#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended

CVE-2024-3553: Tutor LMS <= 2.6.2 - Missing Authorization vulnerability allowing authenticated attackers to enable user registration
This POC demonstrates CVE-2025-55182 using actual `[email protected]` vulnerable code.

Detailed write-up and proof-of-concept for CVE-2026-35570, a sandbox bypass in openclaude v0.1.7 allowing path traversal to read and write arbitrary…

SpringCloudGatewayRCE / Code By:Jun_sheng

Proof-of-concept for remote code execution in CheckMK Raw Edition 1.5.0–1.5.0p25 via misconfigured Dokuwiki embedded application allowing PHP code…

Proof-of-concept exploit for CVE-2018-14667, demonstrating Java deserialization combined with EL injection to achieve remote code execution in…

Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read

CVE-2021-46364: YAML Deserialization in Magnolia CMS

GiveWP – Donation Plugin and Fundraising Platform <= 3.19.3 - Unauthenticated PHP Object Injection

CVE-2023-22518 exploit analysis for Atlassian Confluence Server covering setup, JAR diffing, root cause, and unauthorized restore to regain admin…

Proof of concept for CVE-2022-44318

Proof-of-concept exploit for CVE-2024-56431 in libtheora, demonstrating a memory corruption vulnerability via fuzzing with AddressSanitizer and…

Proof-of-concept exploit for CVE-2026-26030, demonstrating remote code execution via unsafe filter expressions in Microsoft Semantic Kernel's…

PoC of CVE-2025-22652

I couldn’t find a PoC for CVE-2023-30253, so I developed an effective one

CVE-2019-17080

PoC exploit for CVE-2024-52302: unrestricted file upload in common-user-management Spring Boot app leading to remote code execution via…

Java-based proof-of-concept exploit for CVE-2018-12533 (RF-14310) targeting RichFaces deserialization vulnerability, with analysis reference and…