Tools

trickyearlobe/inspec-log4j

An Inspec profile to check for Log4j CVE-2021-44228 and CVE-2021-45046

rotavori/dasel-melange-apko

dasel v3.3.1 packaged with Melange and shipped as a minimal apko image, patched for CVE-2026-33320

fkj-src/fix_nginx_cve_2026_42945

Automated one-click shell script to detect and patch NGINX CVE-2026-42945 across major Linux distributions, with config backup, version validation,…

yakovyakov/cve-2026-31431-mitigation

Detection and mitigation tooling for CVE-2026-31431 (Copy Fail) on Linux kernels. Includes Phalanx-CCS and Silent4Labs scripts plus an Ansible…

salman-sec/patch-management-

Scenario-based training exercise for IT administrators: identify, approve, and deploy critical patches for financial systems under a 48-hour SLA…

owasp/teach-appsec

OWASP teaching modules covering application security fundamentals including risk management, secure software development, and operations security for…

soliantconsulting/cve-2025-46295-fix-fms

Automated script suite to detect and remediate CVE-2025-46295 by replacing vulnerable Apache Commons JARs in FileMaker Server installations with…

knqyf263/aqua-checksums

Monitors cryptographic integrity of container images, releases, and Git tags for supply chain security, verifying Sigstore cosign signatures with…

emomeni/simple-ansible-for-cve-2023-20198

Ansible playbook to detect and disable HTTP/HTTPS servers on Cisco IOS XE devices, mitigating CVE-2023-20198 vulnerability with automated…

gonsarrabia/minimus-junior-backend-exercise

Junior Backend Candidate Exercise: Packaging the dasel CLI (v3.3.1) with Melange, fixing CVE-2026-33320, and building a minimal container image using…

titus-soc/-cve-2024-3094-vulnerability-checker-fixer-public

A lightweight utility designed to detect and remediate systems affected by CVE-2024-3094, a critical vulnerability impacting [insert affected…

brinhosa/cve-2024-3094-one-liner

One-liner scripts to check server and Docker image vulnerability to CVE-2024-3094, including version detection and repository scanning for xz…

niccox/patch-openssl-cve-2014-0291_cve-2015-0204

Ansible playbook to patch OpenSSL against CVE-2014-0291 and CVE-2015-0204 on Red Hat family servers, with automated service restart and verification.

danielmadsendk/servicenow-cve-2025-11449-cve-2025-11450-mitigation-script

Automated detection and remediation of ServiceNow UI Macro vulnerabilities (CVE-2025-11449, CVE-2025-11450) by encoding sysparm_ parameters to…

dannyendortest/ollama

Synthetic demo target for Endor Labs EXPOSURE, tracking CVE-2024-12886 with a deliberately vulnerable dependency and a one-click PR-based fix…

dannyendortest/invokeai

Synthetic demo target for CVE-2024-10821 vulnerability detection and automated fix via compensating control. Demonstrates one-click PR-based…

gubiczap/cve-2026-31431-checker

Shell scanner for CVE-2026-31431 "Copy Fail" — a local privilege escalation via Linux kernel page cache corruption (algif_aead/AF_ALG). Checks kernel…