Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

Featured AI POCs

Top 50 recently published CVEs with comprehensive Shenlong AI analysis. Each entry includes vulnerability mechanism, trigger conditions, exploit chain, and reproducible POC. Free users get 3 free unlocks per month. JSON

CVE-2026-11524 High CVSS 8.8

Tenda W20E Web Management modifyWifiFilterRules stack-based overflow

Tenda / W20E

CVE-2026-11523 High CVSS 8.8

Tenda W20E Web Management PortalAuth formPortalAuth stack-based overflow

Tenda / W20E

CVE-2026-11522 High CVSS 8.8

Tenda W20E setPortMirror formSetPortMirror stack-based overflow

Tenda / W20E

CVE-2026-11498 High CVSS 8.8

Tenda HG7/HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based o

Tenda / HG7

CVE-2026-11503 High CVSS 8.8

Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting

Tenda / CX12L

CVE-2026-11504 High CVSS 8.8

Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi sta

Tenda / CX12L

CVE-2026-11517 High CVSS 8.8

UTT HiPER 2610G formConfigDnsFilterGlobal strcpy buffer overflow

UTT / HiPER 2610G

CVE-2026-11553 High CVSS 8.8

Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow

Tenda / HG7

CVE-2026-11528 High CVSS 8.8

Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow

Tenda / AC18

CVE-2026-11556 High CVSS 8.8

Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection

Tenda / F451

CVE-2026-11557 High CVSS 8.8

Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow

Tenda / F451

CVE-2026-11572 High CVSS 8.8

degit 操作系统命令注入漏洞

n/a / degit

CVE-2026-49959 High CVSS 8.8

Hermes WebUI < 0.51.311 RCE via Git Configuration Injection

nesquena / hermes-webui

CVE-2026-45564 High CVSS 8.8

Roxy-WI: Authenticated RCE via 'configver' URL parameter (os.system sink in /con

roxy-wi / roxy-wi

CVE-2026-12186 High CVSS 8.8

GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command in

GL.iNet / GL-MT3000

CVE-2026-44932 High CVSS 8.8

indirect remote shell command injection via unsanitized DHCP options in wicked

SUSE / wicked

CVE-2026-12187 High CVSS 8.8

GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection

GL.iNet / GL-MT3000

CVE-2026-48017 High CVSS 8.8

DbGate: Remote Code Execution via functionName injection in loadReader endpoint

dbgate / dbgate

CVE-2026-55738 High CVSS 8.8

Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TA

rxi / microtar

CVE-2026-48732 High CVSS 8.8

Warp: Remote SSH cwd can lead to unauthorized remote command execution

warpdotdev / warp

CVE-2026-54639 High CVSS 8.8

Style Dictionary - Prototype Pollution in convertTokenData utility function

style-dictionary / style-dictionary

CVE-2026-48793 High CVSS 8.8

Jellyfin: Potential FFmpeg argument injection via unescaped subtitle file path

jellyfin / jellyfin

CVE-2026-56766 High CVSS 8.8

Hydra - Stack Buffer Overflow in NTLM Authentication Handler

vanhauser-thc / thc-hydra

CVE-2026-12856 High CVSS 8.8

Vscode-java: vscode: command injection vulnerability in the javadoc hover provid

Red Hat / Red Hat OpenShift Dev Spaces 3.29

CVE-2026-13515 High CVSS 8.8

Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow

Tenda / JD12L

CVE-2026-13539 High CVSS 8.8

Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflow

Wavlink / WL-NU516U1-A

CVE-2026-13516 High CVSS 8.8

Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow

Tenda / JD12L

CVE-2026-13517 High CVSS 8.8

Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow

Tenda / JD12L

CVE-2026-13518 High CVSS 8.8

Tenda JD12L addressNat fromAddressNat stack-based overflow

Tenda / JD12L

CVE-2026-13519 High CVSS 8.8

Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow

Tenda / JD12L

CVE-2026-13545 High CVSS 8.8

D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection

D-Link / DCS-935L

CVE-2026-57999 High CVSS 8.8

luci-app-tailscale-community - Command Injection via tailscale.do_login RPC

openwrt / luci-app-tailscale-community

CVE-2026-58000 High CVSS 8.8

luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey

openwrt / luci-proto-openvpn

CVE-2026-34597 High CVSS 8.8

Coolify: Authenticated Host RCE

coollabsio / coolify

CVE-2026-34594 High CVSS 8.8

Coolify: Authenticated Remote Code Execution via Command Injection in Destinatio

coollabsio / coolify

CVE-2026-27957 High CVSS 8.8

Coolify: Authenticated RCE via command injection in CA certificate management fe

coollabsio / coolify

CVE-2026-10649 High CVSS 8.6

Pacemaker: pacemaker: denial of service via integer overflow in remote message d

Red Hat / Red Hat Enterprise Linux 10

CVE-2026-46529 High CVSS 8.4

PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlope

mate-desktop / atril

CVE-2026-9669 High CVSS 8.2

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

Python Software Foundation / CPython

CVE-2026-49260 High CVSS 8.2

PhpWeasyPrint: shell command injection via configurable WeasyPrint binary path d

pontedilana / php-weasyprint

CVE-2026-54271 High CVSS 8.2

protobufjs-cli: Code injection in pbjs static output from crafted JSON descripto

protobufjs / protobufjs-cli

CVE-2026-44016 High CVSS 8.2

Docling: Unsafe Playwright-based HTML Rendering

docling-project / docling

CVE-2026-43994 High CVSS 8.1

Coturn: Stack buffer overflow in decode_oauth_token_gcm()

coturn / coturn

CVE-2026-49286 High CVSS 8.1

PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-2

pontedilana / php-weasyprint

CVE-2025-71348 High CVSS 8.1

picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config

picklescan / picklescan

CVE-2025-71357 High CVSS 8.1

picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInt

picklescan / picklescan

CVE-2026-55388 High CVSS 8.1

piscina: Prototype Pollution Gadget → RCE via inherited options.filename

piscinajs / piscina

CVE-2025-71370 High CVSS 8.1

picklescan - Remote Code Execution via torch.jit.unsupported_tensor_ops.execWrap

picklescan / picklescan

CVE-2025-71378 High CVSS 8.1

picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle File

picklescan / picklescan

CVE-2025-71358 High CVSS 8.1

picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_ent

picklescan / picklescan

📥 Want the latest list as JSON? /api/featured-pocs.json

Open repo: github.com/imfht/cve-cn — README auto-generated weekly from this list.