Lucene search
+L

9690 matches found

RustSec
RustSec
added 2018/06/30 12:0 p.m.15 views

quickersort is deprecated and unmaintained

The author of the quickersort crate has deprecated it and does not recommend using it anymore. Everything in it has been incorporated into std::sortunstable in the standard library as of Rust 1.20. std::sortunstable: https://doc.rust-lang.org/stable/std/primitive.slice.htmlmethod.sortunstable...

4.3AI score
Exploits0Affected Software1
vulnersOsv
vulnersOsv
added 2018/06/29 12:0 p.m.3 views

async_docker (>=0.1.0 <=0.1.1), cargo (>=0.4.0 <=0.8.0) +11 more potentially affected by CVE-2018-20990 via tar (>=0.2.14 <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole =0.1.0 Source cves: CVE-2018-20990 Source advisory: OSV:RUSTSEC-2018-0002...

7.5CVSS7AI score0.01676EPSS
Exploits0
n0where
n0where
added 2018/03/18 3:19 p.m.41 views

Next Generation Graphical Network Analyzer: Deplug

Deplug is a graphical network analyzer powered by web technologies. Features Cross-Platform macOS, Linux, Windows Web-based UI Built-in Package Manager SDK for JavaScript and Rust Concurrency Support Import / Export Deplug supports following formats by default. Pcap File .pcap Preferences...

7.2AI score
Exploits0References1
Filippo.io
Filippo.io
added 2018/02/07 10:57 p.m.19 views

Easy Windows and Linux cross-compilers for macOS

tl;dr: you can install cross-compiler toolchains to compile C/C++ for Windows or Linux from macOS with these two Homebrew Formulas. brew install FiloSottile/musl-cross/musl-cross brew install mingw-w64 Cross-compiling C and C++ is dreadful. While in Go you just need to set an environment variable...

7AI score
Exploits0
Filippo.io
Filippo.io
added 2018/02/07 10:57 p.m.27 views

Easy Windows and Linux cross-compilers for macOS

tl;dr: you can install cross-compiler toolchains to compile C/C++ for Windows or Linux from macOS with these two Homebrew Formulas. brew install FiloSottile/musl-cross/musl-cross brew install mingw-w64 Cross-compiling C and C++ is dreadful. While in Go you just need to set an environment variable...

6.7AI score
Exploits0
GithubExploit
GithubExploit
added 2018/01/18 3:21 a.m.11 views

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server

Introduction This is an automated test tool for the CVE-2017...

7.5CVSS7.3AI score0.99993EPSS
Exploits45
CNVD
CNVD
added 2018/01/04 12:0 a.m.4 views

rust-base64 buffer error vulnerability

rust-base64 is a Base64 encoding tool for the Rust language. A buffer overflow vulnerability exists in rust-base64 version 0.5.1 and earlier. An attacker can exploit this vulnerability to cause memory corruption and possibly execute arbitrary code...

9.8CVSS7.9AI score0.01534EPSS
Exploits0References1
Prion
Prion
added 2018/01/02 8:29 p.m.17 views

Buffer overflow

rust-base64 version = 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encodeconfigbuf' and 'encodeconfig' functions...

7.5CVSS9.6AI score0.01534EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/01/02 8:29 p.m.20 views

CVE-2017-1000430

rust-base64 version = 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encodeconfigbuf' and 'encodeconfig' functions...

9.8CVSS9.9AI score
Exploits0References1
CVE
CVE
added 2018/01/02 8:0 p.m.57 views

CVE-2017-1000430

CVE-2017-1000430 affects the rust-base64 crate; vulnerable in versions

9.8CVSS9.6AI score0.01534EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2018/01/02 8:0 p.m.77 views

CVE-2017-1000430

rust-base64 version = 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encodeconfigbuf' and 'encodeconfig' functions...

9.8CVSS9.8AI score0.01534EPSS
Exploits0
Filippo.io
Filippo.io
added 2017/08/15 12:20 p.m.72 views

rustgo: calling Rust from Go with near-zero overhead

русский Go has good support for calling into assembly, and a lot of the fast cryptographic code in the stdlib is carefully optimized assembly, bringing speedups of over 20 times. However, writing assembly code is hard, reviewing it is possibly harder, and cryptography is unforgiving. Wouldn't it ...

6.9AI score
Exploits0
Filippo.io
Filippo.io
added 2017/08/15 12:20 p.m.22 views

rustgo: calling Rust from Go with near-zero overhead

русский Go has good support for calling into assembly, and a lot of the fast cryptographic code in the stdlib is carefully optimized assembly, bringing speedups of over 20 times. However, writing assembly code is hard, reviewing it is possibly harder, and cryptography is unforgiving. Wouldn't it ...

6.6AI score
Exploits0
vulnersOsv
vulnersOsv
added 2017/07/02 12:0 p.m.14 views

aorura (=0.1.0), arduinors (>=0.1.0 <=0.1.1) +99 more potentially affected by unknown CVE via serial (>=0.2.1 <=0.4.0)

serial CARGO version =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.15.0, =0.16.0, =0.15.0, =0.15.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2017-0008...

5.5AI score
Exploits0
n0where
n0where
added 2017/06/19 4:5 a.m.26 views

Super Android Analyzer

Super Android Analyzer Secure, Unified, Powerful and Extensible Rust Android Analyzer SUPER is a command-line application that can be used in Windows, MacOS X and Linux, that analyzes .apk files in search for vulnerabilities. It does this by decompressing APKs and applying a series of rules to...

7.2AI score
Exploits0References1
n0where
n0where
added 2017/03/03 5:23 a.m.69 views

Browser-based GDB frontend: gdbGUI

A modern, browser-based frontend to gdb gnu debugger. Add breakpoints, view stack traces, and more in C, C++, Go, and Rust! Simply run gdbgui from the terminal and a new tab will open in your browse Features Debug a different program in each tab new gdb instance is spawned for each tab Set/remove...

7.1AI score
Exploits0References4
vulnersOsv
vulnersOsv
added 2017/01/23 12:0 p.m.5 views

AskAI (=0.1.0), BeerHolderBot (>=0.1.0 <=0.3.8) +14875 more potentially affected by CVE-2017-18587 via hyper (>=0.0.1 <=0.9.14)

hyper CARGO version =0.0.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1, =0.0.2, =0.1.0, =0.1.2 and more Source cves: CVE-2017-18587 Source advisory: OSV:RUSTSEC-2017-0002...

5.3CVSS6AI score0.01033EPSS
Exploits0
myhack58
myhack58
added 2017/01/03 12:0 a.m.90 views

Python's new string format vulnerability analysis-vulnerability warning-the black bar safety net

This article on Python introduced a formatted string of the new syntax of the security vulnerabilities in-depth analysis, and provide appropriate security solutions. When we are on untrusted user input using str. the format of the time, will bring security risks-for this problem, in fact I have...

7.1AI score
Exploits0
OSV
OSV
added 2016/11/05 12:0 p.m.45 views

RUSTSEC-2016-0001 SSL/TLS MitM vulnerability due to insecure defaults

All versions of rust-openssl prior to 0.9.0 contained numerous insecure defaults including off-by-default certificate verification and no API to perform hostname verification. Unless configured correctly by a developer, these defaults could allow an attacker to perform man-in-the-middle attacks...

8.1CVSS7.8AI score0.00745EPSS
Exploits0References3
RustSec
RustSec
added 2016/11/05 12:0 p.m.28 views

SSL/TLS MitM vulnerability due to insecure defaults

All versions of rust-openssl prior to 0.9.0 contained numerous insecure defaults including off-by-default certificate verification and no API to perform hostname verification. Unless configured correctly by a developer, these defaults could allow an attacker to perform man-in-the-middle attacks...

8.1CVSS2.6AI score0.00745EPSS
Exploits0Affected Software1
Rows per page
Query Builder