Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-55581 mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable AI Verified env Paid
claude_code · 4118 chars · 2026-09-09 01:31
CVE-2025-32728 OpenSSH（OpenBSD Secure Shell） 安全漏洞 AI Paid
default-local-qwen3.6 · 9124 chars · 2026-09-09 00:53
CVE-2024-40675 Google Android 安全漏洞 AI Paid
default-local-qwen3.6 · 2475 chars · 2026-09-09 00:40
CVE-2026-64866 New API: Admin can reset passkeys for same-level or higher-privileged users AI Paid
default-local-qwen3.6 · 3798 chars · 2026-09-09 00:27
CVE-2021-37497 PbootCMS SQL注入漏洞 AI Paid
default-local-qwen3.6 · 2939 chars · 2026-09-08 21:48
CVE-2020-12812 Fortinet FortiOS SSL VPN 授权问题漏洞 AI Paid
default-local-qwen3.6 · 3782 chars · 2026-09-08 15:00
CVE-2025-62155 QuantumNous New API Has SSRF Bypass AI Paid
default-local-qwen3.6 · 4793 chars · 2026-09-08 14:52
CVE-2025-55573 New API 安全漏洞 AI Paid
default-local-qwen3.6 · 3194 chars · 2026-09-08 14:50
CVE-2016-20031 ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp AI Paid
default-local-qwen3.6 · 2381 chars · 2026-09-08 09:44
CVE-2026-77004 Comfast CF-N1-S mbox-config sprintf command injection AI Paid
Qwen3.6-35B-A3B · 7478 chars · 2026-09-08 05:38
CVE-2026-54449 LangBot: Authenticated RCE Via MCP Configuration AI Paid
Qwen3.6-35B-A3B · 6904 chars · 2026-09-08 05:34
CVE-2026-77019 CodeAstro Apartment Visitor Management System forgotpw.php sql injection AI Verified env Paid
claude_code · 2736 chars · 2026-09-08 05:21
CVE-2026-77020 CodeAstro Apartment Visitor Management System password-recovery.php sql injection AI Verified env Paid
claude_code · 4101 chars · 2026-09-08 04:12
CVE-2026-40345 deepmerge-ts: Stack exhaustion when merging recursive object graphs AI Verified env Paid
claude_code · 5554 chars · 2026-09-08 04:02
CVE-2026-65842 Plate: SSRF with response disclosure in DOCX image embedding AI Paid
Qwen3.6-35B-A3B · 7492 chars · 2026-09-08 03:52
CVE-2026-76641 Expat Out-of-Bounds Read via dtdCopy AI Paid
Qwen3.6-35B-A3B · 8667 chars · 2026-09-08 03:44

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.