30337 matches found
EUVD-2024-55742
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project...
www-project-top-10-for-large-language-model-applications
www-project-top-10-for-large-language-model-applications OWASP Foundation Web Repository OWASP Top 10 for Large Language Model Applications...
threat-dragon
OWASP Threat Dragon OWASP Threat Dragon is a free, open-source, cross-platform threat modeling application. It is used to draw threat modeling diagrams and to list threats for elements in the diagram. Mike Goodwin created Threat Dragon as an open source community project that provides an intuitiv...
slsa
SLSA "salsa" es Niveles de cadena de suministro para artefactos de software SLSA pronunciado "salsa" es un marco de seguridad desde el origen hasta el servicio, que brinda a cualquier persona que trabaje con software un lenguaje común para aumentar los niveles de seguridad del software y la...
opa
Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...
npcap
Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...
KubeStalk
KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9. Usage The GIF belo...
KubeStalk
KubeStalk KubeStalk es una herramienta para descubrir la superficie de ataque relacionada con Kubernetes y su infraestructura desde una perspectiva de caja negra. Esta herramienta es una versión comunitaria de la herramienta utilizada para sondear clústeres de Kubernetes no seguros en internet...
DarunGrim
Notice DarunGrim now merged into binkit project. Most of the analysis algorithms are ported to the new tool Still under internal testing before official release...
IntelOwl
!intelowlp...
CheatSheetSeries
Welcome to the OWASP Cheat Sheet Series Welcome to the official repository for the Open Worldwide Application Security Project® OWASP Cheat Sheet Series project. The project focuses on providing good security practices for builders in order to secure their applications. In order to read the cheat...
threatspec
threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...
project-memoria-detector
project-memoria-detector The project-memoria-detector tool aims to determine whether a target network device runs a specific embedded TCP/IP stack. Currently, the tool supports fingerprints for 16 embedded TCP/IP stacks and their variations: uIP, Contiki or Contiki-NG picoTCP or picoTCP-NG Nut/Ne...
juice-shop
OWASP Juice Shop...
Anthropic-Cybersecurity-Skills
Anthropic Cybersecurity Skills The largest open-source cybersecurity skills library for AI agents !Hermes Agenthttps://img.shields...
Recaf
Recaf An easy to use modern Java bytecode editor that abstracts away the complexities of Java programs. Download Launcher Usage & instructions found on the launcher repo Snapshot releases See CI actions for release artifacts Independent releases None for 4X currently Features Edit Java bytecode...
chatlog
Project Removal Notice Update Date: October 20, 2025 What Happened? Hello, thank you for following chatlog. I received a letter from WeChat's official team, which clearly indicates that the core functionality of the project poses compliance risks. In order to completely avoid legal issues and to...
CVE-2025-50866
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...