SeebugSeebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台，是国内权威的漏洞库，在国内和国际都享有知名度。 目前收录漏洞数量 52206，PoC 数量 44236，十年风雨，感恩白帽子一路相伴！
输入内容为知道创宇旗下 Seebug 漏洞社区平台的首页信息。Seebug 是一个面向安全研究人员的权威漏洞参考、分享与学习平台，在国内和国际安全社区具有一定知名度。根据页面描述，该平台目前收录漏洞数量约 52206 条，PoC（概念验证代
2026-08-01 归档
今日共收录 1220 条安全情报，包含 330 个 CVE，503 篇安全通告，以及 110 篇研究论文。
← 返回归档列表网站安全防护知道创宇十年web安全防护经验，多层安全防护体系结合独有的云端大数据和安全CDN加速，能对黑客恶意发起的诸如DDOS攻击、DNS攻击、CC攻击高效识别和拦截，有效防护您的网站安全不被黑客攻击。
本输入是知道创宇（Seebug）旗下云安全防护服务的宣传页面，并非漏洞公告或安全事件通报。页面介绍了该服务基于十年Web安全防护经验，构建多层安全防护体系，结合云端大数据与安全CDN加速，宣称能够高效识别和拦截DDoS攻击、DNS攻击、CC
京公网安备 11000002002063号
该输入并非网络安全漏洞公告，而是“360CERT”在公安备案系统中的备案记录信息。标题为“京公网安备 11000002002063号”，来源为网安备案页面，发布时间为2026年8月1日。内容中未提供任何漏洞描述、CVE编号、受影响产品、技术
（总）网出证（京）字第281号
本次输入的内容并非网络安全漏洞公告，而是360CERT官网展示的《中华人民共和国电信与信息服务业务经营许可证》页面信息，许可证编号为（总）网出证（京）字第281号。该页面通常用于证明网站运营方的合规资质，不包含任何漏洞描述、受影响产品、CV
京网文〔2020〕6051-1195号
该输入并非真正的安全漏洞公告，而是360CERT网站展示的互联网文化经营许可证信息页面，标题为“京网文〔2020〕6051-1195号”。页面仅用于备案/许可展示，不包含任何漏洞详情、技术分析、影响说明或修复建议。由于没有相关的CVE编号、
京ICP证080047号[京ICP备08010314号-6]
本次输入内容并非有效的厂商安全公告，而是中国工信部 ICP 备案信息页面（京ICP证080047号、京ICP备08010314号-6），来源标注为 360CERT，但实际链接指向 beian.miit.gov.cn。输入中未包含任何漏洞描述
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by...
CVE-2026-68771
CVE-2026-68771 是 ComfyUI v0.23.0 中存在的一个不安全反序列化漏洞，位于 LoadTrainingDataset 节点中。该节点在处理训练数据集时，会使用 torch.load 加载 pickle 格式的文件。
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent fram
sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the import_module_...
CVE-2026-68770
sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code e
vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1, parseVaultConfig() in pkg/webhook/config.go accept...
CVE-2026-54725
vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1
Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlle...
CVE-2026-67822
Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The fu
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholders in egg configuration-file template...
CVE-2026-52855
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{
pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja template and passing the rendered line to psql...
CVE-2026-17566
pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query in
The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, via sqlparse, as exactly one non-trans...
CVE-2026-17351
The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_qu
/misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed the id of an existing server, clones that server via Server.clone()...
CVE-2026-17349
/misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed the id of
Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection....
CVE-2026-17561
Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Cons
DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over a...
CVE-2026-18452
DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote att
The ShopMonitor.io WordPress plugin before 1.2.0 does not properly restrict its email-rerouting test mode, gating it behind a trusted-source check that is satisfiable with clie...
CVE-2026-14919
The ShopMonitor.io WordPress plugin before 1.2.0 does not properly restrict its email-rerouting test mode, gating it be