AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

最新 POC 列表

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.

Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access.Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans

CVE-2026-27941OpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions Workflows AI Paid

kimi-k2.5 · 12252 chars · 2026-04-24 07:31

查看详情

CVE-2026-28500ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack AI Paid

kimi-k2.5 · 7786 chars · 2026-04-24 07:26

查看详情

CVE-2026-3740itsourcecode University Management System admin_search_student.php sql injection AI Paid

kimi-k2.5 · 7298 chars · 2026-04-24 07:26

查看详情

CVE-2026-3261itsourcecode School Management System Setting index.php sql injection AI Paid

kimi-k2.5 · 6757 chars · 2026-04-24 07:26

查看详情

CVE-2026-27938WPGraphQL Repo Vulnerable to Command Injection via Unsanitized GitHub Actions Expression in Release Workflow AI Paid

kimi-k2.5 · 5685 chars · 2026-04-24 07:26

查看详情

Goal Reached Thanks to every supporter — we hit 100%!

AI PoC Generator & CVE Exploit Database

最新 POC 列表

CVE-2026-23750Golioth Pouch < [INSERT FIXED VERSION] BLE GATT Heap-based Buffer Overflow AI Paid

CVE-2026-27959Koa has Host Header Injection via `ctx.hostname` AI Paid

CVE-2026-28674xiaoheiFS Vulnerable to RCE via Arbitrary Payment Plugin Upload (Automatic Execution) AI Paid

CVE-2026-3736code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection AI Paid

CVE-2026-3735code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection AI Paid

CVE-2026-22207OpenViking Missing root_api_key Allows Anonymous ROOT Access AI Paid

CVE-2026-27941OpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions Workflows AI Paid

CVE-2026-28500ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack AI Paid

CVE-2026-3740itsourcecode University Management System admin_search_student.php sql injection AI Paid

CVE-2026-3261itsourcecode School Management System Setting index.php sql injection AI Paid

CVE-2026-27938WPGraphQL Repo Vulnerable to Command Injection via Unsanitized GitHub Actions Expression in Release Workflow AI Paid

CVE-2026-3747itsourcecode University Management System add_result.php sql injection AI Paid

CVE-2026-33475Langflow GitHub Actions Shell Injection AI Paid

CVE-2026-3746SourceCodester Simple Responsive Tourism Website Login Login.php sql injection AI Paid

CVE-2026-28211Arbitrary code execution in log reader via untrusted log file AI Paid

CVE-2026-27449Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints AI Paid

CVE-2026-27904minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions AI Paid

CVE-2026-33484Langflow has Unauthenticated IDOR on Image Downloads AI Paid

CVE-2026-33309Langflow has an Arbitrary File Write (RCE) via v2 API AI Paid

CVE-2026-3757projectworlds Online Art Gallery Shop pass sql injection AI Paid