#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
thedeepopc/cve-2026-23885Proof-of-concept exploit for CVE-2026-23885, an authenticated RCE in AlchemyCMS via eval() injection, with technical analysis and remediation…
pazhanivelmani/webp_android10_r33_cve-2023-1999Proof-of-concept exploit for CVE-2023-1999 targeting the WebP codec library on Android 10 (r33). Demonstrates a heap buffer overflow vulnerability in…
30579096/confluence-cve-2021-26084OGNL Injection in Confluence server version < 7.12.5
wubinworks/magento2-template-filter-patchMagento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you…
satheesh575555/packages_apps_settings_aosp10_r33_cve-2021-0506
pl4tyz/cve-2025-59059-misattributed-rce-in-apache-ranger-static-analysis-correctionCVE-2025-59059: Misattributed RCE in Apache Ranger Static Analysis Correction
harry1080/cve-2020-10673CVE-2020-10673
shoucheng3/asf__tapestry-5_cve-2019-0207_5-4-4Proof-of-concept exploit for CVE-2019-0207 in Apache Tapestry 5.4.4, demonstrating remote code execution via deserialization vulnerability.
shan0ar/cve-2025-32756Proof-of-concept exploit for CVE-2025-32756, demonstrating the vulnerability and providing a basis for security testing and remediation validation.
sabecomoeh/cve-2013-3900Proof-of-concept exploit for CVE-2013-3900, a WinVerifyTrust signature validation vulnerability enabling arbitrary code execution via crafted…
r3dkn33-zz/cve-2013-0156Arbitrary deserialization that can be used to trigger SQL injection and even Code execution
phzietsman/batchoverflowA fix for the batchOverflow bug https://medium.com/@peckshield/alert-new-batchoverflow-bug-in-multiple-erc20-smart-contracts-cve-2018-10299-511067db65…
seoqqq/cve-2018-6574Remote command execution in Golang go get command allows an attacker to gain code execution on a system by installing a malicious library.
fevar54/cve-2024-42461Fix for ECDSA and EDDSA signature verification in Wycheproof project, addressing missing length checks that allowed zero-byte manipulation during…
crackercat/curveballcerttoolPoC for CVE-2020-0601 vulnerability (Code Signing)
nanopathi/external_expat_aosp10_r33_cve-2022-22822tocve-2022-22827Patched version of the Expat XML parser library addressing multiple CVEs (CVE-2022-22822 through CVE-2022-22827) for AOSP 10 r33, providing…
shoucheng3/srikanth-lingala__zip4j_cve-2018-1002202_1-3-2Decompiled source code of zip4j library versions 1.3.2 (vulnerable) and 1.3.3 (fixed) for CVE-2018-1002202 path traversal analysis, part of the…
shoucheng3/apache__sling-org-apache-sling-xss_cve-2016-5394_1-0-8Java library providing XSS escaping and filtering services (XSSAPI, XSSFilter) to sanitize user-submitted content and prevent cross-site scripting…
