declarative-policy

DeclarativePolicy: A Declarative Authorization Library This library provides a DSL for writing authorization policies. It can be used to separate logic from permissions, and has been used at scale in production at GitLab.com. The original author of this library is Jeanine Adkisson, and copyright ...

CVE-2025-29927

CVE-2025-29927 CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Affected Versions Next.js 15.x 15.2.3...

cve-2020-1764-poc

CVE-2020-1764 PoC Auth bypass PoC for Kiali 0.4.0 to 1.15.0 using login auth strategy Security Bulletin check version: curl 'http:///api check auth strategy: curl 'http:///api/auth/info' go run ./poc.go curl 'http:///api/status' -H "Authorization: Bearer $JWT"...

CVE-2026-5724

Summary The Temporal frontend service does not enforce authentication on streaming gRPC RPCs. The streaming interceptor chain omits the authorization interceptor, allowing unauthenticated callers to access AdminService/StreamWorkflowReplicationMessages, a privileged admin-only endpoint that strea...

CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 — Next.js Middleware / RSC Bypass Analysis The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a small laboratory and Proof-of-Concept analysis fo...

CVE-2026-89013

CVE-2026-89013 — Dolibarr hashp=shared Authorization Bypass Exploit for CVE-2026-89013: document.php and viewimage.php force NOLOGIN when the hashp parameter is present. The internal marker value shared skips share-token resolution, but the access-control override still fires for any non-empty...

CVE-2026-83991-writeup-and-poc

CVE-2026-83991: superseding a file that the caller cannot delete I kept these lines next to each other because separating them makes the bug look more complicated than it is: CreateFileW, GENERICWRITE error 5 DeleteFileW error 5 CfCreatePlaceholders, SUPERSEDE SOK per-entry Result SOK The write...

CVE-2022-22978

CVE 2022-22978: Authorization Bypass in RegexRequestMatcher 🥶 Overview According to the information I have gathered, this vulnerability relates to the RegexRequestMatcher class in the Spring Security framework. Specifically, applications using RegexRequestMatcher where the regular expression...

AutoRepeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

next-CVE-2025-29927

CVE-2025-29927: Authorization Bypass in Next.js Middleware A critical vulnerability in Next.js CVE-2025-29927 allows unauthorized access to protected routes by bypassing the middleware logic. The issue affects Next.js versions 11.1.4 to 13.5.6, and versions 14.x 14.2.25 or 15.x 15.2.3. To mitigat...

CVE-2026-26416

CVE-2026-26416 Authorization Bypass Vulnerability Leading to Privilege Escalation Vulnerability Summary A privilege escalation vulnerability was identified in Tata Consultancy Services TCS – Cognix Recon Client v3.0. The issue allowed authenticated users to elevate privileges across defined role...

CVE-2025-29927

CVE-2025-29927 ★ CVE-2025-29927 Next.js middleware bypass PoC ★ Description CVE-2025-29927 : Next.js middleware bypass PoC description: Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it i...

CVE-2026-47100-Analysis-Lab

CVE-2026-47100 — FunnelKit / Funnel Builder for WooCommerce Checkout Stored XSS Lab Local Docker lab for reproducing CVE-2026-47100 in a safe, least-harm way. This lab compares a vulnerable FunnelKit version against a patched version and verifies the behavior using a harmless JavaScript...

My-CVEs

A list of vulnerabilities I found. Some vulnerabilities come with deep technical writeups, exploits or even fuzzing session walkthroughs. Some vulnerabilities don't have CVEs because maintainers ghosted me, or because a maintainer didn't agree it's a security bug, I decided to release those as...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

CVE-2024-30896

CVE-2024-30896 Summary A business logic flaw in influxdb allows users who own a valid allAccess token to escalate their privileges at operator level by listing current authorization tokens. Scenario Attacker might be a user which was gained access by an administrator via an allAccess token only...

cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

CVE-2022-36539

CVE-2022-36539 Insecure Direct Object Reference IDOR WeDayCare B.V. WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children. Traffic with the API is made transparent via a proxy such as Burp Suite...

cve-2026-71362-magento-lab

CVE-2026-71362 — Magento / Adobe Commerce customer-session identity-switch lab A self-contained, one-command Docker lab that reproduces CVE-2026-71362 end to end and lets you verify Adobe's fix, so defenders, researchers and students can study a real account-takeover primitive on a disposable...

rbac

PHP-RBAC v2.x PHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Hierarchical Role Based Access Control and more, in the fastest implementation yet. Current Stable Release: PHP-RBAC v2.0 Connect With Us Home Page: http://phprbac.net/ OWASP Project Page:...