CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

15687 matches found

Kitploit•added 2026/09/13 11:53 a.m.•10 views

splinter

splinter splinter is a jvm analysis toolkit, allowing the user to view classes, methods, fields, constant pools and bytecode on runtime. this was made and tested on openjdk build 22.0.2+9-70 what is splinter? usually, when you think of an analysis toolkit for the jvm, you would think it uses jni ...

5.9AI score

SaveExploits0

Kitploit•added 2026/09/13 11:02 a.m.•11 views

CVE-2022-34169

Description Checks if CVE-2022-34169 is fixed on your machine. As far as I know, an exploit was found by a Google employee and not published. Since the fix is known, a small test routine was written with this to check whether the fix is available at runtime. Build yourself optional Optional: This...

7.5CVSS7.3AI score0.81039EPSS

SaveExploits2References1

Kitploit•added 2026/09/13 8:23 a.m.•160 views

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

6.2AI score

SaveExploits0References4

Kitploit•added 2026/09/13 6:40 a.m.•50 views

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

6AI score

SaveExploits0References2

Kitploit•added 2026/09/13 4:20 a.m.•354 views

kaiju

CERT Kaiju Binary Analysis Framework for GHIDRA CERT Kaiju is a collection of binary analysis tools for Ghidra. This is a Ghidra/Java implementation of some features of the CERT Pharos Binary Analysis Framework, particularly the function hashing and malware analysis tools, but is expected to grow...

5.6AI score

SaveExploits0References1

Kitploit•added 2026/09/12 7:23 p.m.•56 views

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

6AI score

SaveExploits0References42

Kitploit•added 2026/09/12 8:41 a.m.•6 views

CVE-2025-24813

Probando cualquier versión de Tomcat para ver si esa versión es vulnerable a CVE-2025-24813 Este POC permite probar cualquier versión de Tomcat para verificar si esa versión es vulnerable a CVE-2025-24813 bajo las condiciones vulnerables, en entornos Unix probado en una máquina Ubuntu. Nota:...

10CVSS8.2AI score0.99927EPSS

SaveExploits50

Kitploit•added 2026/09/12 5:47 a.m.•12 views

hot-jar-swapping-urlclassloader

URLClassLoader hot jar swapping The following example code shows the ability to hot jar swap an already loaded JAR-file and get code execution by abusing the fact that inner classes still access the JAR file when invoked, as long as the inode does not change. Tested on MacOS with OpenJDK And also...

6AI score

SaveExploits0