Malicious code in aem-angular-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fca4a582054bbff21e69768e3b5934e358df88c79f61073e65cf4272a8510544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-268 Malicious code in aem-angular-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fca4a582054bbff21e69768e3b5934e358df88c79f61073e65cf4272a8510544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Advanced Angular Contact Form plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Advanced Angular Contact Form versions = 1.1.0...

Exploit for CVE-2024-54152

⚙️🔨 IN PROGRESS CVE-2024-54152 POC Angular Expressions...

Arbitrary Code Execution (ACE)

angular-expressions is vulnerable to Arbitrary Code Execution ACE. The vulnerability is due to ability to escape the sandbox through a malicious expression, allowing an attacker to execute arbitrary code on the system...

Application Development Environment Angular Code Execution

The vulnerability of the application development environment and the Angular single-page application platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GHSA-5462-4VCX-JH7J Angular Expressions - Remote Code Execution when using locals

Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: js const expressions = require"angular-expressions"; const result = expressions.compile"proto.constructor", ; // result should be undefined, however fo...

Angular Expressions - Remote Code Execution when using locals

Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: js const expressions = require"angular-expressions"; const result = expressions.compile"proto.constructor", ; // result should be undefined, however fo...

@algotech-ce/business (>=1.0.1445, <=4.1.118), @algotech-ce/interpretor (>=2.0.0, <=4.1.62) +4 more potentially affected by CVE-2024-54152 via angular-expressions (>=1.0.0, <=1.2.1)

angular-expressions NPM version =1.0.0, =1.0.1445, =2.0.0, =2.11.5, =0.2.2-alpha, =1.4.0-beta.12, =3.0.0-alpha.1 Source cves: CVE-2024-54152 Source advisory: OSV:GHSA-5462-4VCX-JH7J...

@algotech-ce/business (>=1.0.1445, <=4.1.118), @algotech-ce/interpretor (>=2.0.0, <=4.1.62) +4 more potentially affected by CVE-2024-54152 via angular-expressions (>=1.0.0, <=1.2.1)

angular-expressions NPM version =1.0.0, =1.0.1445, =2.0.0, =2.11.5, =0.2.2-alpha, =1.4.0-beta.12, =3.0.0-alpha.1 Source cves: CVE-2024-54152 Source advisory: GHSA-5462-4VCX-JH7J...

CVE-2024-54152

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

UBUNTU-CVE-2024-54152

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

CVE-2024-54152

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

CVE-2024-54152 Angular Expressions - Remote Code Execution when using locals

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

@algotech-ce/business (>=1.0.1445, <=4.1.118), @algotech-ce/interpretor (>=2.0.0, <=4.1.62) +33 more potentially affected by CVE-2024-54152 via angular-expressions (>=0.1.0, <=1.2.1)

angular-expressions NPM version =0.1.0, =1.0.1445, =2.0.0, =2.11.5, =1.8.0, =1.0.0, =1.0.0, =0.5.2, =0.7.6, =1.4.0, =1.6.0 and more Source cves: CVE-2024-54152 Source advisory: MEND:CVE-2024-54152...

CVE-2024-54152

CVE-2024-54152 affects angular-expressions (Angular Expressions) prior to version 1.4.3. A malicious expression can escape the sandbox and enable arbitrary code execution; a more complex payload may grant full control. The issue is fixed in 1.4.3. Workarounds include disabling global access to pr...

CVE-2024-54152 Angular Expressions - Remote Code Execution when using locals

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

CVE-2024-54152 Angular Expressions - Remote Code Execution when using locals

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

Angular code injection vulnerability

Angular is a development platform. for building mobile and desktop web applications using Typescript / JavaScript and other languages. A code injection vulnerability exists in Angular 1.4.2 and earlier versions, which stems from the fact that an attacker can write a malicious expression to break...

PT-2024-9452

Name of the Vulnerable Software and Affected Versions: Angular Expressions versions prior to 1.4.3 Description: The issue is related to the incorrect management of code generation in the Angular Expressions module for the Angular.JS web framework. An attacker can write a malicious expression that...