vulnerability-report

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

With the hope that someone finds the data useful, we used to periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

A tool for regularly querying vulnerabilities detected by 3rd party tools and reporting them back to your teams

Slides and PoCs for my DEF CON 33 & HOU.SEC.CON 2025 talk on overlooked attack surfaces across Apple's ecosystem.

Proof of Concept (PoC) for a stack-based buffer overflow in Steghide 0.5.1. Demonstrates how long file paths trigger a crash (DoS) and leak sensitive data (passwords) via system core dumps.

Github Action to review code changes on a Pull-Request and add corresponding review comments with eslint issues, test coverage and vulnerabilities for a clean code promotion.

A simple React + Express web application demonstrating common web vulnerabilities. Special project for the Security Verification and Testing course at Politecnico di Torino.

Generate clean, readable HTML reports from OWASP ZAP security scan JSON output

A Node app to save the contents of GitHub's Vulnerability Database to a JSON file.

Draft, score (CVSS 3.1) and lint HackerOne/Bugcrowd vulnerability reports before you submit — completeness + leaked-secret gate. Zero-dependency Python.

Cybersecurity & cloud security portfolio featuring SOC investigations, AWS security projects, vulnerability analysis, Linux, and Python.

An evidence gate for open-source contributions: check whether the claims in an issue, PR, or security report correspond to anything real.

Guide on how to build a vulnerability management program.