EUVD-2023-0695

Malicious code in bioql PyPI...

CVE-2016-15025

A vulnerability, which was classified as problematic, was found in generator-hottowel 0.0.11. Affected is an unknown function of the file app/templates/src/server/app.js of the component 404 Error Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

Reflected Cross-site Scripting (XSS)

generator-hottowel is vulnerable to Reflected Cross-site Scripting XSS attacks. The library does not properly handle invalid calls to assets as it uses a custom 404 response object, allowing an attacker to inject and execute JavaScript through the app.use function in app/templates/src/server/app....

generator-hottowel Cross-site Scripting vulnerability

A vulnerability, which was classified as problematic, was found in generator-hottowel 0.0.11. Affected is an unknown function of the file app/templates/src/server/app.js of the component 404 Error Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

GHSA-F8HV-RX9P-F9R4 generator-hottowel Cross-site Scripting vulnerability

A vulnerability, which was classified as problematic, was found in generator-hottowel 0.0.11. Affected is an unknown function of the file app/templates/src/server/app.js of the component 404 Error Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

CVE-2016-15025 generator-hottowel 404 Error _app.js cross site scripting

A vulnerability, which was classified as problematic, was found in generator-hottowel 0.0.11. Affected is an unknown function of the file app/templates/src/server/app.js of the component 404 Error Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

CVE-2016-15025

The CVE-2016-15025 entry concerns generator-hottowel 0.0.11. Affected is an unknown function in app/templates/src/server/_app.js (404 Error Handler). The issue allows cross-site scripting and can be exploited remotely. A patch named c17092fd4103143a9ddab93c8983ace8bf174396 is available; applying ...

PT-2023-10344 · Unknown · Generator-Hottowel

Name of the Vulnerable Software and Affected Versions: generator-hottowel version 0.0.11 Description: A problematic issue was found in the 404 Error Handler component, specifically in the file app/templates/src/server/ app.js. This issue leads to cross-site scripting and can be exploited remotely...

generator-hottowel 跨站脚本漏洞

generator-hottowel is a Yo generator by John Papa Personal Developer. Angular applications are created with HotTowel. A cross-site scripting vulnerability exists in generator-hottowel version 0.0.11, which stems from an issue with unknown functionality in the file app/templates/src/server/app.js ...