#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
louiselalanne/cve-2024-23746Miro Desktop 0.8.18 on macOS allows Electron code injection.
oscerd/cve-2026-40047Reproducer for CVE-2026-40047: Apache Camel camel-docling CLI argument injection / path traversal
rat5ak/cve-2025-55182-react2shell-rce-pocThis repository documents research into deserialization behavior within Next.js React Server Components (RSC) using the Flight protocol. It focuses…
trixsec/cve-2025-55182-scannerA hybrid security scanner for detecting CVE-2025-55182 in Next.js and Waku applications. Features combined static code analysis and safe dynamic…
a1ohadance/cve-2026-38360Advisory: CVE-2026-38360 path traversal (CWE-22) in dash-uploader (Python/PyPI)
mogwailabs/cve-2023-32692-codeigniter4Example application, vulnerable to CVE-2023-32692 (Validation Rule Injection in the PHP Framework CodeIgniter)
itsc1sco/freepbx-sqli-exploit-privilege-escalationThis walkthrough documents the complete compromise of the HTB machine Connected.
x-defender/cve-2023-29007_win-versionProof-of-concept exploit for CVE-2023-29007, a Git arbitrary configuration injection vulnerability. Demonstrates exploitation on Windows systems for…
eqstlab/cve-2026-30951Sequelize JSON Cast SQL Injection
0xmrma/cve-2026-5061Consul Template validated where a symlink pointed during template evaluation, but its later dependency fetch read the original path. Retargeting the…
medaz-sploit/cve-2025-64714-privatebin-2.0.2-pocProof-of-concept exploit for PrivateBin Local File Inclusion (CVE-2025-64714) via template cookie path traversal, with detection and RCE chaining…
oscerd/cve-2026-53913PoC reproducer for CVE-2026-53913 (Apache Camel camel-keycloak): KeycloakSecurityPolicy fails open in the Basic Setup — with no required…
nicpwns/cve-2026-62183Apache Syncope: User self-service privilege escalation
jra89/cve-2019-19511Chevereto - 1.0.0 Free - 1.1.4 Free, 3.13.4 Core, Remote Code Execution
trustedsec/ts_llmlibPython library for local LLM-powered security analysis with Ghidra binary analysis, C/C++ vulnerability scanning, and MCP tool integration for…
cerberusmrxi/cve-2026-48909-joomla-sp-exploitCVE-2026-48909 - Unauthenticated PHP Object Injection to RCE exploit for Joomla SP LMS extension versions <= 4.1.3. Exploits lmsOrders cookie…
dhmosfunk/cve-2025-58098Docker-based lab demonstrating CVE-2025-58098 argument injection vulnerability with source, vulnerable, and patched code comparisons for security…
vinsontang1/dcvdThe code in "DCVD: Dual-Channel Cross-Modal Fusion for Joint Vulnerability Detection and Localization"
