#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
satheesh575555/external_expat_aosp10_r33_cve-2022-23990C library for parsing XML, specifically patched for CVE-2022-23990, providing a reference implementation for vulnerability analysis and secure coding…
kingbangq/cve-2020-13933project此项目为复现CVE-2020-13933 shiro漏洞所搭建的简易springboot+shiro项目
trinadh465/platform_frameworks_base_cve-2023-21281Android platform framework patch for CVE-2023-21281, addressing a security vulnerability in the Android framework.
forthisvideo/cve-2022-22274_pocProof-of-concept exploit for CVE-2022-22274, demonstrating the vulnerability and providing a working exploit script for security testing and…
rootd4ddy/cve-2023-31584Public disclosure for CVE-2023-31584.
killtr0/poc-cve-2018-6574Proof-of-concept exploit for CVE-2018-6574 targeting a Go web server vulnerability. Demonstrates remote code execution via crafted HTTP requests.
c3r34lk1ll3r/cve-2018-7211-pocProof-of-concept exploit for CVE-2018-7211 targeting iDashboards 9.6b. Python script for encrypting/decrypting strings to demonstrate the…
umvfx1bvaw50/cve-2017-13286CVE-2017-13286 Poc(can not use)
uthrasri/frame_cve-2023-40133_136_137Exploit for CVE-2023-40133, a vulnerability in Android's Framework component, enabling code execution analysis and security testing.
themcsam/cve-2024-42471-pocunzip-stream file write/overwrite vulnerability
thelastbyte/cve-2017-1000117Proof-of-concept exploit for CVE-2017-1000117, a remote code execution vulnerability in git clients prior to v2.14.1, demonstrating recursive clone…
trinadh465/platform_frameworks_base_cve-2023-21288Android platform framework repository containing a patch or analysis for CVE-2023-21288, a vulnerability in the Android framework.
trinadh465/frameworks_base_aosp10_r33_cve-2023-21284Android framework patch for CVE-2023-21284, addressing a security vulnerability in AOSP 10.
ill-deed/langflow-cve-2025-3248-multi-targetLangflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can…
shoucheng3/asf__cxf_cve-2019-17573_3-2-11Web services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, WS-Trust, and JAX-WS/JAX-RS APIs.
fevar54/cve-2024-42461Fix for ECDSA and EDDSA signature verification in Wycheproof project, addressing missing length checks that allowed zero-byte manipulation during…
davidholiday/cve-2007-4559Educational demonstration of CVE-2007-4559 Python tarfile symlink attack with a script showing why os.path.realpath() fails to prevent extraction…
satheesh575555/external_aac_aosp10_r33_cve-2022-20130Android AAC codec vulnerability analysis and patch for CVE-2022-20130, focusing on memory corruption in external AAC library.
