#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended

CImg Library v.2.3.3 - command injection
PoC of CVE-2025-24587

CVE-2018-8097 PoC

CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept

CVE-2022-37210 POC

GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection

CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

PoC exploit for CVE-2021-36981: authenticated remote code execution via unsafe Java deserialization in Verinice.Pro using a C3P0 gadget chain.

CVE-2023-46818 | PoC | ISPConfig 3.2.11p1

Proof‑of‑concept description for CVE‑2025‑47916, a Remote Code Execution vulnerability affecting Invision Community 5.0.0–5.0.6 via unsafe template…

Proof-of-concept exploit for CVE-2020-35717 demonstrating XSS leading to remote code execution in zonote via crafted note import.

Partners <= 0.2.0 - Unauthenticated PHP Object Injection

Technical analysis of CVE-2025-66628, an integer overflow in ImageMagick's TIM parser leading to out-of-bounds reads, with root cause, exploitation…

Proof of concept for CVE-2022-34556

KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle

Laravel RCE CVE-2021-3129

C-based exploit for CVE-2023-6546, providing proof-of-concept code to demonstrate and test the vulnerability in affected systems.

Exploit tool for CVE-2026-22785, a critical code injection in orval < 7.18.0. Provides shell command execution and file scanning to demonstrate the…