AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

最新 POC 列表

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.

Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access.Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans

Goal Reached Thanks to every supporter — we hit 100%!

AI PoC Generator & CVE Exploit Database

最新 POC 列表

CVE-2026-28286ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API AI Paid

CVE-2026-5368projectworlds Car Rental Project Parameter login.php sql injection AI Paid

CVE-2026-4612itsourcecode Free Hotel Reservation System Parameter index.php sql injection AI Paid

CVE-2026-3678Tenda FH451 AdvSetWan sub_3C434 stack-based overflow AI Paid

CVE-2026-3677Tenda FH451 setcfm fromSetCfm stack-based overflow AI Paid

CVE-2026-30861WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation AI Paid

CVE-2026-33242Salvo has a Path Traversal in salvo-proxy::encode_url_path allows API Gateway Bypass AI Paid

CVE-2026-4258sjcl 安全漏洞 AI Paid

CVE-2026-0708Libucl: libucl: denial of service via embedded null byte in ucl input AI Paid

CVE-2026-3679Tenda FH451 QuickIndex formQuickIndex stack-based overflow AI Paid

CVE-2026-28403Textream Cross-Site WebSocket Hijacking (CSWSH) vulnerability AI Paid

CVE-2026-33252MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion AI Paid

CVE-2026-24901Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts AI Paid

CVE-2026-4318UTT HiPER 810G formApLbConfig strcpy buffer overflow AI Paid

CVE-2026-3693Shy2593666979 AgentChat User Endpoint user.py update_user_info resource injection AI Paid

CVE-2026-3413itsourcecode University Management System admin_single_student.php sql injection AI Paid

CVE-2026-33282Ella Core panics on malformed NGAP Location Report AI Paid

CVE-2026-22661prompts.chat Path Traversal via Skill File Handling AI Paid

CVE-2026-3698UTT HiPER 810G NTP strcpy buffer overflow AI Paid

CVE-2026-3696Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection AI Paid