bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 8000 --to bore.pu...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

cargo-perm

Description A new vulnerability in cargo version 1.7.0 has been found as explained here. Step by Step First you have to make sure your cargo version is vulnerable cargo --version Supose I have a cargo project with the following src/main.rs file: use numbigint::BigInt; use std::str::FromStr; //...

test-fuzz

test-fuzz test-fuzz is a Cargo subcommand and a collection of Rust macros to automate certain tasks related to fuzzing with afl.rs, including: generating a fuzzing corpus implementing a fuzzing harness test-fuzz accomplishes these in part using Rust's testing facilities. For example, to generate ...

cargo-fuzz

cargo fuzz Acargo subcommand for fuzzing with libFuzzer! Easy to use! Installation $ cargo install cargo-fuzz Note: libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64, and only on Unix-like operating systems not Windows. This also needs a nightly compiler since it us...

gping

gping 🚀 Ping, but with a graph. Comes with the following super-powers: Graph the ping time for multiple hosts Graph the execution time for commands via the --cmd flag Custom colours Windows, Mac and Linux support Table of Contents Install 💿 Usage 🎷 Install 💿 macOS Homebrew: brew install gping...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

dredge-cargo

This is NOT a password manager. NOT a notes app. And definetely NOT a deep-sea benthic abberant specimen taxonomic provenance registry. But it does the first two better than either. Just kidding not really. Install • Quick Start • Features • The Link Command • Commands • How It Works • Security •...

gaia

Gaia: Global API Integrity Assessor Dependencies Install opam to build the tests API. Install git, python3, pip and .NET to build RESTler and Schemathesis. Install cargo to build Gaia. Install docker v26.0.1 and docker compose v2.26.1 to build Gaia with the ELK Stack optionnal if not. Install nod...

cve-2022-21658

CVE-2022-21658 poc Make sure the use the Rust 1.58.0 version. First run: while :; do mkdir /tmp/legit; rm -r /tmp/legit; ln -s /tmp/sensitive /tmp/legit; done Then: cargo run...

CVE-2022-24713-POC

POC of CVE-2022-24713 on Ubuntu Install the current rust-regex package on Ubuntu. Then, clone this repo. Then, run cargo build. The regex dependency is set to the /usr/share/cargo/registry folder, so there will be no dependency issues. If the compilation takes an absurdly ridiculous long amount o...

HiddenSteps

Core crates — implementation status This is the honest, current-state complement to docs/design/02-system-architecture.md's target module map. It says what's actually built, what's verified against a real backend vs. a mock, and what's still genuinely missing — not what's planned that's...

MGASA-2026-0555 Updated vim package fixes security vulnerabilities

Ex Command Injection via Unescaped Buffer Name in signjump in Vim v9.2.1090 Arbitrary Code Execution via Ruby Omni-Completion in Vim 9.2.1177 Command Execution via Rmd Syntax Highlighting in Vim 9.2.1178 Ex Command Execution via Cargo Quickfix Hooks in Vim 9.2.1201...

Updated vim package fixes security vulnerabilities

Ex Command Injection via Unescaped Buffer Name in signjump in Vim v9.2.1090 Arbitrary Code Execution via Ruby Omni-Completion in Vim 9.2.1177 Command Execution via Rmd Syntax Highlighting in Vim 9.2.1178 Ex Command Execution via Cargo Quickfix Hooks in Vim 9.2.1201...

RUSTSEC-2026-0412 Arbitrary code execution when rerunning tests from a portable recording

Summary Nextest versions between 0.9.125 and 0.9.149 inclusive allow the cargo nextest run --rerun or -R command with a malicious portable recording to run arbitrary code during the build. The result is arbitrary code execution with the privileges of the user running cargo nextest. This...

Arbitrary code execution when rerunning tests from a portable recording

Summary Nextest versions between 0.9.125 and 0.9.149 inclusive allow the cargo nextest run --rerun or -R command with a malicious portable recording to run arbitrary code during the build. The result is arbitrary code execution with the privileges of the user running cargo nextest. This...

assurance-density-poc

Real checker adequacy PoC Decision against the user's origi...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.99.0-1.1.hum1 aarch64, s390x, x8664 clippy-1.99.0-1.1.hum1 aarch64, s390x, x8664 rust-1.99.0-1.1.hum1 aarch64, s390x, x8664 rust-analyzer-1.99.0-1.1.hum1 aarch64, s390x, x8664...

aerovault (>=0.6.0, <=0.6.5), aetheric-core (>=0.1.0-alpha, <=0.1.2-alpha) +508 more potentially affected by unknown CVE via zstd (0.13.3)

zstd CARGO version 0.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on zstd and may be impacted: - aerovault =0.6.0, =0.1.0-alpha, =0.1.2, =0.45.0, =0.0.6, =0.0.6, =0.1.0, =0.1.36, =0.1.25, =0.3.0, =0.1.0, =0.1.0, =0.6.1 - antecedent-io 2.0.0 and mo...

Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of gix crates

Summary Vulnerabilites were discovered in the gix family of crates used by the cargo package manager in IBM Open SDK for Rust on AIX 1.94.0.1 and 1.96.0.0. Vulnerability Details CVEID:CVE-2026-82248 DESCRIPTION: gix-worktree-state before 0.33.0 part of gitoxide allows writing files outside the...