CVE-2026-16232
hackspeak/cve-2026-16232CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing
authentication-authorizationvulnerability-analysisexploitation+1
2
Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
hackspeak/cve-2026-16232CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing
merill/awesome-entra😎 Awesome list of all things related to Microsoft Entra
northpolesec/santaA binary and file access authorization system for macOS.
george0papasotiriou/cve-2026-4444-jwt-algorithm-confusion-via-kid-injection
berraesen/nextjs-middleware-auth-bypass-labBu laboratuvar ortamını sıfırdan kendim oluşturdum. Next.js uygulaması içerisinde giriş, ana sayfa ve admin sayfalarını hazırladım. Middleware ile…
opensc/opensc.tokendTokend module for OS X with support for all cards supported by OpenSC
x41sec/pam_pkcs11pam_pkcs11 Bugfix
george0papasotiriou/cve-2026-3456-oauth2-pkce-race-condition-account-takeover-
monkeysec-sys/kangarooAuthentication bypass exploit for CVE-2026-32746 targeting legacy Telnet servers, with defensive guidance and Go-based implementation for authorized…
kill1234545/cve-2026-41940cPanel/WHM Authentication Bypass (Zero-Day Vulnerability)
instructor-admin/cve-2026-15964-pocPoC & checker for CVE-2026-15964 - unauthenticated password change in the WordPress plugin Single Sign On For TNG <= 2.0.0 (CVSS 9.8)
bridgeralderson/cve-2026-58424A flaw in Gitea Open Source Git Server’s approval‑gate logic allows a pull request that originates from a permanent fork to merge without satisfying…
vanhari/cve-2026-39987Proof-of-concept exploit for an authentication bypass in marimo's terminal WebSocket endpoint, enabling unauthenticated command execution in versions…
7h30th3r0n3/cve-2026-53625-glpi-pocGLPI Privilege Escalation via authtype Manipulation PoC - CVE-2026-53625. Ethical PoC for the GLPI vulnerability allowing a Technician to take full…
tamatahyt/cve-2026-53576Kestra Unauthenticated RCE Exploit (CVE-2026-53576)
aj2108/cve-2026-8239Security write-up for an IDOR in Concrete CMS exposing conversation ratings through missing authorization on the get_rating endpoint, with root…
aj2108/cve-2026-8237In-depth IDOR write-up for Concrete CMS, covering the message_detail endpoint, missing authorization root cause, attack scenarios, impact, and fix.