Are the PoCs on this site free to access?

Public PoCs aggregated from GitHub and the security community are freely accessible. AI-generated PoC analyses produced by Shenlong Agent are a Pro / Pro+ premium feature, requiring a paid subscription.

Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

Q: What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is a piece of code or technique that demonstrates how a specific vulnerability (CVE) can be exploited. Security researchers and penetration testers use PoCs to verify whether a vulnerability actually exists in a target system and to understand the potential impact.

Q: How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions, references, and patch diffs using a large language model pipeline. It generates a structured technical walk-through including vulnerability root cause, exploitation steps, and mitigation recommendations — covering high-severity CVEs within hours of disclosure.

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.

POC ID	Related Vulnerability	Added At
132780643	WordPress 6.7.1 get_page_template 本地文件包含 (CVE-2026-87902)	2026-09-23 20:39:32
132780343	Online Scheduling 28.1 越权访问与注入漏洞 (CVE-2026-89063)	2026-09-23 20:39:32
132778574	MCP Streamable HTTP Server - Unauthenticated Initialize Detection template	2026-09-23 20:39:30
132777676	MongoDB Server 安全漏洞 (CVE-2025-14847)	2026-09-23 00:06:24
132773133	OpenID Connect - Unsigned (alg none) ID Token Supported Detection template	2026-09-23 00:06:23
132773132	Qdrant - Telemetry Exposure Detection template	2026-09-23 00:06:23
132772696	PowerDNS Authoritative Server Monitor - Unauthenticated Exposure Detection template	2026-09-23 00:06:23
132769690	Newfold WP Plugin Web 授权问题漏洞 (CVE-2026-80099)	2026-09-23 00:06:20
132769409	cockpit-project cockpit 路径遍历漏洞 (CVE-2026-58467)	2026-09-23 00:06:20
132769408	WordPress AI Copilot – Content Generator 授权问题漏洞 (CVE-2026-6639)	2026-09-23 00:06:20
132769407	WordPress plugin Hippoo Mobile App for WooCommerce 安全漏洞 (CVE-2026-49060)	2026-09-23 00:06:20
132768054	Cabot - Detect Detection template	2026-09-23 00:06:18
132768053	Docspell - Detect Detection template	2026-09-23 00:06:18
132768052	CloudBeaver Community - Detect Detection template	2026-09-23 00:06:18
132768051	Flagsmith - Detect Detection template	2026-09-23 00:06:18
132768050	Medusa Storefront - Detect Detection template	2026-09-23 00:06:18
132768049	Chibisafe - Detect Detection template	2026-09-23 00:06:18
132768048	NetBird - Detect Detection template	2026-09-23 00:06:18
132768047	OpenMRS - Detect Detection template	2026-09-23 00:06:18
132768046	EverShop - Detect Detection template	2026-09-23 00:06:18

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.