60 matches found
CVE-2024-54152
⚙️🔨 IN CORSO POC CVE-2024-54152 Angular Expressions fornisce espressioni per il framework web Angular.JS come modulo autonomo. Prima della versione 1.4.3, un attaccante può scrivere un'espressione malevola che evade la sandbox per eseguire codice arbitrario sul sistema. Con un payload più compless...
CVE-2026-44643
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
Sandbox Escape
Angular Expressions is vulnerable to sandbox escape. The vulnerability is due to malicious expressions using filters that can escape the AngularJS sandbox, which allows an attacker to execute arbitrary code on the underlying system...
GHSA-PW8R-6689-XVF4 Angular Expressions - Remote Code Execution using filters
Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: const expressions = require"angular-expressions"; const result = expressions.compile"a | proto", ; This should throw the error : Filter 'proto' is not...
Eval Injection
Overview angular-expressions is an Angular expression as standalone module. Affected versions of this package are vulnerable to Eval Injection when using filters. An attacker can execute arbitrary code on the system by crafting a malicious expression that escapes the intended sandbox. Remediation...
@algotech-ce/business (>=1.0.1445, <=6.0.28), @algotech-ce/interpretor (>=2.0.0, <=6.0.19) +22 more potentially affected by CVE-2026-44643 via angular-expressions (>=1.0.0, <=1.5.1)
angular-expressions NPM version =1.0.0, =1.0.1445, =2.0.0, =0.1.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0 and...
Angular Expressions - Remote Code Execution using filters
Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: const expressions = require"angular-expressions"; const result = expressions.compile"a | proto", ; This should throw the error : Filter 'proto' is not...
EUVD-2026-29078
Angular Expressions - Remote Code Execution using filters...
@algotech-ce/business (>=1.0.1445, <=6.0.28), @algotech-ce/interpretor (>=2.0.0, <=6.0.19) +22 more potentially affected by CVE-2026-44643 via angular-expressions (>=1.0.0, <=1.5.1)
angular-expressions NPM version =1.0.0, =1.0.1445, =2.0.0, =0.1.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0 and...
NPM: Angular Expressions - Remote Code Execution using filters
Remote Code Execution using filters vulnerability discovered by ? in WordPress Npm angular-expressions versions = 1.5.1...
Eval Injection
Overview org.webjars.npm:angular-expressions is an Angular expression as standalone module. Affected versions of this package are vulnerable to Eval Injection when using filters. An attacker can execute arbitrary code on the system by crafting a malicious expression that escapes the intended...
CVE-2026-44643
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
CVE-2026-44643 Angular Expressions - Remote Code Execution using filters
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
CVE-2026-44643 Angular Expressions - Remote Code Execution using filters
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
CVE-2026-44643 Angular Expressions - Remote Code Execution using filters
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
angular-expressions 安全漏洞
Angular-Expressions is an expression compilation and evaluation tool developed by Peerigon. Versions of Angular-Expressions prior to 1.5.2 contained a security vulnerability. This vulnerability allowed attackers to write malicious expressions using filters to escape the sandbox, potentially...
PT-2026-39620
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
EUVD-2021-0555
Malware in sbrugna...