoucheng3/codehaus-plexus__plexus-utils_cve-2022-4244_3-0-23

Java utility library with patched CVE-2022-4244 vulnerability, providing common helper classes for I/O, reflection, and CLI argument parsing in…

shoucheng3/jeremylong__dependencycheck_cve-2018-12036_3-1-2

Software composition analysis tool that detects publicly disclosed vulnerabilities in project dependencies using CPE matching, generating detailed…

shoucheng3/xwiki__xwiki-commons_cve-2023-29201_14-5

Technical libraries for XWiki projects, providing reusable components for vulnerability analysis, code analysis, and static analysis across…

shoucheng3/xwiki__xwiki-commons_cve-2023-31126_14-10-3

Java library providing technical commons for XWiki projects, with a focus on vulnerability analysis and static code inspection for security testing.

shoucheng3/xwiki__xwiki-commons_cve-2023-36471_14-10-5

Technical Java libraries providing common utilities and components for the XWiki platform, including security vulnerability fixes and code analysis…

shoucheng3/xwiki__xwiki-rendering_cve-2023-37908_14-10-3

Generic wiki/HTML rendering system that converts textual input between syntaxes (wiki, HTML, XHTML). This repository contains a patched version…

vm2mv/tinyxml

TinyXML 2.6.2 with fixes for CVE-2021-42260 and CVE-2023-34194

sassoftware/jackson

This repository provides a comprehensive security remediation of denial-of-service and allocation of resources without limits or throttling security…

nanitor/log4fix

Detect and fix log4j log4shell vulnerability (CVE-2021-44228)

jsonpath-plus/jsonpath

A fork of JSONPath from http://goessner.net/articles/JsonPath/

nzkoz/bigdecimal-segfault-fix

Provides a quick workaround for the segfault bug in Ruby (CVE-2009-1904)

shoucheng3/codehaus-plexus__plexus-utils_cve-2017-1000487_3-0-15

Java utility library with a focus on a specific CVE vulnerability, providing code analysis and static analysis capabilities for security assessment.

njawalkar/apache-commons-lang2

Apache's commons-lang2 v2.6 with a backported fix for CVE-2025-48924