#1Security papers, research projects, technical references, and reproducible material for defensive or authorized analysis.
Kitploit recommended
shk-mubashshir/cve-2025-51820A critical Remote Code Execution (RCE) vulnerability (CVE-2025-51820) has been discovered in the Shopping Portal v1.0.
wmohamed2033/wmohamed2033.github.ioCVE-2021-44228 Log4Shell — Penetration Test Writeup
religan/cve-2023-20198A cybersecurity case study analysing CVE-2023-20198 in Cisco IOS XE, covering vulnerability exploitation, mitigation strategies, secure software…
khoazero123/cve-2025-32463Proof-of-concept exploit for CVE-2025-32463, a local privilege escalation in sudo versions 1.9.14-1.9.17, with precompiled library and remediation…
secsys-fdu/cve-2025-51864Proof-of-concept for a reflected XSS vulnerability in AIBOX's chat component, demonstrating JWT token theft and account hijacking via crafted…
mrmtwoj/react2shell-cve-2025-55182Educational / research tool related to React / Next.js vulnerability CVE‑2025‑55182 (“React2Shell”).
sangrok-jeon/cve-2024-53677-analysisCVE-2024-53677 취약점 분석 보고서
lay0us/linux-4.19.72_cve-2022-30594Linux kernel 4.19.72 exploit for CVE-2022-30594, providing a targeted vulnerability demonstration and educational resource for kernel exploitation…
mingqizhang7710/cve-2022-0847-poc-dockerimageDocker image packaging a proof-of-concept exploit for CVE-2022-0847 (Dirty Pipe), a Linux kernel privilege escalation vulnerability.
goldenticketlabs/cve-2025-52413repo for CVE-2025-52413
helloandrewpaul/reflected-xss-in-vvveb-cms-v1.0.7.2CVE-2025-9728: Reflected XSS in Login Form (Email & Password Fields) Vvveb CMS v1.0.7.2
dark-ninja10/cve-2024-3121Remote Code Execution in create_conda_env function in parisneo/lollms
zuack55/roundcube-1.6.10-post-auth-rce-cve-2025-49113-Detailed vulnerability report and exploitation guide for CVE-2025-49113, a PHP object deserialization RCE in Roundcube Webmail, including Metasploit…
anchor0221/cve-2025-50460Technical Details and Exploit for CVE-2025-50460
snailsploit/cve-2025-12163CVE-2025-12163: Stored Cross-Site Scripting in Omnipress WordPress Plugin
0xsu3ks/cve-2024-34328Proof-of-concept for open redirection via Host header manipulation in Sielox AnyWare 2.1.2 (CVE-2024-34328), with exploit steps, impact, and…
tom025/ply_exploit_rejectionArguments to reject CVE-2025-56005
