Authentication & Authorization

wooooong/cve-2025-2825

Exploit script for CrushFTP authentication bypass (CVE-2025-2825) using crafted Authorization header and CrushAuth cookie to gain unauthorized access.

randomrobbiebf/cve-2024-9822

Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator

randomrobbiebf/cve-2024-5324

Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Update

manbahadurthapa1248/cve-2026-29000---pac4j-jwt-authentication-bypass-poc

Proof-of-concept exploit for CVE-2026-29000, an authentication bypass in pac4j-jwt. Forges JWT tokens to gain admin access to protected endpoints.

junnythemarksman/cve-2023-42793

TeamCity CVE-2023-42793 exploit written in Rust

randomrobbiebf/cve-2024-12252

SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)

moften/cve-2024-51996

CVE-2024-51996 es una vulnerabilidad crítica que afecta al componente security-http del framework Symfony.

kit-lang/packages/kit-oauth

OAuth 2.0 client library for Kit applications supporting authorization code, PKCE, client credentials, and refresh token flows with built-in provider…

randomrobbiebf/cve-2023-30486

Square <= 2.0.0 - Missing Authorization via activate_plugin

randomrobbiebf/cve-2024-4875

HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update

0xblackash/cve-2026-35616

CVE-2026-35616

kit-lang/packages/kit-policy

A flexible, composable authorization framework for Kit (inspired by Action Policy)

pctripsesp/cve-2023-6036

POC about Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass Wordpress plugin

shibli2700/randomrepo

SecOpsMaesttro POC

sudo-wp/sudowp-postgallery

A security-hardened fork of the abandoned "PostGallery" WordPress plugin. Fixes critical Arbitrary File Upload (CVE-2025-13543) and Guest Access…

baram01/webui

WebUI for AAA