Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-19815 TOTOLINK A800R firewall.so cstecgi.cgi setParentalRules stack-based overflow AI Verified env Paid
Qwen3.6-35B-A3B · 7903 chars · 2026-09-20 09:42
CVE-2026-19814 TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack-based overflow AI Verified env Paid
Qwen3.6-35B-A3B · 8312 chars · 2026-09-20 09:42
CVE-2026-19812 TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow AI Verified env Paid
Qwen3.6-35B-A3B · 6651 chars · 2026-09-20 09:42
CVE-2026-19822 Tenda W20E QoS Edit editQos lstAdd stack-based overflow AI Verified env Paid
Qwen3.6-35B-A3B · 7119 chars · 2026-09-20 09:42
CVE-2026-72819 Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload AI Paid
Qwen3.6-35B-A3B · 7575 chars · 2026-09-20 09:42
CVE-2026-72824 Grav before 1.0.13 API Key Scope Bypass via PagesController AI Paid
Qwen3.6-35B-A3B · 6664 chars · 2026-09-20 09:40
CVE-2026-72822 Grav before 1.0.13 Authentication Bypass via disable2fa AI Paid
Qwen3.6-35B-A3B · 6992 chars · 2026-09-20 09:40
CVE-2026-72825 Grav before 1.0.13 API-key scope cap bypass via ReportsController AI Paid
Qwen3.6-35B-A3B · 6838 chars · 2026-09-20 09:40
CVE-2026-72827 Grav CMS before 2.0.13 Remote Code Execution via Twig AI Paid
Qwen3.6-35B-A3B · 7292 chars · 2026-09-20 09:40
CVE-2026-72826 Grav before 1.0.13 Scope Bypass via createApiKey AI Paid
Qwen3.6-35B-A3B · 7214 chars · 2026-09-20 09:40
CVE-2026-72828 Grav before 1.0.13 API Key Scope Bypass via InvitationsController AI Paid
Qwen3.6-35B-A3B · 6661 chars · 2026-09-20 09:40
CVE-2026-72829 Grav before 1.0.13 API Key Scope Bypass via UsersController AI Paid
Qwen3.6-35B-A3B · 7960 chars · 2026-09-20 09:40
CVE-2026-72831 Grav through 2.0.11 Authentication Bypass via Flex Objects AI Paid
Qwen3.6-35B-A3B · 8631 chars · 2026-09-20 09:40
CVE-2026-72830 Grav API Plugin before 1.0.13 RCE via ConfigController scope bypass AI Paid
Qwen3.6-35B-A3B · 7014 chars · 2026-09-20 09:40
CVE-2026-19870 IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creation AI Verified env Paid
Qwen3.6-35B-A3B · 12310 chars · 2026-09-20 09:39
CVE-2026-72833 Grav 1.0.6 through 1.0.11 Privilege Escalation via Scoped API Keys AI Paid
Qwen3.6-35B-A3B · 8777 chars · 2026-09-20 09:39
CVE-2026-72836 FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass AI Paid
Qwen3.6-35B-A3B · 10258 chars · 2026-09-20 09:39

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.