SpringBoot_Actuator_RCE

swagger-ui-Schnittstelle /swagger-ui.html SpringBoot env – Abrufen sensibler Informationen Teil 1 Wenn wir die springboot-Website direkt aufrufen, sehen wir, dass einige password-Felder mit ausgefüllt sind. 1. Über $name lassen sich Klartextfelder abrufen. 2. Fehlkonfiguration führt zur Offenlegu...

CVE-2026-30862 Critical Stored XSS & Privilege Escalation in Appsmith

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget TableWidgetV2. The root cause is a lack of HTML sanitization in the React component rendering pipeline, allowing malicious attributes to be...

EUVD-2026-10412

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget TableWidgetV2. The root cause is a lack of HTML sanitization in the React component rendering pipeline, allowing malicious attributes to be...