codetotal

CodeTotal CodeTotal analyzes any snippet , file , or repository to detect possible security flaws such as secret in code , open source vulnerability , code security , vulnerability , insecure infrastructure as code , and potential legal issues with open source licenses. To see how to use CodeTota...

MalQR.github.io

MalQR About MalQR is a collection of malicious QR codes and barcodes you can use to test the security of your scanners. It gives you the ability to conduct such tests with easiness : you just need to have a smartphone, a tablet or a laptop with an internet connection and browse MalQR.shielder.com...

vulnhawk

AI-powered code security scanner that finds vulnerabilities Semgrep and CodeQL miss. Quick Start • GitHub Action • Comparison • Languages • FAQ The Problem Traditional SAST tools rely on pattern matching and AST rules. They excel at catching known vulnerability patterns, but they fundamentally...

scscanner_sh

scscanner - Massive Status Code Scanner scscanner is tool to read website status code response from the lists. This tool have ability to filter only spesific status code, and save the result to a file. Feature Slight dependency. This tool only need curl to be installed Multi-processing. Scanning...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

pqaudit

pqaudit Scan codebases for quantum-vulnerable cryptography. Get a clear picture of what needs to migrate before Q-Day. pqaudit detects usage of RSA, ECDSA, Ed25519, ECDH, DH, and other algorithms broken by Shor's algorithm. It also identifies already-migrated PQC usage ML-KEM, ML-DSA, SLH-DSA so...

abap-code-scanner

OWASP ABAP Code Scanner SAP ABAP를 위한 정적 애플리케이션 보안 테스트SAST. 커스텀 ABAP 코드의 보안 취약점을 찾기 위한 무료 오픈소스 CLI - 오프라인 및 CI 환경에서 사용 가능. 에디션 에디션| 설명| 위치 ---|---|--- 오픈소스 CLI 무료, MIT| 내보낸 ABAP 소스를 로컬 또는 CI에서 스캔| 이 저장소 아래 Cloud SAP BTP| BTP destination을 통해 ABAP을 읽는 상용 SaaS| Cloud / BTP 에디션 Web Management Console|...

dawnscanner

Dawnscanner - Ruby 웹 애플리케이션을 위한 떠오르는 보안 스캐너 dawn은 웹 애플리케이션의 보안 문제를 검토하기 위해 설계된 소스 코드 스캐너입니다. 이 도구는 Ruby로 작성된 웹 애플리케이션을 스캔할 수 있으며, 기본적으로 모든 주요 MVCModel View Controller 프레임워크를 지원합니다: Ruby on Rails Sinatra Padrino dawn 버전 2.0은 지식 베이스에 680개 이상의 보안 검사를 탑재하고 있으며, NIST의 National Vulnerability Database에서...

scodescanner

SCodeScanner SCodeScanner는 소스 코드 스캐너Source Code Scanner의 약자로, 사용자가 소스 코드를 스캔하여 중요한 취약점을 찾을 수 있습니다. 이 스캐너의 주요 목적은 코드가 프로덕션에 배포되기 전에 소스 코드 내의 취약점을 발견하는 것입니다. 새 릴리스 및 공지 사항 웹사이트 - https://scodescanner.info/ 기능 1. 지원되는 PHP 언어 2. 지원되는 YAML 언어 3. 결과를 Jira 및 Slack과 같은 버그 추적 서비스로 전달합니다 파일을 그룹에 동시에 여러 사람에...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2026-95957

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

CVE-2026-95957 SourceCodester Smart Attendance System with QR Code Scanner Self-Registration student_signup.php prepend cross site scripting

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

CVE-2026-95957

A cross-site scripting (XSS) vulnerability exists in the SourceCodester Smart Attendance System with QR Code Scanner 1.0 within the Self-Registration component. The flaw is located in the prepend function of the student_signup.php file. By manipulating the full_name argument, an attacker can achi...

EUVD-2026-85012

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

CVE-2026-95957 SourceCodester Smart Attendance System with QR Code Scanner Self-Registration student_signup.php prepend cross site scripting

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

CVE-2026-95957: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

PT-2026-97149

Name of the Vulnerable Software and Affected Versions SourceCodester Smart Attendance System with QR Code Scanner version 1.0 Description An issue exists in the Self-Registration component within the student signup.php file. Manipulating the full name argument in the prepend function allows for...

Malicious Package

Overview @vietmoney/vision-camera-code-scanner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

EUVD-2025-205930

Malicious code in @vietmoney/vision-camera-code-scanner npm...

EUVD-2025-60952

The USB Qr Code Scanner For Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the settings page. This makes it possible for unauthenticated attackers to update the plugin's settings...