1901 matches found
MAL-2025-268 Malicious code in aem-angular-editable-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fca4a582054bbff21e69768e3b5934e358df88c79f61073e65cf4272a8510544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in aem-angular-editable-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fca4a582054bbff21e69768e3b5934e358df88c79f61073e65cf4272a8510544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Advanced Angular Contact Form plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Advanced Angular Contact Form versions = 1.1.0...
Arbitrary Code Execution (ACE)
angular-expressions is vulnerable to Arbitrary Code Execution ACE. The vulnerability is due to ability to escape the sandbox through a malicious expression, allowing an attacker to execute arbitrary code on the system...
The vulnerability of the application development environment and the Angular single-page application platform, related to improper code generation management, allows attackers to execute arbitrary code.
The vulnerability of the application development environment and the Angular single-page application platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
GHSA-5462-4VCX-JH7J Angular Expressions - Remote Code Execution when using locals
Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: js const expressions = require"angular-expressions"; const result = expressions.compile"proto.constructor", ; // result should be undefined, however fo...
@algotech-ce/business (>=1.0.1445, <=4.1.118), @algotech-ce/interpretor (>=2.0.0, <=4.1.62) +5 more potentially affected by CVE-2024-54152 via angular-expressions (>=1.0.0, <=1.2.1)
angular-expressions NPM version =1.0.0, =1.0.1445, =2.0.0, =2.7.9, =2.11.5, =0.2.2-alpha, =1.4.0-beta.12, =3.0.0-alpha.1 Source cves: CVE-2024-54152 Source advisory: OSV:GHSA-5462-4VCX-JH7J...
Angular Expressions - Remote Code Execution when using locals
Impact An attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. Example of vulnerable code: js const expressions = require"angular-expressions"; const result = expressions.compile"proto.constructor", ; // result should be undefined, however fo...
CVE-2024-54152
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...
UBUNTU-CVE-2024-54152
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...
CVE-2024-54152 Angular Expressions - Remote Code Execution when using locals
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...
CVE-2024-54152 Angular Expressions - Remote Code Execution when using locals
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...
CVE-2024-54152
CVE-2024-54152 affects angular-expressions (Angular Expressions) prior to version 1.4.3. A malicious expression can escape the sandbox and enable arbitrary code execution; a more complex payload may grant full control. The issue is fixed in 1.4.3. Workarounds include disabling global access to pr...
CVE-2024-54152 Angular Expressions - Remote Code Execution when using locals
Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...
Angular 代码注入漏洞
Angular is a development platform. for building mobile and desktop web applications using Typescript / JavaScript and other languages. A code injection vulnerability exists in Angular 1.4.2 and earlier versions, which stems from the fact that an attacker can write a malicious expression to break...
MAL-2024-11412 Malicious code in oneui-angular (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in oneui-angular (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in flutter-angular-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9260d321765ddb3fe1ce34c703f7caa0678c61f5701aa82730d092fcb83373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11142 Malicious code in flutter-angular-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9260d321765ddb3fe1ce34c703f7caa0678c61f5701aa82730d092fcb83373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
