CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
47,133 repositories indexed
169–192 of 600 · Most stars
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
Golang OAuth2 server library
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
Port of TweetNaCl cryptographic library to JavaScript
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
A library for implementing authentication/authorization in Ember.js applications.
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
An authentication system generator for Rails applications.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Automated static analysis tools for binary programs
An Elixir Authentication System for Plug-based Web Applications
TranslatedBased on an in-depth REA teardown, a high-fidelity recreation of the official Claude desktop UI. Recreates 30 independent React components and 8 hardcore interaction physics algorithms, and comes with a 3000+ line reverse-engineering analysis manual.
Robust, modular, and extendable user authentication system
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
Authorization framework for Ruby/Rails applications
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
Oauth2 strategy for Google
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
Fullstack authentication and accounts-management for Javascript.
Secure Vault for Customer PII/PHI/PCI/KYC Records
ARTEX - AI autonomous penetration testing system (English translation)
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
Magical Authentication