raspberrypi-setup

Raspberry Pi Setup This Ansible playbook is designed to rapidly set up your Raspberry Pi. It's compatible with all models. It has been successfully tested on multiple models, including the Pi Zero W, Pi Zero 2W, and Pi 4B, among others. The playbook should work well on both Debian and Debian-base...

jailer

Jailer - eBPF Mandatory Access Control Warning : This project is under heavy development and is NOT ready for production use. APIs, policy formats, and behavior may change without notice. Use for testing and experimentation only. Acknowledgments Note : This is an independent implementation and is...

otto-support

Otto Support Customer support MCP server for AI coding assistants. One Go binary, tiered authentication, 19 tools across 4 role levels. Built with mcp-go. Quick Start Option A: Docker container recommended Run everything in an isolated container. Claude Code is pre-installed and the MCP server...

conjur

Conjur Maintainability Test Coverage Conjur provides secrets management and application identity for modern infrastructure: Machine Authorization Markup Language "MAML" , a role-based access policy language to define system components & their roles, privileges and metadata A REST web service to:...

bulwark

一款组织资产与漏洞管理工具，集成 Jira，专为生成应用安全报告而设计。 功能特性 多客户端漏洞管理 安全报告生成 Jira 集成 基于团队的角色授权 API 密钥与管理 电子邮件集成 Markdown 支持 用户激活/停用（管理员） 注意 请注意，该项目正处于早期开发阶段。 演示 Jira 集成 使用 Docker 启动 1. 安装 Docker 2. 创建一个 .env 文件并提供以下属性： root@kitploit: MYSQLDATABASE="bulwark" MYSQLPASSWORD="bulwark" MYSQLROOTPASSWORD="bulwark"...

rbac

PHP-RBAC v2.x PHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Hierarchical Role Based Access Control and more, in the fastest implementation yet. Current Stable Release: PHP-RBAC v2.0 Connect With Us Home Page: http://phprbac.net/ OWASP Project Page:...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

authz0

Authz0 是一款自动化授权测试工具。可以基于 URL 和角色（Roles）及凭据（Credentials）来识别未授权访问。 URL 和角色通过基于 YAML 的模板进行管理，可以通过 authz0 自动创建和添加。您也可以基于一次创建/生成的模板文件，使用多个认证头和 Cookie 进行测试。 🛸 关键特性 生成扫描模板 $ authz0 new 包含 URLs 包含角色（Roles） 包含 ZAP 历史记录（选择 URL 将选中的条目保存为 HAR） 包含 Burp 历史记录（选择 URL 保存条目） 包含 HAR 文件 轻松修改扫描模板（角色、URL）$ authz0 setU...

CVE-2025-24999

CVE-2025-24999 proof of concept for CVE-2025-24999 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...

Flowise < 3.0.1 - Remote Command Execution

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...

CVE-2026-20773

CVE-2026-20773 is an improper authorization flaw in PingFederate (Ping Identity), specifically in the administrative expression evaluation endpoint . A role-based access control (RBAC) deficiency allows users holding certain administrative roles to access expression testing capabilities beyond th...

CVE-2026-20773 Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions...

EUVD-2026-76746

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...

CVE-2026-90450

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...

CVE-2026-90447

This ICS-CERT advisory (CSAF reference: ICSA-26-254-01) describes a privilege escalation vulnerability in a downstream service where a routing rule selects between two authentication mechanisms based on a client-supplied request header . An authenticated user possessing a shared service credentia...

CVE-2026-90447

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...

CVE-2026-90447

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...

Shopper: privilege escalation via improper Livewire admin component authorization

Summary Three Livewire admin components in shopper/framework latest master at commit fcd0c59, released as v2.8.0 gate state-mutating actions on the read-only viewusers permission. This is the same class as the issue Shopper fixed in v2.8.0 / PR 511 / GHSA-f946-9qp6-vgch — the PR moved most write...

EUVD-2026-76138

MoguBlog through 6.2 contains an authorization bypass vulnerability in the POST /pictureSort/getPictureSortByUid endpoint, which omits the @AuthorityVerify annotation required to enforce role-based permissions. Authenticated back-office users without image-category permissions can supply a catego...