Are the PoCs on this site free to access?

Public PoCs aggregated from GitHub and the security community are freely accessible. AI-generated PoC analyses produced by Shenlong Agent are a Pro / Pro+ premium feature, requiring a paid subscription.

Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

Q: What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is a piece of code or technique that demonstrates how a specific vulnerability (CVE) can be exploited. Security researchers and penetration testers use PoCs to verify whether a vulnerability actually exists in a target system and to understand the potential impact.

Q: How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions, references, and patch diffs using a large language model pipeline. It generates a structured technical walk-through including vulnerability root cause, exploitation steps, and mitigation recommendations — covering high-severity CVEs within hours of disclosure.

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.

Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans

CVE-2026-41326 Kata Containers: CopyFile Policy Subversion via Symlinks AI Paid

Qwen3.6-35B-A3B · 14105 chars · 2026-08-24 23:29

Goal Reached Thanks to every supporter — we hit 100%!

AI PoC Generator & CVE Exploit Database

Latest POC List

CVE-2026-41326 Kata Containers: CopyFile Policy Subversion via Symlinks AI Paid

CVE-2026-78370 RansomLook Unauthenticated Database Export Exposes Private Data AI Paid

CVE-2026-78365 IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification AI Paid

CVE-2026-78372 RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data AI Paid

CVE-2026-76840 RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length AI Paid

CVE-2026-78387 RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification AI Paid

CVE-2026-67602 phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache AI Paid

CVE-2026-74894 openssl_encrypt before 1.4.0 Authentication Bypass via Bearer Token AI Paid

CVE-2026-66897 Instance template path traversal allows arbitrary host file write as root AI Paid

CVE-2019-6713 ThinkCMF 代码注入漏洞 AI Paid

CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability AI Paid

CVE-2026-67960 PbootCMS 安全漏洞 AI Paid

CVE-2026-18051 W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key AI Paid

CVE-2026-78169 UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflow AI Paid

CVE-2026-78168 EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication AI Paid

CVE-2026-78167 EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication AI Paid

CVE-2026-78154 Momentum Open Wearables 授权问题漏洞 AI Paid

CVE-2026-62243 Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass AI Verified env Paid

CVE-2026-71513 NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass AI Verified env Paid

CVE-2026-62384 NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2 AI Verified env Paid

Frequently Asked Questions