New release1h 34m ago
codex-security npm-v0.8.3
openai/codex-securityOpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm:…
Vulnerability ScannersStatic Code Analysis (SAST)DevSecOps
Featured
Latest Updates
View all updatesopenai/codex-security
New release5h 35m ago
AdGuardHome v0.107.80
adguardteam/adguardhomeNetwork-wide ads & trackers blocking DNS server
Defensive ToolsNetwork SecurityPrivacy+1
Updated8h 50m ago
osint_stuff_tool_collection — Updated!
cipher387/osint_stuff_tool_collectionCurated collection of 1000+ online OSINT tools and services for geolocation, social media, domain/IP, email, image and archive investigations.
OSINT (Open Source Intelligence)ReconnaissanceOSINT for Social Engineering+6
New tool9h 51m ago
cve-documents
cveproject/cve-documentsSource for official CVE Program policy documents.
Indicator of Compromise (IOC) ManagementVulnerability AnalysisThreat Intelligence+2
New tool10h 51m ago
SpikeStrip
arcanum-sec/spikestripReversible HTML and JavaScript prompt decoys with opaque per-insertion keys.
Defensive ToolsScripting & AutomationWeb Security+3
New tool11h 51m ago
VulnClaw
netw0rknoob/vulnclawBased on AI Agent + MCP toolchain + penetration skill orchestration, combined with large language models, natural language input → automatically…
ReconnaissanceVulnerability ScannersPayload Generation+9
New tool12h 51m ago
malware-ioc
bitdefender/malware-iocIndicators of Compromise for malware documented in whitepapers.
Indicator of Compromise (IOC) ManagementThreat Feeds & AggregatorsMalware Analysis+4
New tool14h 52m ago
apkscope
suffixing/apkscopeAndroid reverse engineering for humans and AI agents: typed Java in milliseconds, xrefs, API and secret recon, APK diff, re-signing, a native viewer…
Android SecurityStatic AnalysisDynamic Analysis (Sandboxing)+8
Updated17h 32m ago
metasploit-framework — Updated!
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
Penetration Testing FrameworksPrivilege EscalationReconnaissance+20
Updated18h 32m ago
geo-sleuth — Updated!
oldcircle/geo-sleuthAn agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its…
OSINT (Open Source Intelligence)ReconnaissanceOSINT for Social Engineering+4
New tool19h 32m ago
JADXecute
lauriewired/jadxecuteJADX-gui scripting plugin for dynamic decompiler manipulation
Android SecurityStatic AnalysisCode Analysis+6
New tool20h 32m ago
awesome-blackhat-arsenal
elbraino/awesome-blackhat-arsenalCurated collection of cybersecurity tools featured in Black Hat Arsenal events.
Defensive ToolsOSINT (Open Source Intelligence)Reverse Engineering+8
Latest Exploits
View all exploitsDivi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read via 'svg_image' Parameter
Evidence —
1 Repository evidence · Evidence observed: Oct 12, 2026
- CVSS
- 7.5High
- EPSS
- 2.9%Low
- Exploits
- 1
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
Evidence Aug 4, 2026
2 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 9.8High
- EPSS
- 28.7%Moderate
- Exploits
- 11
WP User Manager <= 2.9.17 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query Parameter
Evidence Aug 8, 2026
1 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 7.5High
- EPSS
- 2.5%Low
- Exploits
- 2
