PocsuitePocsuite 是由知道创宇安全研究团队打造的一款开源的远程漏洞测试框架。它是知道创宇安全研究团队发展的基石，是团队发展至今一直维护的一个项目，保障了我们的 Web安全研究能力的领先。
Pocsuite 是由知道创宇安全研究团队开发和维护的一个开源远程漏洞测试框架，是团队安全研究能力的重要基础设施。该框架旨在辅助安全研究人员对远程目标进行漏洞验证与安全评估，通过模块化设计和可扩展的接口，提升 Web 安全研究的效率和准确性
2026-08-12 归档
今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表SeebugSeebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台，是国内权威的漏洞库，在国内和国际都享有知名度。 目前收录漏洞数量 52206，PoC 数量 44236，十年风雨，感恩白帽子一路相伴！
本次输入为知道创宇旗下 Seebug 漏洞平台的简介信息，并非具体的安全漏洞公告。Seebug 是一个面向安全研究人员的漏洞参考、分享与学习社区，号称是国内权威的漏洞库，同时在国际上也有一定知名度。该平台目前收录漏洞数量 52206 条，P
网站安全防护知道创宇十年web安全防护经验，多层安全防护体系结合独有的云端大数据和安全CDN加速，能对黑客恶意发起的诸如DDOS攻击、DNS攻击、CC攻击高效识别和拦截，有效防护您的网站安全不被黑客攻击。
此次输入并非真正意义上的安全漏洞公告，而是一条来自知道创宇/Seebug的网站安全防护服务宣传性页面。页面标题描述了厂商多年Web安全防护经验、多层防护体系、云端大数据与安全CDN加速，并宣称可识别和拦截DDoS、DNS及CC攻击。但输入中
京公网安备 11000002002063号
本输入并非网络安全漏洞公告或安全事件通告，而是一条来自360CERT的ICP备案信息记录，标题为“京公网安备 11000002002063号”，其源链接指向国内公安备案查询系统（beian.gov.cn），展示的是某主体的公安联网备案编号。
（总）网出证（京）字第281号
该输入为360CERT官方网站的许可证/资质公示页面，标题为“网出证（京）字第281号”，内容仅涉及网站备案或合规资质信息，并非网络安全漏洞公告。输入中未包含任何漏洞描述、受影响组件、攻击向量、利用条件或安全建议，也没有关联的CVE编号。因
京网文〔2020〕6051-1195号
本次输入为360CERT的一条记录，标题为『京网文〔2020〕6051-1195号』，该标题实为网站ICP备案号，并非安全漏洞或威胁公告。来源URL指向360.cn的许可证页面（https://www.360.cn/licence1.htm
京ICP证080047号[京ICP备08010314号-6]
该输入并非网络安全厂商公告，而是一条中国大陆网站ICP备案信息（备案号：京ICP证080047号，京ICP备08010314号-6）。信息来自360CERT，但链接指向工信部备案查询系统（beian.miit.gov.cn），发布时间为20
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botne
A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices
A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules
The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied emai...
CVE-2026-68067
The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active
The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, del...
CVE-2026-67568
The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from int
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerability that allows remote attackers to exec...
CVE-2026-5917
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command inj
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote ...
CVE-2026-66147
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth `credentialsId` from a readable bot configuratio...
CVE-2026-48765
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspa
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory...
CVE-2026-73034
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary f
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint ...
CVE-2026-73032
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary Jav
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and...
CVE-2026-66145
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier version
LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches...
CVE-2026-45618
LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbit