PocsuitePocsuite 是由知道创宇安全研究团队打造的一款开源的远程漏洞测试框架。它是知道创宇安全研究团队发展的基石，是团队发展至今一直维护的一个项目，保障了我们的 Web安全研究能力的领先。
本条目来源于知道创宇/Seebug，内容为对开源远程漏洞测试框架 Pocsuite 的简要介绍，并非安全漏洞公告。Pocsuite 由知道创宇安全研究团队开发并持续维护，是该团队 Web 安全研究能力的基石，主要用于远程漏洞测试与验证。该框
2026-09-16 归档
今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表SeebugSeebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台，是国内权威的漏洞库，在国内和国际都享有知名度。 目前收录漏洞数量 52206，PoC 数量 44236，十年风雨，感恩白帽子一路相伴！
本次输入并非一条具体的漏洞安全公告，而是国内漏洞社区平台「知道创宇 / Seebug」的站点介绍性文案。内容显示：Seebug 定位为权威的漏洞参考、分享与学习社区平台，被描述为国内权威漏洞库，在国内和国际上均有一定知名度；平台当前收录漏洞
网站安全防护知道创宇十年web安全防护经验，多层安全防护体系结合独有的云端大数据和安全CDN加速，能对黑客恶意发起的诸如DDOS攻击、DNS攻击、CC攻击高效识别和拦截，有效防护您的网站安全不被黑客攻击。
本次输入并非漏洞公告或安全通告，而是知道创宇（yunaq.com 云安全品牌）投放于 Seebug 渠道的一则产品宣传页面。页面标题与正文均为营销性描述，核心内容为：宣称其拥有十年 Web 安全防护经验，采用多层安全防护体系，并结合自有的云
京公网安备 11000002002063号
本条记录并非漏洞公告或威胁情报，而是 360CERT 情报流中出现的一条网站备案信息条目。其标题「京公网安备 11000002002063号」是北京市公安机关依据《计算机信息网络国际联网安全保护管理办法》等规定，对网站主办者核发的公安联网备
（总）网出证（京）字第281号
本条目的标题为“（总）网出证（京）字第281号”，这是中国大陆网络出版服务许可证（网出证）的编号格式，来源标注为 360CERT，来源链接指向 360 官网的许可证公示页面（licence2.html）。输入内容中没有提供任何正文或摘要，没
京网文〔2020〕6051-1195号
本条输入为360CERT来源、标题为“京网文〔2020〕6051-1195号”的条目，链接指向 https://www.360.cn/licence1.html。该编号是中国大陆《网络文化经营许可证》的批准文号（“京网文”为北京市网络文化经
京ICP证080047号[京ICP备08010314号-6]
本条记录标题为「京ICP证080047号[京ICP备08010314号-6]」，这是中国大陆工信部 ICP 许可证／备案编号的典型格式，属于网站合规备案标识，本身不包含任何漏洞、恶意代码、攻击活动或威胁情报内容。来源被标记为 360CERT
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard.
CVE-2026-81855
A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wär
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard.
CVE-2026-78225
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API coul...
CVE-2026-73807
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthentica
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted D...
CVE-2026-73437
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenti
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools without any authenticati...
CVE-2026-61560
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing unauthenticated attackers to instantiate arbitrary PHP c...
CVE-2026-91939
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C...
CVE-2026-91749
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbit
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security...
CVE-2026-91728
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code insid
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.
CVE-2026-66890
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FT
The affected products are missing authorization on state-changing CGIs and session checks are not performed.
CVE-2026-66887
The affected products are missing authorization on state-changing CGIs and session checks are not performed.
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowl...
CVE-2026-61568
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTT
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC_API_UR...
CVE-2026-61559
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/ov...
CVE-2026-54337
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video up