Linux Distros Unpatched Vulnerability : CVE-2022-36114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extracted from compressed archives. ...

Linux Distros Unpatched Vulnerability : CVE-2023-38497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cargo downloads the Rust project's dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

A Rust exploitation script for CVE-2024-23346. As shown below t...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has a security vulnerability that originates from the deletarcargo.php page of the WeGIA application instance containing a SQL injection vulnerability...

OPENSUSE-SU-2025:14814-1 obs-service-cargo-4.5.0-2.1 on GA media

These are all security issues fixed in the obs-service-cargo-4.5.0-2.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 40 Update: rust-cargo-vendor-filterer-0.5.17-2.fc40

cargo vendor, but with filtering for platforms and more...

[SECURITY] Fedora 41 Update: rust-cargo-vendor-filterer-0.5.17-2.fc41

cargo vendor, but with filtering for platforms and more...

cargo-audit-advisory-db-20250204-1.1 on GA media (moderate)

cargo-audit-advisory-db-20250204-1.1 on GA media Announcement ID: openSUSE-SU-2025:14726-1 Rating: moderate Cross-References: CVE-2024-52813 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2025:14726-1 cargo-audit-advisory-db-20250204-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20250204-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2025:20071-1 Security update for sevctl

This update for sevctl fixes the following issues: Security issue fixed: - CVE-2023-50711: Fixed out of bounds memory accesses in a vendored dependency bsc1218502 Non-security issue fixed: - Update vendored dependencies and re-enable cargo update obs service bsc1229953...

PT-2025-5598 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.12 Description: A SQL Injection vulnerability was discovered in the WeGIA application, salvar cargo.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing...

GHSA-FQMF-W4XH-33RH vulnerabilities

Vulnerabilities for packages: cargo-audit...

GHSA-FQMF-W4XH-33RH vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2025-22620 vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2025-22620 vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2025-22618 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarcargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into...

CVE-2025-22618

WeGIA is affected by a Stored XSS in the adicionar_cargo.php endpoint, via the cargo parameter. The root cause is inadequate validation/sanitization of user input, allowing a malicious payload to be stored on the server and executed in a user’s browser when the affected page is loaded. The issue ...

PT-2025-4604 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.6 Description: A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionar cargo.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has a cross-site scripting vulnerability that stems from a stored cross-site scripting vulnerability contained in the cargo parameter of the adicionarcargo.php file...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA version 2.3.6, which stems from a stored cross-site scripting vulnerability contained in the cargo parameter of the control.php page...