Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-PoC-Hub — 🛡️ CVE Proof-of-Concept Hub — 4 PUBLISHED CVEs · 5 under review (VulnCheck) · SuiteCRM batch withdrawn | Kitploit
Tools/GitHubGitHub/javokhir-sec/cve-poc-hub
Vulnerability AnalysisExploitationWeb Application ExploitationCTFPenetration TestingLearning & EducationLabs & Practice
GitHubjavokhir-sec/cve-poc-hub

CVE-PoC-Hub

🛡️ CVE Proof-of-Concept Hub — 4 PUBLISHED CVEs · 5 under review (VulnCheck) · SuiteCRM batch withdrawn

View Repository
11727 days agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🔬 CVE-PoC-Hub — Curated Proof-of-Concept Exploits

Working, verified PoC scripts for recent CVEs. Tested in lab environments. For security researchers, penetration testers, and CTF players.


⚠️ Disclaimer

All PoCs are for educational and authorized testing only. Each exploit has been tested in isolated lab environments. Do not use against systems without explicit permission.


📂 Repository Structure

root@kitploit:~
CVE-PoC-Hub/
├── README.md
├── CVE-2026-XXXXX/           # Each CVE gets its own folder
│   ├── README.md              # Description + steps
│   ├── exploit.py             # Working PoC
│   └── screenshot.png         # Proof of exploitation
├── templates/
│   └── poc-template.py        # Standard PoC template
└── poc-runner.py              # Bulk PoC runner

🔥 CVEs (2026)

✅ Published

CVEProductTypeCVSS
CVE-2026-66412Leantime ⭐10k+IDOR (getMilestone)7.5
CVE-2026-66414Leantime ⭐10k+Open Redirect6.1
CVE-2026-66415Leantime ⭐10k+SSRF + LFI8.8
CVE-2026-66416Leantime ⭐10k+CSRF Disabled8.8

⏳ Vendor / GitHub Review

IDTargetTypeCVSSStatus
b5aa1a1aOzonTech file.dUnauth Mgmt API (:9000)8.2✅ Live-verified 2026-08-13 — defending
🗑️ Withdrawn — SuiteCRM batch + VulnCheck batch (8 findings, live-tested 2026-08-13)

SuiteCRM:

IDTypeCVSSWhy withdrawn
SCRMBT-480Unauth SQLi (GeneratePassword)9.8Payload escaped in retrieve_user_id(); INSERT unreachable (MySQL general log)
SCRMBT-481File Upload Case Bypass8.8strtolower() applied since 2020; files stored under GUID name
SCRMBT-482File Upload GD Bypass RCE8.8Content regex runs before GD check; GD-missing returns false since 7.11.x
SCRMBT-483Unauth XSS (WebToLead)8.2voku AntiXSS strips on* / javascript: even entity-obfuscated

VulnCheck:

4 CVEs published via VulnCheck CNA (Khushali Dalal). file.d live-verified and being defended. 8 findings honestly withdrawn after live re-testing.

🚀 Quick Start

root@kitploit:~
git clone https://github.com/javokhir-sec/CVE-PoC-Hub.git
cd CVE-PoC-Hub

# List all available PoCs
python poc-runner.py --list

# Run a specific PoC (in lab environment)
python poc-runner.py --cve CVE-2026-XXXXX --target http://lab-target.local

📋 PoC Template

Use this template for your own PoCs: templates/poc-template.py

root@kitploit:~
#!/usr/bin/env python3
"""
CVE-YYYY-XXXXX: [Vulnerability Type] in [Product]
CVSS: X.X | Severity: Critical/High/Medium/Low
Author: @javokhir-sec
"""

import requests
import sys

TARGET = sys.argv[1] if len(sys.argv) > 1 else "http://localhost"

def exploit(target):
    """Execute the exploit and return True if vulnerable."""
    print(f"[*] Testing {target} for CVE-YYYY-XXXXX")

    # Step 1: Send malicious request
    payload = "<script>alert(1)</script>"
    r = requests.get(f"{target}/search?q={payload}")

    # Step 2: Verify exploitation
    if payload in r.text:
        print(f"[+] VULNERABLE! Payload reflected in response.")
        return True
    else:
        print(f"[-] Not vulnerable.")
        return False

if __name__ == "__main__":
    exploit(TARGET)

🛠️ Bulk PoC Runner

root@kitploit:~
# Run all XSS PoCs against a target
python poc-runner.py --category xss --target http://lab.local

# Run all SQLi PoCs
python poc-runner.py --category sqli --target http://lab.local

# Run specific severity level
python poc-runner.py --severity critical --target http://lab.local

📊 Stats

CategoryCount
SQL Injection4
XSS (Reflected/Stored)4
Broken Access Control3
CSRF1
IDOR1
Auth Bypass2
SSRF + LFI1
File Upload RCE1
Open Redirect1
Missing Authentication1
Total4 Published + 1 Active (file.d, verified)

🤝 Contributing

Have a working PoC for a recent CVE?

  1. Fork this repo
  2. Create folder: CVE-YYYY-XXXXX/
  3. Include: README.md + exploit.py + screenshot
  4. Submit PR

📜 License

MIT © Javokhir Tursunboyev

Download Tool
IDTargetTypeCVSSWhy withdrawn
ad927f12eGov SmartCityStruts2 RCE10.0S2-045/046 not applicable to 2.5.14.1; S2-057 = existing CVE-2018-11776 (CNA rules forbid reassignment)
55c37649Tesla Vehicle CMDJWT No Verify8.8By design: proxy relays token to Tesla fleet API which verifies — forged token → 401
9582b653Gojek DarkroomPath Traversal7.5gorilla/mux cleanPath 301-redirects all ../ before dispatch (live tested)
97d14382Kaspersky KLaraNo Rate Limit6.5Hardening gap, not CVE-worthy; also wrong framework stated in report