alpr-dashboard-patches
thewaterbug/alpr-dashboard-patchesRuntime patches for algertc/alpr-dashboard: async logger fix and CVE-2025-29927 nginx mitigation
authenticationauthentication-authorizationdevsecops+3
thewaterbug/alpr-dashboard-patchesRuntime patches for algertc/alpr-dashboard: async logger fix and CVE-2025-29927 nginx mitigation
baza-nato/cve-2021-33044Exploit for Dahua IPC/VTH/VTO devices that bypasses identity authentication by sending crafted malicious packets, allowing unauthorized access.
trqt/cve-2024-48322Exploit for CVE-2024-48322 targeting RunCodes instances. Retrieves user passwords via email inbox after authentication bypass, requiring only any…
randomrobbiebf/cve-2024-9821Bot for Telegram on WooCommerce <= 1.2.4 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass
imbas007/auth-bypass-cve-2025-40554Proof-of-concept exploit for CVE-2025-40554, an authentication bypass in SolarWinds Web Help Desk. Includes Nuclei template and Python exploit for…
randomrobbiebf/cve-2024-4875HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update
fevar54/blackash-cve-2025-20343Technical documentation and proof-of-concept for CVE-2025-20343, a high-severity denial-of-service vulnerability in Cisco ISE allowing…
sudo-wp/sudowp-clickfunnels-zurichA security-patched fork of the legacy ClickFunnels Classic WordPress plugin. Fixes critical Stored XSS vulnerabilities (CVE-2022-4782) while…
sudo-wp/sudowp-adminerA secure, zero-trust database management tool for WordPress. Fixes critical SSRF vulnerabilities (CVE-2021-21311) by enforcing local connections only.
ethan-repo-lab4b6/cve-2022-36537Python exploit for CVE-2022-36537, an authentication bypass in ZK Framework affecting R1Soft Server Backup Manager, allowing retrieval of web context…
sudo-wp/sudowp-crowdsignal-formsA security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict…
shoucheng3/apache__jspwiki_cve-2019-10077_2-11-0-m3Exploit module for Apache JSPWiki CVE-2019-10077, targeting a Java-based wiki platform with JAAS authentication and access control. Enables…
shoucheng3/apache__jspwiki_cve-2019-10078_2_11_0_m4_fixedExploit testing repository for Apache JSPWiki CVE-2019-10078, demonstrating a cross-site scripting vulnerability in a Java-based wiki platform with…
shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…
shoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…
shoucheng3/apache__jspwiki_cve-2019-10089_2-11-0-m4Java-based wiki platform with detailed access control and JAAS security integration, provided as a vulnerable version for security testing and CVE…
styx00/dnn_cve-2015-2794NSE plugin for Nmap that scans a DotNetNuke (DNN) web application for an Administration Authentication Bypass vulnerability (CVE-2015-2794, EDB-ID:…
shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5410_2-1-8-releaseCentralized configuration server for distributed systems with HTTP API, Git-backed storage, property encryption/decryption, and integration with…