SpringBoot_Actuator_RCE

Interfaz swagger-ui /swagger-ui.html SpringBoot env: obtención de información sensible mostrada como I Cuando accedemos directamente al sitio SpringBoot, podemos ver que algunos campos de password están rellenos con 1. Mediante $name se pueden obtener los campos en texto claro. 2. Una configuraci...

CVE-2026-53378: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the...

XML Injection

Overview Affected versions of this package are vulnerable to XML Injection when processing XML data with tags containing references to system properties or environment variables. An attacker can access sensitive information, such as credentials, file paths, or system configuration details, by...