#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
theopaid/cve-2026-66731-negative-chunk-size-parsing-causes-memory-corruption-leading-to-server-crashSecurity advisory for CVE-2026-66731 with root cause analysis, PoC exploit, and fix suggestions for facil.io HTTP/1.1 chunked encoding parser bug.
mehdichyhab/cve-2025-64512-exploitCVE-2025-64512 - pdfminer.six Remote Code Execution Exploit
oscerd/cve-2026-46590Reproducer for CVE-2026-46590: Apache Camel camel-pqc key-lifecycle unsafe deserialization (FileBasedKeyLifecycleManager legacy .key migration via…
razureink/cve-2024-50330-ivanti_epm_sqli_reproductionCVE Reproduction: cve-2024-50330-ivanti_epm_sqli_reproduction
oscerd/cve-2026-46457Reproducer for CVE-2026-46457 — Apache Camel camel-nats inbound header injection (Camel control-header injection via a NATS publisher; CamelHttpUri…
p4x1s/cve-2023-33829-pocSCM Manager XSS
lucifer0xf/wp2shell-wordpress-townUnauthenticated Remote Code Execution (RCE) in WordPress Core allows attackers to execute arbitrary code without logging in by chaining…
toanln-cov/cve-2026-78071Stored XSS via Location Title in DPCalendar Free
squeeze440/gortex-pocPoC — symlink following to out-of-repo content disclosure via search_text in Gortex (GHSA-6vhf-4wcm-2r83, CVE-2026-87003, CVSS 5.5).
toanln-cov/cve-2026-76564Stored XSS via User-Agent in Admin Order View in PhocaCart
whu-enjoy/cve-2015-8660这个代码包含了CVE-2015-8660漏洞的利用代码，还有注释，出现问题的源代码，打了补丁后的代码
ludovicpatho/cve-2022-22965_spring4shellA Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit…
romain-deperne/cve-2026-33980Proof-of-concept exploit for KQL injection in adx-mcp-server via the table_name parameter, enabling data exfiltration and destructive commands in…
saku0512/cve-2026-72815-pocLocal Go PoC demonstrating CVE-2026-72815, an X-Forwarded-For IP spoofing flaw in go-chi/chi middleware.RealIP that bypasses IP-based ACLs, with a…
entr0pie/demo-cve-2022-22947Demonstration of CVE-2022-22947 exploit for Spring Cloud Gateway, providing a proof-of-concept for security testing and vulnerability analysis.
squeeze440/obsidian-note-toolbar-pocPoC — frontmatter-driven arbitrary JavaScript execution in Note Toolbar for Obsidian (GHSA-q8cw-3m8c-5pf2, CVE-2026-87002, CVSS 7.0).
nixon-h/cve-2025-68147-ospos-stored-xssPoC repository for CVE-2025-68147: Stored Cross-Site Scripting (XSS) in OpenSourcePOS. Vulnerability allows privilege escalation via malicious…
nice1st/cve-2023-24998Apache Commons FileUpload 보안 취약점 테스트
