Tools

shoucheng3/asf__commons-text_cve-2022-42889_1-9

Java library for string manipulation algorithms, packaged with a proof-of-concept exploit for CVE-2022-42889 to demonstrate and test the…

shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1

Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…

shoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1

OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…

vm2mv/tinyxml

TinyXML 2.6.2 with fixes for CVE-2021-42260 and CVE-2023-34194

njawalkar/apache-commons-lang2

Apache's commons-lang2 v2.6 with a backported fix for CVE-2025-48924

shoucheng3/whitesource__curekit_cve-2022-23082_1-1-3

Java security library providing contextual encoders and sanitizers to automatically remediate vulnerabilities like XSS, path traversal, and command…

fevar54/cve-2024-42461

Fix for ECDSA and EDDSA signature verification in Wycheproof project, addressing missing length checks that allowed zero-byte manipulation during…

pazhanivel07/openssl_1_0_1g_cve-2015-1788

General-purpose cryptography library implementing SSL/TLS protocols, symmetric/ asymmetric ciphers, message digests, and X.509 certificate handling…

nanopathi/external_expat_aosp10_r33_cve-2022-22822tocve-2022-22827

Patched version of the Expat XML parser library addressing multiple CVEs (CVE-2022-22822 through CVE-2022-22827) for AOSP 10 r33, providing…

shoucheng3/owasp__json-sanitizer_cve-2020-13973_1-2-0

Java library that converts malformed JSON-like content into standards-compliant, safe JSON, preventing code injection and ensuring embeddability in…

jfrog/jfrog-cve-2022-24675

Shell script to recursively scan folders for Go binaries using insecure pem.Decode function, detecting vulnerable or stripped binaries for…

trinadh465/openssl-1_0_1g_cve-2016-0702

OpenSSL 1.0.1g source code snapshot, providing SSL/TLS and general-purpose cryptography library with ciphers, digests, and X.509 certificate handling.

satheesh575555/external_expat_aosp10_r33_cve-2022-23990

C library for parsing XML, specifically patched for CVE-2022-23990, providing a reference implementation for vulnerability analysis and secure coding…

trinadh465/openssl-1.1.1g_cve-2022-4304

OpenSSL toolkit providing TLS/SSL protocols and general-purpose cryptographic library with command-line tools for key generation, certificate…

shoucheng3/asf__cxf_cve-2019-17573_3-2-11

Web services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, WS-Trust, and JAX-WS/JAX-RS APIs.

trinadh465/openssl-1_0_1g_cve-2015-1791

OpenSSL 1.0.1g source code with CVE-2015-1791 patch, providing SSL/TLS and cryptographic library for secure communications.

khayashi4337/lodash.template-fixed

Fork of lodash.template with CVE-2021-23337 fix (command injection via variable option)