Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-73482 phpList < 3.7.0-RC5 Cross-Site Request Forgery via admins.php AI Paid
Qwen3.6-35B-A3B · 8043 chars · 2026-09-21 07:45
CVE-2026-49864 wetty vulnerable to DOM XSS via file-download filename AI Verified env Paid
claude_code · 6868 chars · 2026-09-21 07:30
CVE-2026-73530 Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip() AI Verified env Paid
claude_code · 5059 chars · 2026-09-21 07:18
CVE-2026-54623 django CMS: Plugin move endpoint allows cyclic reparenting (DoS) AI Paid
Qwen3.6-35B-A3B · 10835 chars · 2026-09-21 06:58
CVE-2026-48099 WsgiDAV encoded dot segments can escape filesystem share roots AI Verified env Paid
claude_code · 4251 chars · 2026-09-21 06:30
CVE-2026-73660 FreePBX: Authenticated TTS AGI Command Injection Through TTS Name AI Verified env Paid
claude_code · 4181 chars · 2026-09-21 06:19
CVE-2026-73661 FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup AI Verified env Paid
Qwen3.6-35B-A3B · 10059 chars · 2026-09-21 06:18
CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files AI Paid
Qwen3.6-35B-A3B · 7521 chars · 2026-09-21 06:14
CVE-2026-19750 Tenda CH/CP/TX3 SSH hard-coded password AI Verified env Paid
claude_code · 4325 chars · 2026-09-21 06:01
CVE-2026-73664 FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module AI Paid
Qwen3.6-35B-A3B · 7945 chars · 2026-09-21 05:51
CVE-2026-62315 Frappe: Mass assignment via set_value AI Paid
Qwen3.6-35B-A3B · 7460 chars · 2026-09-21 05:48
CVE-2026-66001 Frappe: Improper Authorization in OAuth2 Consent Endpoint AI Paid
Qwen3.6-35B-A3B · 9472 chars · 2026-09-21 05:46
CVE-2026-78062 vas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials AI Verified env Paid
claude_code · 5877 chars · 2026-09-21 05:16
CVE-2026-25554 OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables JWT Authentication Bypass AI Paid
default-local-qwen3.6 · 8079 chars · 2026-09-21 04:54

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.