Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-18015 Google Chrome 安全漏洞 AI Paid
default-local-qwen3.6 · 6086 chars · 2026-08-02 17:56
CVE-2026-67288 FreeRDP before 3.29.0 Denial of Service via smartcard cache AI Verified env Paid
claude_code · 7454 chars · 2026-08-02 00:46
CVE-2026-67298 FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow AI Paid
Qwen3.6-35B-A3B · 9599 chars · 2026-08-02 00:26
CVE-2026-67320 axios before 0.33.0 Prototype Pollution via Node HTTP adapter AI Paid
Qwen3.6-35B-A3B · 7144 chars · 2026-08-02 00:12
CVE-2026-67305 FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr AI Paid
Qwen3.6-35B-A3B · 15667 chars · 2026-08-01 23:29
CVE-2026-67352 luci-app-https-dns-proxy Stored XSS via resolver_url AI Paid
Qwen3.6-35B-A3B · 8188 chars · 2026-08-01 23:28
CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response AI Paid
Qwen3.6-35B-A3B · 8235 chars · 2026-08-01 23:22
CVE-2026-67342 ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers AI Paid
Qwen3.6-35B-A3B · 9180 chars · 2026-08-01 23:16
CVE-2026-67308 Wazuh GitHub Actions Shell Injection via Fork Pull Request AI Verified env Paid
Qwen3.6-35B-A3B · 14037 chars · 2026-08-01 23:12
CVE-2026-54715 GoAccess: Heap Out-of-Bounds Write in parse_browser() AI Paid
Qwen3.6-35B-A3B · 12935 chars · 2026-08-01 23:12
CVE-2026-67290 FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF AI Paid
Qwen3.6-35B-A3B · 8485 chars · 2026-08-01 22:58
CVE-2026-66402 FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass AI Paid
Qwen3.6-35B-A3B · 13773 chars · 2026-08-01 22:45
CVE-2026-67331 better-auth SCIM 1.5.0 before 1.7.0-beta.4 Authorization Bypass AI Paid
Qwen3.6-35B-A3B · 6831 chars · 2026-08-01 22:44
CVE-2026-67343 ArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/server AI Paid
Qwen3.6-35B-A3B · 5961 chars · 2026-08-01 22:44
CVE-2026-67324 GitPython 3.1.50 Authentication Bypass via Joined Short Options AI Verified env Paid
Qwen3.6-35B-A3B · 9107 chars · 2026-08-01 22:39

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.