cyberdudebivash/cyberdudebivash-servicenow-ai-agent-audit-scriptThis script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH –…
matrix-org/synapseSynapse: Matrix homeserver written in Python/Twisted.
symfony/symfonyThe Symfony PHP framework
apache/brpcIndustrial-grade C++ RPC framework for building high-performance distributed systems, supporting multiple protocols (HTTP, gRPC, Redis, Thrift) with…
openpcc/openpccAn open-source framework for verifiably private AI inference
wardgate/wardgateSecurity gateway for AI agents - credential-isolated API proxying and policy-gated remote execution (conclaves). Reduce the blast radius!
clidey/deptrustCLI and MCP server that checks package versions for known vulnerabilities across 14+ ecosystems including npm, PyPI, crates.io, Go modules, and…
eddiejibson/limitrr-phpBetter PHP rate limiting using Redis.
studiomeyer-io/mcp-stdio-shellguardDefense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security…
george0papasotiriou/cve-2026-21003-jwt-none-algorithm-bypass-via-kid-header-omissionProof-of-concept exploit for CVE-2026-21003 demonstrating JWT authentication bypass by omitting the kid header and using the 'none' algorithm to…
george0papasotiriou/cve-2026-11102-oauth2-implicit-grant-fragment-hijackingProof-of-concept exploit for CVE-2026-11102 demonstrating OAuth2 implicit grant fragment hijacking via unvalidated redirect_uri, leading to access…
0xdak/cve-2026-59243_exploitExploit for Apache Airflow FAB OAuth authentication bypass (CVE-2026-59243) that achieves admin access and remote code execution by triggering a…
johanneslks/cve-2026-33186gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass)
shoucheng3/apache__incubator-dubbo_cve-2021-30181_2-6-8High-performance Java RPC and microservices framework with service discovery, traffic management, observability, and built-in security for building…
softrams/bulwarkAn organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
6mile/gimmepatzPersonal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams
helixar-ai/mcp-security-checklistMCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers, platform teams, and technical leaders a…
mohamedation/pwnedcheckA command-line tool to check if passwords have been exposed in data breaches using the Have I Been Pwned (HIBP) API.
