425 matches found
CVE-2026-127235
A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNMS Meridian and Horizon. Several web UI pages copy request parameter values into the HTML response without correct contextual output encoding. A remote attacker can craft a link that runs...
angularjs-poc-cve-2022-25869
About This is a minimal Proof-Of-Concept for an AngularJS XSS vulnerability affecting Internet Explorer CVE-2022-25869. You can see it live at https://neverendingsupport.github.io/angularjs-poc-cve-2022-25869...
roninforge-angularjs-migration
roninforge-angularjs-migration Source-of-truth repo for the AngularJS to Angular 18 GitHub Copilot instructions package shipped to github/awesome-copilot at instructions/angularjs-to-angular-18.instructions.md. First in a planned series of enterprise-targeted Copilot products from RoninForge...
CVE-2022-27665
CVE-2022-27665 A Reflected XSS via AngularJS Sandbox Escape Expressions vulnerability exists in Progress/IPSwitch WSFTP Server 8.6.0 that can lead to execution of malicious code and commands on the client due to improper handling of user provided input. By inputting malicious payloads in the...
Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting
Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary JavaScript content may be executed within the context of the victim's browser. The user visiting the...
CVE-2026-39379
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content inside an AngularJS application without adequately...
EUVD-2026-116141
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content inside an AngularJS application without adequately...
CVE-2026-39379
GeoNetwork, a catalog application for spatially referenced resources, is vulnerable to reflected Cross-Site Scripting (XSS) via client-side template injection in versions 3.0.0 up to 4.2.15 and 4.4.10. The root cause is the failure to adequately neutralize request content reflected on an error pa...
CVE-2026-39379 GeoNetwork: Reflected XSS through client-side template injection
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content inside an AngularJS application without adequately...
CVE-2026-39379
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content inside an AngularJS application without adequately...
CVE-2026-39379 GeoNetwork: Reflected XSS through client-side template injection
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content inside an AngularJS application without adequately...
prithvi
Prithvi Una herramienta de generación de informes para evaluación de seguridad Uso Este proyecto nuestro se puede utilizar para la generación de informes y es muy fácil de usar. Incluye las siguientes características 1. Podemos agregar tipos Owasp y recomendaciones con detalles. 2. Podemos agrega...
CVE-2026-86484
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
CVE-2026-86484
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
CVE-2026-86484
JetBrains YouTrack before version 2026.2.18634 is vulnerable to a stored cross-site scripting (XSS) flaw caused by AngularJS template injection in assignee names. An authenticated user (low privileges) can craft a malicious assignee name that, when viewed by another user, executes arbitrary scrip...
EUVD-2026-72500
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
CVE-2026-86484
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
PT-2026-86856
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
CVE-2026-86484: Improper Neutralization of Input During Web Page Generation
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...
