Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2025-15373 EyouCMS function.php saveRemote server-side request forgery AI Paid
default-qwen3.6 · 3662 chars · 2026-09-04 17:30
CVE-2025-65868 EyouCMS 安全漏洞 AI Paid
default-qwen3.6 · 3888 chars · 2026-09-04 17:22
CVE-2022-50992 Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet AI Paid
default-local-qwen3.6 · 2578 chars · 2026-09-04 16:14
CVE-2024-58352 Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do AI Paid
default-local-qwen3.6 · 2868 chars · 2026-09-04 09:35
CVE-2026-54134 OctoPrint: File exfiltration possible via query parameters on upload endpoints AI Verified env Paid
claude_code · 4337 chars · 2026-09-04 07:06
CVE-2025-52335 EyouCMS 安全漏洞 AI Paid
default-qwen3.6 · 2600 chars · 2026-09-04 06:49
CVE-2026-68508 Hydra: hydra.utils.instantiate with untrusted config can lead to code execution AI Verified env Paid
claude_code · 2852 chars · 2026-09-04 05:30
CVE-2026-61824 Defuddle: XSS via unescaped attribute interpolation in site extractors AI Verified env Paid
claude_code · 3584 chars · 2026-09-04 05:23
CVE-2026-62316 Microsoft UFO: DNS Rebinding → Unauthenticated File Read / Command Execution AI Verified env Paid
claude_code · 4858 chars · 2026-09-04 04:42
CVE-2026-47895 strongswan 资源管理错误漏洞 AI Verified env Paid
claude_code · 5160 chars · 2026-09-03 03:33
CVE-2026-57998 better-npm-audit OS Command Injection via registry flag AI Verified env Paid
claude_code · 3480 chars · 2026-09-03 02:39
CVE-2026-78209 exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values AI Verified env Paid
claude_code · 4262 chars · 2026-09-03 00:43
CVE-2026-78208 exceljs through 4.4.0 Path Traversal via Unvalidated addImage filename AI Verified env Paid
claude_code · 3398 chars · 2026-09-03 00:37
CVE-2026-78171 itsourcecode Sales and Inventory System processlogin.php sql injection AI Verified env Paid
claude_code · 3958 chars · 2026-09-03 00:20
CVE-2023-21373 Google Android 安全漏洞 AI Paid
default-local-qwen3.6 · 2287 chars · 2026-09-02 20:19

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.