Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-54556 Http4s: HTTP/2 Denial of Service with Ember Backend AI Paid
Qwen3.6-35B-A3B · 8521 chars · 2026-09-19 03:48
CVE-2026-35445 Winter: Authenticated backend users can bypass Users controller permission checks AI Verified env Paid
claude_code · 6349 chars · 2026-09-19 03:22
CVE-2024-32887 Reflected XSS in sidekiq AI Paid
default-local-qwen3.6 · 5664 chars · 2026-09-19 03:00
CVE-2026-13569 weng-xianhu EyouCMS API index.php sql injection AI Paid
default-qwen3.6 · 3322 chars · 2026-09-19 02:57
CVE-2026-32258 Winter: Stored XSS through Editor Settings custom styles AI Paid
Qwen3.6-35B-A3B · 8490 chars · 2026-09-19 02:50
CVE-2023-6614 Typecho Page manage-pages.php backdoor AI Paid
default-local-qwen3.6 · 6590 chars · 2026-09-19 02:41
CVE-2026-76956 libexpat 异常处理不当漏洞 AI Paid
Qwen3.6-35B-A3B · 15131 chars · 2026-09-19 02:41
CVE-2024-11211 EyouCMS Website Logo unrestricted upload AI Paid
default-qwen3.6 · 3037 chars · 2026-09-19 02:35
CVE-2026-82602 SeaCMS ass.php authorization AI Paid
default-qwen3.6 · 3666 chars · 2026-09-19 02:35
CVE-2026-15202 YzmCMS Header yzmphp.php get_url cross site scripting AI Paid
default-qwen3.6 · 3085 chars · 2026-09-19 02:31
CVE-2026-85381 light0011 cms Chapter Controller ChapterController.class.php authorization AI Paid
default-local-qwen3.6 · 2965 chars · 2026-09-19 02:31
CVE-2026-55638 9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass AI Verified env Paid
Qwen3.6-35B-A3B · 8182 chars · 2026-09-19 01:33

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.