Rust 资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. futures-task crate before 0.3.6 for Rust contains a security vulnerability that can be exploited by an attacker to potentially cause use-after-free in the case of non-static types...

Rust futures-util crate security vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in futures-util crate before 0.3.2 for Rust, which stems from the fact that FuturesUnordered may result in data corruption due to improper synchronization handling...

async-mutex (>=1.0.1 <=1.4.1), blocking-permit (>=0.1.0 <=1.2.1) +18 more potentially affected by CVE-2020-35915 via futures-intrusive (>=0.2.2 <=0.3.1)

futures-intrusive CARGO version =0.2.2, =1.0.1, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.2.0, =0.10.0, =0.3.6, =0.3.7 - raii-counter-futures =0.1.0 - stm32f1xx-futures =0.1.0 - switchyard =0.1.0 and more Source cves: CVE-2020-35915 Source advisory: OSV:RUSTSEC-2020-0072...

AskAI (=0.1.0), BeerHolderBot (>=0.1.0 <=0.3.8) +26624 more potentially affected by CVE-2020-35905 via futures-util (=0.3.32)

futures-util CARGO version =0.3.32 is affected by a known vulnerability. The following packages have a transitive dependency on futures-util and may be impacted: - AskAI =0.1.0 - BeerHolderBot =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-35905 Sour...

futures.tradingcharts.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144562 Security Researcher ELProfesor Helped patch 2799 vulnerabilities Received 8 Coordinated Disclosure badges Received 107 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

RUSTSEC-2020-0010 tiberius is unmaintained

The author of tiberius has archived the GitHub repository and left the following note: I do not have the time to overhaul the library and do not intend to further maintain the 0.3 version relying on the old futures ecosystem. Suggested alternatives are: - odbc - sqlx forthcoming...

tiberius is unmaintained

The author of tiberius has archived the GitHub repository and left the following note: I do not have the time to overhaul the library and do not intend to further maintain the 0.3 version relying on the old futures ecosystem. Suggested alternatives are: - odbc - sqlx forthcoming...

Stocks, Forex, Futures & News - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stocks, Forex, Futures & News published at the 'play' market has multiple vulnerabilities...

CVE-2014-100003

SQL injection vulnerability in includes/ym-downloadfunctions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ymdownloadid parameter to the default URI...

Sql injection

SQL injection vulnerability in includes/ym-downloadfunctions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ymdownloadid parameter to the default URI...

Equis MetaStock <= 11 Use After Free

No description provided by source. Luigi Auriemma Application: Equis MetaStock http://www.equis.com Versions: = 11 Platforms: Windows Bug: use after free Exploitation: file Date: 06 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

Unfixed XSS vulnerability at www.insidefutures.com

Security researcher aSUaBANG, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting www.insidefutures.com, which at the time of submission ranked 259142 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Equis MetaStock 11 - Use-After-Free

Luigi Auriemma Application: Equis MetaStock http://www.equis.com Versions: = 11 Platforms: Windows Bug: use after free Exploitation: file Date: 06 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1 Introduction...