Get help with security issues
本公告为 Apple 安全支持的通用帮助页面，网址指向 https://support.apple.com/en-us/111756，标题为“Get help with security issues”。该页面旨在引导用户获取关于 Appl
2026-06-13 归档
今日共收录 1165 条安全情报，包含 370 个 CVE，402 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Background Security Improvements
Apple 发布了背景安全改进公告（Background Security Improvements），涉及对操作系统底层安全机制的增强。此类改进通常不针对特定漏洞，而是通过加固系统内核、内存保护、代码签名验证、沙箱逃逸防护等手段提升整体安
浙公网安备 33010602009975号
该输入来自阿里云安全公告，但标题为公安备案号（浙公网安备 33010602009975号），链接指向公安备案系统，并非实际漏洞或安全公告。公告正文缺失，无CVE、无受影响产品、无严重性评级。疑似数据录入错误或信息不全，无法提取有效安全内容。
PocsuitePocsuite 是由知道创宇安全研究团队打造的一款开源的远程漏洞测试框架。它是知道创宇安全研究团队发展的基石，是团队发展至今一直维护的一个项目，保障了我们的 Web安全研究能力的领先。
Pocsuite 是由知道创宇安全研究团队开发并持续维护的开源远程漏洞测试框架。该框架旨在辅助安全研究人员进行 Web 安全研究，通过模块化设计支持多种漏洞验证场景。作为知道创宇安全研究能力的基础组件，它整合了团队多年的漏洞挖掘经验，为自动
SeebugSeebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台，是国内权威的漏洞库，在国内和国际都享有知名度。 目前收录漏洞数量 52206，PoC 数量 44236，十年风雨，感恩白帽子一路相伴！
知道创宇/Seebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台，国内知名。目前收录漏洞52206个，PoC 44236个。该平台为安全社区提供漏洞信息共享，帮助防御者了解最新漏洞动态。本次输入仅为平台介绍，未涉及具体漏洞公告。
网站安全防护知道创宇十年web安全防护经验，多层安全防护体系结合独有的云端大数据和安全CDN加速，能对黑客恶意发起的诸如DDOS攻击、DNS攻击、CC攻击高效识别和拦截，有效防护您的网站安全不被黑客攻击。
该输入并非安全漏洞或安全公告，而是知道创宇/Seebug提供的网站安全防护服务推广内容。服务描述称其基于十年Web安全防护经验，采用多层防护体系结合云端大数据和安全CDN加速，能够高效识别和拦截DDOS攻击、DNS攻击、CC攻击等黑客行为，
京公网安备 11000002002063号
该条目来源于360CERT，标题为“京公网安备 11000002002063号”，是公安机关的网站备案号。输入数据未包含任何安全漏洞描述、技术细节或威胁情报，实际上并非一个安全公告。因此本摘要仅说明此条为备案信息，不具备安全分析的实质内容。
（总）网出证（京）字第281号
该输入是360CERT发布的关于'网出证（京）字第281号'的备案/资质信息公告，内容不涉及任何安全漏洞、CVE、攻击或防护建议。公告仅表明360CERT持有相关网络出版服务许可证，属于合规性文件，无需安全响应。
京网文〔2020〕6051-1195号
输入内容为网络文化经营许可证号（京网文〔2020〕6051-1195号），并非安全公告或漏洞信息。该信息来源于360CERT，但正文仅包含许可证信息，无任何安全相关描述、漏洞详情或影响说明。无法生成有效的安全摘要。
京ICP证080047号[京ICP备08010314号-6]
该输入为ICP备案信息（京ICP证080047号），并非安全公告或漏洞信息。内容来自360CERT引用的ICP备案官网，无任何技术细节或安全风险描述。
ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, `apos.util.set()` traverses dot-notation paths without sanitizing `__p...
CVE-2026-53609
ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, `apos.util.se
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Prior to version 2.0.13, fallbackToFrontend in the dashboard's NoRoute handler tr...
CVE-2026-53519
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Prior to version 2.0.13,
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, a RoleMember user can create a schedu...
CVE-2026-46716
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to be
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions...
CVE-2026-44990
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi
Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt embedded in every firmware image. Once this salt is recovered from any device, an ...
CVE-2026-28742
Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt embedded in every firmwar
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is con...
CVE-2026-48558
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the
Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CW...
CVE-2026-50091
Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses h
The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance ...
CVE-2026-50090
The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due
The Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api) would authorize any valid developer token for access to any account. This is an instance of "CWE-862: Missing Au...
CVE-2026-50084
The Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api) would authorize any valid developer token for access to
Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authenticatio...
CVE-2026-6853
Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry