Lucene search
+L

2890 matches found

Vulnrichment
Vulnrichment
•added 2024/10/11 12:00 a.m.•17 views

CVE-2024-42640

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...

7.9AI score0.39951EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/11 12:00 a.m.•2 views

CVE-2024-42640: Unrestricted Upload of File with Dangerous Type

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...

9.8CVSS8.7AI score0.39951EPSS
SaveExploits5References1
Cvelist
Cvelist
•added 2024/10/11 12:00 a.m.•64 views

CVE-2024-42640

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...

0.39951EPSS
SaveExploits5References2
CNNVD
CNNVD
•added 2024/10/11 12:00 a.m.•41 views

angular-base64-upload 安全漏洞

angular-base64-upload is a library by the individual developers of Adones Pitogo. A security vulnerability exists in angular-base64-upload prior to version 0.1.21, which stems from vulnerability to an unauthenticated remote code execution attack via demo/server.php...

9.8CVSS7.7AI score0.39951EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
•added 2024/10/11 12:00 a.m.•18 views

PT-2024-6803 · Unknown · Angular-Base64-Upload

Name of the Vulnerable Software and Affected Versions: angular-base64-upload versions prior to v0.1.21 Description: The issue is related to the angular-base64-upload library, which has a vulnerability that allows an attacker to execute arbitrary code on the server by uploading a specially crafted...

10CVSS9.4AI score0.39951EPSS
SaveExploits5References27
Github Security Blog
Github Security Blog
•added 2024/10/10 6:34 a.m.•2 views

Malware in visa-ui-angular

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
•added 2024/10/09 2:35 p.m.•453 views

Exploit for CVE-2024-42640

CVE-2024-42640 CVE-2024-42640 Unauthenticated Re...

9.8CVSS10AI score0.39951EPSS
SaveExploits5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/25 5:02 a.m.•9 views

Malicious code in visa-ui-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd965500f041551c6ece4a137b88df7d7c601228f7e039a8130a8514a48b98e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
•added 2024/09/25 5:02 a.m.•12 views

MAL-2024-8962 Malicious code in visa-ui-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd965500f041551c6ece4a137b88df7d7c601228f7e039a8130a8514a48b98e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/25 1:57 a.m.•17 views

Malicious code in design-system-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa76659f890e0326b1b129f7cf3c39dd4b242fa297217ef6b98e4b34fa602ba2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2024/09/25 1:57 a.m.•7 views

MAL-2024-8969 Malicious code in design-system-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa76659f890e0326b1b129f7cf3c39dd4b242fa297217ef6b98e4b34fa602ba2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/09/25 1:57 a.m.•1 views

Malware in design-system-components-angular

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/09/20 1:59 p.m.•34 views

RHSA-2023:0274 Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 (python-XStatic-Angular) security update

Bulletin has no description...

7.5CVSS7.4AI score0.01982EPSS
SaveExploits1References8
OSV
OSV
•added 2024/09/20 1:59 p.m.•21 views

RHSA-2022:8866 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (python-XStatic-Angular) security update

Bulletin has no description...

7.5CVSS7.4AI score0.01982EPSS
SaveExploits1References8
OSV
OSV
•added 2024/09/20 1:59 p.m.•26 views

RHSA-2022:8849 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (python-XStatic-Angular) security update

Bulletin has no description...

7.5CVSS7.4AI score0.01982EPSS
SaveExploits1References8
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/18 6:26 p.m.•9 views

Malicious code in acronym-decoder-chrome-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a3a001eb751394dba7b7d59d8580152ab849a2d8971aecc8c65f800c4276008 The OpenSSF Package Analysis project identified 'acronym-decoder-chrome-angular' @ 1.0.0 npm as malicious. It is considered malicious because: -...

6.9AI score
SaveExploits0
OSV
OSV
•added 2024/09/18 6:26 p.m.•18 views

MAL-2024-8899 Malicious code in acronym-decoder-chrome-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a3a001eb751394dba7b7d59d8580152ab849a2d8971aecc8c65f800c4276008 The OpenSSF Package Analysis project identified 'acronym-decoder-chrome-angular' @ 1.0.0 npm as malicious. It is considered malicious because: -...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/18 7:40 a.m.•6 views

Malicious code in onfido-web-sdk-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0dd02cb44d3292fc8de6ab92614219cc989a1d92d108bf83dc0a40883b44f0d The OpenSSF Package Analysis project identified 'onfido-web-sdk-angular' @ 0.1.0 npm as malicious. It is considered malicious because: - The...

6.9AI score
SaveExploits0
OSV
OSV
•added 2024/09/18 7:40 a.m.•9 views

MAL-2024-8897 Malicious code in onfido-web-sdk-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0dd02cb44d3292fc8de6ab92614219cc989a1d92d108bf83dc0a40883b44f0d The OpenSSF Package Analysis project identified 'onfido-web-sdk-angular' @ 0.1.0 npm as malicious. It is considered malicious because: - The...

7.1AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2024/09/17 7:28 p.m.•8 views

@angular-devkit/build-angular (>=18.0.0-next.0, <=18.1.0-next.2), @angular/build (>=18.0.0-next.3, <=18.1.0-next.2) +101 more potentially affected by CVE-2024-45812 via vite (>=5.2.0, <=5.2.13)

vite NPM version =5.2.0, =18.0.0-next.0, =18.0.0-next.3, =0.36.1-fix1, =0.21.1, =1.0.375, =1.1.0, =5.0.0-alpha.4, =0.1.0-rc.8, =0.0.3, =0.0.22, =18.0.0-next.1, =18.0.0-next.1, =3.0.2, =3.2.12 and more Source cves: CVE-2024-45812 Source advisory: OSV:GHSA-64VR-G452-QVP3...

6.4CVSS6.4AI score0.00636EPSS
SaveExploits0
Rows per page
Query Builder