#1Tools for testing and implementing authentication mechanisms (e.g., MFA, SSO) and authorization policies.
Kitploit recommended
izxci/cve-2026-7459Exploit for CVE-2026-7459 targeting Simple History plugin missing authorization vulnerability, enabling unauthenticated account takeover in WordPress…
xxconi/cve-2025-5947CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 Exploit
0xdak/cve-2026-32136_exploitProof-of-concept exploit for CVE-2026-32136: unauthenticated authentication bypass in AdGuard Home via HTTP/2 cleartext (h2c) upgrade. Demonstrates…
horkimhab/cve-2026-0257CVE-2026-0257 - PAN-OS
lorenzocamilli/cve-2025-10720-pocProof-of-concept exploit for an authentication bypass vulnerability (CWE-565) in WP Private Content Plus v3.6.2, allowing unauthenticated access to…
john-jung/cve-2026-25604-pocA PoC for demonstrating CVE-2026-25604
litndat/vulnerability-cve-2025-64446-cve-2025-58034PoC exploit for FortiWeb CVE-2025-64446 (authentication bypass via path traversal) and CVE-2025-58034 (OS command injection) with detailed analysis…
0xgh057r3c0n/cve-2026-10580PoC exploit for CVE-2026-10580 - Authentication Bypass in Hippoo Mobile App for WooCommerce <= 1.9.4 leading to Admin Account Takeover
xltj/nopacGo implementation of NoPac, exploiting CVE-2021-42278 and CVE-2021-42287
0xmrma/cve-2026-34048Admin-only terminal bootstrap routes checked only for login state, which let a normal team member drive Coolify's realtime terminal backend and…
6lj/cve-2025-3639login bypass vulnerability in Liferay Portal (versions 7.3.0–7.4.3.132) and Liferay DXP (various versions from 2024.Q1 to 2025.Q1.6)
itsismarcos/cve-2026-41940Automated exploit for CVE-2026-41940, an authentication bypass in cPanel/WHM, allowing unauthorized administrative access to vulnerable servers.
ez4rd1x1/cve-2026-8181Proof-of-concept exploit for CVE-2026-8181, an authentication bypass in the Burst Statistics WordPress plugin. Demonstrates remote, unauthenticated…
ex-cal1bur/cve-2026-44595# CVE-2026-44595 YAMCS Unauthorized User Enumeration via IAM API
izxci/cve-2026-8206Exploit for CVE-2026-8206 targeting unauthenticated account takeover in the Kirki WordPress plugin. Provides a proof-of-concept for security testing…
mirackayikci/cve-2026-55584CVE-2026-55584 — phpSysInfo IP Allowlist Bypass
asdasddqwdq29-a11y/cve-2026-41940Redacted cPanel/WHM authentication bypass analysis and authorized checker
dhiaelhak-rached/cve-2026-39987-lab-or-marimo-cve-labEducational Docker lab demonstrating CVE-2026-39987, a pre-auth RCE via WebSocket authentication bypass in marimo, with exploit script and patch…
