CVE-2024-54152: Improper Control of Generation of Code

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

Malicious code in oneui-angular (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11412 Malicious code in oneui-angular (npm)

--- -= Per source details. Do not edit below this line.=-...

Malware in flutter-angular-bridge

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11142 Malicious code in flutter-angular-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9260d321765ddb3fe1ce34c703f7caa0678c61f5701aa82730d092fcb83373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flutter-angular-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9260d321765ddb3fe1ce34c703f7caa0678c61f5701aa82730d092fcb83373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2024-42640

CVE-2024-42640 Unauthenticated Remote Code Execution via Angul...

Malicious code in @fhnw/angular-app-configuration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48cd6f8295f6741b9e52645ffbbb0792c303dc53b7371dbd456a13ea90d952a5 The OpenSSF Package Analysis project identified '@fhnw/angular-app-configuration' @ 1.0.4 npm as malicious. It is considered malicious because: ...

CVE-2024-50577

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

CVE-2024-50577

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

CVE-2024-50577

JetBrains YouTrack is affected prior to version 2024.3.47707. The CVE-2024-50577 issue is described as a stored XSS vulnerability caused by Angular template injection in Hub settings. Impact is cross-site scripting via Hub settings, with overall security values indicating confidentiality/integrit...

CVE-2024-50577

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

EUVD-2024-44958

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

CVE-2024-50577

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

PT-2024-7634 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.47707 Description: The issue is related to a stored XSS vulnerability via Angular template injection in Hub settings. This could allow an attacker to perform cross-site scripting attacks. The...

CVE-2024-50577: Improper Neutralization of Input During Web Page Generation

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...

Malicious code in dexter-angular-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6bf5598a2ab8cfa28dc285027cc8774d194d3b78d22da1d849cd6ef4d140d28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10233 Malicious code in dexter-angular-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6bf5598a2ab8cfa28dc285027cc8774d194d3b78d22da1d849cd6ef4d140d28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dexter-angular-app

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Remote Code Execution (RCE)

angular-base64-upload is vulnerable to Remote Code Execution RCE. The vulnerability is due to a lack of proper access controls in demo/server.php, allowing attackers to upload arbitrary content, which can then be executed from demo/uploads...