retire.js
retirejs/retire.jsscanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
static-analysisvulnerability-scannersweb-security
retirejs/retire.jsscanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
vivianuba/grandstream-cve-2026-2329-analysisDefensive vulnerability-research project comparing vulnerable and patched Grandstream GXP1600 firmware for CVE-2026-2329, using SquashFS extraction,…
anna-kravets/codeql-buffer-overflow-variantSynthetic CWE-120 stack buffer overflow variant of CVE-2020-8597 (pppd EAP) as a CodeQL static-analysis target
cynepmyx/nginx-rift-checkDetects the CVE-2026-42945 rewrite pattern in nginx configs: rewrite with ? in the replacement plus an unnamed capture consumed in the same location
ridhinva/npm-tar-path-traversal-scannerScanner: CVE-2026-31802 npm tar path traversal — Python checker for arbitrary file write via npm pack
0xcyberstan/cve-2026-42533-config-scannerStatic config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture → heap…
meslimohamedm22005188/path-traversal-cve-2026-14628Educational reproduction of CVE-2026-14628 path traversal vulnerability with vulnerable and secure code examples, fix explanation, and runnable demos…
galaxy-sc/cve-2026-47423-dompurify-xss-detectorGo-based scanner that detects DOMPurify sanitizer bypass (CVE-2026-47423) via logic fingerprinting on minified production JavaScript bundles,…
farhadalimohammadi-dir/vulnrepro-benchmarkBenchmark measuring AI models' ability to detect vulnerabilities in source code via real bug bounty cases with balanced recall and false-positive…
renewablehacking/cve-2020-7598Educational lab demonstrating CVE-2020-7598 prototype pollution in minimist with a vulnerable Node.js/Express app, exploit payload, and…
byezero/nginx-cve-2026-42945-checkLocal read-only scanner for CVE-2026-42945 (NGINX Rift) that checks NGINX, OpenResty, and Tengine instances for vulnerable rewrite configurations…
killercd/cve-2026-35414Demonstrates a proof-of-concept for CVE-2026-35414, showing a vulnerable and fixed version of SSH principal matching logic to illustrate the flaw.
jithinodattu/cve-2007-4559-labSelf-contained Docker lab demonstrating CVE-2007-4559 (TarSlip) directory traversal via Python's tarfile module. Includes vulnerable and fixed APIs,…
venom203020/cve-2026-5059-pocProof-of-concept demonstrating command injection in aws-mcp-server via shell=True, with analysis of the vulnerable code and the fix in v1.7.0.
ossillate-inc/packjStatic and dynamic analysis tool that audits open-source packages for malicious, vulnerable, and risky attributes, with sandboxed installation to…
thegenetic/cve-2026-2964-labEducational lab demonstrating CVE-2026-2964, a prototype pollution vulnerability in web-audio-recorder-js leading to RCE. Includes vulnerable and…
otakuliu/expression-sandbox-escape-simulation-labEducational lab demonstrating JavaScript expression sandbox escape techniques and patch evolution through multiple vulnerable sandbox versions, with…
owasp/railsgoatA vulnerable version of Rails that follows the OWASP Top 10