Lucene search
+L

2734 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/04 9:33 a.m.•9 views

Malicious code in angular-identity-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54c4b1fd6456e049589f15a4f03fe3fdb5370f3e9d0d66e8664835e3c7cb5f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2025/03/04 9:33 a.m.•9 views

MAL-2025-2091 Malicious code in angular-identity-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54c4b1fd6456e049589f15a4f03fe3fdb5370f3e9d0d66e8664835e3c7cb5f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/28 3:57 p.m.•11 views

Malicious code in appauth-angular-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42efa6fffab7cf932595ca803e264928de2ca477fd0603ac14dbe52250cd10d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2025/02/28 3:57 p.m.•9 views

MAL-2025-1571 Malicious code in appauth-angular-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42efa6fffab7cf932595ca803e264928de2ca477fd0603ac14dbe52250cd10d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2025/02/14 1:15 p.m.•11 views

CVE-2025-23658

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tauhidul Alam Advanced Angular Contact Form advanced-angular-contact-form allows Reflected XSS.This issue affects Advanced Angular Contact Form: from n/a through = 1.1.0...

7.1CVSS7.2AI score0.00308EPSS
SaveExploits0References3
NVD
NVD
•added 2025/02/14 1:15 p.m.•35 views

CVE-2025-23658

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tauhidul Alam Advanced Angular Contact Form advanced-angular-contact-form allows Reflected XSS.This issue affects Advanced Angular Contact Form: from n/a through = 1.1.0...

7.1CVSS0.00308EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/14 12:44 p.m.•87 views

CVE-2025-23658

CVE-2025-23658: Reflected XSS in WordPress plugin Advanced Angular Contact Form (

7.1CVSS7.2AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/14 12:44 p.m.•37 views

CVE-2025-23658 WordPress Advanced Angular Contact Form plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tauhidul Alam Advanced Angular Contact Form advanced-angular-contact-form allows Reflected XSS.This issue affects Advanced Angular Contact Form: from n/a through = 1.1.0...

7.1CVSS0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/14 12:44 p.m.•7 views

CVE-2025-23658 WordPress Advanced Angular Contact Form plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tauhidul Alam Advanced Angular Contact Form allows Reflected XSS. This issue affects Advanced Angular Contact Form: from n/a through 1.1.0...

7.1CVSS7AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/14 12:00 a.m.•16 views

WordPress plugin Advanced Angular Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS7.7AI score0.00308EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/14 12:00 a.m.•4 views

CVE-2025-23658: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tauhidul Alam Advanced Angular Contact Form advanced-angular-contact-form allows Reflected XSS.This issue affects Advanced Angular Contact Form: from n/a through = 1.1.0...

7.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/14 12:00 a.m.•5 views

PT-2025-7000

Name of the Vulnerable Software and Affected Versions: Advanced Angular Contact Form versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

7.1CVSS0.00308EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/02/05 3:41 p.m.•25 views

CVE-2020-5219

Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compileuserControlledInput where userControlledInput is text that comes from user input. If running angular-expressions in the browser, an attacker could run any browser script when the...

8.8CVSS7.9AI score0.02393EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 9:01 a.m.•10 views

Malicious code in traceviz-angular-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc7506396340e0fbf5af727101b0de36f0206b339fe3d96829af17496da4b406 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2025/02/03 9:01 a.m.•9 views

MAL-2025-1182 Malicious code in traceviz-angular-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc7506396340e0fbf5af727101b0de36f0206b339fe3d96829af17496da4b406 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/22 4:30 p.m.•10 views

Malicious code in angular-blockchain-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d57e81ada5d84957a71a8517f91acfb92043935f30ce2427748fcc55b5514d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
•added 2025/01/22 4:30 p.m.•11 views

MAL-2025-330 Malicious code in angular-blockchain-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d57e81ada5d84957a71a8517f91acfb92043935f30ce2427748fcc55b5514d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/21 7:47 a.m.•11 views

Malicious code in aem-angular-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fca4a582054bbff21e69768e3b5934e358df88c79f61073e65cf4272a8510544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
•added 2025/01/21 7:47 a.m.•11 views

MAL-2025-268 Malicious code in aem-angular-editable-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fca4a582054bbff21e69768e3b5934e358df88c79f61073e65cf4272a8510544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•16 views

WordPress Advanced Angular Contact Form plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Advanced Angular Contact Form versions = 1.1.0...

7.1CVSS6.1AI score0.00308EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder