CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Unauthenticated Remote Code Execution via Angular-Base64-Upload Library for more details: blog Introduction angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the angular-base64-upload/demo/server.p...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

ngrev

ngrev Herramienta gráfica para la ingeniería inversa de proyectos Angular. Permite navegar en la estructura de tu aplicación y observar la relación entre los diferentes módulos, proveedores y directivas. La herramienta realiza análisis estático de código , lo que significa que no necesitas ejecut...

Angular-Base64-Upload - Remote Code Execution

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...

CVE-2023-34840

CVE-2023-34840 Vulnerability Explanation All versions in angular-ui-notification are vulnerable to XSS due to the library not sanitizing the input provided by the user. In order to safely use this library, sanitizing / encoding the parameters passed to this library is highly recommended, such as...

CVE-2024-42640

CVE-2024-42640 Ejecución Remota de Código No Autenticada mediante la librería Angular-Base64-Upload CVE-2024-42640 Las versiones de Angular-base64-upload anteriores a v0.1.21 son vulnerables a la ejecución remota de código no autenticada a través del endpoint angular-base64-upload/demo/server.php...

DSpace__DSpace_CVE-2022-31192_5-100

DSpace DSpace 문서 | DSpace 릴리스 | DSpace 위키 | 지원 개요 DSpace 오픈 소스 소프트웨어는 전 세계 2,000개 이상의 조직 및 기관에서 디지털 자원에 대한 지속적인 접근을 제공하기 위해 사용하는 턴키turnkey 저장소 애플리케이션입니다. 자세한 내용은 http://www.dspace.org/ 를 방문하십시오. DSpace는 Java 기반 백엔드와 Angular 기반 프런트엔드로 구성됩니다. 백엔드이 코드베이스는 REST API 및 기타 머신 기반 인터페이스예: OAI-PMH, SWORD 등...

CVE-2026-88057

A flaw was found in Angular's @angular/core and @angular/compiler components. This vulnerability allows a remote attacker to bypass security sanitization mechanisms. By injecting malicious data into specific HTML attributes, an attacker can cause the application to execute arbitrary JavaScript co...

Smersh

SMERSH Smersh es una herramienta colaborativa orientada a pentesting utilizada para rastrear el progreso de las misiones de tu empresa y generar informes. Vista previa del frontend Angular: Documentación Toda la información está disponible en la siguiente dirección:...

UBUNTU-CVE-2026-88059

Angular is a development platform for building mobile and desktop web...

Linux Distros Unpatched Vulnerability : CVE-2026-88060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

Linux Distros Unpatched Vulnerability : CVE-2026-88058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

UBUNTU-CVE-2026-88058

Angular is a development platform for building mobile and desktop web...

CVE-2026-88057

Angular is a development platform for building mobile and desktop web...

Linux Distros Unpatched Vulnerability : CVE-2026-88056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

Linux Distros Unpatched Vulnerability : CVE-2026-88057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, a...

CVE-2026-88058

Angular is a development platform for building mobile and desktop web...

UBUNTU-CVE-2026-88057

Angular is a development platform for building mobile and desktop web...

CVE-2026-88059

Angular is a development platform for building mobile and desktop web...

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Summary An XSS vulnerability exists in @angular/platform-server during server-side rendering SSR HTML serialization when traversing ancestor tags across element boundaries. When an application renders untrusted user input within raw-text tags , , , comments, or text nodes inside a that is nested...