A comprehensive command-line tool to check pip and NPM dependencies for security vulnerabilities across multiple package managers. Integrates with **npm Registry Audit API**, **OSV.dev**, and **PyPI Advisory Database** to provide thorough vulnerability scanning.

JavaScript TypeScript HTML

A command line tool and simple web app to resolve project dependencies from 'requirements.txt' or 'package.json' and identify known vulnerabilities (CVEs) by querying OSV.dev API and flag unmaintained packages.

Python HTML

Python Package Vulnerability Scanner

Python

None

Dockerfile Python

All CVE - PoC in GitHub

poc proofofconcept tester allcve cvegithub cvenew cvepoc cveupdate

None

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Assembly Python Shell PHP C++ C Go Ruby HTML Java

A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely.

Python Shell Dockerfile

None

Python HTML

我所有star的repo

Python

None

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.

Python

None

None

None

Assembly Python Shell PHP C++ C Go Ruby HTML Java