gitea-user-keys-idor
abraxas/gitea-user-keys-idorProof-of-concept and lab for a Gitea IDOR (CWE-639) in GET /api/v1/user/keys/{id}, letting an authenticated read:user token enumerate other users'…
api-securityexploitationinformation-gathering+4
abraxas/gitea-user-keys-idorProof-of-concept and lab for a Gitea IDOR (CWE-639) in GET /api/v1/user/keys/{id}, letting an authenticated read:user token enumerate other users'…
pingidentity/ldapsdkUnboundID LDAP SDK for Java
trappsec-dev/trappsecOpen-source framework for embedding realistic decoy routes and honey fields into APIs to detect attackers probing business logic, converting…
tirrenotechnologies/tirrenoOpen-source security framework for real-time event tracking, threat detection, and risk scoring. Monitors user behavior, detects fraud, bot attacks,…
sentrypeer/sentrypeerDistributed SIP honeypot that detects and shares fraud data on VoIP attacks. Collects bad actor IPs and phone numbers via peer-to-peer network, with…
hakaioffsec/cve-2026-16764Python exploit for CVE-2026-16764, a privilege escalation in OWASP DefectDojo where an is_staff REST API bypass lets a low-privileged user gain…
anirbala98/cve-2026-539594gaBoards < 3.3.9 - User Information Disclosure
davkharrr/cve-2026-19478-pocProof-of-concept exploit for unauthenticated remote code injection in GitLab's GraphQL API, using crafted queries to modify or delete public projects…
ory/kratosAPI-first identity and user management system for cloud-native applications. Handles login, registration, MFA, recovery, and profile management with…
vikasudasi/exfil-scanScan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems
teteco/cve-2026-52217-vtex-checkout-crosstenant-idorThe VTEX Checkout Service exposes OrderForm data through the endpoints `/api/checkout/pub/orderForm/{orderFormId}` and `/attachments/*`. These…
michaeladamgroberman/cve-2026-28766CVE-2026-28766: Missing Authentication on User Account Endpoint — Gardyn Home Kit (ICSA-26-055-03)
michaeladamgroberman/cve-2026-25197CVE-2026-25197: Authorization Bypass via IDOR — Gardyn Home Kit (ICSA-26-055-03)
ex-cal1bur/cve-2026-44595# CVE-2026-44595 YAMCS Unauthorized User Enumeration via IAM API
ackemed/cve-2026-1529-poc-keycloak-unauthorized-registration-via-improper-invitation-token-validationExploit tool for CVE-2026-1529, demonstrating unauthorized organization registration in Keycloak via JWT token manipulation. Includes token…
shoucheng3/keycloak__keycloak_cve-2022-4361_21-1-1Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…
shoucheng3/keycloak__keycloak_cve-2022-4137_20-0-3Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…
shoucheng3/keycloak__keycloak_cve-2022-3782_20-0-1Open source identity and access management platform providing single sign-on, user federation, and centralized authentication for modern applications…