CVE-2026-27344
ac8999/cve-2026-27344Missing Authorization in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
api-securityauthentication-authorizationmisconfiguration+3
ac8999/cve-2026-27344Missing Authorization in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
wattocyber/agentic-dm-gatewaySecurity control plane for LLM agents: allowlists, owner kill switch, PIN sessions, rate limits, prompt-injection detection, and output scrubbing to…
huzjie/aegisagentRuntime security gateway for AI agents: cryptographically attests tool calls, enforces policies, sandboxes execution, and logs tamper-evident audit…
cognitive-functors/c4-meta-systemProduction AI defense with 7-layer protection: mathematical constraints, object-capability access, distributed O2 consensus, SVETILO ethics. First…
0xsu3ks/cve-2025-29556PoC for CVE-2025-29556 creating Security Officer accounts on ExaGrid EX10 backup appliances via a low-privilege API session, enabling privilege…
rachidafaf/bola-cve-2023-27524Demonstrates CVE-2023-27524 Broken Object Level Authorization (BOLA) vulnerability with vulnerable and fixed Flask API implementations for security…
shoucheng3/springsource__spring-security-oauth_cve-2018-1260_2-3-2-releaseOAuth and OAuth2 support library for Spring Security, enabling secure API authentication and authorization for consumer and provider implementations…
shoucheng3/asf__cxf_cve-2019-17573_3-2-11Web services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, WS-Trust, and JAX-WS/JAX-RS APIs.
shoucheng3/aws__aws-sdk-java_cve-2022-31159_1-12-2600Java SDK for integrating with Amazon Web Services, providing secure API access to S3, DynamoDB, EC2, and more, with built-in authentication,…
authcov/authcovWeb app authorisation coverage scanning
gmh5225/jataayuLLM-backed AI agent security — inbound injection detection + outbound privacy protection
symfony/symfonyThe Symfony PHP framework
openvpn/openvpnSecure tunneling daemon implementing VPN protocols with TLS encryption, certificate authentication, and routing/firewall configuration for private…
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
ory/hydraOpenID Certified OAuth 2.0 and OpenID Connect provider for token issuance, client management, JWKS, and login/consent flow orchestration via headless…
kanidm/kanidmSelf-hosted identity management platform providing WebAuthn passkeys, OAuth2/OIDC SSO, SSH key distribution, RADIUS and LDAP integration for modern…
hashicorp/boundaryBoundary enables identity-based access management for dynamic infrastructure.
bastillion-io/bastillionBastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.