Tagged vulnerabilities

Manage go.mod, upgrades, vulnerability scans and vendoring for Go modules

Look up Go packages, symbols, versions, licenses and CVEs on pkg.go.dev

Show all tracked vulnerabilities and their current remediation status

Check exploit intelligence for a vulnerability against this repository

Propose concrete fixes for a vulnerability in the current repository

Build a remediation plan for a vulnerability with fix checks

Look up a vulnerability by ID or list vulnerabilities for a package

Check code that handles input, auth, file I/O and queries for common vulnerabilities

Check code edits against threat models and past vulnerabilities before you change code

Configure and preflight-test Mantis vulnerability review sandboxes and AI models

Mine repository history for past vulnerabilities and security fixes

Launch automated vulnerability review campaigns on files or repositories with Mantis

Test workflows, coupons and pricing for logic flaws and multi-step authorization gaps

Audit Solidity contracts for reentrancy, access control, delegatecall and replay bugs

Check package.json dependencies against live advisories from the last 48 hours

Compare npm packages side by side on downloads, bundle size, stars and CVEs

Triage scanner findings by real exploitability and track fixes to done

Build safe local reproductions of patched CVEs for write-ups and control testing

Reproduce and patch disclosed, already-fixed vulnerabilities in a pinned offline lab

Search the National Vulnerability Database for CVEs, CVSS scores and affected versions

Look up PyPI package metadata, release files and vulnerability data from the terminal

Run Trivy offline to scan lock files and export JSON vulnerability reports

Build filtered CSV security audit reports from vulnerability data

Scan dependencies for known vulnerabilities, license issues and outdated packages

Scan dependencies for vulnerabilities, license risks and outdated packages

Extract and analyze router and IoT firmware to find security vulnerabilities

Audit systems for vulnerabilities, OWASP risks and DevSecOps gaps

Scan project dependencies for known vulnerabilities and generate SBOMs

Find code vulnerabilities with static application security testing across languages

Chain web and AI vulnerabilities into two-way attack paths during a pentest

Attack Microsoft Exchange with ProxyLogon, ProxyShell and OWA password spraying

Study iOS kernel, WebKit and sandbox exploit chains and known CVEs

Chain Java audit findings into full exploit paths and check dependency CVEs

Check Kubernetes ingress-nginx clusters for the IngressNightmare CVE-2025-1974 RCE

Check targets against thousands of Nuclei templates for CVEs and misconfigurations

Audit dependency files and build systems for known CVEs and registry exposure

Run deep vulnerability tests on one web app, prioritizing RCE and SQL injection

Run automated web vulnerability scans with xray plugins and passive proxy mode

Check web apps for business logic flaws like auth bypass and payment tampering

Write and manage OpenVEX statements that explain vulnerability exploitability

Write and audit secure web apps against major vulnerability classes

Map the tech stack, entry points and trust boundaries before a security review

Find business logic flaws like price manipulation and workflow bypass in a codebase

Find insecure file upload flaws in a codebase, including extension bypasses

Find GraphQL injection flaws by tracing user input to unsafe query assembly

Find hardcoded API keys, tokens and passwords in frontend code and public bundles

Find IDOR flaws where endpoints skip ownership or authorization checks

Find insecure JWT code, from algorithm confusion to missing signature checks

Find endpoints that lack authentication or role checks in a codebase