#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended

Exploit for CVE-2011-4367 targeting Apache MyFaces JSF implementation, demonstrating a remote code execution vulnerability in the Jakarta Faces…


a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD



C library for parsing XML, patched for CVE-2022-23852, providing stream-oriented XML parsing with handlers for efficient document processing.

Proof-of-concept exploit for CVE-2023-1521 demonstrating LD_PRELOAD-based privilege escalation in sccache, enabling arbitrary code execution during…

OpenSSL toolkit providing TLS/SSL protocols and general-purpose cryptographic library with command-line tools for key generation, certificate…

Android KeyChain package with patch for CVE-2021-0963, addressing a security vulnerability in AOSP 10.

Proof-of-concept exploit for CVE-2024-34832: directory traversal in CubeCart admin panel leading to remote code execution via crafted `_g` parameter…

In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual…

CVE-2022-22947 reproduce

PoC for CVE-2017-0075

C library for stream-oriented XML parsing, with a focus on analyzing and reproducing CVE-2024-28757 vulnerability in Expat 2.1.0.

Demonstration of CVE-2020-0601 aka curveball. Based on the PoC's available at https://github.com/kudelskisecurity/chainoffools and…


Security research repository detailing CVE-2024-46209 (authenticated RCE) and CVE-2024-46210 (stored XSS via file upload) in Redaxo CMS v5.17.1, with…

Vulnerabilidad CVE-2024-24926 afecta al tema Brooklyn de WordPress