AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

最新 POC 列表

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.

Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access.Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans

CVE-2026-28213EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response AI Paid

kimi-k2.5 · 10340 chars · 2026-04-24 07:21

查看详情

CVE-2026-27903minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments AI Paid

kimi-k2.5 · 8198 chars · 2026-04-24 07:21

查看详情

CVE-2026-33418@dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment Injection AI Paid

kimi-k2.5 · 5604 chars · 2026-04-24 07:14

查看详情

CVE-2026-25726Cloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding) AI Paid

kimi-k2.5 · 7787 chars · 2026-04-24 07:12

查看详情

Goal Reached Thanks to every supporter — we hit 100%!

AI PoC Generator & CVE Exploit Database

最新 POC 列表

CVE-2026-28213EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response AI Paid

CVE-2026-27903minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments AI Paid

CVE-2026-33310Intake has a Command Injection via shell() Expansion in Parameter Defaults AI Paid

CVE-2026-29112@dicebear/converter vulnerable to ncontrolled memory allocation via crafted SVG dimensions AI Paid

CVE-2026-3758projectworlds Online Art Gallery Shop adminHome.php sql injection AI Paid

CVE-2026-28215hoppscotch Vulnerable to Unauthenticated Onboarding Config Takeover AI Paid

CVE-2026-27899WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update AI Paid

CVE-2026-33418@dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment Injection AI Paid

CVE-2026-28798Arbitrary internal service access via /v1/sys/proxy when Cloudflare Tunnel is enabled on ZimaOS AI Paid

CVE-2026-3759projectworlds Online Art Gallery Shop adminHome.php sql injection AI Paid

CVE-2026-28216hoppscotch has IDOR in updateUserEnvironment / deleteUserEnvironment AI Paid

CVE-2026-27831rldns Vulnerable to Heap-based Out-of-Bounds Read AI Paid

CVE-2026-33316Vikunja’s Improper Access Control Enables Bypass of Administrator-Imposed Account Disablement AI Paid

CVE-2026-25726Cloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding) AI Paid

CVE-2026-3760itsourcecode University Management System view_result.php sql injection AI Paid

CVE-2026-28275Initiative Vulnerable to Improper Session Invalidation (JWT Remains Valid) AI Paid

CVE-2026-27976Zed Extension Sandbox Escape via Tar Symlink Following AI Paid

CVE-2026-33678Vikunja has IDOR in Task Attachment ReadOne Allows Cross-Project File Access and Deletion AI Paid

CVE-2026-30922pyasn1 Vulnerable to Denial of Service via Unbounded Recursion AI Paid

CVE-2026-30884mdjnelson/moodle-mod_customcert Vulnerable to Authorization Bypass Through User-Controlled Key AI Paid