cristianovisk's Stars
M507/CVE-2021-23017-PoC
PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017
cisagov/vulnrichment
A repo to conduct vulnerability enrichment.
peter-evans/swagger-github-pages
How to host Swagger API documentation with GitHub Pages
CVEProject/cvelistV5
CVE cache of the official CVE List in CVE JSON 5 format
OWASP/www-project-vulnerability-management-guide
OWASP Foundation Web Respository
CERTCC/SSVC
Stakeholder-Specific Vulnerability Categorization
Vulnetix/python-ssvc
Python implementation of Stakeholder-Specific Vulnerability Categorization (SSVC)
lxyeternal/pypi_malregistry
The repository has collected about 10,000 malicious pypi packages. This dataset is the work of the ASE 2023 paper "An Empirical Study of Malicious Code In PyPI Ecosystem". Of course, we will continue to expand the dataset. Latest update time: 18 Oct. 2024
e-m-b-a/emba
EMBA - The firmware security analyzer
ZupIT/horusec
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
github/advisory-database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
binareio/FastCVE
FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)
t0sche/cvss-bt
Enriching the NVD CVSS scores to include Temporal & Threat Metrics
vb64/markdown-pdf
Markdown to pdf renderer
CyberMonitor/APT_CyberCriminal_Campagin_Collections
APT & CyberCriminal Campaign Collection
cisagov/CSAF
CISA CSAF Security Advisories
boloto1979/Securiskan
Securiskan: Scan files for malware. Secure your digital space.
projectdiscovery/cvemap
Navigate the CVE jungle with ease.
cristianovisk/open_source_insights_api
Library to consume project Open Source Insights Project from Google
theparanoids/PrioritizedRiskRemediation
A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).
OWASP/OpenCRE
Legit-Labs/legitify
Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
ossf/malicious-packages
A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
Nakiami/mellivora
Mellivora is a CTF engine written in PHP
DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
TURROKS/CVE_Prioritizer
Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
ericaabrahms/sbom-scorecard-website
ossf/scorecard
OpenSSF Scorecard - Security health metrics for Open Source
CycloneDX/transparency-exchange-api
A standard API specification for exchanging supply chain artifacts and intelligence