Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-69086 SiYuan before v3.7.3 Path Traversal via unvalidated avID AI Verified env Paid
claude_code · 4457 chars · 2026-08-04 01:22
CVE-2026-41453 Krayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead Parameter AI Verified env Paid
claude_code · 11516 chars · 2026-08-04 01:20
CVE-2026-69088 Grav CMS 2.0.7 through 2.0.10 Arbitrary Method Invocation via Blueprint AI Verified env Paid
claude_code · 5246 chars · 2026-08-04 00:56
CVE-2026-69089 Grav CMS before 2.0.11 Path Traversal via watermark AI Paid
Qwen3.6-35B-A3B · 10885 chars · 2026-08-04 00:32
CVE-2026-69091 Admidio before 5.0.11 Authentication Bypass via forum.php AI Verified env Paid
claude_code · 7159 chars · 2026-08-04 00:30
CVE-2026-69095 OpenWrt luci-app-bmx7 Path Traversal via bmx7-info AI Verified env Paid
claude_code · 4289 chars · 2026-08-04 00:15
CVE-2026-69096 OpenWrt luci-app-dockerman Read ACL Remote Code Execution AI Paid
Qwen3.6-35B-A3B · 9541 chars · 2026-08-04 00:11
CVE-2026-69097 GitPython before 3.1.53 Config Injection via Submodule Names AI Verified env Paid
claude_code · 6105 chars · 2026-08-04 00:10
CVE-2026-69084 SiYuan before v3.7.3 SQL Injection via searchEmbedBlock AI Paid
Qwen3.6-35B-A3B · 8438 chars · 2026-08-03 22:26
CVE-2026-68584 SiYuan before v3.7.3 Authentication Bypass via Content Endpoints AI Paid
Qwen3.6-35B-A3B · 7593 chars · 2026-08-03 22:26
CVE-2026-68586 SiYuan before v3.7.3 Content Disclosure via getBacklinkDoc AI Paid
Qwen3.6-35B-A3B · 9768 chars · 2026-08-03 22:16
CVE-2026-69083 SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent AI Paid
Qwen3.6-35B-A3B · 8586 chars · 2026-08-03 22:16
CVE-2026-69085 SiYuan before v3.7.3 SQL Injection via searchDocs AI Paid
Qwen3.6-35B-A3B · 6546 chars · 2026-08-03 22:04
CVE-2026-25535 jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions AI Verified env Paid
Qwen3.6-35B-A3B · 11368 chars · 2026-08-03 21:20

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.