347 matches found
CVE-2022-27665
CVE-2022-27665 A Reflected XSS via AngularJS Sandbox Escape Expressions vulnerability exists in Progress/IPSwitch WSFTP Server 8.6.0 that can lead to execution of malicious code and commands on the client due to improper handling of user provided input. By inputting malicious payloads in the...
prithvi
Prithvi Una herramienta de generación de informes para evaluación de seguridad Uso Este proyecto nuestro se puede utilizar para la generación de informes y es muy fácil de usar. Incluye las siguientes características 1. Podemos agregar tipos Owasp y recomendaciones con detalles. 2. Podemos agrega...
Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting
Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary JavaScript content may be executed within the context of the victim's browser. The user visiting the...
angularjs-poc-cve-2022-25869
Informazioni Questa è una Proof-of-Concept minimale per una vulnerabilità XSS di AngularJS che colpisce Internet Explorer CVE-2022-25869. Puoi vederla dal vivo all'indirizzo https://neverendingsupport.github.io/angularjs-poc-cve-2022-25869...
roninforge-angularjs-migration
roninforge-angularjs-migration AngularJS से Angular 18 GitHub Copilot निर्देश पैकेज के लिए स्रोत-सत्यता रिपॉजिटरी, जो github/awesome-copilot पर instructions/angularjs-to-angular-18.instructions.md के रूप में भेजा गया है। RoninForge से उद्यम-लक्षित Copilot उत्पादों की एक नियोजित श्रृंखला में पहला...
MAL-2026-7204 Malicious code in angzlarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7203 Malicious code in angylarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7205 Malicious code in anjularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7176 Malicious code in angulorjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7156 Malicious code in angulatjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angujarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7117 Malicious code in anguearjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7108 Malicious code in aigularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7105 Malicious code in aangularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
GeoNetwork has reflected XSS through client-side template injection
Summary It is possible to craft a URL that causes GeoNetwork to reflect attacker-controlled content into an error page in a way that gets evaluated as a client-side template expression. Combined with known AngularJS sandbox-escape techniques, this can be used to execute arbitrary JavaScript in th...
Linux Distros Unpatched Vulnerability : CVE-2026-11998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution...
CVE-2026-11998
A flaw was found in AngularJS. The Strict Contextual Escaping SCE logic, designed to ensure only trusted values are used in security-sensitive contexts like resource URLs, can be bypassed. This bypass allows an attacker to use unsafe values as resource URLs, leading to arbitrary JavaScript...
DEBIAN-CVE-2026-11998
A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...
CVE-2026-11998
A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...
CVE-2026-11998
A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...