Smersh

SMERSH Smersh 是一款面向渗透测试的协作工具，用于跟踪贵公司任务的进度并生成报告。 前端预览（Angular）： 文档 所有信息均可在以下地址获取：https://cmepw.github.io/documentation/ 如何贡献？ 只需 fork 仓库，然后创建分支，进行工作并推送内容，再创建 PR root@kitploit:...

CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Ejecución remota de código no autenticado a través de la librería Angular-Base64-Upload para más detalles: blog Introducción Las versiones de angular-base64-upload anteriores a v0.1.21 son vulnerables a la ejecución remota de código no autenticado a travé...

CVE-2024-54152

⚙️🔨 EN PROGRESO CVE-2024-54152 POC Angular Expressions proporciona expresiones para el framework web Angular.JS como un módulo independiente. Antes de la versión 1.4.3, un atacante puede escribir una expresión maliciosa que escapa del sandbox para ejecutar código arbitrario en el sistema. Con un...

CVE-2026-32635-Angular-XSS-Mitigation-

CVE-2026-32635: Angular i18n Attribute XSS - Mitigation & Detection PoC 📌 Descripción General Este repositorio contiene una demostración educativa de la mitigación y detección para CVE-2026-32635 , una vulnerabilidad de Cross-Site Scripting XSS en Angular que afecta a los atributos...

CVE-2026-22610

Escáner de Vulnerabilidades SVG en Angular CVE-2026-22610 Propósito: Escanea proyectos Angular en busca de posibles vulnerabilidades XSS en elementos SVG Uso Ejecute el script desde la raíz del proyecto: Escanear la carpeta actual root@kitploit: node scan-angular-svg-vuln-final.js Escanear una...

CVE-2026-27739-POC

-CVE-2026-27739-poc curl -H "X-Forwarded-For: http://169.254.169.254/latest/meta-data/" self.target 2. Inyección de encabezados mediante contaminación de prototipos CVSS: 7.5 Descripción : Angular SSR procesa parámetros de consulta no seguros que afectan la cadena de prototipos Impacto :...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

ngrev

ngrev Angular 项目的逆向工程图形化工具。它允许你在应用程序的结构中导航，并观察不同模块、提供者和指令之间的关系。该工具执行静态代码分析 ，这意味着你无需运行你的应用程序 即可使用它。 ngrev 并非由 Angular 团队维护。它是一个由开源社区开发的附属项目。 如何使用？ macOS 1. 前往发布页面。 2. 下载最新的 .dmg 文件。 3. 安装该应用程序。 该应用程序未签名，因此你可能需要明确允许你的 mac 在 系统偏好设置 - 安全性与隐私 - 通用 中运行它。 Linux 1. 前往发布页面。 2. 下载最新的 .AppImage 文件。 3. 运行...

CVE-2023-34840

CVE-2023-34840 漏洞说明 angular-ui-notification 的所有版本都存在 XSS 漏洞，因为该库没有对用户提供的输入进行转义。 为了安全使用该库，强烈 建议对传递给该库的参数进行转义/编码，例如以下方式： root@kitploit: private sanitizeHTMLstr: string return str.replace/^\w. /gi, c = &$c.charCodeAt0;; 利用 假设该库已经导入并被某个项目使用。该库的使用方式可能如下： root@kitploit: private showNotificationmessage:...

CVE-2024-42640

CVE-2024-42640 Ejecución Remota de Código No Autenticada mediante la librería Angular-Base64-Upload CVE-2024-42640 Las versiones de Angular-base64-upload anteriores a v0.1.21 son vulnerables a la ejecución remota de código no autenticada a través del endpoint angular-base64-upload/demo/server.php...

Angular-Base64-Upload - Remote Code Execution

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...

roninforge-angularjs-migration

roninforge-angularjs-migration 用于AngularJS到Angular 18 的GitHub Copilot指令包的源真存储库，该指令包已交付到github/awesome-copilot的instructions/angularjs-to-angular-18.instructions.md。这是RoninForge计划的一系列面向企业的Copilot产品中的第一个（计划中：.NET Framework到.NET 9迁移、HIPAA PHI编辑、T-SQL反模式、遗留代码的特征测试）。 问题 AngularJS 1.x 于2021年12月31日...

DSpace__DSpace_CVE-2022-31192_5-100

DSpace Documentación de DSpace | Lanzamientos de DSpace | Wiki de DSpace | Soporte Resumen El software de código abierto DSpace es una aplicación de repositorio llave en mano utilizada por más de 2,000 organizaciones e instituciones en todo el mundo para proporcionar acceso duradero a recursos...

CVE-2026-92213

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

CVE-2026-92213

a2ui-project a2ui (versions up to 0.10.6) is affected by an injection vulnerability in the Angular Renderer component. The vulnerable code is located in the function z.any within the file renderers/web_core/src/v0_9/schema/server-to-client.ts. By manipulating the primaryColor argument, a remote a...

CVE-2026-92213 a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

EUVD-2026-80071

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

CVE-2026-92213 a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

CVE-2026-92213 a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

CVE-2026-92213: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...