368 matches found
Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting
Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary JavaScript content may be executed within the context of the victim's browser. The user visiting the...
prithvi
Prithvi 安全评估报告生成工具 使用方法 我们的这个项目可用于生成报告，而且非常易于使用。 它包括以下功能： 1. 我们可以添加OWASP类型及其详细建议。 2. 我们可以添加多个项目并分别进行处理。 3. 我们可以在不同项目上添加多个漏洞，并附带概念验证。 4. 生成报告时，提供文档文件（.docx）。 5. 目前我们正在尝试添加更多功能，如图表，并将很快更新。 设置 1. 在服务器上创建数据库 reporting（我们使用了XAMPP）。 2. 将 reporting.sql 导入本地服务器。 3. 下载完整源代码并解压 nodemodules。 4. 运行 index.js...
CVE-2022-27665
CVE-2022-27665 Progress/IPSwitch WSFTP Server 8.6.0 中存在一个通过 AngularJS Sandbox Escape Expressions 实现的反射型 XSS 漏洞，由于对用户提供的输入处理不当，可能导致在客户端执行恶意代码和命令。通过在子目录搜索栏或添加文件夹文件名框中输入恶意载荷，可以执行客户端命令。 此漏洞也称为客户端模板注入，与服务器端模板注入类似。 漏洞时间线 日期| 操作 ---|--- 2022年3月22日| 发现漏洞 2022年3月22日| 向供应商披露漏洞 2022年3月22日| 通过 MITRE 请求 CVE I...
roninforge-angularjs-migration
roninforge-angularjs-migration Repositorio de referencia para el paquete de instrucciones de GitHub Copilot de AngularJS a Angular 18 enviado a github/awesome-copilot en instructions/angularjs-to-angular-18.instructions.md. Primero de una serie planificada de productos Copilot orientados a empres...
angularjs-poc-cve-2022-25869
Acerca de Esta es una Prueba de Concepto mínima para una vulnerabilidad XSS en un de AngularJS que afecta a Internet Explorer CVE-2022-25869. Puedes verlo en vivo en https://neverendingsupport.github.io/angularjs-poc-cve-2022-25869...
CVE-2026-86484
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
CVE-2026-86484
JetBrains YouTrack before version 2026.2.18634 is vulnerable to a stored cross-site scripting (XSS) flaw caused by AngularJS template injection in assignee names. An authenticated user (low privileges) can craft a malicious assignee name that, when viewed by another user, executes arbitrary scrip...
CVE-2026-86484
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
EUVD-2026-72500
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
CVE-2026-86484
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
Security Bulletin: Vulnerability in AngularJS affects IBM License Key Server Administration and Reporting Tool
Summary Potential vulnerability in AngularJS has been identified that affects IBM License Key Server Administration and Reporting Tool. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-0716 DESCRIPTION: Improper sanitization ...
K000162342: Angular JS vulnerabilities CVE-2024-8372, CVE-2024-8373, CVE-2024-21490, CVE-2025-0716
Security Advisory Description CVE-2024-8372 Improper sanitization of the value of the 'srcset' attribute in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue...
MAL-2026-7204 Malicious code in angzlarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angzlarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angylarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7203 Malicious code in angylarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7205 Malicious code in anjularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in anguwarjs (npm)
--- -= Per source details. Do not edit below this line.=-...