watchtowrlabs/kentico-xperience13-authbypass-wt-2025-0011Python script for checking authentication bypass vulnerability (WT-2025-0011) in Kentico Xperience 13 CMS Staging Service via POST request analysis.
liam-worsley/cve-2025-32433-poc-analysisThis is an analysis for CVE-2025-32433 (Erlang OTP SSH Vulnerability). I did not write any of the code, I only wrote comments describing what the…
oguz-kagan-akar/cve-2026-41940-analysisTechnical analysis of the cPanel/WHM auth bypass
litndat/vulnerability-cve-2025-64446-cve-2025-58034PoC exploit for FortiWeb CVE-2025-64446 (authentication bypass via path traversal) and CVE-2025-58034 (OS command injection) with detailed analysis…
asdasddqwdq29-a11y/cve-2026-41940Redacted cPanel/WHM authentication bypass analysis and authorized checker
ololadeabiola03/aisecplus-week01-servicenow-ai-security-incidentResearch and analysis of the ServiceNow Virtual Agent vulnerability (CVE-2025-12420), including attack flow, MITRE ATT&CK mapping, detection…
bekwiner/cve-2026-47777Detailed technical analysis of CVE-2026-47777, a high-severity authorization bypass in Mastodon's Featured Collections federation pipeline, including…
a17-ba/cve-2026-51119Technical analysis and advisory for CVE-2026-51119, a privilege escalation in Invixium IXM WEB allowing authenticated low-privilege users to create…
eagle-nett/fortiweb_cve-2025-64446-58034PoC exploit for FortiWeb CVEs: authentication bypass via path traversal and authenticated OS command injection. Includes detailed analysis, payloads,…
shahin-shadow/nextjs-auth-bypassAnalysis and exploitation of a Next.js authorization bypass vulnerability (CVE-2025-29927)
iteride/cve-2025-2825Detailed analysis and PoC exploit for CVE-2025-2825, an authentication bypass in CrushFTP. Includes nuclei templates, multi-threaded scanner, and…
shoucheng3/apache__jspwiki_cve-2022-46907_2-11-3Exploit module for Apache JSPWiki CVE-2022-46907, targeting a Java-based wiki platform with JAAS security integration. Provides vulnerability…
raghvendra1207/cve-2022-22978Proof-of-concept demonstrating authorization bypass in Spring Security's RegexRequestMatcher (CVE-2022-22978) using CRLF injection, with analysis and…
notitssixtyn3in/cve-2025-4162030Security advisory detailing a critical authentication vulnerability (CVE-2025-4162030) in Copilot, involving user ID switching that could lead to…
m4sh-wacker/cve-2025-60188-atarim-plugin-exploitCVE-2025-60188 Atarim Plugin Exploit
synacktiv/bissapA new open-source tool to quickly audit SAP permissions.
shieldfy/api-security-checklistChecklist of the most important security countermeasures when designing, testing, and releasing your API
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
