xpfarm

XPFarm An open-source AI-augmented offensive security platform that wraps well-known security tools behind a unified web UI — with distributed scanning, AI-generated reports, a smart scan planner, an interactive attack graph, and a community Plugin SDK. Also check out ObsidianBox Modern on Google...

cumulus

Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful. Key features Just install SDK to web front, can be found security weakness on...

ida-efitools2

About It is an IDA plugin for extending UEFI reverse engineering capabilities. Based on ida-efitools with a bunch of fixes and new features. Works with both Python 2 and Python 3. Supports outdated versions of IDA Pro 7.x with no guarantees. Features GUIDs defining Structures propagating register...

VulnerableGWTApp

Vulnerable GWT Web Application This is a version of the StockWatcher example application described in the GWT getting-started guide that has been modified to use the GWT "enhanced classes" feature, making it vulnerable to a Java deserialization attack. It should only be used for testing detection...

cwe-sdk-javascript

cwe-sdk A Common Weakness Enumeration CWE Node.js SDK compliant with MITRE / CAPEC Install yarn add cwe-sdk Usage Require the CweManager class and use its methods const CweManager = require'cwe-sdk' Example const CweManager = require'cwe-sdk' const cweManager = new CweManager const result =...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

CVE-2026-20820

CVE-2026-20820 winver win1021h219044.6693amd64 win1123h222631.6345amd64 Build basic information Windows SDK version: 10.0 latest installed version Platform toolset: Visual Studio 2022 v143 C++ language standard: Default ISO C++14 standard...

ida-cli

ida-cli Headless IDA CLI and skill-first toolkit for binary analysis on macOS and Linux. ida-cli auto-selects a runtime backend, auto-starts a local server when needed, and exposes the same surface as a flat CLI, a stdio MCP transport, and a Streamable HTTP MCP transport. 中文说明 Two User-Facing...

platform_external_libvpx_v1.4.0_CVE-2023-5217

README - 23 March 2015 Welcome to the WebM VP8/VP9 Codec SDK! COMPILING THE APPLICATIONS/LIBRARIES: The build system used is similar to autotools. Building generally consists of "configuring" with your desired build options, then using GNU make to build the application. 1. Prerequisites All x86...

blitzstrike

Blitz Strike Reconnaissance at speed. Analysis in depth. Validation before report. Blitz Strike is a structured penetration-testing methodology — reconnaissance, source analysis, and validation — delivered as a universal MCP server. It enumerates the attack surface BLITZ, traces source-to-sink...

capsule

Getting Started • Documentation • Issues • Contributing Capsule is a runtime for executing untrusted code in isolated environments. Each task runs inside its own WebAssembly sandbox, providing: Isolated execution : Each task runs isolated from your host system Resource limits : Set CPU, memory, a...

ldapsdk

UnboundID LDAP SDK for Java Download the Latest Release of the LDAP SDK Here The UnboundID LDAP SDK for Java is a fast, powerful, user-friendly, and completely free and open source Java library for communicating with LDAP directory servers. It offers better performance, better ease of use, and mo...

platform_external_libvpx_v1.8.0_CVE-2023-5217

README - 31 January 2019 Welcome to the WebM VP8/VP9 Codec SDK! COMPILING THE APPLICATIONS/LIBRARIES: The build system used is similar to autotools. Building generally consists of "configuring" with your desired build options, then using GNU make to build the application. 1. Prerequisites All x86...

flipper-template

Flipper Zero Zig Template A modern, production-ready template for developing Flipper Zero applications using the Zig programming language. This project provides a streamlined build system that integrates Zig with the Flipper Zero SDK, enabling developers to write type-safe, memory-safe applicatio...

drift-node-sdk

The Node.js Tusk Drift SDK enables fast and deterministic API testing by capturing and replaying API calls made to/from your service. Automatically record real-world API calls, then replay them as tests using the Tusk CLI to find regressions. During replay, all outbound requests are intercepted...

CVE-2026-116046

The eventcatalog sdk (up to version 2.29.0 ) is vulnerable to a path traversal flaw in the Custom Documentation Helpers component. Specifically, the functions getCustomDoc, writeCustomDoc, and rmCustomDoc within the file packages/sdk/src/custom-docs.ts fail to properly handle the options.path arg...

EUVD-2026-109370

A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getCustomDoc/writeCustomDoc/rmCustomDoc of the file packages/sdk/src/custom-docs.ts of the component Custom Documentation Helpers. This manipulation of the argument options.path causes path traversal. ...

CVE-2026-116046 eventcatalog sdk Custom Documentation Helpers custom-docs.ts rmCustomDoc path traversal

A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getCustomDoc/writeCustomDoc/rmCustomDoc of the file packages/sdk/src/custom-docs.ts of the component Custom Documentation Helpers. This manipulation of the argument options.path causes path traversal. ...

codex-security

Codex Security Codex Security helps you find, investigate, and fix vulnerabilities in your code. Use its security workflows in Codex, or automate them with the @openai/codex-security CLI and TypeScript SDK. In Codex: choose a security workflow. In a terminal: install the CLI and scan your...

buds-audit

buds-audit Version 1.0.0 Bluetooth security assessment tool for wireless earbuds affected by the Airoha SDK vulnerability chain CVE-2025-20700 / CVE-2025-20701 / CVE-2025-20702. Scans for nearby devices, fingerprints known-affected Airoha-based chipsets, and probes for unauthenticated GATT access...