sap/macos-enterprise-privilegesThis application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to…
sighupio/permission-managerPermission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW
quitten/autorizeAutomatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application…
scille/parsec-cloudOpen source Dropbox-like file sharing with full client encryption !
authcov/authcovWeb app authorisation coverage scanning
softrams/bulwarkAn organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
blipzip/cve-2022-31692A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692
lirantal/vulnerable-nextjs-14-cve-2025-29927Reproduction environment for CVE-2025-29927, demonstrating Next.js middleware authorization bypass via the x-middleware-subrequest header. Includes…
theronielanddaronpodcastshow/svjaThe Super Vulnerable Java Application (SVJA), as demonstrated in the Roniel and DaRon Podcast Show, is an Apache Struts application designed to…
sfewer-r7/cve-2026-16232A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token.
muhammadwaseem29/cve-2025-29927-pocAuthorization Bypass in Next.js Middleware
opfour/op4Terminal-based encrypted messenger with post-quantum cryptography, Double Ratchet protocol, and Tor anonymity. Features duress passphrase, deniable…
themehackers/cve-2025-29972CVE-2025-29927 is a critical security vulnerability affecting Next.js, a popular React framework for building full-stack web applications. This flaw…
ricsirigu/cve-2025-29927A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass
kazuya256/next-js-auth-bypass🔓 Next.js Auth Bypass Demo - Educational application demonstrating CVE-2025-29927 middleware authentication bypass vulnerability . ⚠️ For…
turkios/cve-2026-32699-facturascripts-nick-bypassBroken Access Control in FacturaScripts EditUser controller allows authenticated users to rename any account (including admin) by modifying the…
0xpthree/next.js_cve-2025-29927Reproduces CVE-2025-29927 middleware authorization bypass in Next.js 14.2.24 and demonstrates exploitation with curl to bypass authentication and…
shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…
