Top 105 cve open source projects

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

✭ 269

python HTML CSS Nix Makefile shell Dockerfile security vulnerability vulnerability-databases vulndb cve vulnerability-detection vulnerability-identification vulnerability-scanners security-tools vulnerability-database

CVE-2019-10149

CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

✭ 15

python exploit exim cve cve-2019-10149 exim-exploit 2019-10149

Exploits

A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits.

✭ 75

c javascript assembly HTML NASL windows firefox browser exploit asm poc ie wpad cve uaf jscript cve-2020-0674 cve-2019-17026 ionmonkey ms12-037 ms13-008 ms14-051

vulnerability-lab

漏洞研究

✭ 379

security research vulnerability cve

web-cve-tests

A simple framework for sending test payloads for known web CVEs.

✭ 120

python Makefile web tests struts cve payloads cve-scanning application-sec

fabric8-analytics-vscode-extension

Red Hat Dependency Analytics extension

✭ 125

typescript shell javascript insights security-vulnerability cve nvd dependency-analytics online-flow ide-extension

vulristics

Extensible framework for analyzing publicly available information about vulnerabilities

✭ 46

python HTML exploit vulnerability patch cve cvss

Virtual-Host

Modified Nuclei Templates Version to FUZZ Host Header

✭ 38

web-security nuclei bugbounty cve ssrf configuration-files api-docs misconfigurations nuclei-templates sensitive-files

CVE-2021-41773 CVE-2021-42013

Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE

✭ 20

shell exploit apache rce cve pentest payload

advisories

A collection of my public security advisories.

✭ 16

vulnerability cve advisory

massh-enum

OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).

✭ 136

shell python ssh accounts users enumeration vulnerability openssh cve cve-2018-15473

exploits

Some personal exploits/pocs

✭ 52

c C#python Dockerfile shell windows linux security research exploits poc rce cve lpe

myBugAnalyze

一些漏洞分析

✭ 48

java HTML CSS bug analyze vulnerability cve

vulnerability-db

Vulnerability database and package search for sources such as OSV, NVD, GitHub and npm.

✭ 36

python cli cve nvd vulnerability-detection sca vulnerability-database

PocOrExp in Github

聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.

✭ 544

python exploit poc vulnerabilities cve

CVE-2019-8449

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

✭ 66

python jira exploit exploits jira-issue vulnerability cve jira-rest-api exploit-database jira-api exploiting-vulnerabilities exploit-code exploitdb cve-exploit cve-2019-8449

pwn-pulse

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

✭ 126

shell exploit penetration-testing infosec pentesting cve red-team pentest-scripts security-tools

patton-cli

The knife of the Admin & Security auditor

✭ 42

python Dockerfile Makefile shell security cve cpe vulnerability-detection security-tools patton

security-advisories

👮 Security advisories of Nextcloud

✭ 35

PHP hack security nextcloud cve security-advisories

PatrowlHearsData

Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds

✭ 66

exploit vulnerabilities cve cpe cve-scanning vulnerability-identification cwe

rest-api

REST API backend for Reconmap

✭ 48

PHP Twig HTML Makefile Dockerfile javascript shell api security nmap vulnerability pentesting cve hacktoberfest secdevops reconnaissance ipe

CVE-2021-27928

CVE-2021-27928 MariaDB/MySQL-'wsrep provider' 命令注入漏洞

✭ 53

mariadb cve cve-2021-27928

dirtycow

radare2 IO plugin for Linux and Android. Modifies files owned by other users via dirtycow Copy-On-Write cache vulnerability

✭ 93

c shell Makefile C++android security exploit cve dirtycow

minecraft-log4j-honeypot

Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam

✭ 89

go Dockerfile minecraft exploit log4j cve

PyParser-CVE

Multi source CVE/exploit parser.

✭ 25

python parser osint penetration-testing infosec vulnerabilities cve pentest pentest-tool

Vehicle-Security-Toolkit

汽车/安卓/固件/代码安全测试工具集

✭ 367

python shell android security static-analysis reverse-engineering apk vulnerability cve pentest

Bugs-feed

Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities...

✭ 90

javascript HTML python CSS hacking scrapping vulnerabilities bugbounty cve

Vulnogram

Vulnogram is a tool for creating and editing CVE information in CVE JSON format

✭ 103

javascript Pug CSS security json vulnerability security-vulnerability cve nvd cwe cvss security-automation security-tools cvssv3 cve-json

threat-broadcast

威胁情报播报（停止运营）

✭ 147

python Smarty crontab cve exp cnvd threat-broadcast

dep-scan

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

✭ 346