boreas37/cve-2026-44848-pocPoC for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints -> host RCE (GHSA-rrmm-9v76-h3p4). Stdlib-only Python.
aramosf/cve-2026-24031Self-contained Python PoC for Dovecot SQL authentication bypass: logs in as any user without the real password and enumerates usernames on vulnerable…
jenderal92/password-strength-evaluatorEvaluates password strength based on length, character types, and diversity, and verifies against data breaches via the Have I Been Pwned API, with…
bk-security/auth-header-trust-rulesSemgrep rules that flag header-trust auth bypass patterns (CVE-2025-29927 class). Companion to bk-security.github.io.
khoinp1012/kprotectKernel-level security engine using eBPF-LSM to enforce file access policies based on process lineage, protecting sensitive data from supply-chain…
jatin-dot-py/instagram-private-bypassThis repository discloses a server-side authorization bypass in Instagram, which allowed unauthenticated access to private timelines; it seems likely…
aliyabuz25/cve-2025-49173Security research — PoC for local root privilege escalation on macOS Mavericks 10.9.
micaelmaciel/cve-2024-55211Cookie-based authentication vulnerability on Tk-Rt-Wr135G
zs1n/cve-2025-29927PoC | NextJS Middleware 15.2.2 - Authorization Bypass
amr9k8/jwt-spoof-toolAutomates JWT token hijacking by exploiting CVE-2018-0114, generating attacker RSA keys and injecting them into the JWT header to forge valid tokens.
