certbot
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
authentication-authorizationcloud-securityconfiguration-auditing+3
33.3k
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
openziti/zitiZero-trust networking platform that makes services invisible with cryptographic identity, policy-based access, and end-to-end encryption. Replaces…
liam-worsley/cve-2025-32433-poc-analysisThis is an analysis for CVE-2025-32433 (Erlang OTP SSH Vulnerability). I did not write any of the code, I only wrote comments describing what the…
aramosf/cve-2026-24031Self-contained Python PoC for Dovecot SQL authentication bypass: logs in as any user without the real password and enumerates usernames on vulnerable…
7h30th3r0n3/cve-2026-53625-glpi-pocGLPI Privilege Escalation via authtype Manipulation PoC - CVE-2026-53625. Ethical PoC for the GLPI vulnerability allowing a Technician to take full…
zeropathai/autogpt-cve-2026-30950-pocPOC for CVE-2026-30950 which allows session hijacking in AutoGpt
st4rburn/public-passwdUse CVE-2026-46333 and CVE-2026-31431 to change any user's password.
turkios/cve-2026-32699-facturascripts-nick-bypassBroken Access Control in FacturaScripts EditUser controller allows authenticated users to rename any account (including admin) by modifying the…
steampunk424/cve-2025-58434-unauthenticated-password-reset-flowwiseThe forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or…
kernelzeroday/cve-2026-29000Forge JWE-wrapped unsigned JWTs to bypass pac4j-jwt signature verification (CVE-2026-29000) and authenticate as any user; includes Python CLI,…
sahiloj/cve-2023-33730eScan Management Console version 14.0.1400.2281 contains privilege escalation via `GetUserCurrentPwd` function lets attackers retrieve any user's…
csuribird/cve-2025-2304This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their…
shoucheng3/apache__shiro_cve-2023-34478_1-11-0Java security framework providing authentication, authorization, cryptography, and session management APIs to secure any application from mobile to…
truststacksecurity/cve-2025-27580Exploit for CVE-2025-27580: A predictable token vulnerability in NIH BRICS through 14.0.0-67 allows unauthenticated users with a Common Access Card…
baram01/webuiWebUI for AAA
m3ssap0/wordpress-really-simple-security-authn-bypass-exploitPython exploit for CVE-2024-10924 authentication bypass in Really Simple Security < 9.1.2. Enables unauthenticated login as any existing WordPress…
trqt/cve-2024-48322Exploit for CVE-2024-48322 targeting RunCodes instances. Retrieves user passwords via email inbox after authentication bypass, requiring only any…
synacktiv/cve-2024-45409Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit