SeebugSeebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台，是国内权威的漏洞库，在国内和国际都享有知名度。 目前收录漏洞数量 52206，PoC 数量 44236，十年风雨，感恩白帽子一路相伴！
本条输入并非一份漏洞安全公告，而是国内漏洞社区平台 Seebug（由知道创宇运营）的站点自我介绍页面摘要，属于数据采集时抓取到的平台首页说明文本。内容只描述该平台自身的定位：一个面向安全研究人员的漏洞参考、分享与学习社区，被其自称为国内较具
2026-09-12 归档
今日共收录 1637 条安全情报，包含 801 个 CVE，449 篇安全通告，以及 100 篇研究论文。
← 返回归档列表网站安全防护知道创宇十年web安全防护经验，多层安全防护体系结合独有的云端大数据和安全CDN加速，能对黑客恶意发起的诸如DDOS攻击、DNS攻击、CC攻击高效识别和拦截，有效防护您的网站安全不被黑客攻击。
该输入内容为知道创宇（Seebug 相关推广位）发布的网站安全防护产品宣传页面，其性质是厂商市场推广材料，而非安全漏洞公告、威胁情报或事件通报。页面未包含 CVE 编号、受影响产品与版本、组件用途说明、漏洞成因、触发条件或技术细节，也未提供
京公网安备 11000002002063号
本条输入并非漏洞公告或安全事件通告，而是 360CERT 站点页面中出现的公安联网备案信息：备案号为“京公网安备 11000002002063号”，对应链接指向公安部全国互联网安全管理服务平台的备案查询页面（beian.gov.cn）。此类
（总）网出证（京）字第281号
本次输入的标题为“（总）网出证（京）字第281号”，来源标注为 360CERT，发布链接指向 360 官方网站的资质/许可说明页面（360.cn/license2.html）。从编号形式看，这属于中国互联网信息服务相关的备案或许可证编号，通
京网文〔2020〕6051-1195号
该条目标题「京网文〔2020〕6051-1195号」是我国网络文化经营许可证（俗称“文网文”）的编号格式：前缀“京”表示北京市主管部门核发，“2020”为批准年份，后段数字为年度流水与序列号。来源为 360CERT 官方网站的资质/许可展示
京ICP证080047号[京ICP备08010314号-6]
本条输入并未包含任何真实的安全公告内容。其标题为“京ICP证080047号[京ICP备08010314号-6]”，这是中国工业和信息化部对网站经营者发放的增值电信业务经营许可证编号（京ICP证080047号）与网站备案编号（京ICP备080
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSimpleCMS...
CVE-2026-53952
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic f
An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005...
CVE-2026-79395
An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia I
Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.
CVE-2026-62105
Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.
Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions.
CVE-2026-62103
Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions.
Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the `/authorize` endpoint accepts any `redirect_uri` without validat...
CVE-2026-54072
Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the `/autho
SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action where the arg parameter resolves SQL table names without enforcing an editable colum...
CVE-2026-72710
SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action where the arg parameter res
SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauthenticated attackers to perform pr...
CVE-2026-72709
SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/ac
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV c...
CVE-2026-71644
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacke
Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requ...
CVE-2026-89259
Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS
The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before issuing an authenticated session for a supplied email address in an unauthenti...
CVE-2026-14563
The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before issuing an authentica
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original fi...
CVE-2026-14560
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a cl
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any r...
CVE-2026-14559
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating th
The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type va...
CVE-2026-8778
The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnera
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authenti...
CVE-2026-82107
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information