Vulnerability Platform

最新 POC 列表

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.

Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access.Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans

CVE-2026-33186gRPC-Go has an authorization bypass via missing leading slash in :path AI Paid

kimi-k2.5 · 13022 chars · 2026-04-24 10:31

查看详情

CVE-2026-33166Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers) AI Paid

kimi-k2.5 · 8610 chars · 2026-04-24 10:31

查看详情

CVE-2026-32887Effect Bug: `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPC AI Paid

kimi-k2.5 · 8049 chars · 2026-04-24 10:31

查看详情

CVE-2026-33156DLL Sideloading in ScreenToGif AI Paid

kimi-k2.5 · 8378 chars · 2026-04-24 10:31

查看详情

CVE-2026-32231ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data AI Paid

kimi-k2.5 · 9350 chars · 2026-04-24 10:26

查看详情

CVE-2026-27803Vaultwarden: Collection Management Operations Allowed Without `manage` Verification for Manager Role AI Paid

kimi-k2.5 · 9514 chars · 2026-04-24 10:26

查看详情

CVE-2026-1528undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client AI Paid

kimi-k2.5 · 7982 chars · 2026-04-24 10:21

查看详情

CVE-2026-34774Electron: Use-after-free in offscreen child window paint callback AI Paid

kimi-k2.5 · 8076 chars · 2026-04-24 10:21

查看详情

CVE-2026-1526undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression AI Paid

kimi-k2.5 · 7947 chars · 2026-04-24 10:21

查看详情

Goal Reached Thanks to every supporter — we hit 100%!

最新 POC 列表

CVE-2026-33186gRPC-Go has an authorization bypass via missing leading slash in :path AI Paid

CVE-2026-33166Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers) AI Paid

CVE-2026-28405MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions AI Paid

CVE-2026-27944Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure AI Paid

CVE-2026-29077Frappe: Broken Access Control in DocShare AI Paid

CVE-2026-32887Effect Bug: `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPC AI Paid

CVE-2026-33156DLL Sideloading in ScreenToGif AI Paid

CVE-2026-32231ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data AI Paid

CVE-2026-27803Vaultwarden: Collection Management Operations Allowed Without `manage` Verification for Manager Role AI Paid

CVE-2026-33203SiYuan has an Unauthenticated WebSocket DoS via Auth Keepalive Bypass AI Paid

CVE-2026-4508PbootCMS Member Login MemberController.php checkUsername sql injection AI Paid

CVE-2026-33172Statamic has Stored XSS via SVG Sanitization Bypass AI Paid

CVE-2026-32138NEXULEAN API Key Leak AI Paid

CVE-2026-32246Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint AI Paid

CVE-2026-33204SimpleJWT has an Unauthenticated Denial of Service via JWE header tampering AI Paid

CVE-2026-33476SiYuan has an Unauthenticated Arbitrary File Read via Path Traversal AI Paid

CVE-2026-32247Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters AI Paid

CVE-2026-1528undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client AI Paid

CVE-2026-34774Electron: Use-after-free in offscreen child window paint callback AI Paid

CVE-2026-1526undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression AI Paid