#vulnerability (30 Repositories)
Ranked open-source repositories tagged with #vulnerability, scored by pull request acceptance likelihood and maintainer engagement velocity.
63.4%
40.1h
30 repositories tagged #vulnerability
google/osv.dev
Open source vulnerability DB and triage service.
greenbone/gvmd
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
greenbone/gsa
Greenbone Security Assistant - The web frontend for the Greenbone Community Edition
Tencent/AI-Infra-Guard
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
greenbone/gvm-tools
Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance
OasisLMF/OasisLMF
Loss modelling framework.
sansecio/magevulndb
List of Magento extensions with known security issues.
aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
The-Art-of-Hacking/h4cker
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
anchore/grype
A vulnerability scanner for container images and filesystems
safreita1/TIGER
Python toolbox to evaluate graph vulnerability and robustness (CIKM 2021)
jfrog/jfrog-idea-plugin
JFrog IntelliJ IDEA plugin
Unclecheng-li/poc-lab
Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more.
project-copacetic/copacetic
🧵 CLI tool for directly patching container images!
digitalcoyote/NuGetDefense
An MSBuildTask that checks for known vulnerabilities. Inspired by OWASP SafeNuGet.
Vulnogram/Vulnogram
Vulnogram is the tool for reserving, managing, and publishing CVEs. Get started at vulnogram.org or deploy Docker edition for full enterprise features.
reconmap/reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.
aboutcode-org/vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
ossillate-inc/packj
Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
jar-analyzer/jar-analyzer
Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索等
chennqqi/godnslog
An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability
Unclecheng-li/cybersecurity-daily
网络安全日报—每日推送；Daily updated report on cybersecurity hotspots
Unclecheng-li/DeepSec
DeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern errors in real time. Spear automates authorized penetration testing with 40+ skill packs, from recon to PoC.
swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
cr0hn/vulnerable-node
Vulnerable Nodejs — a real shop (NodeBazaar) intentionally full of security bugs. 14 labs, OWASP Top 10:2025, SAST benchmark. Node.js port of DVWA.
jacubes/CVE-2026-24061
CVE-2026-24061 exploit PoC
anchore/vunnel
Tool for collecting vulnerability data from various sources (used to build the grype database)
lockgraph/yarn-audit-fix
The missing `yarn audit fix`