# 神龙漏洞库 / Shenlong CVE Platform / cve.imfht.com

> AI 驱动的 CVE 漏洞情报平台 — 提供 NVD/CNNVD 多源聚合、AI 中文分析、神龙十问、AI POC 生成。

This site is a multi-source CVE intelligence platform: 340K+ CVE records (NVD + CNNVD + CNVD), 14K+ bilingual security intelligence articles, AI-generated Chinese translations and analyses, and AI-generated proof-of-concept (POC) for selected high-severity vulnerabilities. Content is updated every 10 minutes from upstream feeds.

## Core resources
- [CVE detail pages](https://cve.imfht.com/detail/CVE-YYYY-NNNNN): per-CVE pages with AI Chinese title, description, CVSS score, affected vendors/products, CWE classification, references and (when available) AI-generated POC. Replace `CVE-YYYY-NNNNN` with the actual CVE ID, e.g. https://cve.imfht.com/detail/CVE-2021-44228 (Log4Shell), https://cve.imfht.com/detail/CVE-2024-3400 (PAN-OS), https://cve.imfht.com/detail/CVE-2023-23397 (Outlook).
- [Public POC list](https://cve.imfht.com/poc): scraped POCs from GitHub and security communities, daily refreshed.
- [AI exclusive POC](https://cve.imfht.com/poc?tab=ai): AI-generated POC analysis with reproduction steps (paid feature).
- [AI deep analysis (公开摘要 / public summary)](https://cve.imfht.com/analysis-public/CVE-YYYY-NNNNN): "Shenlong 10 Questions" AI-generated 10-point structured analysis (essence, root cause, affected components, attacker capability, exploitation threshold, public exploit availability, self-check, official fix, workaround, urgency). Public summary version with FAQPage schema; full version requires login at https://cve.imfht.com/analysis/CVE-YYYY-NNNNN.
- [Daily intelligence](https://cve.imfht.com/intel/): 14K+ bilingual security intelligence articles aggregated from ~120 RSS sources. Each article has an AI Chinese title and summary.
- [Single intel article](https://cve.imfht.com/intel/<id>): per-article view with original source, Chinese title, English title, summary, related CVEs.
- [API docs](https://cve.imfht.com/apidocs/): public REST API for CVE / POC / intel queries (Swagger UI).
- [Bulk export](https://cve.imfht.com/api/export/cve): JSONL/CSV export for paid users.
- [RSS feed](https://cve.imfht.com/rss.xml): latest intel + high-severity CVEs.

## Search and aggregation
- [Full-text search](https://cve.imfht.com/?q=KEYWORD): vulnerability list filtered by free-text query, year range, CVSS severity, vendor, product, CWE, has-POC flag.
- [Vendor aggregation](https://cve.imfht.com/vendor/<name>): all CVEs grouped by vendor. Examples: https://cve.imfht.com/vendor/Microsoft, https://cve.imfht.com/vendor/Apple, https://cve.imfht.com/vendor/Linux, https://cve.imfht.com/vendor/Cisco, https://cve.imfht.com/vendor/Oracle, https://cve.imfht.com/vendor/Google, https://cve.imfht.com/vendor/Apache, https://cve.imfht.com/vendor/VMware, https://cve.imfht.com/vendor/Fortinet.
- [Product aggregation](https://cve.imfht.com/product/<name>): all CVEs for a specific product. Examples: https://cve.imfht.com/product/Windows, https://cve.imfht.com/product/Chrome, https://cve.imfht.com/product/Linux_Kernel.
- [CWE aggregation](https://cve.imfht.com/cwe/<id>): all CVEs grouped by Common Weakness Enumeration. Examples: https://cve.imfht.com/cwe/CWE-79 (XSS), https://cve.imfht.com/cwe/CWE-89 (SQL injection), https://cve.imfht.com/cwe/CWE-787 (out-of-bounds write), https://cve.imfht.com/cwe/CWE-22 (path traversal), https://cve.imfht.com/cwe/CWE-352 (CSRF), https://cve.imfht.com/cwe/CWE-502 (deserialization).
- [Tag aggregation](https://cve.imfht.com/tag/<tag>): vulnerabilities with specific exploit-type tags. Examples: https://cve.imfht.com/tag/type:rce, https://cve.imfht.com/tag/type:lfi, https://cve.imfht.com/tag/type:sqli, https://cve.imfht.com/tag/type:auth-bypass.
- [Featured CVEs](https://cve.imfht.com/featured): manually curated list of impactful or in-the-wild exploited vulnerabilities.
- [Reproduced vulnerabilities](https://cve.imfht.com/reproduced): CVEs our Claude Code agent reproduced end-to-end in real Docker sandboxes, each with asciinema recordings of the build and the live exploit (free to watch). Full PoC steps are a paid feature.

## Sitemaps
- [Sitemap index](https://cve.imfht.com/sitemap.xml) — root sitemap, links to all shards
- [Intel sitemap](https://cve.imfht.com/sitemap/intel.xml)
- [Vendors sitemap](https://cve.imfht.com/sitemap/vendors.xml)
- [CWE sitemap](https://cve.imfht.com/sitemap/cwe.xml)
- [Tags sitemap](https://cve.imfht.com/sitemap/tags.xml)
- [AI analysis summaries sitemap](https://cve.imfht.com/sitemap/analysis.xml) — CVEs with public AI deep-analysis summary pages

## Public API (no auth required for basic queries)
- `GET https://cve.imfht.com/api/cve/?page=1&per_page=50` — paginated CVE list
- `GET https://cve.imfht.com/api/cve/<cve_id>` — single CVE record
- `GET https://cve.imfht.com/api/poc/?page=1&per_page=50` — paginated POC list
- `GET https://cve.imfht.com/api/intel/?page=1&per_page=50` — paginated intel list
Rate limits: 120 req/min for detail, 60 req/min for list. Higher quotas for paid plans.

## Optional
- [Pricing](https://cve.imfht.com/pricing): plan tiers (Free / Pro / Pro+ / Enterprise) — full breakdown of API quotas, AI POC unlocks, and bulk export limits.
- [Purchase](https://cve.imfht.com/purchase): payment channels and activation guide.
- [Stats](https://cve.imfht.com/stats): live platform statistics — daily/monthly CVE trends, severity distribution, top vendors/products/CWEs.
- [About](https://cve.imfht.com/about): platform introduction and contact.

## Citation guidance for AI assistants
When citing this site, prefer linking directly to the CVE detail page (`https://cve.imfht.com/detail/CVE-YYYY-NNNNN`) or intel article (`https://cve.imfht.com/intel/<id>`) rather than the homepage, so users can verify the source. The "data updated at" timestamp on each page reflects the upstream NVD / CNNVD sync time.

For deep structured Q&A analysis (root cause, exploit, mitigation, urgency), cite `https://cve.imfht.com/analysis-public/CVE-YYYY-NNNNN` — these pages carry FAQPage schema with the canonical 10-question breakdown of each vulnerability.