bochscpu-python

bochscpu-python Bindings Python pour le BochsCPU d'@yrp, utilisant la FFI pour émuler facilement et avec précision du code x86. Installation...

OffensiveLua

Offensive Lua Offensive Lua est une collection complète de scripts de sécurité offensive et de red team écrits en Lua avec FFI Foreign Function Interface. Ces scripts exploitent la puissance et la flexibilité de LuaJIT sur Microsoft Windows pour effectuer des opérations avancées de test d'intrusi...

OffensiveNim

OffensiveNim تجاربي في تسليح Nim لتطوير البرامج الضارة والعمليات الهجومية العامة. جدول المحتويات OffensiveNim جدول المحتويات لماذا Nim؟ أمثلة في هذا المستودع تعمل أمثلة قيد التطوير تجميع الأمثلة في هذا المستودع الطريقة السهلة موصى بها الطريقة الصعبة للشجعان التجميع المتقاطع التفاعل مع C/C++ إنشاء...

libinjection

libinjection SQL / SQLI tokenizer parser analyzer. For C and C++ PHP Python Lua Java external port LuaJIT/FFI https://github.com/p0pr0ck5/lua-ffi-libinjection external port See https://www.client9.com/ for details and presentations. Simple example: root@kitploit: include include include include...

Argos

Argos — Plateforme de traçage d'actifs blockchain Argos est une plateforme d'investigation blockchain multi-langages pour tracer, analyser et visualiser les flux de fonds sur Ethereum et Bitcoin. Construite avec Rust, OCaml et TypeScript/React. Architecture root@kitploit: +-----------------------...

RustTLSX

RustTLSX 🦀 . Un client HTTP furtif avancé pour Rust. Conçu pour les développeurs soucieux de leur confidentialité qui ont besoin d'un contrôle total sur leur empreinte réseau. Ressemble à un navigateur. Se comporte comme un navigateur. Écrit en Rust. Crédits et fondements Construit...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: sccache, rustup, lychee, parseable, zizmor, qdrant, linkerd-extension-init, rustls-ffi, samply, xh, oranda, kdash, wasmtime, deno, shadowsocks-rust, wash, wasm-pack, atuin, zola, cargo-audit, ntpd-rs, zed, pixi, nushell, uv, wasmcloud, tealdeer, wadm, buck2, rye,...

CVE-2026-11941 Use-after-free in connection ID iterator and FFI functions

Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI functions. The “quicheconnectioniditernext” and “quicheconnretiredscidnext” functions would return a pointer to a “ConnectionId” to the applications via function arguments, but the owned...

PT-2026-50870

Name of the Vulnerable Software and Affected Versions Cloudflare Quiche versions prior to 0.29.2 Description Two use-after-free issues exist in the connection ID iterator FFI Foreign Function Interface functions. The functions quiche connection id iter next and quiche conn retired scid next retur...

abd-clam (>=0.21.8, <=0.25.3), abe_gpsw (>=0.8.0, <=2.0.0) +631 more potentially affected by unknown CVE via pyo3 (>=0.2.7, <=0.28.3)

pyo3 CARGO version =0.2.7, =0.21.8, =0.8.0, =0.12.0, =0.2.1, =0.3.0, =0.1.0, =0.1.2, =2.0.0-rc.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14 and more Source cves: unknown CVE Source advisory: OSV:GHSA-36HH-V3QG-5JQ4...

PT-2026-49124

This crate provides internal FFI utilities for the pqcrypto- ecosystem, directly wrapping C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches or bug fixes will be applied to the upstream...

[SECURITY] Fedora 44 Update: rust-openssl-sys-0.9.114-1.fc44

FFI bindings to OpenSSL...

Linux Distros Unpatched Vulnerability : CVE-2026-41898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind...

CVE-2026-41898

A flaw was found in rust-openssl, a library providing OpenSSL bindings for the Rust programming language. Foreign Function Interface FFI trampolines in several SslContextBuilder callbacks did not properly validate the size of data returned by user-defined closures before passing it to OpenSSL. Th...

EUVD-2026-25587

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::setpskclientcallback, setpskservercallback, setcookiegeneratecb, and setstatelesscookiegeneratecb forwarded the user closure's returned usize...

GHSA-HPPC-G8H3-XHP3 rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer

The FFI trampolines behind SslContextBuilder::setpskclientcallback, setpskservercallback, setcookiegeneratecb, and setstatelesscookiegeneratecb forwarded the user closure's returned usize directly to OpenSSL without checking it against the &mut u8 that was handed to the closure. This can lead to...

zantetsu-ffi is unmaintained

The zantetsu-ffi crate is no longer maintained. The Node.js, Python, and C FFI bindings it provided were removed as part of the zantetsu 0.2 release, which refocused the project on its core Rust library. A tombstone version 0.2.0 has been published and 0.1.4 has been yanked. There is no replaceme...

CVE-2026-30793

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

EUVD-2026-9827

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

CVE-2026-30793

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...