#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
htrxuan/hdwebmobile-formula-pricingWooCommerce plugin: safe formula-based product pricing, closing CVE-2026-4001's eval()-based RCE
rama291041610/cve-2022-1292CVE-2022-1292 OpenSSL c_rehash Vulnerability
murataydemir/cve-2022-22980[CVE-2022-22980] Spring Data MongoDB SpEL Expression Injection
d5sec/cve-2021-43609-pocProof-of-concept exploit for CVE-2021-43609 demonstrating SQL injection to file read to remote code execution chain against Spiceworks help desk…
hideki233/cve-2025-3248-langflow-rceProof-of-concept exploit for CVE-2025-3248, an unauthenticated remote code execution vulnerability in Langflow, demonstrating code injection via the…
veraxy00/cve-2020-8840Jackson-databind远程代码执行漏洞（CVE-2020-8840）分析复现环境代码
al1ex/cve-2020-11113CVE-2020-11113:Jackson-databind RCE
mo200909/office-malware-forensics-lab-remnux-static-analysisStatic analysis of 2 suspicious Office documents on REMnux using oletools; one matched CVE-2017-11882, the other was inconclusive.
carlosalbertotuma/advisoryPublic security advisories and PoCs for vulnerabilities discovered in open-source web software, with root-cause analysis, CVE references,…
davwwwx/cve-2022-23614Proof-of-concept exploit for CVE-2022-23614 demonstrating arbitrary code execution via Twig's sort filter sandbox bypass in PHP applications.
iulianvostrut/contexthoundStatic analysis CLI that scans codebases for LLM prompt-injection, data-exfiltration, jailbreak, and unsafe agent/tool vulnerabilities. Runs fully…
studiomeyer-io/mcp-server-attestationLayer-2 supply-chain hardening for MCP servers — Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends…
stuub/sglang-0.5.9-rceProof of Concept exploitation of CVE-2026-5760 - RCE in SGLang 0.5.9 via malicious GGUF
moderneinc/rewrite-cve-2026-22732OpenRewrite recipe that detects and fixes Spring Security header suppression (CVE-2026-22732) by identifying Content-Length header misuse and…
alewong/php-fpm-remote-code-execution-vulnerability-cve-2019-11043-PHP-FPM Remote Code Execution Vulnerability (CVE-2019-11043) POC in Python
fru1ts/cve-2024-44902Proof-of-concept exploit for CVE-2024-44902, a deserialization vulnerability in ThinkPHP v6.1.3–v8.0.4 enabling remote code execution via crafted…
falconkei/snakeyaml_cve_pocSnakeYAML-CVE-2022-1471-POC
