Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-78637 Fdawgs node-poppler Argument Injection index.js pdfUnite argument injection AI Verified env Paid
claude_code · 3636 chars · 2026-09-14 01:50
CVE-2026-1107 EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload AI Paid
default-local-qwen3.6 · 6383 chars · 2026-09-14 00:45
CVE-2026-75037 Polkit authentication bypass in LACT AI Paid
Qwen3.6-35B-A3B · 10263 chars · 2026-09-14 00:41
CVE-2026-16231 hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass AI Paid
Qwen3.6-35B-A3B · 6274 chars · 2026-09-14 00:09
CVE-2026-59309 vCenter authentication-bypass vulnerability AI Paid
default-local-qwen3.6 · 2532 chars · 2026-09-13 15:40
CVE-2026-59310 vCenter directory-traversal vulnerability AI Paid
default-local-qwen3.6 · 3443 chars · 2026-09-13 15:17
CVE-2026-79658 Ech0 before 5.0.1 Denial of Service via Accept-Language AI Verified env Paid
claude_code · 4910 chars · 2026-09-13 07:25
CVE-2026-79659 Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo AI Paid
Qwen3.6-35B-A3B · 8680 chars · 2026-09-13 07:05
CVE-2026-79662 Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass AI Paid
Qwen3.6-35B-A3B · 11225 chars · 2026-09-13 06:39
CVE-2026-79664 Ech0 before 4.7.3 Access Token Revocation Bypass AI Verified env Paid
claude_code · 6156 chars · 2026-09-13 06:12
CVE-2026-79665 Ech0 before 4.5.1 Authorization Bypass via Session Tokens AI Paid
Qwen3.6-35B-A3B · 8534 chars · 2026-09-13 05:43
CVE-2026-79667 Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement AI Paid
Qwen3.6-35B-A3B · 9151 chars · 2026-09-13 05:10
CVE-2026-79774 Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy AI Paid
Qwen3.6-35B-A3B · 8030 chars · 2026-09-13 04:31

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.