Tagged vulnerabilities

Find remote code execution flaws from OS commands and eval-like sinks in a codebase

Merge all SAST results into one final report ranked by severity and impact

Find SQL injection by tracing user input to unsafe query construction in code

Find SSRF flaws where user input controls the destination of server requests

Find server-side template injection where user input reaches template rendering

Find cross-site scripting flaws by tracing user input to HTML, JS and DOM sinks

Find XML external entity flaws in parsers that lack external-entity hardening

Deep-test WordPress sites for SSRF, plugin CVEs, JS secrets and open ports

Find WordPress plugins through the REST API and match their versions to known CVEs

Batch-test WordPress plugin CVEs across many domains with detection scripts

Find and verify CVEs in WordPress plugins from version data and CVE databases

Test Zimbra for SOAP user enumeration, CVE-2022-37042 and SSRF on webmail

Harden CI/CD pipelines, containers and Kubernetes RBAC with secrets and SAST checks

Audit trending repos for exploitable bugs and report them through private channels

Scan container images for CVEs and misconfigurations with Trivy and Grype

Run dynamic app security tests with OWASP ZAP, Burp Suite and Nikto

Run basic penetration tests with recon, vulnerability discovery and exploitation

Run static security analysis with Semgrep, CodeQL and SonarQube in CI

Scan systems for CVEs with Nessus, OpenVAS and Qualys and prioritize fixes

Read a daily security advisory feed covering OpenClaw threats and vulnerabilities

Check NanoClaw skills for known vulnerabilities before installing new ones

Scan dependencies and code for CVEs using npm audit, pip-audit, Semgrep and Bandit

Scan a live Power Pages site for vulnerabilities and summarize by severity