CVE-2026-123676

The xxyopen/201206030 novel software (versions up to 3.5.0 ) is vulnerable to an improper authorization issue in the Book Content Service component. Specifically, the BookServiceImpl.getBookContentAbout function in src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java fails to p...

EUVD-2022-38019

Malicious code in bioql PyPI...

Sql injection

Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java...

CVE-2022-35121

Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java...

CVE-2022-35121

Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java...

CVE-2022-35121: Improper Neutralization of Special Elements used in an SQL Command

Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java...