List of interesting security vendor pages and data sources about gsd-tools

[kurtseifried]

https://about.gitlab.com/blog/2022/02/16/a-community-driven-advisory-database/

[kurtseifried]

https://source.android.com/security/bulletin/

[kurtseifried]

https://www.suse.com/security/cve/
https://www.debian.org/security/crossreferences.html
https://access.redhat.com/security/data/metrics/rhsamapcpe.txt
https://ubuntu.com/security/cves?offset=38720 (starts at 0, 20 per page)

[kurtseifried]

List of certs https://www.twcert.org.tw/en/lp-62-2.html

[kurtseifried]

https://github.com/SummitRoute/csp_security_mistakes
https://github.com/ramimac/aws-customer-security-incidents

[kurtseifried]

https://security-tracker.debian.org/tracker/data/fake-names

[kurtseifried]

https://www.mend.io/resources/blog/cybercriminals-targeted-users-of-packages-with-a-total-of-1-5-billion-weekly-downloads-on-npm/

twitter: maciejmensfeld

[kurtseifried]

https://medium.com/@nynan/what-i-learnt-from-reading-220-idor-bug-reports-6efbea44db7

bug bountiy entries with payouts e.g.

https://hackerone.com/reports/797685
Disclosed
April 2, 2020 3:35am -0600
Severity
Medium (5.0)
Weakness
Insecure Direct Object Reference (IDOR)
Bounty
$500
Time spent
None
CVE ID
None
Account de...
None

[joshbuker]

@kurtseifried do you want to move these into https://csaurl.org/gsd-landscape and close the issue?