Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-56677 9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint AI Verified env Paid
Qwen3.6-35B-A3B · 7929 chars · 2026-09-20 08:10
CVE-2026-45790 Dokploy: Invitation Role Escalation Allows Organization Takeover AI Verified env Paid
claude_code · 6646 chars · 2026-09-20 07:49
CVE-2026-75080 SourceCodester Class and Exam Timetabling System edit_subject1.php sql injection AI Verified env Paid
claude_code · 3907 chars · 2026-09-20 07:45
CVE-2026-75827 Grav before 2.0.15 Arbitrary File Write via error_log AI Paid
Qwen3.6-35B-A3B · 6913 chars · 2026-09-20 07:39
CVE-2026-75089 PHPGurukul Complaint Management System check_availability.php sql injection AI Verified env Paid
claude_code · 5675 chars · 2026-09-20 07:39
CVE-2026-75829 grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint AI Paid
Qwen3.6-35B-A3B · 7644 chars · 2026-09-20 07:21
CVE-2026-75830 grav-plugin-api before 1.0.15 Path Traversal via batchCopy AI Paid
Qwen3.6-35B-A3B · 6786 chars · 2026-09-20 07:21
CVE-2026-75828 Grav before 2.0.15 Stored XSS via detectXss() Quote Bypass AI Paid
Qwen3.6-35B-A3B · 7512 chars · 2026-09-20 07:13
CVE-2026-75836 Grav API Plugin before 1.0.14 Missing Authorization AI Verified env Paid
Qwen3.6-35B-A3B · 8633 chars · 2026-09-20 07:03
CVE-2026-75840 ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex AI Paid
Qwen3.6-35B-A3B · 8864 chars · 2026-09-20 06:55
CVE-2026-75831 Grav before 2.0.15 Stored XSS via audio/video source URL AI Verified env Paid
Qwen3.6-35B-A3B · 8790 chars · 2026-09-20 06:55
CVE-2026-75853 ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Database AI Paid
Qwen3.6-35B-A3B · 9717 chars · 2026-09-20 06:54
CVE-2026-75844 ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypass AI Paid
Qwen3.6-35B-A3B · 7797 chars · 2026-09-20 06:54
CVE-2026-75842 ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV AI Paid
Qwen3.6-35B-A3B · 7326 chars · 2026-09-20 06:53
CVE-2026-46682 BigBlueButton: Blind SQL Injection AUTH (Moderator) AI Paid
Qwen3.6-35B-A3B · 9219 chars · 2026-09-20 06:41
CVE-2026-45532 DataEase has a Path Traversal Vulnerability AI Verified env Paid
Qwen3.6-35B-A3B · 9099 chars · 2026-09-20 06:25
CVE-2026-75855 ArcadeDB before 26.8.1 Path Traversal via create/drop database AI Paid
Qwen3.6-35B-A3B · 9159 chars · 2026-09-20 06:15

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.