ziti
openziti/zitiZero-trust networking platform that makes services invisible with cryptographic identity, policy-based access, and end-to-end encryption. Replaces…
api-securityauthentication-authorizationcloud-security+7
4.4k
openziti/zitiZero-trust networking platform that makes services invisible with cryptographic identity, policy-based access, and end-to-end encryption. Replaces…
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
s1ko/cve-2026-52616Advisory and benign PoC for OS command injection in an nmap MCP server, with duplicate CVE tracking, detection guidance, and mitigation.
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
apache/casbinAuthorization library enforcing ACL, RBAC, ABAC, and custom access-control models with RESTful matching and policy management APIs for applications…
owasp/offatAutomated API security testing tool that generates tests from OpenAPI specs, fuzzes inputs, and checks for OWASP API Top 10 vulnerabilities including…
k3ystr0k3r/cve-2026-31816CVE-2026-31816 - Budibase Authentication Bypass to RCE
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
openidentityplatform/openamOpen-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…
ronamosa/cve-2026-18953PoC for CVE-2026-18953 — arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter
everywall/ladderSelfhosted alternative to 12ft.io. and 1ft.io. Proxy to remove CORS headers and modify HTML
george0papasotiriou/cve-2026-21003-jwt-none-algorithm-bypass-via-kid-header-omissionProof-of-concept exploit for CVE-2026-21003 demonstrating JWT authentication bypass by omitting the kid header and using the 'none' algorithm to…
george0papasotiriou/cve-2026-11102-oauth2-implicit-grant-fragment-hijackingProof-of-concept exploit for CVE-2026-11102 demonstrating OAuth2 implicit grant fragment hijacking via unvalidated redirect_uri, leading to access…
george0papasotiriou/cve-2026-4444-jwt-algorithm-confusion-via-kid-injectionPOC for CVE-2026-4444 demonstrating JWT algorithm confusion via untrusted kid injection, including vulnerable Node.js server and Python exploit for…
george0papasotiriou/cve-2026-3456-oauth2-pkce-race-condition-account-takeover-Python PoC for CVE-2026-3456 demonstrating OAuth2 PKCE race-condition account takeover, with a vulnerable auth server and concurrent code-verifier…
malhyuk/cve-2026-59243Proof-of-concept for CVE-2026-59243 demonstrating JWT signature bypass in Apache Airflow FAB Auth Manager's Azure AD OAuth callback due to insecure…
roxanne_ardary/securekitSecurekit is a protocol-agnostic security kernel that enforces zero-trust, sandboxed execution for AI tool use. It sits between any LLM or agent…
skelersecurity/wordpress-skelersecurity-core-security-cve-2026-63030Temporary WordPress plugin requiring authentication for the Core REST Batch API endpoint to mitigate the wp2shell vulnerability chain…