helixar-ai/mcp-security-checklistMCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers, platform teams, and technical leaders a…
infisical/infisicalInfisical is the open-source platform for secrets, certificates, and privileged access management.
shoucheng3/apache__jspwiki_cve-2019-10078_2_11_0_m4_fixedExploit testing repository for Apache JSPWiki CVE-2019-10078, demonstrating a cross-site scripting vulnerability in a Java-based wiki platform with…
shoucheng3/apache__jspwiki_cve-2019-10076_2-11-0-m3Java-based wiki platform with JAAS security integration, access control, and detailed configuration auditing. Includes documentation for…
shoucheng3/apache__jspwiki_cve-2022-46907_2-11-3Exploit module for Apache JSPWiki CVE-2022-46907, targeting a Java-based wiki platform with JAAS security integration. Provides vulnerability…
shoucheng3/apache__jspwiki_cve-2019-10089_2-11-0-m4Java-based wiki platform with detailed access control and JAAS security integration, provided as a vulnerable version for security testing and CVE…
aliyabuz25/cve-2025-49173Security research — PoC for local root privilege escalation on macOS Mavericks 10.9.
kanidm/kanidmSelf-hosted identity management platform providing WebAuthn passkeys, OAuth2/OIDC SSO, SSH key distribution, RADIUS and LDAP integration for modern…
0xrlawrence/pribadoZero-knowledge privacy platform for confidential API key management, encrypted vault, and secure chat. Built on Oasis Sapphire TEEs
roxanne_ardary/securecivicSecureCivic is a citizen-built, open source identity verification platform designed for SSA adoption. It replaces private data brokers with a secure,…
firezone/firezoneWireGuard-based zero-trust access platform providing secure, peer-to-peer remote access with granular policy controls, SSO authentication, and audit…
openziti/zitiZero-trust networking platform that makes services invisible with cryptographic identity, policy-based access, and end-to-end encryption. Replaces…
openidentityplatform/openamOpen-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…
shoucheng3/keycloak__keycloak_cve-2022-3782_20-0-1Open source identity and access management platform providing single sign-on, user federation, and centralized authentication for modern applications…
shoucheng3/asf__nifi_cve-2023-36542_1-22-0Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…
rocketchat/rocket.chatThe Secure CommsOS™ for mission-critical operations
jumpserver/jumpserverJumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…
zitadel/zitadelOpen-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenant access control for developers…
