#1
volodymyr-hladkyi-symphony/demo-cve-2022-21449Educational demo of CVE-2022-21449 Java ECDSA signature bypass using real and fake JWT tokens to illustrate the vulnerability and its impact on…
revengsmk/cve-2024-10511Schneider Electric PowerChute Serial Shutdown vulnerability.
paragbagul111/cve-2024-41290FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to > store authentication data
lukaszstu/smartasset-ue-cve-2020-26526It is possible to enumerate valid usernames on the login page.
notitssixtyn3in/cve-2025-4162028Security advisory detailing a critical authentication vulnerability (CVE-2025-4162028) in Copilot, enabling unauthorized account access via user ID…
notitssixtyn3in/cve-2025-4162027Security advisory detailing a critical authentication vulnerability in Copilot where user IDs are switched, enabling unauthorized account access and…
rxerium/cve-2024-7593Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker…
notitssixtyn3in/cve-2025-4172025Security advisory for CVE-2025-4172025: an authentication bypass vulnerability in Copilot enabling unauthorized account access, session hijacking,…
huyvo2910/cve-2025-25749-weak-password-policy-in-hoteldruid-3.0.7Proof-of-concept for CVE-2025-25749 demonstrating weak password policy in HotelDruid 3.0.7, with automated test scripts and mitigation…
notitssixtyn3in/cve-2025-4162026Security advisory detailing a critical authentication vulnerability (CVE-2025-4162026) in Copilot, enabling unauthorized account access via user ID…
castro-ian/cve-2024-4573-mitigation-scriptDetects NTLM authentication status by checking LmCompatibilityLevel registry value to assess exposure to CVE-2024-43451 and mitigate credential relay…
logg-1/0logonMS-NRPC (Microsoft NetLogon Remote Protocol)/CVE-2020-1472
h3x0v3rl0rd/gmsa_dumperPython utility that reads accessible gMSA password blobs from Active Directory and extracts plaintext passwords for use in security audits and red…
ajtech-hue/cve-2021-3156-mitigation-shellscript-buildShell script that monitors for a vulnerable sudo process and triggers authentication lockout to mitigate CVE-2021-3156.
pwnpwnpur1n/cve-2024-22922A Broken Authentication Vulnerability found in Projectworlds' Visitor Management System
sj/web2py-e94946d-cve-2016-3957web2py/web2py @ e94946d
guy2610/tough-cookie-patch-cve-2023-26136RFC6265-compliant cookie parsing and CookieJar management library for Node.js, with CVE-2023-26136 security patch. Supports cookie creation,…
