SeebugSeebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台，是国内权威的漏洞库，在国内和国际都享有知名度。 目前收录漏洞数量 52206，PoC 数量 44236，十年风雨，感恩白帽子一路相伴！
输入内容为国内漏洞平台Seebug的主页介绍或平台概述，并非针对某一具体漏洞或风险的安全公告。该信息由知道创宇/Seebug发布，原文仅描述了平台的基本定位——一个综合性的漏洞参考、分享与学习社区，并列举了两个量化指标：目前收录漏洞数量52
2026-09-02 归档
今日共收录 1494 条安全情报，包含 600 个 CVE，479 篇安全通告，以及 120 篇研究论文。
← 返回归档列表网站安全防护知道创宇十年web安全防护经验，多层安全防护体系结合独有的云端大数据和安全CDN加速，能对黑客恶意发起的诸如DDOS攻击、DNS攻击、CC攻击高效识别和拦截，有效防护您的网站安全不被黑客攻击。
本次输入内容并非实际的安全漏洞公告，而是知道创宇旗下“网站安全防护”产品的一则营销宣传文案。文案主要介绍该产品具备十年Web安全防护经验、多层安全防护体系、云端大数据分析以及安全CDN加速能力，并宣称能识别和拦截DDoS攻击、DNS攻击、C
京公网安备 11000002002063号
该输入条目来自 360CERT，标题为“京公网安备 11000002002063号”，对应的 source_url 指向中国公安备案信息查询页面（beian.gov.cn），而非实际的安全漏洞公告。页面内容仅涉及备案编号等注册信息，未包含任
（总）网出证（京）字第281号
本次输入内容为360网站公示的许可证/备案信息页面，标题为'（总）网出证（京）字第281号'，来源为360CERT官网的一个许可证页面（URL为https://www.360.cn/licence2.html）。内容中没有给出任何漏洞描述、
京网文〔2020〕6051-1195号
该输入并非有效的安全漏洞公告。标题为“京网文〔2020〕6051-1195号”，这是中国互联网信息服务 ICP 许可证编号；来源链接指向 360CERT 的版权或许可页面，而非任何漏洞或安全事件描述（原文为无）。正文摘要为空，未提供 CVE
京ICP证080047号[京ICP备08010314号-6]
输入内容为ICP备案信息，标题为'京ICP证080047号[京ICP备08010314号-6]'，来源标注为360CERT，但链接指向工信部备案系统。该输入未提供任何漏洞描述、CVE编号、受影响产品或厂商信息，也未包含任何技术细节或安全分析
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account ...
CVE-2026-84699
Team Password Manager（团队密码管理器）在14.184.308之前的版本中存在身份验证绕过漏洞（CVE-2026-84699）。该漏洞位于本地账户密码重置流程中，程序未能正确强制实施身份验证要求，导致未认证的远程攻击者能
A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some...
CVE-2026-84441
A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality
The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to...
CVE-2026-14982
The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat
In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts...
CVE-2026-14957
In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not N
APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without...
CVE-2026-84485
APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing
FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController...
CVE-2026-84715
FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allow
A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown...
CVE-2026-84437
A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/c
Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129...
CVE-2026-84697
Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/614
PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a...
CVE-2026-84698
PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a four-byte block number
A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of...
CVE-2026-84438
A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of the file catalog/control
PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the...
CVE-2026-84700
PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000
facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing...
CVE-2026-84702
facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outs
ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv...
CVE-2026-84484
ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthe
Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands...
CVE-2026-84694
Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on man