Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2017-18214 Joyent Node.js 资源管理错误漏洞 AI Verified env Paid
claude_code · 3351 chars · 2026-08-30 08:30
CVE-2026-75838 DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook AI Verified env Paid
claude_code · 3463 chars · 2026-08-30 07:17
CVE-2020-7746 Prototype Pollution AI Verified env Paid
claude_code · 4885 chars · 2026-08-30 05:16
CVE-2026-67614 CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal AI Verified env Paid
claude_code · 5991 chars · 2026-08-30 03:39
CVE-2026-64649 Next.js: Server-Side Request Forgery in Server Actions on Custom Servers AI Verified env Paid
claude_code · 3780 chars · 2026-08-30 03:35
CVE-2026-78680 NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary AI Verified env Paid
claude_code · 2726 chars · 2026-08-30 03:13
CVE-2026-78682 NLTK before 3.10.3 SSRF Protection Bypass via Proxy AI Verified env Paid
claude_code · 3311 chars · 2026-08-30 03:05
CVE-2026-58372 SeaweedFS < 4.34 - Cross-Bucket Object Deletion via DeleteObjects Request-Body Keys AI Verified env Paid
claude_code · 3495 chars · 2026-08-30 03:02
CVE-2026-78681 NLTK before 3.10.3 Entity Expansion DoS via ElementTree AI Verified env Paid
claude_code · 4318 chars · 2026-08-30 02:56
CVE-2026-4562 MacCMS Timming API Endpoint Timming.php weak authentication AI Paid
Qwen3.6-35B-A3B · 7676 chars · 2026-08-30 01:51
CVE-2025-56520 dify 安全漏洞 AI Paid
default-local-qwen3.6 · 3018 chars · 2026-08-30 01:44
CVE-2025-29720 dify 安全漏洞 AI Paid
default-local-qwen3.6 · 3123 chars · 2026-08-30 01:21
CVE-2026-2614 Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow AI Verified env Paid
claude_code · 4359 chars · 2026-08-30 00:06
CVE-2025-4330 Extraction filter bypass for linking outside extraction directory AI Verified env Paid
claude_code · 3847 chars · 2026-08-29 23:48
CVE-2026-53002 netfilter: conntrack: remove sprintf usage AI Paid
default-local-qwen3.6 · 4078 chars · 2026-08-29 21:44
CVE-2024-11680 ProjectSend Unauthenticated Configuration Modification AI Paid
Qwen3.6-35B-A3B · 8283 chars · 2026-08-29 20:38
CVE-2021-43798 Grafana path traversal AI Verified env Paid
claude_code · 3581 chars · 2026-08-29 19:26
CVE-2021-21298 Path traversal in Node-Red AI Verified env Paid
claude_code · 3356 chars · 2026-08-29 18:07
CVE-2026-22812 OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution AI Verified env Paid
claude_code · 2641 chars · 2026-08-29 17:38

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.