OPENSUSE-SU-2025:15551-1 cargo-c-0.10.3~git0.ee7d7ef-4.1 on GA media

These are all security issues fixed in the cargo-c-0.10.3git0.ee7d7ef-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15552-1 cargo-packaging-1.3.0+0-2.1 on GA media

These are all security issues fixed in the cargo-packaging-1.3.0+0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15550-1 cargo-audit-0.21.2~git0.18e58c2-2.1 on GA media

These are all security issues fixed in the cargo-audit-0.21.2git0.18e58c2-2.1 package on the GA media of openSUSE Tumbleweed...

keeshond_editor (>=0.1.0, <=0.13.0), keeshond_migrator (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4, <=0.3.0)

toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: OSV:GHSA-PFP7-VXGR-83PW...

aa2nucaln (0.1.1), agent-stream-kit (>=0.9.0, <=0.14.0) +438 more potentially affected by unknown CVE via custom_derive (0.1.7)

customderive CARGO version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on customderive and may be impacted: - aa2nucaln 0.1.1 - agent-stream-kit =0.9.0, =0.4.0, =0.1.1, =0.2.0, =0.4.3, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =3.1.3, =0.3.7, =0.8...

advisory-db

This is a security advisory database repository for Rust crates published via crates.io. The repository contains a collection of security advisories filed against various Rust crates, with each advisory containing information in TOML format. The advisories are categorized by crate name, and each...

advisory-db

This is a security advisory database for Rust crates published through crates.io. The database is maintained by the RustSec project and contains information on security vulnerabilities in various Rust crates. The database is stored in TOML format and can be consumed by various tools for auditing...

amaryllis (0.1.0), archivist (0.0.1) +26 more potentially affected by unknown CVE via webp (>=0.1.3, <=0.2.6)

webp CARGO version =0.1.3, =0.1.0, =0.0.4-alpha, =0.24.6, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.21.0, =0.21.0, =0.21.0, =0.21.0, =0.22.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9Q78-27F3-2JMH...

Exploit for CVE-2007-2447

CVE-2007-2447 Samba Exploit A Rust implementation of the CVE-...

a2 (>=0.5.0-alpha.1, <=0.5.0), a_chat (0.1.0) +2625 more potentially affected by unknown CVE via async-std (>=0.99.4, <=1.13.2)

async-std CARGO version =0.99.4, =0.5.0-alpha.1, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...

The vulnerability of the control.php script of the WeGIA web manager allows a hacker to execute arbitrary code.

The vulnerability of the control.php script of the WeGIA web manager is related to the failure to protect the SQL query structure when processing the cargo parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NewStart CGSL MAIN 7.02 : rust Vulnerability (NS-SA-2025-0146)

The remote NewStart CGSL host, running version MAIN 7.02, has rust packages installed that are affected by a vulnerability: - Cargo downloads the Rust project's dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the uma...

CVE-2025-53937

WeGIA is affected by a SQL Injection in the /controle/control.php endpoint, specifically the cargo parameter, in versions prior to 3.4.5. The vulnerability allows execution of arbitrary SQL commands, compromising database confidentiality, integrity, and availability. Version 3.4.5 includes a fix....

CVE-2025-53937 WeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` Endpoint

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the /controle/control.php endpoint, specifically in the cargo parameter, of WeGIA prior to version 3.4.5. This vulnerability allows attackers to...

arfur (>=0.0.1, <=0.0.2), arfur-build (>=0.0.1, <=0.0.2) +20 more potentially affected by unknown CVE via zip-extract (>=0.1.3, <=0.2.3)

zip-extract CARGO version =0.1.3, =0.0.1, =0.0.1, =0.0.1, =0.1.3, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0172...

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations. WeGIA suffers from an SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter cargo in the /controle/control.php endpoint. An attacker can exploit this vulnerability to execute illeg...

aoer-plotty-rs (>=0.3.0, <=0.4.1), d3_delaunay_rs (>=0.10.0, <=0.11.2) +46 more potentially affected by unknown CVE via i_tree (>=0.2.0, <=0.9.0)

itree CARGO version =0.2.0, =0.3.0, =0.10.0, =0.10.5, =0.1.0, =0.29.0, =0.0.2, =0.2.0, =0.7.0, =0.1.0, =0.1.1 - geodatafusion 0.1.0-dev - geograph 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0165...

Fuzzy Location and Allocation Hub Network Design for Air Cargo Transportation Considering Sustainability and Time Window

Hub location Problems seek to find hub facilities and assign non-hub nodes to them in such a way that the flow between origin and destination should be effectively established according to the desired goal. In general, in the literature of location, it is assumed that the time horizon of hub...

SUSE-SU-2025:20429-1 Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.8.2: cargo: Afterburn release 5.8.2 docs/release-notes: update for release 5.8.2 cargo: update dependencies cargo: Afterburn release 5.8.1 cargo: Afterburn release 5.8.0 docs/release-notes: update for release 5.8.0 cargo:...

allyaudio (>=0.1.0, <=0.4.0), ambisonic (>=0.4.0, <=0.4.1) +136 more potentially affected by unknown CVE via slice-ring-buffer (0.3.4)

slice-ring-buffer CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio 0.4.0 and mo...