#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
izxci/cve-2026-49085PHP Object Injection exploit for WP Insightly (CVE-2026-49085). Provides proof-of-concept code to demonstrate and test the vulnerability in affected…
dddo0/cve-2018-1000533Proof-of-concept exploit for CVE-2018-1000533, a remote code execution vulnerability in GitList 0.6.0 via unsanitized input in the search function,…
grishinpv/cve-2026-31431-old-pythonProvides a ctypes wrapper for the splice syscall to enable exploitation of CVE-2026-31431 on Python versions below 3.10, tested on Python 3.7.3.
izxci/cve-2026-9691CVE-2026-9691: Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 Unauthenticated PHP Object Injection PoC,…
sudo-wp/sudowp-hooks-visualizerA security-hardened fork of "Simply Show Hooks". Replaces the compromised original (CVE-2024-6297) and patches unlisted Cross-Site Scripting (XSS)…
moritakaaz/cve-2026-12277Frontend File Manager Plugin (WordPress) <= 23.6 - Unauthenticated Arbitrary File Deletion to RCE
xyyzxc/cve-2025-56819An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.
exdev994/cve-2026-7275-moodlePoC & dokumentasi untuk CVE-2026-7275: Moodle Google Drive Repository (repository_googledocs) — Path Traversal / Arbitrary File Write yang dapat…
funixone/exploit-cve-2026-8832-Automated RCE exploit for WordPress WPCode Lite v2.3.5. Executes 6-step exploitation chain via XML-RPC bypass with 8 built-in PHP payloads, including…
oscerd/cve-2026-40859Reproducer for CVE-2026-40859 — Apache Camel camel-netty-http / camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE)
oscerd/cve-2026-40453Reproducer for CVE-2026-40453: Apache Camel case-variant Camel header injection (incomplete fix of CVE-2025-27636)
oscerd/cve-2026-40860Reproducer for CVE-2026-40860 — Apache Camel camel-jms/sjms/amqp JMS ObjectMessage unsafe deserialization (RCE)
daehyuh/cve-2026-41729CVE-2026-41729 PoC
adamshaikhma/cve-2026-3300Exploit for CVE-2026-3300, an unauthenticated stored XSS leading to RCE in Everest Forms Pro WordPress plugin, with a Python script to generate a…
0xmrma/cve-2026-42089A local package installation helper trusted caller-supplied package names too much. In yeoman-environment, missing generators could be installed…
izxci/cve-2026-49105PHP object injection exploit for CVE-2026-49105 targeting WP Zendesk plugin. Provides proof-of-concept code for security testing and vulnerability…
nanopathi/external_libavc_aosp10_r33_cve-2021-0325C-based vulnerability analysis and exploitation toolkit targeting AOSP libavc heap overflow (CVE-2021-0325) with static code analysis capabilities.
jacklosingheart/cve-2024-51132-pocProof-of-concept exploit for CVE-2024-51132, an XML External Entity (XXE) injection vulnerability in HAPI FHIR core libraries, enabling SSRF and…
