Vulnerability Platform

最新 POC 列表

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.

Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access.Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans

CVE-2026-33054Mesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion AI Paid

kimi-k2.5 · 9849 chars · 2026-04-24 10:56

查看详情

CVE-2026-32940SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183) AI Paid

kimi-k2.5 · 9987 chars · 2026-04-24 10:56

查看详情

CVE-2026-31818Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist AI Paid

kimi-k2.5 · 10828 chars · 2026-04-24 10:56

查看详情

CVE-2026-33057Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py AI Paid

kimi-k2.5 · 3779 chars · 2026-04-24 10:56

查看详情

CVE-2026-33125Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts AI Paid

kimi-k2.5 · 8131 chars · 2026-04-24 10:56

查看详情

Goal Reached Thanks to every supporter — we hit 100%!

最新 POC 列表

CVE-2026-33054Mesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion AI Paid

CVE-2026-32940SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183) AI Paid

CVE-2026-31818Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist AI Paid

CVE-2026-33057Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py AI Paid

CVE-2026-33125Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts AI Paid

CVE-2026-33072FileRise: Default Encryption Key Enables Token Forgery and Config Decryption AI Paid

CVE-2026-32938SiYuan has an Arbitrary File Read in its Desktop Publish Service AI Paid

CVE-2026-4486D-Link DIR-513 Web Service formEasySetPassword stack-based overflow AI Paid

CVE-2026-33128h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fields AI Paid

CVE-2026-35214Budibase: Path traversal in plugin file upload enables arbitrary directory deletion and file write AI Paid

CVE-2026-33131h3 has a middleware bypass with one gadget AI Paid

CVE-2026-32891Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS AI Paid

CVE-2026-4490Tenda A18 Pro openSchedWifi setSchedWifi stack-based overflow AI Paid

CVE-2026-35216Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step AI Paid

CVE-2026-4487UTT HiPER 1200GW websHostFilter strcpy buffer overflow AI Paid

CVE-2026-35218Budibase: Stored XSS via unsanitized entity names rendered with {@html} in Builder Command Palette AI Paid

CVE-2026-32933AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion AI Paid

CVE-2026-31836Mass Assignment Privilege Escalation in Checkmate AI Paid

CVE-2026-4488UTT HiPER 1250GW setSysAdm strcpy buffer overflow AI Paid

CVE-2026-4491Tenda A18 Pro SetIpMacBind fromSetIpMacBind stack-based overflow AI Paid