Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-75913 CodeWhale before 0.8.64 Argument Injection via git_show AI Paid
Qwen3.6-35B-A3B · 6735 chars · 2026-08-19 00:13
CVE-2026-75784 TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow AI Verified env Paid
Qwen3.6-35B-A3B · 9349 chars · 2026-08-18 23:26
CVE-2026-75783 TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow AI Verified env Paid
Qwen3.6-35B-A3B · 10900 chars · 2026-08-18 21:23
CVE-2026-41242 protobufjs has an arbitrary code execution issue AI Verified env Paid
Qwen3.6-35B-A3B · 8271 chars · 2026-08-18 21:06
CVE-2026-75843 ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction AI Paid
Qwen3.6-35B-A3B · 8268 chars · 2026-08-18 20:02
CVE-2026-75837 Grav before 2.0.14 Privilege Escalation via Group Access Field AI Verified env Paid
Qwen3.6-35B-A3B · 9232 chars · 2026-08-18 19:59
CVE-2026-75851 ArcadeDB before 26.8.1 Authentication Bypass via Async Command AI Paid
Qwen3.6-35B-A3B · 8085 chars · 2026-08-18 19:51
CVE-2026-75854 ArcadeDB Redis Wire-Protocol Plugin Missing Authentication AI Paid
Qwen3.6-35B-A3B · 7698 chars · 2026-08-18 19:44
CVE-2026-75852 ArcadeDB MongoDB wire protocol authentication bypass cross-database AI Paid
Qwen3.6-35B-A3B · 8702 chars · 2026-08-18 19:41
CVE-2026-75626 SpiderFoot Stored Cross-Site Scripting via Correlation Titles AI Paid
Qwen3.6-35B-A3B · 6047 chars · 2026-08-18 19:33
CVE-2026-75627 Bastillion Authentication Bypass via Path-Prefix Routing Mismatch AI Paid
Qwen3.6-35B-A3B · 12372 chars · 2026-08-18 19:30
CVE-2026-75094 COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection AI Paid
Qwen3.6-35B-A3B · 4019 chars · 2026-08-18 11:33
CVE-2026-75110 MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET AI Verified env Paid
Qwen3.6-35B-A3B · 13099 chars · 2026-08-18 06:44
CVE-2026-75106 OpnForm Editable Submission Secret Derivation via Empty Hashids Salt AI Paid
Qwen3.6-35B-A3B · 7774 chars · 2026-08-18 06:44
CVE-2026-47698 vm2: Sandbox Breakout Using Dangerous Host Proto Mutators AI Verified env Paid
Qwen3.6-35B-A3B · 8152 chars · 2026-08-18 06:11
CVE-2026-71424 Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers AI Verified env Paid
Qwen3.6-35B-A3B · 11344 chars · 2026-08-18 06:02

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.