GHSA-2VH6-HW4J-32WW vulnerabilities

Vulnerabilities for packages: cargo-audit...

GHSA-2VH6-HW4J-32WW vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2022-24713-POC

PoC von CVE-2022-24713 auf Ubuntu Installieren Sie das aktuelle rust-regex-Paket auf Ubuntu. Dann klonen Sie dieses Repo. Dann führen Sie cargo build aus. Die Regex-Abhängigkeit ist auf den Ordner /usr/share/cargo/registry gesetzt, daher gibt es keine Abhängigkeitsprobleme. Wenn die Kompilierung...

gping

gping 🚀 Ping, but with a graph. Comes with the following super-powers: Graph the ping time for multiple hosts Graph the execution time for commands via the --cmd flag Custom colours Windows, Mac and Linux support Table of Contents Install 💿 Usage 🎷 Install 💿 macOS Homebrew: brew install gping...

cve-2022-21658

CVE-2022-21658 poc Certifique-se de usar a versão Rust 1.58.0. Primeiro execute: root@kitploit: while :; do mkdir /tmp/legit; rm -r /tmp/legit; ln -s /tmp/sensitive /tmp/legit; done Depois: root@kitploit: cargo run...

HiddenSteps

Kern-Crates — Implementierungsstatus Dies ist die ehrliche, den aktuellen Stand abbildende Ergänzung zur Zielmodul-Karte aus docs/design/02-system-architecture.md. Sie sagt, was tatsächlich gebaut ist, was gegen ein echtes Backend statt gegen einen Mock verifiziert wurde und was wirklich noch feh...

cargo-perm

描述 在 cargo 版本 1.7.0 中发现了一个新漏洞，详情请见此处。 逐步操作 首先，你需要确认你的 cargo 版本是否存在此漏洞。 cargo --version 假设我有一个 cargo 项目，其 src/main.rs 文件如下： root@kitploit: use numbigint::BigInt; use std::str::FromStr; // 无聊的猜数字游戏 fn main let secretnumber = BigInt::fromstr"123456789"; loop println!"猜一个数字："; let mut guess =...

bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. root@kitploit: Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 80...

gaia

Gaia: Global API Integrity Assessor Dipendenze Installa opam per compilare le API di test. Installa git, python3, pip e .NET per compilare RESTler e Schemathesis. Installa cargo per compilare Gaia. Installa docker v26.0.1 e docker compose v2.26.1 per compilare Gaia con ELK Stack opzionale se non...

sniffglue

sniffglue sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted networks and that it must not crash when processing packets. The output should be as...

test-fuzz

test-fuzz test-fuzz ist ein Cargo-Subcommand und eine Sammlung von Rust-Makros, um bestimmte Aufgaben im Zusammenhang mit Fuzzing mit afl.rs zu automatisieren, darunter: Generieren eines Fuzzing-Korpus Implementieren einer Fuzzing-Harness test-fuzz erreicht dies teilweise mithilfe der...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

dredge-cargo

Dies ist KEIN Passwort-Manager. KEINE Notizen-App. Und definitiv KEINE taxonomische Herkunftsregistrierung für benthische Tiefsee-Abnormitäten. Aber die ersten beiden macht es besser als beide. Nur ein Scherz nicht wirklich. Installieren • Schnellstart • Funktionen • Der Link-Befehl • Befehle • S...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

cargo-fuzz

cargo fuzz Un sottocomandocargo per il fuzzing con libFuzzer! Facile da usare! Installazione root@kitploit: $ cargo install cargo-fuzz Nota: libFuzzer richiede il supporto dei sanitizer LLVM, quindi funziona solo su x86-64 e Aarch64, e solo su sistemi operativi Unix-like non Windows. Richiede anc...

CVE-2026-74018

Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...

CVE-2026-74018 WordPress Warehouse Cargo theme <= 2.6.9 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...

CVE-2026-74018

CVE-2026-74018 is an Arbitrary File Upload vulnerability in the WordPress Theme Warehouse Cargo (versions ≤ 2.6.9 ). The vulnerability is accessible to users with Subscriber privileges and carries a CVSS 3.1 score of 9.9 (Critical) , with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicatin...

EUVD-2026-63318

Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...

`aronenao` was removed from crates.io due to malicious code

We identified that aronenao contained malicious code executed through a build script. This crate had 11 versions, with the most recent one being published at 2026-08-18. The crate was removed from crates.io and the user account was locked. This crate was used as part of a malware campaign targete...