Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-73625 GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling AI Verified env Paid
claude_code · 4159 chars · 2026-09-21 13:38
CVE-2026-73629 Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses AI Paid
Qwen3.6-35B-A3B · 6554 chars · 2026-09-21 13:36
CVE-2026-73507 Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion AI Paid
Qwen3.6-35B-A3B · 12098 chars · 2026-09-21 12:40
CVE-2026-53783 rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync AI Paid
Qwen3.6-35B-A3B · 9955 chars · 2026-09-21 12:16
CVE-2026-53802 rsync < 3.5.0 Arbitrary File Read via Symlink Following AI Paid
Qwen3.6-35B-A3B · 8569 chars · 2026-09-21 12:13
CVE-2026-53803 rsync < 3.5.0 Symlink Following Arbitrary File Overwrite AI Verified env Paid
claude_code · 3146 chars · 2026-09-21 12:03
CVE-2026-53790 rsync < 3.5.0 Command Injection via Multiple Code Paths AI Verified env Paid
Qwen3.6-35B-A3B · 8520 chars · 2026-09-21 11:43
CVE-2026-53784 rsync < 3.5.0 Path Traversal via Symlink Module Root AI Paid
Qwen3.6-35B-A3B · 7977 chars · 2026-09-21 11:33
CVE-2026-53785 rsync < 3.5.0 Path Traversal Write Escape via --relative Mode AI Paid
Qwen3.6-35B-A3B · 8584 chars · 2026-09-21 11:33
CVE-2026-53795 rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest AI Paid
Qwen3.6-35B-A3B · 6911 chars · 2026-09-21 11:33
CVE-2026-70464 rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall AI Paid
Qwen3.6-35B-A3B · 8145 chars · 2026-09-21 11:22
CVE-2026-70463 rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing AI Verified env Paid
Qwen3.6-35B-A3B · 13866 chars · 2026-09-21 11:10
CVE-2026-70460 rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink AI Verified env Paid
Qwen3.6-35B-A3B · 8773 chars · 2026-09-21 11:07
CVE-2026-70461 rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry AI Paid
Qwen3.6-35B-A3B · 10828 chars · 2026-09-21 10:56

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.