119 matches found
it-sec-toolshell
ToolShell — SharePoint Zero-Day Presentation A Marp slide deck about CVE-2025-53770, with each slide kept in its own file under slides/. Build ./build.sh assemble slides into presentation.md ./build.sh html + render presentation.html ./build.sh pdf + render presentation.pdf ./build.sh all + HTML,...
CVE-2026-123989
A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.0. Impacted is the function loadGitStatus of the file build.rs of the component Build Script Execution. Performing a manipulation results in permission issues. The attack may be initiated remotely. Upgrading to version 1.34.0 is...
EUVD-2026-119315
A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.0. Impacted is the function loadGitStatus of the file build.rs of the component Build Script Execution. Performing a manipulation results in permission issues. The attack may be initiated remotely. Upgrading to version 1.34.0 is...
CVE-2026-123989 ESEngine DeepSeek-Reasonix Build Script Execution build.rs loadGitStatus permission
A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.0. Impacted is the function loadGitStatus of the file build.rs of the component Build Script Execution. Performing a manipulation results in permission issues. The attack may be initiated remotely. Upgrading to version 1.34.0 is...
CVE-2026-123989
A vulnerability exists in ESEngine DeepSeek-Reasonix up to version 1.33.0 . The flaw is located within the loadGitStatus function of the build.rs file in the Build Script Execution component. An attacker may initiate a remote attack to perform a manipulation resulting in permission issues (CWE-27...
CVE-2026-123989 ESEngine DeepSeek-Reasonix Build Script Execution build.rs loadGitStatus permission
A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.0. Impacted is the function loadGitStatus of the file build.rs of the component Build Script Execution. Performing a manipulation results in permission issues. The attack may be initiated remotely. Upgrading to version 1.34.0 is...
RUSTSEC-2026-0418 libz-sys build script leaks environment variables in the build directory
The build script of libz-sys version = 1.1.30 prints the full environment of the build, including any secrets it contains, to its stdout when compiled with [email protected] or later on a Unix host. This affects any build that depends on libz-sys. Cargo saves build script stdout under target/, so the valu...
libz-sys build script leaks environment variables in the build directory
The build script of libz-sys version = 1.1.30 prints the full environment of the build, including any secrets it contains, to its stdout when compiled with [email protected] or later on a Unix host. This affects any build that depends on libz-sys. Cargo saves build script stdout under target/, so the valu...
PT-2026-132764
The build script of libz-sys version = 1.1.30 prints the full environment of the build, including any secrets it contains, to its stdout when compiled with [email protected] or later on a Unix host. This affects any build that depends on libz-sys. Cargo saves build script stdout under target/, so the valu...
kali-vm
Kali-VM Build-Script Kali Linux Virtual Machine VM image builder, viadebos con fakemachine e KVM. Questi sono gli stessi build-scripts che il team di Kali utilizza per generare le immagini ufficiali di Kali Linux VM, disponibili su kali.org/get-kali/. Per maggiori informazioni, consulta:...
Malicious code in throttle-requests (RubyGems)
Source: amazon-inspector ff1a325fc41cbb1dd7c949031e75946ce0f5f522bae7f63371dcc2c93589ec5d The gem's native-extension build script extconf.rb base64-decodes an embedded Ruby payload, writes it to a random path in the temporary directory, and spawns it in the background before running the normal mk...
PT-2026-125053
The build script of rustpython-vm 0.3.0 through 0.5.0 writes every environment variable of the build into $OUT DIR/env vars.rs. The crate compiles that file into sysconfigdata's build time vars. That module is always compiled. A binary built in CI with secrets in the environment carries those...
Malicious code in arone (crates.io)
arone is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carrying a...
Malicious code in aovine (crates.io)
aovine is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carrying a...
Malicious code in proc_macro_en (crates.io)
proc-macro-en is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carryin...
Malicious code in aronenao (crates.io)
aronenao is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carrying a...
Malicious code in append_only_vec (crates.io)
append-only-vec 0.1.9 was published to crates.io from the same maintainer account droundy as the trojanized arrayref and internment releases, which appears to be compromised. The release adds a dependency on an attacker-controlled crate whose build script downloads and executes an...
Malicious code in internment (crates.io)
internment 0.8.7 was published to crates.io from the same maintainer account droundy as the trojanized arrayref and append-only-vec releases, which appears to be compromised. The release adds a dependency on an attacker-controlled crate whose build script downloads and executes an...
Malicious code in tinymember (crates.io)
tinymember is a malicious crate published to crates.io as part of the coordinated build-time payload campaign on 2026-08-20 that trojanized arrayref, internment, and append-only-vec and published the proc-macro1 typosquat of proc-macro2. It was used as an attacker-controlled dependency carrying a...
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that added a typosquatted dependency whose build script downloaded and executed a remote payload during compilation. The affected releases are...