Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
k3ystr0k3r/cve-2026-31816PoC exploit for critical Budibase auth bypass: unanchored webhook regex lets attackers append ?/webhooks/trigger, reach protected APIs, and chain…
oxstussz-eng/kerberos-cve-2026-27912PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security…
pemarine/cve-2026-41940-pocExploit for CVE-2026-41940, an unauthenticated authentication bypass in cPanel/WHM that grants root-level WHM access via CRLF session injection, with…
ozcanpng/cve-2026-73673Non-destructive PoC and technical write-up for CVE-2026-73673, an unauthenticated firmware-update flaw in Netis NC63 router, with reproduction and…
matesz44/cve-2026-39987Exploits CVE-2026-39987 pre-auth RCE in Marimo <0.23.0 by connecting to the unauthenticated /terminal/ws WebSocket. Supports arbitrary command…
aramosf/cve-2026-24031Self-contained Python PoC for Dovecot SQL authentication bypass: logs in as any user without the real password and enumerates usernames on vulnerable…
aliyabuz25/cve-2025-49173Security research — PoC for local root privilege escalation on macOS Mavericks 10.9.
boreas37/cve-2026-41452-pocCVE-2026-41452 — Krayin CRM unauth installer bypass (X-Requested-With) → admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5
ac8999/cve-2026-27344Missing Authorization in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
quarkslab/android-hardware-attestation-demoAn Android HW Attestation demo
sfewer-r7/cve-2026-55040Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…
yubico/libfido2Provides library functionality for FIDO2, including communication with a device over USB or NFC.
dbeaver/dbeaverFree universal database tool and SQL client
rocketchat/rocket.chatThe Secure CommsOS™ for mission-critical operations
juanfont/headscaleAn open source, self-hosted implementation of the Tailscale control server
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
symfony/symfonyThe Symfony PHP framework
