MAL-2025-29705 Malicious code in procyon-perseus-vortex-paleoecology (npm)

The package procyon-perseus-vortex-paleoecology was found to contain malicious code...

Malicious code in ursa-perseus-loopback-aldebaran (npm)

The package ursa-perseus-loopback-aldebaran was found to contain malicious code...

MAL-2025-38553 Malicious code in void-perseus-rocket-zenobia (npm)

The package void-perseus-rocket-zenobia was found to contain malicious code...

MAL-2025-24527 Malicious code in kinetic-release-it-perseus-ursa (npm)

The package kinetic-release-it-perseus-ursa was found to contain malicious code...

Malicious code in perseus-lacerta-yonder-hyperion (npm)

The package perseus-lacerta-yonder-hyperion was found to contain malicious code...

MAL-2025-28226 Malicious code in on-duplex-perseus-quasar (npm)

The package on-duplex-perseus-quasar was found to contain malicious code...

MAL-2025-34633 Malicious code in technocracy-native-perseus-element-ui (npm)

The package technocracy-native-perseus-element-ui was found to contain malicious code...

MAL-2025-18659 Malicious code in dotenv-foundation-perseus-version (npm)

The package dotenv-foundation-perseus-version was found to contain malicious code...

perseus.tufts.edu Cross Site Scripting vulnerability OBB-3816077

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

U.S. Government Neutralizes Russia's Most Sophisticated Snake Cyber Espionage Tool

The U.S. government on Tuesday announced the court-authorized disruption of a global network compromised by an advanced malware strain known as Snake wielded by Russia's Federal Security Service FSB. Snake, dubbed the "most sophisticated cyber espionage tool," is the handiwork of a Russian...

MAL-2022-5300 Malicious code in perseus-build-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f095fbbce26786deb1270d0df290b7fae9833463edf76e8ed8f0a34da1f8bcfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perseus-build-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f095fbbce26786deb1270d0df290b7fae9833463edf76e8ed8f0a34da1f8bcfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WS-2021-0492

This vulnerability affects all users of the "perseus deploy" functionality who have not exported their sites to static files. If you are using the inbuilt Perseus server in production, there is a memory leak in Actix Web stemming from "this upstream issue"...

DoS Vulnerability from Upstream Actix Web Issues

Impact This vulnerability affects all users of the perseus deploy functionality who have not exported their sites to static files. If you are using the inbuilt Perseus server in production, there is a memory leak in Actix Web stemming from this upstream issue which can allow even a single user to...

GHSA-GJRJ-9RJ4-PGWX DoS Vulnerability from Upstream Actix Web Issues

Impact This vulnerability affects all users of the perseus deploy functionality who have not exported their sites to static files. If you are using the inbuilt Perseus server in production, there is a memory leak in Actix Web stemming from this upstream issue which can allow even a single user to...

PT-2021-24421

Name of the Vulnerable Software and Affected Versions: Perseus versions prior to v0.3.0-beta.21 Description: This issue affects users of the perseus deploy functionality who have not exported their sites to static files and are using the inbuilt Perseus server in production. A memory leak in Acti...

Xiaomi perseus-p-oss MIX 3 integer overflow vulnerability

Xiaomi perseus-p-oss MIX 3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. Xiaomi perseus-p-oss MIX 3 An integer overflow vulnerability exists in the sdeevtlogfilterwrite method of the drivers/gpu/drm/msm/sdedbg.c file in the Xiaomi perseus-p-oss MIX 3 on 2018-11-26 and earlier...

CVE-2018-20787

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbgwrite in drivers/input/touchscreen/ft5x46/ft5x46ts.c. This is exploitable for a device crash v...

PT-2019-19365

Name of the Vulnerable Software and Affected Versions msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 Description The issue is caused by an integer overflow due to missing checks of the count argument in the sde evtlog filter write function in...

CVE-2019-9111: Integer Overflow or Wraparound

The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in sdeevtlogfilterwrite in drivers/gpu/drm/msm/sdedbg.c. This is exploitable for a device crash via a syscall by...