AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

最新 POC 列表

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.

Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access.Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans

CVE-2026-34565CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS AI Paid

Qwen3.6-35B-A3B · 6202 chars · 2026-05-07 18:47

查看详情

CVE-2026-34564CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS AI Paid

Qwen3.6-35B-A3B · 7522 chars · 2026-05-07 18:46

查看详情

CVE-2026-34560CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS AI Paid

Qwen3.6-35B-A3B · 12162 chars · 2026-05-07 18:40

查看详情

CVE-2026-34563CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS AI Paid

Qwen3.6-35B-A3B · 8607 chars · 2026-05-07 18:40

查看详情

CVE-2026-5320vanna-ai vanna Chat API Endpoint v2 missing authentication AI Paid

Qwen3.6-35B-A3B · 7263 chars · 2026-05-07 18:33

查看详情

CVE-2026-30332Etcher 安全漏洞 AI Paid

Qwen3.6-35B-A3B · 9745 chars · 2026-05-07 18:32

查看详情

CVE-2026-34572CI4MS: Account Deactivation Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) AI Paid

Qwen3.6-35B-A3B · 10393 chars · 2026-05-07 18:32

查看详情

CVE-2026-34571CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise AI Paid

Qwen3.6-35B-A3B · 9689 chars · 2026-05-07 18:32

查看详情

CVE-2026-34570CI4MS: Account Deletion Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) AI Paid

Qwen3.6-35B-A3B · 8536 chars · 2026-05-07 18:31

查看详情

Goal Reached Thanks to every supporter — we hit 100%!

AI PoC Generator & CVE Exploit Database

最新 POC 列表

CVE-2026-34236Auth0 PHP SDK Insufficient Entropy in Cookie Encryption AI Paid

CVE-2026-34445ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. AI Paid

CVE-2026-34376PdfDing: Password-protected share bypass via direct serve endpoint AI Paid

CVE-2026-34751Payload has Unvalidated Input in Password Recovery Endpoints AI Paid

CVE-2026-34529File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file AI Paid

CVE-2026-34456Reviactyl: OAuth account takeover via auto-linking AI Paid

CVE-2026-34559CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS AI Paid

CVE-2026-34528File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution AI Paid

CVE-2026-34565CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS AI Paid

CVE-2026-34564CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS AI Paid

CVE-2026-34560CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS AI Paid

CVE-2026-34563CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS AI Paid

CVE-2026-5320vanna-ai vanna Chat API Endpoint v2 missing authentication AI Paid

CVE-2026-30332Etcher 安全漏洞 AI Paid

CVE-2026-34572CI4MS: Account Deactivation Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) AI Paid

CVE-2026-34571CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise AI Paid

CVE-2026-34570CI4MS: Account Deletion Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) AI Paid

CVE-2026-5322AlejandroArciniegas mcp-data-vis MCP server.js request sql injection AI Paid

CVE-2026-0686Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery AI Paid

CVE-2026-5346huimeicloud hm_editor image-to-base64 Endpoint mcp-server.js client.get server-side request forgery AI Paid