目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

神龙 AI 精选 POC 榜

近期 50 条由神龙 Agent 完整分析的高 CVSS CVE，每条含漏洞原理、触发条件、利用链与可复现 POC。免费用户每月可解锁 3 条。 JSON

CVE-2026-11523 High CVSS 8.8
Tenda W20E 缓冲区错误漏洞
Tenda / W20E
CVE-2026-11524 High CVSS 8.8
Tenda W20E 缓冲区错误漏洞
Tenda / W20E
CVE-2026-11553 High CVSS 8.8
Tenda多款产品 缓冲区错误漏洞
Tenda / HG7
CVE-2026-11528 High CVSS 8.8
Tenda AC18 缓冲区错误漏洞
Tenda / AC18
CVE-2026-11556 High CVSS 8.8
Tenda F451 命令注入漏洞
Tenda / F451
CVE-2026-11557 High CVSS 8.8
Tenda F451 缓冲区错误漏洞
Tenda / F451
CVE-2026-11572 High CVSS 8.8
degit 操作系统命令注入漏洞
n/a / degit
CVE-2026-49959 High CVSS 8.8
Hermes Web UI 操作系统命令注入漏洞
nesquena / hermes-webui
CVE-2026-45564 High CVSS 8.8
Roxy-WI 操作系统命令注入漏洞
roxy-wi / roxy-wi
CVE-2026-12186 High CVSS 8.8
GL-iNet gl-mt3000 输入验证错误漏洞
GL.iNet / GL-MT3000
CVE-2026-44932 High CVSS 8.8
SUSE wicked 命令注入漏洞
SUSE / wicked
CVE-2026-12187 High CVSS 8.8
GL-iNet gl-mt3000 输入验证错误漏洞
GL.iNet / GL-MT3000
CVE-2026-48017 High CVSS 8.8
DbGate 代码注入漏洞
dbgate / dbgate
CVE-2026-55738 High CVSS 8.8
rxi microtar 缓冲区错误漏洞
rxi / microtar
CVE-2026-48732 High CVSS 8.8
Warp 命令注入漏洞
warpdotdev / warp
CVE-2026-54639 High CVSS 8.8
Style Dictionary 输入验证错误漏洞
style-dictionary / style-dictionary
CVE-2026-48793 High CVSS 8.8
Jellyfin 命令注入漏洞
jellyfin / jellyfin
CVE-2026-56766 High CVSS 8.8
vanhauser-thc thc-hydra 缓冲区错误漏洞
vanhauser-thc / thc-hydra
CVE-2026-12856 High CVSS 8.8
Red Hat Language support for Java ™ for Visual Studio Code 命令注入漏洞
Red Hat / Red Hat OpenShift Dev Spaces 3.29
CVE-2026-13515 High CVSS 8.8
Tenda JD12L 缓冲区错误漏洞
Tenda / JD12L
CVE-2026-13539 High CVSS 8.8
WAVLINK wl-nu516u1-a 缓冲区错误漏洞
Wavlink / WL-NU516U1-A
CVE-2026-13516 High CVSS 8.8
Tenda JD12L 缓冲区错误漏洞
Tenda / JD12L
CVE-2026-13517 High CVSS 8.8
Tenda JD12L 缓冲区错误漏洞
Tenda / JD12L
CVE-2026-13518 High CVSS 8.8
Tenda JD12L 缓冲区错误漏洞
Tenda / JD12L
CVE-2026-13519 High CVSS 8.8
Tenda JD12L 缓冲区错误漏洞
Tenda / JD12L
CVE-2026-13545 High CVSS 8.8
D-Link DCS-935L 命令注入漏洞
D-Link / DCS-935L
CVE-2026-57999 High CVSS 8.8
OpenWRT luci 命令注入漏洞
openwrt / luci-app-tailscale-community
CVE-2026-58000 High CVSS 8.8
openwrt luci 命令注入漏洞
openwrt / luci-proto-openvpn
CVE-2026-34597 High CVSS 8.8
CoolLabs Coolify 命令注入漏洞
coollabsio / coolify
CVE-2026-34594 High CVSS 8.8
coolLabs Coolify 命令注入漏洞
coollabsio / coolify
CVE-2026-27957 High CVSS 8.8
CoolLabs Coolify 命令注入漏洞
coollabsio / coolify
CVE-2026-7838 High CVSS 8.8
UltraVNC 数字错误漏洞
uvnc / UltraVNC
CVE-2026-10649 High CVSS 8.6
ClusterLabs Pacemaker 数字错误漏洞
Red Hat / Red Hat Enterprise Linux 10
CVE-2026-46529 High CVSS 8.4
Atril 命令注入漏洞
mate-desktop / atril
CVE-2026-9669 High CVSS 8.2
CPython 安全漏洞
Python Software Foundation / CPython
CVE-2026-49260 High CVSS 8.2
Pontedilana PhpWeasyPrint 命令注入漏洞
pontedilana / php-weasyprint
CVE-2026-54271 High CVSS 8.2
protobufjs project protobufjs-cli 代码注入漏洞
protobufjs / protobufjs-cli
CVE-2026-44016 High CVSS 8.2
Docling Project Docling 服务端请求伪造漏洞
docling-project / docling
CVE-2026-43994 High CVSS 8.1
Coturn 缓冲区错误漏洞
coturn / coturn
CVE-2026-49286 High CVSS 8.1
Pontedilana PhpWeasyPrint 反序列化漏洞
pontedilana / php-weasyprint
CVE-2025-71348 High CVSS 8.1
picklescan 反序列化注入漏洞
picklescan / picklescan
CVE-2025-71357 High CVSS 8.1
picklescan 反序列化注入漏洞
picklescan / picklescan
CVE-2026-55388 High CVSS 8.1
Piscina 输入验证错误漏洞
piscinajs / piscina
CVE-2025-71370 High CVSS 8.1
picklescan 反序列化漏洞
picklescan / picklescan
CVE-2025-71378 High CVSS 8.1
picklescan 反序列化漏洞
picklescan / picklescan
CVE-2025-71339 High CVSS 8.1
Picklescan 反序列化注入漏洞
Picklescan / Picklescan
CVE-2025-71358 High CVSS 8.1
Picklescan 反序列化注入漏洞
picklescan / picklescan
CVE-2025-71344 High CVSS 8.1
picklescan 反序列化漏洞
picklescan / picklescan
CVE-2025-71341 High CVSS 8.1
picklescan 反序列化漏洞
picklescan / picklescan
CVE-2025-71376 High CVSS 8.1
picklescan 反序列化漏洞
picklescan / picklescan

📥 拉 JSON 自动同步到你自己的工具：/api/featured-pocs.json

配套仓库：github.com/imfht/cve-cn — 每周从此榜单自动生成 README。