Authentication

abraxas/pma-5.2.3-webauthn-2fa

phpMyAdmin - High 8.1 - Authenticated POST /index.php - 2FA Bypass

nxploited/cve-2026-114509

Laravel TokenGuard authentication bypass through non-string API credentials

ylianst/meshcentral

A complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on…

project-oak/oak

Meaningful control of data in distributed systems.

umarrehmansiddiqui/cve-2026-0073

Proof-of-concept exploit for an Android adbd Wireless Debugging TLS auth bypass, using an EC/RSA key type mismatch to obtain an unauthenticated…

ericyoc/stego_provenance_defense

Steganographic prompt-injection defense for agentic AI using decode-time provenance binding, HMAC authentication, and MCP trust enforcement.

aix567/c-a-s

C.A.S-Exploit — Python-based security research and proof-of-concept toolkit for CVE-2017-5689 (Intel AMT authentication bypass), featuring Shodan…

xqi1337/cve-2026-0073-android-adbd-bypass-poc

CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using…

roxanne_ardary/e2eauth

Cross-platform TOTP/HOTP authenticator specification with end-to-end encrypted vault sync, local-first storage, device management, and threshold…

ritwick7/sudostamp

Approve sudo on a Linux workstation with a fingerprint on your Android phone. LAN only; the ECDSA key never leaves the phone's TEE and speaks the…

oscerd/cve-2026-85317

Runnable Spring Boot proof-of-concept reproducing CVE-2026-85317, where camel-http's OAuth2 token cache ignores scope, resource and token endpoint,…

orevim/cve-2026-18963-poc

Proof of concept and vulnerability checker for CVE-2026-18963, an unauthenticated account takeover in the Keycloak reset-credentials flow.…

oscerd/cve-2026-85301

Runnable proof-of-concept reproducer for the Apache Camel camel-keycloak issuer validation bypass (CWE-287), demonstrating affected and patched…

certifi/python-certifi

(Python Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the…

eliavila10/win32_hash

Password hashing and verification library for Windows, written in Ada/SPARK using the Windows CNG API (bcrypt) and proved with GNATprove.

sigstore/root-signing

Maintains the TUF repository that securely delivers the Sigstore trust root (trusted_root.json) to clients, using keyholder threshold signing, KMS…

oscerd/cve-2026-84178

Runnable proof-of-concept reproducer for CVE-2026-84178, a login CSRF in Apache Camel camel-oauth's authorization-code callback that redeems codes…