hashes

RustCrypto: Hashes !Project Chatchat-imagechat-link !dependency statusdeps-imagedeps-link !Apache2/MIT licensedlicense-image Collection of cryptographic hash functions1 written in pure Rust. All algorithms reside in separate crates and are implemented using traits from digest crate. Usage example...

vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

lacuna-rs

lacuna-rs Ghost-frame call-stack spoofing + runtime indirect syscalls for Windows x64 — ported to Rust. Ported from LACUNA Chain lacunachain.c by Mohamed Alzhrani 0xmaz. lacuna-rs is a reusable Rust crate that provides the same primitives as the original C TTP, structured so it can be dropped int...

Shelter

Shelter Shelter is a completely weaponized sleep obfuscation technique that allows to fully encrypt your in-memory payload making an extensive use of ROP. This crate comes with the following characteristics: AES-128 encryption. Whole PE encryption capability. Removal of execution permission durin...

[SECURITY] Fedora 43 Update: python-crate-ingredients-0.3.3-2.fc43

This package contains Python bindings for the ingredients crate, which implements checks for the contents "ingredients" of published Rust crates...

rustdllproxy

rustdllproxy A Rust crate utility to easily generate and develop proxy DLLs for Windows applications. Installation cargo install rustdllproxy Compatibility This crate currently only supports the standard DLL PE format. Current Limitations When hooking functions with custom code, the function...

checkout-index

checkout-index - Reproducer for CVE-2025-22620 This is the proof of concept code for RUSTSEC-2025-0001 CVE-2025-22620, GHSA-fqmf-w4xh-33rh. It is the same code as in the advisory, but in the form of a Rust project, with Cargo.toml and Cargo.lock included. This repo was useful while writing the...

Linux Distros Unpatched Vulnerability : CVE-2026-123587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC records by comparing the next domain name to an SOA...

Fedora 46 : maturin / python-jiter / python-pysequoia / ruff / rust-afterburn / etc (2026-a7c892ffe9)

The remote Fedora 46 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-a7c892ffe9 advisory. Update ruff to 0.17.4 and ty to 0.0.99. Update pyo3-introspection to version 0.30.1. Update maturin to 1.16.0. Update python-jiter to 0.19.0 and...

Linux Distros Unpatched Vulnerability : CVE-2026-123574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The zone file parser in the hickory-proto crate of Hickory DNS 0.24.0 before 0.26.2 panics when a single token in a zone file is 4096 bytes or longer. Attackers...

CVE-2026-123592 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision

The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation bypass because Name's Hash ignores label lengths and ValidationCacheKey compares only that hash. An attacker controlling an unsigned delegation whose name differs from a signed target only in dot positions c...

PT-2026-139868

The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC records by comparing the next domain name to an SOA record in the response, accepting that SOA even if it fails validation. Attackers who can supply DNS responses can combine a genuine NSEC...

CVE-2026-115906

A flaw was found in the zip crate. An attacker can bypass cryptographic authentication and cause applications to accept modified data by supplying a crafted encrypted archive. Because the AES Advanced Encryption Standard reader fails to verify the authentication tag when an encrypted entry is emp...

CVE-2026-110464

Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, via the service's exposed inter-process interface. Refer to the ' Security Update for Armoury Crate...

EUVD-2026-116690

Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, via the service's exposed inter-process interface. Refer to the ' Security Update for Armoury Crate...

CVE-2026-110464

A missing authorization vulnerability in the ASUS Armoury Crate app allows a local attacker to exploit the service's exposed inter-process interface . This flaw enables the attacker to either write content into a specific file or registry location with Local System privileges or trigger a recover...

CVE-2026-111959

Out-of-bounds read vulnerability in Apache Arrow Rust arrow crate, from version 33.0.0 through to versions 57.3.1, 58.4.0, 59.3.1 and 60.0.0. Improper validation of RunEndEncoded arrays in the ArrayData interface can allow reading data beyond the bounds of the child values array. Users are...

EUVD-2026-115182

Out-of-bounds read vulnerability in Apache Arrow Rust arrow crate, from version 33.0.0 through to versions 57.3.1, 58.4.0, 59.3.1 and 60.0.0. Improper validation of RunEndEncoded arrays in the ArrayData interface can allow reading data beyond the bounds of the child values array. Users are...

CVE-2026-111959: Apache Software Foundation Apache Arrow Rust: Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1,…

Out-of-bounds read vulnerability in Apache Arrow Rust arrow crate, from version 33.0.0 through to versions 57.3.1, 58.4.0, 59.3.1 and 60.0.0. Improper validation of RunEndEncoded arrays in the ArrayData interface can allow reading data beyond the bounds of the child values array. Users are...

PT-2026-135435

Out-of-bounds read vulnerability in Apache Arrow Rust arrow crate, from version 33.0.0 through to versions 57.3.1, 58.4.0, 59.3.1 and 60.0.0. Improper validation of RunEndEncoded arrays in the ArrayData interface can allow reading data beyond the bounds of the child values array. Users are...