Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

AI PoC Generator & CVE Exploit Database

We aggregate public proof-of-concept (PoC) code from GitHub and the security community, and use a Shenlong Agent (LLM-based) pipeline to generate technical PoC walk-throughs for high-severity CVEs. Public PoCs are free; AI-generated PoCs are a Pro / Pro+ feature. Each entry links back to its source CVE detail page for full context, references, and patches.

Latest POC List

Public POCs are scraped from GitHub / security community. AI Exclusive POCs are generated by Shenlong Agent — paid content.
Filter
Shenlong AI Exclusive POCs are paid content. Logged-in users get 3 free unlocks/month; upgrade to Pro for unlimited access. Log in / View plans
CVE-2026-41906FreeScout: Conversation Change-Customer Cross-Mailbox Authorization Bypass AI Paid
Qwen3.6-35B-A3B · 11712 chars · 2026-05-09 22:31
CVE-2026-5997Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection AI Paid
Qwen3.6-35B-A3B · 9956 chars · 2026-05-09 22:31
CVE-2026-5992Tenda F451 P2pListFilter fromP2pListFilter stack-based overflow AI Paid
Qwen3.6-35B-A3B · 8090 chars · 2026-05-09 22:31
CVE-2026-5993Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection AI Paid
Qwen3.6-35B-A3B · 8694 chars · 2026-05-09 22:31
CVE-2026-5973FoundationAgents MetaGPT common.py get_mime_type os command injection AI Paid
Qwen3.6-35B-A3B · 7537 chars · 2026-05-09 22:31
CVE-2026-5974FoundationAgents MetaGPT terminal.py Bash.run os command injection AI Paid
Qwen3.6-35B-A3B · 7278 chars · 2026-05-09 22:31
CVE-2026-5842decolua 9router Administrative API Endpoint api authorization AI Paid
Qwen3.6-35B-A3B · 7921 chars · 2026-05-09 22:31
CVE-2026-5850Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection AI Paid
Qwen3.6-35B-A3B · 9295 chars · 2026-05-09 22:31
CVE-2026-31939Path Traversal (Arbitrary File Delete) in Chamilo LMS AI Paid
Qwen3.6-35B-A3B · 6302 chars · 2026-05-09 22:30
CVE-2026-5190AWS C Event Stream Streaming Decoder Stack Buffer Overflow AI Paid
Qwen3.6-35B-A3B · 10771 chars · 2026-05-09 22:22
CVE-2021-3783Cross-site Scripting (XSS) - Reflected in yourls/yourls AI Paid
default-local-hunyuan-2.0-instruct · 5331 chars · 2026-05-09 22:22
CVE-2026-32726SciTokens C++: Sibling-Path Authorization Bypass AI Paid
Qwen3.6-35B-A3B · 10850 chars · 2026-05-09 22:15
CVE-2026-32725SciTokens C++: Relative Path Traversal Vulnerability AI Paid
Qwen3.6-35B-A3B · 9580 chars · 2026-05-09 22:10

Frequently Asked Questions

What is a CVE PoC (Proof of Concept)?

A CVE PoC (Proof of Concept) is code that demonstrates how a specific vulnerability can be exploited. Security researchers use PoCs to verify vulnerabilities and assess their impact.

How does the AI-generated PoC work?

Shenlong Agent analyzes CVE descriptions and patch diffs via an LLM pipeline, generating structured technical walk-throughs — covering high-severity CVEs within hours of disclosure.

Are the PoCs free to access?

Public PoCs from GitHub are free. AI-generated PoC analyses by Shenlong Agent are a Pro / Pro+ feature.