Tools

khayashi4337/lodash.template-fixed

Fork of lodash.template with CVE-2021-23337 fix (command injection via variable option)

shoucheng3/codehaus-plexus__plexus-utils_cve-2017-1000487_3-0-15

Java utility library with a focus on a specific CVE vulnerability, providing code analysis and static analysis capabilities for security assessment.

shoucheng3/xwiki__xwiki-commons_cve-2023-31126_14-10-3

Java library providing technical commons for XWiki projects, with a focus on vulnerability analysis and static code inspection for security testing.

shoucheng3/xwiki__xwiki-commons_cve-2023-36471_14-10-5

Technical Java libraries providing common utilities and components for the XWiki platform, including security vulnerability fixes and code analysis…

satheesh575555/openssl_1_1_0_cve-2021-23841

OpenSSL toolkit providing TLS/SSL protocols and general-purpose cryptographic library with command-line tools for key generation, certificate…

cyber-warrior-sec/cve-2024-28397-js2py-sandbox-escape

Proof-of-concept exploit for CVE-2024-28397, a sandbox escape in js2py allowing remote code execution via crafted JavaScript, with a dynamic patch…

shoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25

Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…

shoucheng3/jenkinsci__git-client-plugin_cve-2019-10392_2-8-4

Jenkins plugin providing Git APIs for automated repository operations including fetch, checkout, merge, and tag, with support for credential-based…

shoucheng3/xwiki__xwiki-rendering_cve-2023-37908_14-10-3

Generic wiki/HTML rendering system that converts textual input between syntaxes (wiki, HTML, XHTML). This repository contains a patched version…

shoucheng3/xwiki__xwiki-commons_cve-2023-29201_14-5

Technical libraries for XWiki projects, providing reusable components for vulnerability analysis, code analysis, and static analysis across…

m0rath/detect-log4j-exploitable

Bash script to detect Log4j (CVE-2021-44228) exploitable systems by scanning running Java processes for vulnerable log4j-core components without…

satheesh575555/external_expat_aosp10_r33_cve-2022-25235

C library for parsing XML, patched for CVE-2022-25235, providing stream-oriented parsing with handler registration and build configuration options.

barsug/msgspec-python313-pre

CVE-2025-27607 fix

shoucheng3/testng-team__testng_cve-2022-4065_7-5

Java testing framework for unit, integration, and end-to-end tests with annotations, data-driven testing, and parallel execution support.

bt123/numpy-1.13.1

test the CVE-2017-12852 in numpy v1.13.1 and v1.13.3 has fixed the bug

shoucheng3/codehaus-plexus__plexus-utils_cve-2022-4244_3-0-23

Java utility library with patched CVE-2022-4244 vulnerability, providing common helper classes for I/O, reflection, and CLI argument parsing in…

epicosy/json-sanitizer

JSON sanitizer that converts malformed JSON-like content into valid, safe JSON, preventing code injection and ensuring standards compliance for web…