Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-45618 LiquidJS is Vulnerable to Remote Code Execution AI Paid
Qwen3.6-35B-A3B · 6897 chars · 2026-08-12 05:12
CVE-2026-73032 PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval() AI Paid
Qwen3.6-35B-A3B · 7327 chars · 2026-08-12 03:51
CVE-2026-69102 MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust AI Paid
Qwen3.6-35B-A3B · 7222 chars · 2026-08-12 02:35
CVE-2026-73090 PeerTube: Cross-origin remote video takeover via Update activity AI Paid
Qwen3.6-35B-A3B · 9791 chars · 2026-08-12 01:46
CVE-2026-67180 Google Turbinia arbitrary command execution AI Verified env Paid
claude_code · 6106 chars · 2026-08-12 00:53
CVE-2025-20281 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability AI Paid
default-local-qwen3.6 · 11492 chars · 2026-08-12 00:20
CVE-2025-31114 Fooocus webui vulnerable to Remote Code Execution AI Paid
Qwen3.6-35B-A3B · 5741 chars · 2026-08-12 00:11
CVE-2026-46670 YesWiki: Unauthenticated SQL Injection AI Verified env Paid
Qwen3.6-35B-A3B · 11219 chars · 2026-08-11 22:30
CVE-2026-72746 FreeRDP 授权问题漏洞 AI Paid
Qwen3.6-35B-A3B · 9905 chars · 2026-08-11 21:15
CVE-2026-64638 WordPress 跨站脚本漏洞 AI Paid
default-local-qwen3.6 · 8254 chars · 2026-08-11 21:14
CVE-2026-72745 FreeRDP 缓冲区错误漏洞 AI Paid
Qwen3.6-35B-A3B · 12827 chars · 2026-08-11 20:56
CVE-2026-72550 Friendica Friendica - SQL Injection AI Verified env Paid
Qwen3.6-35B-A3B · 8775 chars · 2026-08-11 20:30
CVE-2026-72603 wg-easy wg-easy - OS Command Injection AI Paid
Qwen3.6-35B-A3B · 6926 chars · 2026-08-11 19:34
CVE-2026-61211 Oracle Database Server 安全漏洞 AI Paid
default-local-qwen3.6 · 9619 chars · 2026-08-11 14:30
CVE-2026-72898 Metabase SQL injection via password reset endpoint AI Paid
default-local-qwen3.6 · 6840 chars · 2026-08-11 10:24

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.