网站安全防护知道创宇十年web安全防护经验，多层安全防护体系结合独有的云端大数据和安全CDN加速，能对黑客恶意发起的诸如DDOS攻击、DNS攻击、CC攻击高效识别和拦截，有效防护您的网站安全不被黑客攻击。
该输入是知道创宇旗下云安全平台（云盾）的广告宣传文本，并非安全公告。文中宣称其拥有十年Web安全防护经验，结合多层安全防护体系、云端大数据和安全CDN加速，能够识别和拦截DDoS攻击、DNS攻击、CC攻击等。但未提供任何具体漏洞、技术细节、
2026-06-04 归档
今日共收录 1001 条安全情报，包含 200 个 CVE，398 篇安全通告，以及 115 篇研究论文。
← 返回归档列表京公网安备 11000002002063号
输入内容并非安全公告，而是网站备案信息（京公网安备 11000002002063号），由360CERT提供，但内容仅为公安备案记录，不涉及任何漏洞、安全事件或技术细节。无法基于此生成有意义的漏洞摘要。
（总）网出证（京）字第281号
该页面为360公司的ICP经营许可证公示页面，标题为“（总）网出证（京）字第281号”，来源为360CERT，网址为https://www.360.cn/licence2.html。页面内容仅涉及中国互联网信息服务业务经营许可证（ICP证）
京网文〔2020〕6051-1195号
输入内容为网络文化经营许可证信息（京网文〔2020〕6051-1195号），并非网络安全公告或漏洞信息。无法提取安全相关摘要。
京ICP证080047号[京ICP备08010314号-6]
该输入为京ICP证和备案号信息，来源为360CERT，但内容仅涉及网站备案编号，并非网络安全漏洞或安全公告。未提供任何漏洞描述、CVE编号、受影响产品或严重性评估。因此无法生成安全相关摘要。
RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.
CVE-2026-36748
RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafte...
CVE-2026-36576
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 al
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.
CVE-2026-35075
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full a
ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Fully addressed. When the serialised stream contains a TC_...
CVE-2026-47065
ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy Assessment: Ful
Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
CVE-2025-14771
Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0
LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves $...
CVE-2026-32625
LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the M
authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by sending an empty POST. This issue has bee...
CVE-2026-49448
authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can
CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.
CVE-2026-38967
CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.
The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the ...
CVE-2026-8653
The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in
OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing...
CVE-2026-10597
OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote a
CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token...
CVE-2026-41860
CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpReq
Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH...
CVE-2026-41858
Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities
A network man-in-the-middle between nats-sync and the BOSH director can steal the director...
CVE-2026-41859
A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth heade
HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS...
CVE-2026-8829
HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::E
PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, ...
CVE-2026-41011
PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz")