SpringBoot_Actuator_RCE

swagger-ui 接口 /swagger-ui.html SpringBoot env 获取 敏感信息 一 当我们直接访问 springboot 站点时,可以看到某些 password 字段填充了 1. 通过$name 可以获取明文字段 2. 配置不当导致敏感信息泄露password 打星号,而 pwd 没有打星号 参考 https://mp.weixin.qq.com/s/HmGEYRcf1hSVw9Uu9XHGsA 具体实现过程: 例如: 我们要获取 pid 参数值 root@kitploit: "PID": "10648", root@kitploit: POST /env...

CVE-2026-30862 Critical Stored XSS & Privilege Escalation in Appsmith

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget TableWidgetV2. The root cause is a lack of HTML sanitization in the React component rendering pipeline, allowing malicious attributes to be...

EUVD-2026-10412

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget TableWidgetV2. The root cause is a lack of HTML sanitization in the React component rendering pipeline, allowing malicious attributes to be...