CVE-2026-76460
s3v3n-jg/cve-2026-76460Educational Flask lab simulating CVE-2026-76460 authentication bypass, with vulnerable, secure, and strict modes plus a PoC exploit script and…
api-securityauthenticationdefensive-tools+5
2
s3v3n-jg/cve-2026-76460Educational Flask lab simulating CVE-2026-76460 authentication bypass, with vulnerable, secure, and strict modes plus a PoC exploit script and…
commando-x/vuln-bankIntentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
ransomleak/training-application-securityInteractive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…
openidentityplatform/openamOpen-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
lore-hex/quill-routerTrustedRouter.com repo for secure LLM proxying
owasp/devsecopsguidelineThe OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
owasp/agent-skills-security-standardSecurity standard for agent skills, providing guidelines and best practices to secure AI-driven autonomous agents in cloud and API environments.
owasp/python-honeypotOWASP Honeypot, Automated Deception Framework.
shoucheng3/springsource__spring-security-oauth_cve-2018-1260_2-3-2-releaseOAuth and OAuth2 support library for Spring Security, enabling secure API authentication and authorization for consumer and provider implementations…
shoucheng3/apache__nifi_cve-2022-33140_1-16-22Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…
shoucheng3/asf__nifi_cve-2023-36542_1-22-0Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…
shoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…
shoucheng3/keycloak__keycloak_cve-2014-3656_1-0-5-finalOpen-source identity and access management solution providing authentication, user federation, single sign-on, and fine-grained authorization for…
owasp/secure-agent-playbookOWASP Secure Agent Playbook Project
cure53/dompurifyDOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…
roxanne_ardary/securecivicSecureCivic is a citizen-built, open source identity verification platform designed for SSA adoption. It replaces private data brokers with a secure,…