Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-74791 Scriban before 7.0.0 Authorization Bypass via Stale Include Cache AI Paid
Qwen3.6-35B-A3B · 8109 chars · 2026-09-20 09:35
CVE-2026-74784 Scriban before 7.2.0 Denial of Service via array.insert_at AI Paid
Qwen3.6-35B-A3B · 6829 chars · 2026-09-20 09:35
CVE-2026-74789 Scriban before 7.0.0 LoopLimit Bypass via Built-in Operations AI Paid
Qwen3.6-35B-A3B · 7750 chars · 2026-09-20 09:35
CVE-2026-74788 Scriban before 7.0.0 Denial of Service via string.pad_left/pad_right AI Paid
Qwen3.6-35B-A3B · 7465 chars · 2026-09-20 09:35
CVE-2026-19982 GL.iNet BE9300/MT6000 Firewall-management RPC os command injection AI Verified env Paid
Qwen3.6-35B-A3B · 7597 chars · 2026-09-20 09:35
CVE-2026-19980 GL.iNet XE3000 Language Update ui.update_langs code injection AI Verified env Paid
Qwen3.6-35B-A3B · 8022 chars · 2026-09-20 09:35
CVE-2026-19981 GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection AI Verified env Paid
Qwen3.6-35B-A3B · 7769 chars · 2026-09-20 09:35
CVE-2026-74869 stoatchat before 0.15.0 Missing Authorization via Subscribe AI Paid
Qwen3.6-35B-A3B · 8382 chars · 2026-09-20 09:34
CVE-2026-19983 GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection AI Verified env Paid
Qwen3.6-35B-A3B · 10084 chars · 2026-09-20 09:34
CVE-2026-74874 openssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selection AI Paid
Qwen3.6-35B-A3B · 8316 chars · 2026-09-20 09:34
CVE-2026-74888 openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation AI Verified env Paid
Qwen3.6-35B-A3B · 9343 chars · 2026-09-20 09:34
CVE-2026-74883 openssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and io AI Verified env Paid
Qwen3.6-35B-A3B · 10889 chars · 2026-09-20 09:34
CVE-2026-74879 openssl_encrypt before 1.4.0 Information Disclosure via /ready endpoint AI Verified env Paid
Qwen3.6-35B-A3B · 13031 chars · 2026-09-20 09:34
CVE-2026-74884 openssl_encrypt before 1.4.0 Path Traversal via plugin_id AI Paid
Qwen3.6-35B-A3B · 8775 chars · 2026-09-20 09:34
CVE-2026-74877 openssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_key AI Verified env Paid
Qwen3.6-35B-A3B · 11381 chars · 2026-09-20 09:34
CVE-2026-74882 openssl_encrypt before 1.4.0 Insecure Default Configuration AI Paid
Qwen3.6-35B-A3B · 7315 chars · 2026-09-20 09:34
CVE-2026-74893 openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secrets AI Paid
Qwen3.6-35B-A3B · 9962 chars · 2026-09-20 09:33
CVE-2026-74998 Roundcube Webmail 跨站脚本漏洞 AI Paid
Qwen3.6-35B-A3B · 7377 chars · 2026-09-20 09:33
CVE-2026-75002 Roundcube Webmail 命令注入漏洞 AI Paid
Qwen3.6-35B-A3B · 8515 chars · 2026-09-20 09:33

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.