60 matches found
CVE-2024-54152
⚙️🔨 进行中 CVE-2024-54152 POC Angular Expressions 为 Angular.JS Web 框架提供表达式支持，作为一个独立模块。在 1.4.3 版本之前，攻击者可以编写恶意表达式来逃逸沙箱，从而在系统上执行任意代码。通过一个更复杂（未公开）的载荷，攻击者可以在系统上获得完整的任意代码执行能力。该问题已在 Angular Expressions 1.4.3 版本中修复。有两种可行的规避方案：一种是全局禁用对 proto 的访问，另一种是确保该函数仅使用一个参数调用。 概念验证 为了演示该漏洞，我们创建了一个使用存在漏洞的 Angular...
CVE-2026-44643
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
Sandbox Escape
Angular Expressions is vulnerable to sandbox escape. The vulnerability is due to malicious expressions using filters that can escape the AngularJS sandbox, which allows an attacker to execute arbitrary code on the underlying system...
GHSA-PW8R-6689-XVF4 Angular Expressions - Remote Code Execution using filters
Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: const expressions = require"angular-expressions"; const result = expressions.compile"a | proto", ; This should throw the error : Filter 'proto' is not...
@algotech-ce/business (>=1.0.1445, <=6.0.28), @algotech-ce/interpretor (>=2.0.0, <=6.0.19) +41 more potentially affected by CVE-2026-44643 via angular-expressions (>=1.0.0, <=1.5.1)
angular-expressions NPM version =1.0.0, =1.0.1445, =2.0.0, =0.7.0, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.6.0-bootstrap.0, =0.6.0, =0.7.0, =0.7.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.7.1 and more Source cves: CVE-2026-44643 Source advisory:...
Eval Injection
Overview angular-expressions is an Angular expression as standalone module. Affected versions of this package are vulnerable to Eval Injection when using filters. An attacker can execute arbitrary code on the system by crafting a malicious expression that escapes the intended sandbox. Remediation...
Angular Expressions - Remote Code Execution using filters
Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: const expressions = require"angular-expressions"; const result = expressions.compile"a | proto", ; This should throw the error : Filter 'proto' is not...
NPM: Angular Expressions - Remote Code Execution using filters
Remote Code Execution using filters vulnerability discovered by ? in WordPress Npm angular-expressions versions = 1.5.1...
Eval Injection
Overview org.webjars.npm:angular-expressions is an Angular expression as standalone module. Affected versions of this package are vulnerable to Eval Injection when using filters. An attacker can execute arbitrary code on the system by crafting a malicious expression that escapes the intended...
EUVD-2026-29078
Angular Expressions - Remote Code Execution using filters...
@algotech-ce/business (>=1.0.1445, <=6.0.28), @algotech-ce/interpretor (>=2.0.0, <=6.0.19) +41 more potentially affected by CVE-2026-44643 via angular-expressions (>=1.0.0, <=1.5.1)
angular-expressions NPM version =1.0.0, =1.0.1445, =2.0.0, =0.7.0, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.6.0-bootstrap.0, =0.6.0, =0.7.0, =0.7.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.7.1 and more Source cves: CVE-2026-44643 Source advisory: OSV:GHSA-PW8R-6689-XVF4...
CVE-2026-44643
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
CVE-2026-44643 Angular Expressions - Remote Code Execution using filters
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
CVE-2026-44643 Angular Expressions - Remote Code Execution using filters
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
CVE-2026-44643 Angular Expressions - Remote Code Execution using filters
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
angular-expressions 安全漏洞
Angular-Expressions is an expression compilation and evaluation tool developed by Peerigon. Versions of Angular-Expressions prior to 1.5.2 contained a security vulnerability. This vulnerability allowed attackers to write malicious expressions using filters to escape the sandbox, potentially...
PT-2026-39620
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
EUVD-2021-0555
Malware in sbrugna...