CVE-2023-34840

CVE-2023-34840 Explicación de la vulnerabilidad Todas las versiones de angular-ui-notification son vulnerables a XSS debido a que la librería no sanitiza las entradas proporcionadas por el usuario. Para usar esta librería de forma segura, se recomienda encarecidamente sanitizar / codificar los...

CVE-2024-42640

CVE-2024-42640 Ejecución Remota de Código No Autenticada mediante la librería Angular-Base64-Upload CVE-2024-42640 Las versiones de Angular-base64-upload anteriores a v0.1.21 son vulnerables a la ejecución remota de código no autenticada a través del endpoint angular-base64-upload/demo/server.php...

CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Ejecución remota de código no autenticado a través de la librería Angular-Base64-Upload para más detalles: blog Introducción Las versiones de angular-base64-upload anteriores a v0.1.21 son vulnerables a la ejecución remota de código no autenticado a travé...

ngrev

ngrev Herramienta gráfica para la ingeniería inversa de proyectos Angular. Permite navegar en la estructura de tu aplicación y observar la relación entre los diferentes módulos, proveedores y directivas. La herramienta realiza análisis estático de código , lo que significa que no necesitas ejecut...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

Smersh

SMERSH Smersh 是一款面向渗透测试的协作工具，用于跟踪贵公司任务的进度并生成报告。 前端预览（Angular）： 文档 所有信息均可在以下地址获取：https://cmepw.github.io/documentation/ 如何贡献？ 只需 fork 仓库，然后创建分支，进行工作并推送内容，再创建 PR root@kitploit:...

CVE-2024-54152

⚙️🔨 EN PROGRESO CVE-2024-54152 POC Angular Expressions proporciona expresiones para el framework web Angular.JS como un módulo independiente. Antes de la versión 1.4.3, un atacante puede escribir una expresión maliciosa que escapa del sandbox para ejecutar código arbitrario en el sistema. Con un...

CVE-2026-27739-POC

-CVE-2026-27739-poc curl -H "X-Forwarded-For: http://169.254.169.254/latest/meta-data/" self.target 2. Inyección de encabezados mediante contaminación de prototipos CVSS: 7.5 Descripción : Angular SSR procesa parámetros de consulta no seguros que afectan la cadena de prototipos Impacto :...

Angular-Base64-Upload - Remote Code Execution

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...

CVE-2026-32635-Angular-XSS-Mitigation-

CVE-2026-32635: Angular i18n Attribute XSS - Mitigation & Detection PoC 📌 Overview This repository contains an educational demonstration of the mitigation and detection for CVE-2026-32635 , a Cross-Site Scripting XSS vulnerability in Angular that affects internationalized i18n attributes...

CVE-2026-22610

Escáner de Vulnerabilidades SVG en Angular CVE-2026-22610 Propósito: Escanea proyectos Angular en busca de posibles vulnerabilidades XSS en elementos SVG Uso Ejecute el script desde la raíz del proyecto: Escanear la carpeta actual root@kitploit: node scan-angular-svg-vuln-final.js Escanear una...

CVE-2026-92213

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

CVE-2026-92213

a2ui-project a2ui (versions up to 0.10.6) is affected by an injection vulnerability in the Angular Renderer component. The vulnerable code is located in the function z.any within the file renderers/web_core/src/v0_9/schema/server-to-client.ts. By manipulating the primaryColor argument, a remote a...

EUVD-2026-80071

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

CVE-2026-92213 a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

CVE-2026-92213 a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

roninforge-angularjs-migration

roninforge-angularjs-migration Repositorio de referencia para el paquete de instrucciones de GitHub Copilot de AngularJS a Angular 18 enviado a github/awesome-copilot en instructions/angularjs-to-angular-18.instructions.md. Primero de una serie planificada de productos Copilot orientados a empres...

DSpace__DSpace_CVE-2022-31192_5-100

DSpace Documentación de DSpace | Lanzamientos de DSpace | Wiki de DSpace | Soporte Resumen El software de código abierto DSpace es una aplicación de repositorio llave en mano utilizada por más de 2,000 organizaciones e instituciones en todo el mundo para proporcionar acceso duradero a recursos...

CVE-2026-88057

A flaw was found in Angular's @angular/core and @angular/compiler components. This vulnerability allows a remote attacker to bypass security sanitization mechanisms. By injecting malicious data into specific HTML attributes, an attacker can cause the application to execute arbitrary JavaScript co...

Linux Distros Unpatched Vulnerability : CVE-2026-88060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...