717 matches found
PT-2025-53724
Name of the Vulnerable Software and Affected Versions 201206030 novel version 3.5.0 Description A DOM-based Cross-Site Scripting XSS issue exists in the book comment module due to insufficient validation and encoding of user-controllable data. Unfiltered input is stored in the commentContent fiel...
CVE-2025-65442: Improper Neutralization of Input During Web Page Generation
DOM-based Cross-Site Scripting XSS vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrary JavaScript code or disclose sensitive information e.g., user session cookies via a crafted "wvstest" parameter in the URL or malicious script injection into window.localStorage...
novel 安全漏洞
novel is an open source novel system by xxyopen open source. A security vulnerability exists in novel version V3.5.0, which stems from insufficient validation and coding of user-controllable data, and may result in the execution of arbitrary JavaScript code or the disclosure of sensitive...
EUVD-2025-78702
Malicious code in novelherringz3n npm...
EUVD-2025-78701
Malicious code in novelperchz3n npm...
MAL-2025-106399 Malicious code in novel_herring_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7654b9589b3f6f36740bd12fc3fc990379d308433c365ea787b4a559443e005f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81089
Malicious code in novelbear0xrequest npm...
EUVD-2025-62878
Malicious code in novelmulez3n npm...
EUVD-2025-62877
Malicious code in novelrookz3n npm...
EUVD-2025-62875
Malicious code in noveltoucanz3n npm...
MAL-2025-95680 Malicious code in novel_tuna_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8f82dc6e2168c95093c8ca8d946be957328c69a10f39a50cea0cec52fb9498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-95678 Malicious code in novel_spider_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1f780743155cedb46bc2f2a14e504b9a5acc2b77f9fea0273db1ba7578675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53003
Malicious code in novel-amethyst-shark npm...
EUVD-2025-53004
Malicious code in novel-amethyst-felidae npm...
EUVD-2025-53002
Malicious code in novel-apricot-pigeon npm...
EUVD-2025-53001
Malicious code in novel-aquamarine-nightingale npm...
EUVD-2025-52999
Malicious code in novel-olive-coyote npm...
MAL-2025-69650 Malicious code in novel-olive-coyote (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7022ae9589bda855deae44fca7e62e315ed318dc30678bd1508c3fc2c309fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...