#1Tools for testing and implementing authentication mechanisms (e.g., MFA, SSO) and authorization policies.
Kitploit recommended
teteco/cve-2025-67070-intelbras-cftv-mfa-bypassA critical vulnerability in the Intelbras NVD 9032 R Ftd IP CFTV device allows an attacker to bypass the multi-factor authentication during password…
bidaoui4905/cve-2018-10933LibSSH authentification bypass
00xcanelo/cve-2024-47533-pocProof-of-concept exploit for CVE-2024-47533, an unauthenticated authentication bypass in Cobbler's XMLRPC API leading to remote code execution via…
n0n4m3x41/cve-2025-17390day PoC for CVE-2025-1739
toddkk02/cve-2025-29927Proof-of-concept exploit for CVE-2025-29927, demonstrating authentication bypass in Next.js middleware via the x-middleware-subrequest header, with…
iteride/cve-2025-2825Detailed analysis and PoC exploit for CVE-2025-2825, an authentication bypass in CrushFTP. Includes nuclei templates, multi-threaded scanner, and…
eagle-nett/fortiweb_cve-2025-64446-58034PoC exploit for FortiWeb CVEs: authentication bypass via path traversal and authenticated OS command injection. Includes detailed analysis, payloads,…
greenforcenetworks/cve-2025-41646---critical-authentication-bypass-CVE-2025-41646 - Critical Authentication bypass
nxploited/cve-2025-8570BeyondCart Connector <= 2.1.0 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation
whisperer1290/cve-2025-54309__enhanced_exploitMulti-threaded exploit for CrushFTP authentication bypass (CVE-2025-54309) with race condition implementation, XML payload generation, and admin user…
nxploited/cve-2025-49901WordPress Simple Link Directory Plugin < 14.8.1 is vulnerable to a high priority Broken Authentication
fevar54/blackash-cve-2025-20343Technical documentation and proof-of-concept for CVE-2025-20343, a high-severity denial-of-service vulnerability in Cisco ISE allowing…
lequoca/fortinet-fortiweb-cve-2025-64446-58034Security research on Fortinet FortiWeb vulnerabilities (CVE-2025-64446, CVE-2025-58034)
mrpayloadc/cve-2025-0316-exploitAutomated auth bypass exploit for CVE-2025-0316 targeting WordPress WP Directorybox Manager. Features user enumeration, proxy support,…
nxploited/cve-2026-4484Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator
cn016/apache-shenyu-admin-jwt-cve-2021-37580-Apache ShenYu Admin JWT认证绕过漏洞(CVE-2021-37580)
gill-singh-a/cve-2023-20198-exploitProof-of-concept exploit for CVE-2023-20198, an authentication bypass vulnerability affecting Cisco IOS XE Web UI
kazuya256/next-js-auth-bypass🔓 Next.js Auth Bypass Demo - Educational application demonstrating CVE-2025-29927 middleware authentication bypass vulnerability . ⚠️ For…
