CVE-2018-20787: Integer Overflow or Wraparound

The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbgwrite in drivers/input/touchscreen/ft5x46/ft5x46ts.c. This is exploitable for a device crash v...

perseus-net.eu XSS vulnerability

Open Bug Bounty ID: OBB-570032 Description| Value ---|--- Affected Website:| perseus-net.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

perseus.tufts.edu XSS vulnerability

Vulnerable URL: http://www.perseus.tufts.edu/hopper/morph?l=1"...

perseus.uchicago.edu XSS vulnerability

Vulnerable URL: http://perseus.uchicago.edu/cgi-bin/GreekFrequency.pl?author=Josephus====4000%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22=888888888888888=decreasingFreq=searchbylemma=NOT+English Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerabilit...

nlp.perseus.tufts.edu XSS vulnerability

Vulnerable URL: http://nlp.perseus.tufts.edu/hopper/morph.jsp?l=%22%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E=la Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 19:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

nlp.perseus.tufts.edu XSS vulnerability

Vulnerable URL: http://nlp.perseus.tufts.edu/hopper/text.jsp?greek.display=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E&arabic.display;=UnicodeC=original&navbar.display;=hide=Perseus:text:1999.01.0228:text%3DId.:poem%3D20 Details: Description| Value ---|--- Patched:| Yes, at 10.03.2016 Latest...

perseus.tufts.edu XSS vulnerability

Vulnerable URL: http://www.perseus.tufts.edu/hopper/resolveform?type=exact=derp " / 〈=greek Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank|...

Perseus' Java Hopper Cross Site Scripting

Cross Site Scripting on Perseus' Java Hopper Risk: Low CWE number: CWE-79 Date: 19/05/2014 Project: perseus.tufts.edu Download: sourceforge.net/projects/perseus-hopper Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: morph?l= Exploit:...

osCommerce 2.1/2.2 - 'product_info.php' SQL Injection

source: https://www.securityfocus.com/bid/19774/info osCommerce is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...