security-advisory

An ongoing & curated collection of awesome software practices and remediation, libraries and frameworks,payloads and techniques, best guidelines and technical resources about Application Security

A security specification on Nuclear Ad Bombs, and why operating systems shouldn't have embedded ads.

WordPress Security Advisories. Add this package to prevent vulnerable WordPress packages from being installed.

Interim PowerShell ACL mitigation script & conceptual C++ security patch for the "ShieldBreak" Windows Defender LPE Zero-Day (Windows 11 / Server 2025). Maintained by Nathan Wosnack (UBITQUITY / NETTWERKED).

CVE-2026-54520 / GHSA-cm8g-8jfq-887p: ai-agent-automation workflow path traversal advisory landing page

CVE-2026-50181 / GHSA-fg23-3346-88f5: Langroid path traversal advisory landing page

CVE-2026-50131 / GHSA-xw9q-2mv6-9fr8: Fedify incomplete SSRF mitigation advisory landing page

CVE-2026-13152: Custom Fields Account Registration For WooCommerce Unauthenticated Privilege Escalation PoC & Advisory by Huynh Kien Minh (MinhHK).

CSAF (Common Security Advisory Framework) Perl Toolkit

CVE-2026-54519 / GHSA-qv97-83w4-ff86: ai-agent-automation memory authorization advisory landing page

Defensive research notes for CVE-2026-5950, a BIND 9 resolver DoS vulnerability credited to Billy Baraja (BielraX).

Penetration Tester portfolio. As a Security Researcher, I provided ethical hack disclosures for organizations like NASA and Intel. Expert in web security, vulnerability research, and helping businesses fix website flaws. Focused on professional-grade penetration testing.

A Go client for the GitHub Global Security Advisories API, a public feed of security advisories that affect open source ecosystems (npm, Maven, Go, etc.). This package allows you to list and retrieve advisory metadata without authentication (public data only).

A security advisory on the growing, but overlooked threat of malicious QR code overlays targeting industries such as travel, hotel, personal banking, restaurant, clinics, and more.

This project uses Cisco Secure APIs to automate the monitoring and troubleshooting of Secure Access Service Edge (SASE) deployments. It retrieves real-time network performance and security data, and uses this data to provide customers with visibility into their network, create custom dashboards and alerts and troubleshoot issues.

Security vulnerabilities discovered and responsibly disclosed (2004-2006). Includes 2 CVEs, Microsoft MSRC acknowledgment, and published advisories.

Python API and CLI for CSAF 2.0 and VEX validation using Secvisogram's validator, with CI-friendly unavailable-validator handling.