zappzarapp-php-security
marcstraube/zappzarapp-php-securityPHP 8.4+ security library (mirror)
api-securityauthentication-authorizationcode-analysis+6
marcstraube/zappzarapp-php-securityPHP 8.4+ security library (mirror)
toanln-cov/cve-2026-66917IDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery
theopaid/cve-2026-66751-insufficient-access-controls-allow-for-unauthorized-room-deletion-let-s-chat-Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion (Let's Chat)
radicle-dev/heartwoodPeer-to-peer code collaboration and publishing stack with a secure, decentralized protocol, CLI tool, and network daemon for sovereign code forges.
darrocarocatest-sys/pv2-victimauthz research - CVE-2026-3306 fix coverage
bekwiner/cve-2026-47777Detailed technical analysis of CVE-2026-47777, a high-severity authorization bypass in Mastodon's Featured Collections federation pipeline, including…
makerchecker/makercheckerOpen-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of…
contrastsecurity/contrastSAST CLI for scanning Java, JavaScript, and .NET applications plus AWS Lambda functions, detecting code vulnerabilities and over-permissive IAM…
bk-security/auth-header-trust-rulesSemgrep rules that flag header-trust auth bypass patterns (CVE-2025-29927 class). Companion to bk-security.github.io.
farenhytee/database-sentinelClaude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced…
sudo-wp/sudowp-postgalleryA security-hardened fork of the abandoned "PostGallery" WordPress plugin. Fixes critical Arbitrary File Upload (CVE-2025-13543) and Guest Access…
sudo-wp/sudowp-crowdsignal-formsA security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict…
sudo-wp/sudowp-clickfunnels-zurichA security-patched fork of the legacy ClickFunnels Classic WordPress plugin. Fixes critical Stored XSS vulnerabilities (CVE-2022-4782) while…
shoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…
shoucheng3/asf__cxf_cve-2019-17573_3-2-11Web services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, WS-Trust, and JAX-WS/JAX-RS APIs.
shoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…
shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…
trinadh465/openssl-1_0_1g_cve-2015-1791OpenSSL 1.0.1g source code with CVE-2015-1791 patch, providing SSL/TLS and cryptographic library for secure communications.