Results for “vulnerability-fix”

16 skills
More results
trailofbits
Insecure Defaults
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
6k · bundle
tinh2
Owasp
Systematically audits a web application against the OWASP 2021 Top 10, producing severity-rated, file-level findings with fixes for each category.
13
mukul975
Implementing Vulnerability Remediation Sla
Define and enforce vulnerability remediation SLAs based on severity, asset criticality, and exploit availability to drive accountability and track compliance.
24.6k · bundle
mukul975
Building Vulnerability Exception Tracking System
Build a vulnerability exception and risk acceptance tracking system with approval workflows, compensating controls documentation, and expiration management.
24.6k · bundle
mukul975
Building Vulnerability Dashboard With Defectdojo
Deploy DefectDojo as a centralized vulnerability management dashboard with scanner integrations, deduplication, metrics tracking, and Jira ticketing workflows.
24.6k · bundle
mukul975
Performing Vulnerability Scanning With Nessus
Conduct authenticated and unauthenticated vulnerability scans using Tenable Nessus to identify known vulnerabilities, misconfigurations, and missing patches, with prioritized remediation guidance.
24.6k · bundle
lucaspmarie-a11y
Find Bugs
Reviews local branch changes for bugs, security vulnerabilities, and code quality issues, producing a prioritized report with severity ratings and concrete fixes.
5
nimoqup046-collab
Find Bugs
Reviews local branch changes for bugs, security vulnerabilities, and code quality issues, using a structured checklist and verification process.
2
zhaoxuya520
Database Security
Performs authorized database security assessments across PostgreSQL, MySQL, MSSQL, MongoDB, and Redis, checking exposure, authentication, authorization, dangerous configurations, and exploit paths.
12.8k · bundle
nagarenegishi
Owasp Guard
Enforces OWASP Top 10:2025 compliance on code touching security-relevant domains, using cached cheat sheets and verifying fixes against OSV.dev.
0 · bundle
mukul975
Performing Sca Dependency Scanning With Snyk
Scan open-source dependencies for known vulnerabilities using Snyk, including CI/CD integration, automated fix PRs, license compliance, and continuous monitoring.
24.6k · bundle
tinh2
Pentest
Performs a static-analysis penetration test to find exploitable vulnerabilities, providing proof-of-concept payloads and fixes. Covers injection, XSS, authentication bypass, authorization flaws, path traversal, command injection, CSRF, SSRF, hardcoded secrets, and insecure deserialization, with a full attack surface.
13