gitlab-security-oss/cis/gitlabcisAudits GitLab projects against the CIS GitLab Benchmark via read-only API checks, generating JSON reports on compliance and hardening recommendations.
wattocyber/masqLive recon and posture auditing for AI agent infrastructure: scans MCP configs, session logs, and APIs for secrets, poisoned catalogs, and CoT leaks.
jvr2022/cve-2026-40345Reproduces a stack-exhaustion denial-of-service in deepmerge-ts before 8.0.0, documents exploitation, and includes a scanner for vulnerable…
katekeiroz-dev/golang-x-textgolang.org/x/text v0.33.0 backport of CVE-2026-56852 (GO-2026-5970) for Go 1.24
getprobo/proboOpen source solutions for SOC2, GDPR, and ISO27001
jitpass/jitFind the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and…
gouldnicholas/cve-2026-5817-pocDocker Model Runner container-to-host RCE / Escape: A critical vulnerability that allows for container-to-host code execution in the Docker Model…
namegabevictoire01-sys/cs50-cybersecurity-final-projectCS50 Cybersecurity Final Project - Analysis of CVE-2024-3094
nichetoolkit/spring-retry-toolkitspring retry 1.3.x fix with niche toolkit for CVE-2026-41710
securest8/npm-incident-response
boxed-dev/vibe-coding-securityPre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection.…
tindersec/gh-workflow-auditorScript to audit GitHub Action Workflow files for potential vulnerabilities.
h4wkst3r/blackhat-usa-2022-materialsPresentation materials for my Black Hat USA 2022 Briefing and Arsenal talks
saku0512/cve-2026-71557-pocLocal proof-of-concept for CVE-2026-71557 demonstrating path traversal in go-git filesystem reference storage, including exploit logic and…
xiaoqimikko/jackson-checkjackson-databind 2026 年 11 条安全公告自查:扫源码注解降噪,告诉你真中几条;逐条求交集给出真正到位的版本(2.18.9/2.21.5/3.1.5,不是 advisory 上最常见的 2.21.4) CVE-2026-54515 / CVE-2026-54512
xiaoqimikko/shiro-check扫出你实际装的 Apache Shiro 模块与版本,逐条判定官方 26 条 CVE 里哪些真的落在你身上。按「CVE × 模块」判定,零依赖单 jar。 CVE-2026-49268
xiaoqimikko/tomcat-check查出 Spring Boot 内嵌 Tomcat 的真实版本(pom 里没有),并对每条 2026 年 CVE 同时给出 ASF 官方评级与 GitHub 评级、触发条件、以及这条会不会进 Dependabot 告警 CVE-2026-41293
wiz-sec-public/cloud-middleware-dataset