AppThreat / vuln-list
Linux upstream vulnerabilities data suitable for dep-scan
☆17Updated this week
Alternatives and similar repositories for vuln-list:
Users that are interested in vuln-list are comparing it to the libraries listed below
- Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data☆19Updated 2 years ago
- OSS-Fuzz vulnerabilities for OSV.☆151Updated this week
- ☆38Updated 2 months ago
- A fork of Bandit tool with patterns to identifying malicious python code.☆25Updated 2 years ago
- An HTTP Response fuzzer to find Vulnerabilities in Security Scanners☆26Updated 10 months ago
- A Python library and command line interface for CVE Services.☆65Updated last month
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…☆114Updated last week
- CodeQL Security Queries☆26Updated this week
- ☆44Updated 9 months ago
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆75Updated last month
- Paper, data and code from Investigating Potential Security Vulnerability Manifestation through Various Analyses & Inferences Regarding In…☆19Updated 4 years ago
- Scan pypi for typosquatting☆38Updated 2 years ago
- Documentation of Semgrep: a fast, open-source, static analysis tool.☆40Updated this week
- Disassembly Generation and Processing for JARV1S☆14Updated 8 months ago
- A community collection of security reviews of open source software components.☆93Updated last year
- CVE.ICU code.☆41Updated this week
- CveXplore☆38Updated 3 weeks ago
- IOCs from Google's Threat Analysis Group (TAG)☆30Updated 4 months ago
- The official repository of ICSME'23 paper "Exploring Security Commits in Python"☆18Updated last year
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆58Updated last week
- Mayhem example templates for programming languages and fuzzers that you love!☆29Updated last year
- PoC: Python package static and dynamic analysis to detect environment variable stealing☆10Updated 4 years ago
- This novel black-box web vulnerability scanner attempts to infer the state machine of the web application.☆19Updated 5 years ago
- future-proof vulnerability detection benchmark, based on CVEs in open-source repos☆52Updated this week
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆142Updated last year
- Static Token And Credential Scanner☆96Updated last year
- Fast, simple library in Go to fetch CVEs from the National Vulnerability Database feeds☆25Updated last year
- Code Hierarchy Exploration Net (chen)☆20Updated last week
- ☆25Updated this week
- Fork Threat Modeling Platform - Community☆18Updated last week