60 matches found
CVE-2024-54152
⚙️🔨 EN PROGRESO CVE-2024-54152 POC Angular Expressions proporciona expresiones para el framework web Angular.JS como un módulo independiente. Antes de la versión 1.4.3, un atacante puede escribir una expresión maliciosa que escapa del sandbox para ejecutar código arbitrario en el sistema. Con un...
CVE-2026-44643
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
Sandbox Escape
Angular Expressions is vulnerable to sandbox escape. The vulnerability is due to malicious expressions using filters that can escape the AngularJS sandbox, which allows an attacker to execute arbitrary code on the underlying system...
@algotech-ce/business (>=1.0.1445, <=6.0.28), @algotech-ce/interpretor (>=2.0.0, <=6.0.19) +41 more potentially affected by CVE-2026-44643 via angular-expressions (>=1.0.0, <=1.5.1)
angular-expressions NPM version =1.0.0, =1.0.1445, =2.0.0, =0.7.0, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.6.0-bootstrap.0, =0.6.0, =0.7.0, =0.7.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.7.1 and more Source cves: CVE-2026-44643 Source advisory:...
Eval Injection
Overview angular-expressions is an Angular expression as standalone module. Affected versions of this package are vulnerable to Eval Injection when using filters. An attacker can execute arbitrary code on the system by crafting a malicious expression that escapes the intended sandbox. Remediation...
GHSA-PW8R-6689-XVF4 Angular Expressions - Remote Code Execution using filters
Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: const expressions = require"angular-expressions"; const result = expressions.compile"a | proto", ; This should throw the error : Filter 'proto' is not...
Angular Expressions - Remote Code Execution using filters
Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: const expressions = require"angular-expressions"; const result = expressions.compile"a | proto", ; This should throw the error : Filter 'proto' is not...
NPM: Angular Expressions - Remote Code Execution using filters
Remote Code Execution using filters vulnerability discovered by ? in WordPress Npm angular-expressions versions = 1.5.1...
EUVD-2026-29078
Angular Expressions - Remote Code Execution using filters...
Eval Injection
Overview org.webjars.npm:angular-expressions is an Angular expression as standalone module. Affected versions of this package are vulnerable to Eval Injection when using filters. An attacker can execute arbitrary code on the system by crafting a malicious expression that escapes the intended...
@algotech-ce/business (>=1.0.1445, <=6.0.28), @algotech-ce/interpretor (>=2.0.0, <=6.0.19) +41 more potentially affected by CVE-2026-44643 via angular-expressions (>=1.0.0, <=1.5.1)
angular-expressions NPM version =1.0.0, =1.0.1445, =2.0.0, =0.7.0, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.6.0-bootstrap.0, =0.6.0, =0.7.0, =0.7.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.6.0-bootstrap.0, =0.7.1 and more Source cves: CVE-2026-44643 Source advisory: OSV:GHSA-PW8R-6689-XVF4...
CVE-2026-44643
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
CVE-2026-44643 Angular Expressions - Remote Code Execution using filters
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
CVE-2026-44643 Angular Expressions - Remote Code Execution using filters
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
CVE-2026-44643 Angular Expressions - Remote Code Execution using filters
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
angular-expressions 安全漏洞
Angular-Expressions is an expression compilation and evaluation tool developed by Peerigon. Versions of Angular-Expressions prior to 1.5.2 contained a security vulnerability. This vulnerability allowed attackers to write malicious expressions using filters to escape the sandbox, potentially...
PT-2026-39620
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2...
EUVD-2021-0555
Malware in sbrugna...