SeebugSeebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台，是国内权威的漏洞库，在国内和国际都享有知名度。 目前收录漏洞数量 52206，PoC 数量 44236，十年风雨，感恩白帽子一路相伴！
本输入并非具体漏洞或安全公告，而是对“Seebug”漏洞社区平台的介绍。Seebug 由知道创宇运营，是国内知名的漏洞参考、分享与学习平台，也被称为权威漏洞库之一。平台目前收录漏洞数量 52206 个，PoC 数量 44236 个，并宣称在
2026-08-08 归档
今日共收录 1332 条安全情报，包含 443 个 CVE，483 篇安全通告，以及 115 篇研究论文。
← 返回归档列表网站安全防护知道创宇十年web安全防护经验，多层安全防护体系结合独有的云端大数据和安全CDN加速，能对黑客恶意发起的诸如DDOS攻击、DNS攻击、CC攻击高效识别和拦截，有效防护您的网站安全不被黑客攻击。
该输入为知道创宇（Seebug相关页面）发布的一条营销宣传文案，并非安全漏洞公告。文案重点宣传其网站安全防护服务，声称基于十年Web安全防护经验，构建了包含'多层安全防护体系'、'云端大数据'和'安全CDN加速'在内的综合防护方案。该服务宣
京公网安备 11000002002063号
该输入内容为‘京公网安备 11000002002063号’，此信息是中华人民共和国公安部全国互联网安全管理服务平台提供的网站备案编号，并非网络安全漏洞公告或安全事件通报。来源标注为360CERT，但实际内容仅包含备案号，未提供任何漏洞描述、
（总）网出证（京）字第281号
本次输入内容并非网络安全漏洞公告，而是360CERT（三六零网络安全应急响应中心）官方网站上的资质许可证页面。标题“（总）网出证（京）字第281号”是中国网络出版服务许可证的编号，通常由相关监管机构颁发，用于证明企业或组织具备开展网络出版或
京网文〔2020〕6051-1195号
该输入为360CERT网站页面，内容仅包含网络文化经营许可证编号（京网文〔2020〕6051-1195号），属于合规备案信息，并非任何安全漏洞公告或威胁情报。页面未提供漏洞描述、CVE编号、受影响产品、攻击途径或修复建议，因此无法进行技术性
京ICP证080047号[京ICP备08010314号-6]
本输入并非网络安全漏洞公告或威胁情报，而是360CERT提供的一个ICP备案查询页面链接（京ICP证080047号[京ICP备08010314号-6]），指向工信部备案管理系统。内容仅包含备案主体信息，未涉及任何漏洞描述、受影响组件、攻击手
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-...
CVE-2026-50540
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) th
Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integrat...
CVE-2026-48039
Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `A
crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of th...
CVE-2026-71851
crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in Crypt
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.
CVE-2026-64637
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an
Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file...
CVE-2026-19264
Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied pat
Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP ...
CVE-2022-4995
Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthent
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potenti...
CVE-2026-56793
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An
Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing ...
CVE-2026-71560
Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0
Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass t...
CVE-2026-71558
Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from
The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated attackers to perform PHP Object Injection....
CVE-2026-16258
The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing u
The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the attacker-controlle...
CVE-2026-14205
The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to ...
CVE-2026-14365
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in