Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-73679 ImpressCMS Authenticated RCE via PHP Custom Tag eval() AI Paid
Qwen3.6-35B-A3B · 10033 chars · 2026-09-20 09:37
CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename AI Paid
Qwen3.6-35B-A3B · 7377 chars · 2026-09-20 09:37
CVE-2026-45699 Netatalk has Integer Underflow → Stack Buffer Overflow in copydir() AI Paid
Qwen3.6-35B-A3B · 15566 chars · 2026-09-20 09:37
CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay AI Verified env Paid
Qwen3.6-35B-A3B · 15075 chars · 2026-09-20 09:37
CVE-2026-19900 LB-LINK X-PRO shadow hard-coded credentials AI Verified env Paid
Qwen3.6-35B-A3B · 8893 chars · 2026-09-20 09:37
CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb AI Verified env Paid
Qwen3.6-35B-A3B · 11595 chars · 2026-09-20 09:36
CVE-2026-19905 Jinher OA attendance_out_approve.aspx sql injection AI Paid
Qwen3.6-35B-A3B · 7447 chars · 2026-09-20 09:36
CVE-2026-19901 LB-LINK X-PRO easycwmp hard-coded credentials AI Paid
Qwen3.6-35B-A3B · 15848 chars · 2026-09-20 09:36
CVE-2026-73057 stoatchat before 0.15.0 Uncapped SVG Rendering Denial of Service AI Paid
Qwen3.6-35B-A3B · 6805 chars · 2026-09-20 09:36
CVE-2024-58375 OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation AI Paid
Qwen3.6-35B-A3B · 7431 chars · 2026-09-20 09:36
CVE-2026-19919 code-projects Online Shopping System Login login.php sql injection AI Paid
Qwen3.6-35B-A3B · 6748 chars · 2026-09-20 09:36
CVE-2026-73062 Scriban 3.0.0 through 7.2.0 Denial of Service via Array Multiplication AI Verified env Paid
Qwen3.6-35B-A3B · 7374 chars · 2026-09-20 09:36
CVE-2026-74783 Scriban 6.6.0 through 7.2.0 Parser Recursion Denial of Service AI Paid
Qwen3.6-35B-A3B · 16734 chars · 2026-09-20 09:36
CVE-2026-73060 Scriban 3.0.0 through 7.2.5 Denial of Service via ScriptRange.Multiply AI Verified env Paid
Qwen3.6-35B-A3B · 8100 chars · 2026-09-20 09:36
CVE-2026-74789 Scriban before 7.0.0 LoopLimit Bypass via Built-in Operations AI Paid
Qwen3.6-35B-A3B · 7750 chars · 2026-09-20 09:35
CVE-2026-74791 Scriban before 7.0.0 Authorization Bypass via Stale Include Cache AI Paid
Qwen3.6-35B-A3B · 8109 chars · 2026-09-20 09:35

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.