CVEs we hold for Shenzhen
Records whose assigning authority named Shenzhen as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-9544Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injectionShenzhen Sixun Software Sixun Shanghui Group Business…
CVE-2026-9222Setracker2 Children's Smartwatch Ecosystem Use of password hash instead of password for authenticationShenzhen i365-Tech Co. Ltd. Setracker2 Parental Control App…
CVE-2026-9221Setracker2 Children's Smartwatch Ecosystem Use of a Broken or Risky Cryptographic AlgorithmShenzhen i365-Tech Co. Ltd. Setracker2 Parental Control App…
CVE-2026-9220Setracker2 Children's Smartwatch Ecosystem Use of hard-coded cryptographic keyShenzhen i365-Tech Co. Ltd. Setracker2 Parental Control App…
CVE-2026-9219Setracker2 Children's Smartwatch Ecosystem Generation of Predictable Numbers or IdentifiersShenzhen i365-Tech Co. Ltd. Setracker2 Parental Control App…
CVE-2026-78182Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate…Shenzhen Gongji Technology XBROTHER Dynamic Environment…
CVE-2026-7675Shenzhen Libituo Technology LBT-T300-HW1 apply.cgi start_lan buffer overflowShenzhen Libituo Technology LBT-T300-HW1
CVE-2026-7674Shenzhen Libituo Technology LBT-T300-HW1 Web Management start_single_service buffer overflowShenzhen Libituo Technology LBT-T300-HW1
CVE-2026-71961Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command HandlerShenzhen Cudy Technology Co., Ltd. WR3000 2.0
CVE-2026-71960Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTTShenzhen Cudy Technology Co., Ltd. P5 V1.1
CVE-2026-58457Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.cspShenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
CVE-2026-4956Shenzhen Ruiming Technology Streamax Crocus Parameter DevicePrint.do sql injectionShenzhen Ruiming Technology Streamax Crocus
CVE-2026-4955Shenzhen Ruiming Technology Streamax Crocus OperateStatistic.do sql injectionShenzhen Ruiming Technology Streamax Crocus
CVE-2026-4910Shenzhen Ruiming Technology Streamax Crocus Endpoint RemoteFormat.do sql injectionShenzhen Ruiming Technology Streamax Crocus
CVE-2026-4584Shenzhen HCC Technology MPOS M6 PLUS Cardholder Data cleartext transmissionShenzhen HCC Technology MPOS M6 PLUS
CVE-2026-4583Shenzhen HCC Technology MPOS M6 PLUS Bluetooth authentication replayShenzhen HCC Technology MPOS M6 PLUS
CVE-2026-4582Shenzhen HCC Technology MPOS M6 PLUS Bluetooth missing authenticationShenzhen HCC Technology MPOS M6 PLUS
CVE-2026-41927WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgiShenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi…
CVE-2026-41926WDR201A WiFi Extender OS Command Injection via firewall.cgiShenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi…
CVE-2026-41925WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi…
CVE-2026-41924WDR201A WiFi Extender OS Command Injection via makeRequest.cgiShenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi…
CVE-2026-41923WDR201A WiFi Extender OS Command Injection via internet.cgiShenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi…
CVE-2026-41922WDR201A WiFi Extender OS Command Injection via wireless.cgiShenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi…
CVE-2026-32833Cudy LT300 3.0 OS Command Injection via NTP ConfigurationShenzhen Cudy Technology Co., Ltd. LT300 3.0
CVE-2026-29521Hereta ETH-IMC408M CSRF via Configuration SetupShenzhen Hereta Technology Co., Ltd. Hereta ETH-IMC408M
CVE-2026-29520Hereta ETH-IMC408M Reflected XSS via ping_ipaddr ParameterShenzhen Hereta Technology Co., Ltd. Hereta ETH-IMC408M
CVE-2026-29513Hereta ETH-IMC408M Stored XSS via Device LocationShenzhen Hereta Technology Co., Ltd. Hereta ETH-IMC408M
CVE-2026-29510Hereta ETH-IMC408M Stored XSS via Device NameShenzhen Hereta Technology Co., Ltd. Hereta ETH-IMC408M
CVE-2026-27758SODOLA SL902-SWTGW124AS <= 200.1.20 Missing CSRF ProtectionsShenzhen Hongyavision Technology Co., Ltd. (Sodola…
CVE-2026-27757SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password ChangeShenzhen Hongyavision Technology Co., Ltd. (Sodola…
CVE-2026-27756SODOLA SL902-SWTGW124AS <= 200.1.20 Reflected XSS in Management InterfaceShenzhen Hongyavision Technology Co., Ltd. (Sodola…
CVE-2026-27755SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session IDShenzhen Hongyavision Technology Co., Ltd. (Sodola…
CVE-2026-27754SODOLA SL902-SWTGW124AS <= 200.1.20 MD5 Session Token GenerationShenzhen Hongyavision Technology Co., Ltd. (Sodola…
CVE-2026-27753SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate LimitingShenzhen Hongyavision Technology Co., Ltd. (Sodola…
CVE-2026-27752SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential TransmissionShenzhen Hongyavision Technology Co., Ltd. (Sodola…
CVE-2026-27751SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default CredentialsShenzhen Hongyavision Technology Co., Ltd. (Sodola…
CVE-2026-27514Tenda F3 Plaintext Credential Exposure in Configuration DownloadShenzhen Tenda Technology Co., Ltd. Tenda F3
CVE-2026-27512Tenda F3 Reflected Script Execution via Missing nosniff HeaderShenzhen Tenda Technology Co., Ltd. Tenda F3
CVE-2026-27511Tenda F3 Clickjacking in Web Management InterfaceShenzhen Tenda Technology Co., Ltd. Tenda F3
CVE-2026-25857Tenda G300-F Command Injection via formSetWanDiagShenzhen Tenda Technology Tenda G300-F
CVE-2026-24441Tenda AC7 Transmits Admin Credentials Without HTTPS ProtectionShenzhen Tenda Technology Co., Ltd. Tenda AC7
CVE-2026-24440Tenda W30E V2 Allows Password Changes Without Verifying Current PasswordShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24439Tenda W30E V2 Lacks X-Content-Type-Options HeaderShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24437Tenda W30E V2 Missing Cache Controls for Credential-bearing PagesShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24436Tenda W30E V2 Lacks Rate Limiting on AuthenticationShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24435Tenda W30E V2 Permissive CORS Allows Cross-origin Data AccessShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24434Tenda AC7 Web Interface Lacks CSRF Protections for Admin ActionsShenzhen Tenda Technology Co., Ltd. Tenda AC7
CVE-2026-24433Tenda W30E V2 Stored XSS via Username FieldShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24432Tenda W30E V2 Missing CSRF Protections for Administrative ActionsShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24431Tenda W30E V2 Web UI Reveals Passwords in CleartextShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24430Tenda W30E V2 HTTP Responses Expose Plaintext CredentialsShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24429Tenda W30E V2 Hardcoded Default Password for Built-in AccountShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24428Tenda W30E V2 Incorrect Authorization Allows Administrator Password ChangeShenzhen Tenda Technology Co., Ltd. W30E V2
CVE-2026-24427Tenda AC7 Exposes Admin Credentials in Configuration ResponsesShenzhen Tenda Technology Co., Ltd. Tenda AC7
CVE-2026-24426Tenda AC7 Reflected XSS via Web Interface Output EncodingShenzhen Tenda Technology Co., Ltd. Tenda AC7
CVE-2026-19348Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injectionShenzhen Aitemi M300 Wi-Fi Repeater
CVE-2025-8019Shenzhen Libituo Technology LBT-T300-T310 appy.cgi sub_40B6F0 buffer overflowShenzhen Libituo Technology LBT-T300-T310
CVE-2025-7077Shenzhen Libituo Technology LBT-T300-T310 appy.cgi config_3g_para buffer overflowShenzhen Libituo Technology LBT-T300-T310
CVE-2025-5680Shenzhen Dashi Tongzhou Information Technology AgileBPM Groovy Script SysScriptController.java executeScript…Shenzhen Dashi Tongzhou Information Technology AgileBPM
CVE-2025-5679Shenzhen Dashi Tongzhou Information Technology AgileBPM SysToolsController.java parseStrByFreeMarker deserializationShenzhen Dashi Tongzhou Information Technology AgileBPM
CVE-2025-4281Shenzhen Sixun Software Sixun Shanghui Group Business Management System LoadData information disclosureShenzhen Sixun Software Sixun Shanghui Group Business…
CVE-2025-34152Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time ParameterShenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
CVE-2025-34151Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command InjectionShenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
CVE-2025-34150Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command InjectionShenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
CVE-2025-34149Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 KeyShenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
CVE-2025-34148Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSIDShenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
CVE-2025-34147Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSIDShenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater
CVE-2025-34045WeiPHP Path Traversal Arbitrary File ReadShenzhen Yuanmengyun Technology Co., Ltd. WeiPHP
CVE-2025-34044WIFISKY 7-Layer Flow Control Router Remote Command ExecutionShenzhen Lingkong Technology WIFISKY 7-layer flow control…
CVE-2025-2358Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System HTTP Header Service.asmx sql injectionShenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP…
CVE-2025-2114Shenzhen Sixun Software Sixun Shanghui Group Business Management System Reset Password Interface OperatorStop.asp…Shenzhen Sixun Software Sixun Shanghui Group Business…
CVE-2025-14697Shenzhen Sixun Software Sixun Shanghui Group Business Management System ExportFiles file accessShenzhen Sixun Software Sixun Shanghui Group Business…
CVE-2025-14696Shenzhen Sixun Software Sixun Shanghui Group Business Management System UpdatePasswordBatch password recoveryShenzhen Sixun Software Sixun Shanghui Group Business…
CVE-2025-11914Shenzhen Ruiming Technology Streamax Crocus DeviceFileReport.do download path traversalShenzhen Ruiming Technology Streamax Crocus
CVE-2025-11913Shenzhen Ruiming Technology Streamax Crocus Service.do download path traversalShenzhen Ruiming Technology Streamax Crocus
CVE-2025-11912Shenzhen Ruiming Technology Streamax Crocus DeviceState.do Query sql injectionShenzhen Ruiming Technology Streamax Crocus
CVE-2025-11911Shenzhen Ruiming Technology Streamax Crocus DeviceFault.do Query sql injectionShenzhen Ruiming Technology Streamax Crocus
CVE-2025-11910Shenzhen Ruiming Technology Streamax Crocus MemoryState.do query sql injectionShenzhen Ruiming Technology Streamax Crocus
CVE-2025-11909Shenzhen Ruiming Technology Streamax Crocus RepairRecord.do queryLast sql injectionShenzhen Ruiming Technology Streamax Crocus
CVE-2025-11908Shenzhen Ruiming Technology Streamax Crocus FileDir.do uploadFile unrestricted uploadShenzhen Ruiming Technology Streamax Crocus
CVE-2025-10374Shenzhen Sixun Business Management System OperatorStop improper authorizationShenzhen Sixun Business Management System
CVE-2024-58352Landray OA Unauthenticated HQL Injection via wechatLoginHelper.doShenzhen Landray Software Co., Ltd. Landry Office…
CVE-2024-52275Denial of Service on Tenda AC6V2 Due To Stack OverflowShenzhen Tenda Technology Co Tenda AC6V2
CVE-2024-52274Denial of Service on Tenda AC6V2 Due To Stack OverflowShenzhen Tenda Technology Co Tenda AC6V2
CVE-2024-52273Denial of Service on Tenda AC6V2 Due To Stack OverflowShenzhen Tenda Technology Co Tenda AC6V2
CVE-2024-52272Denial of Service on Tenda AC6V2 Due To Stack OverflowShenzhen Tenda Technology Co Tenda AC6V2
CVE-2024-14007TVT NVMS-9000 < 1.3.4 Unauthenticated Administrative Queries & Information DisclosureShenzhen TVT Digital Technology Co., Ltd. NVMS-9000
CVE-2024-12235Shenzhen Dashi Tongzhou Information Technology AgileBPM AuthorizationTokenCheckFilter.java doFilter access controlShenzhen Dashi Tongzhou Information Technology AgileBPM
CVE-2023-6099Shenzhen Youkate Industrial Facial Love Cloud Payment System Account SystemMng.ashx privileges managementShenzhen Youkate Industrial Facial Love Cloud Payment System
CVE-2021-47802Tenda D151 & D301 - Configuration DownloadShenzhen Tenda Technology Co.,Ltd. Tenda D151 & D301
CVE-2021-4463Longjing Technology BEMS API <= 1.21 Remote Arbitrary File DownloadShenzhen Longjing Technology Co. Ltd. BEMS API
CVE-2020-36914QiHang Media Web Digital Signage 3.0.9 Cookie Authentication Credentials DisclosureShenzhen Xingmeng Qihang Media Co., Ltd. QiHang Media Web…
CVE-2020-36899QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File DisclosureShenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng…
CVE-2020-36898QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File DeletionShenzhen Xingmeng Qihang Media Co., Ltd.Guangzhou Hefeng…
CVE-2020-36897QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code ExecutionShenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng…
CVE-2020-36896QiHang Media Web Digital Signage 3.0.9 Cleartext Credentials DisclosureShenzhen Xingmeng Qihang Media Co., Ltd.Guangzhou Hefeng…
CVE-2019-25354iSmartViewPro 1.3.34 - Denial of ServiceShenzhen Smarteye Digital Electronics Co., Ltd.…
CVE-2018-25126TVT NVMS-9000 Hard-coded API Credentials & Command InjectionShenzhen TVT Digital Technology Co., Ltd. NVMS-9000
104 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.