#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
bde574786/sequelize-1day-cve-2023-25813Proof-of-concept and technical analysis of CVE-2023-25813, a SQL injection vulnerability in Sequelize ORM versions prior to 6.19.1, including…
epicosy/xstream-1Java library for XML serialization and deserialization, with a focus on CVE-2020-26217 exploitation. Enables converting Java objects to XML and back,…
antunesmpedro/cve-2018-6574CVE-2018-6574 go get
ally-petitt/cve-2024-29399CVE-2024-29399 reference
shanekingblog/org.shaneking.demo.cve.y2021.s44228CVE-2021-44228
haxatron/cve-2022-0219Proof-of-concept exploit for CVE-2022-0219, an XXE vulnerability in Jadx that allows local file disclosure when exporting malicious APK files via the…
arntsonl/cve-2016-4463Proof of concept for CVE-2016-4463
infosecjack/cve-2018-6574Go-based proof-of-concept exploit for CVE-2018-6574, demonstrating directory traversal in Go's net/http package for security testing and…
s-index/cve-2021-41078nameko Arbitrary code execution due to YAML deserialization
h3llraiser/cve-2020-25398CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.
cyberharsh/groovy-scripting-engine-cve-2015-1427Docker-based lab environment for CVE-2015-1427 ElasticSearch Groovy sandbox bypass and remote code execution, demonstrating two POC methods with Java…
asavior2/cve-2018-6574CVE-2018-6574 go get RCE
renyuh/log4j-lookups-vulnerabilityLog4j2 Vulnerability (CVE-2021-44228)
aaryan-11-x/cve-2024-57487-and-cve-2024-57488Proof-of-concept and detailed writeups for CVE-2024-57487 (authenticated RCE via file upload) and CVE-2024-57488 (stored XSS) in Online Car Rental…
randomrobbiebf/cve-2024-56059Partners <= 0.2.0 - Unauthenticated PHP Object Injection
randomrobbiebf/cve-2024-10728PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation
lvl23ht/poc-cve-2025-3914-aeropage-wordpress-file-uploadCVE-2025-3914-PoC | The Aeropage Sync for Airtable WordPress plugin (≤ v3.2.0) is vulnerable to authenticated arbitrary file uploads due to…
dottak/cve-2025-22510PoC of CVE-2025-22510
