SPiCa

SPiCa Integrità dei Processi di Sistema e Analisi Cross-view "Canterò, quindi risplendi, SPiCa..." SPiCa è un rilevatore di rootkit Linux basato su eBPF scritto in Rust. Il nome deriva dalla canzone di Hatsune Miku SPiCa e dalla stella a cui fa riferimento — Spica Alpha Virginis, il punto più...

fusee-gelee

fusee-gelee Implementação em Rust do exploitFusée Gelée CVE-2018-6242 para processadores Tegra. Plataformas atualmente suportadas: Linux via libusb. Instruções 1. Obtenha a versão executável do lançador do exploit. 2. Obtenha um payload adequado para uso no dispositivo de destino. 3. Execute o...

fips203

NCC Group: FIPS 203 Standard für modul-gitterbasierte Schlüsselverkapselungsmechanismen Der FIPS 203 Erster öffentlicher Entwurf ist ein Standard für modul-gitterbasierte Schlüsselverkapselungsmechanismen, geschrieben in reinem Rust für Server-, Desktop-, Browser- und eingebettete Anwendungen. Da...

pairing

Ottimizzazioni per la crittografia basata su pairing Questo repository contiene il codice Rust funzionante che corrisponde a una serie in corso di articoli di blog sulle ottimizzazioni nella crittografia basata su pairing, utilizzando BLS12-381 come curva di riferimento. Nota: Questo codice è a...

l4srs

l4srs Implementazione in Rust del Log 4 Shell log4j - CVE-2021-44228 per compilare esegui cargo +nightly build Questa versione ti permette di creare classi di comandi, servire dinamicamente un mini meterpreter che viene eseguito in un thread dell'app Java sfruttata, e gestisce i server LDAP e HTT...

CVE-2021-4034-Rust

CVE-2021-4034-Rust Linux-LPE mit polkit-1, geschrieben in Rust. Build-Anleitung Rust installieren, falls noch nicht geschehen root@kitploit: git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build --release...

6cy

sixcy — .6cy कंटेनर फ़ॉर्मेट .6cy संग्रह प्रारूप का एक Rust कार्यान्वयन जिसमें निम्नलिखित विशेषताएँ हैं: स्व-वर्णन ब्लॉक : प्रत्येक ब्लॉक अपना स्वयं का जादू, संस्करण, कोडेक UUID, आकार और अखंडता चेकसम रखता है अनिवार्य अखंडता सत्यापन : प्रत्येक ब्लॉक पर CRC32 हेडर चेक + BLAKE3 सामग्री हैश एकाधिक...

IronPE

IronPE - Caricatore manuale minimale di PE per Windows scritto in Rust. Implementazione di caricatore PE / Mapping manuale in Rust IronPE è un caricatore manuale minimale di PE per Windows scritto in Rust per file PE x86 e x64. Questo progetto è una reimplementazione in Rust del mio precedente...

ghostport

Ghostport O Ghostport é uma ferramenta sofisticada de spoofing de portas, projetada para confundir e enganar scanners de portas. É uma implementação em Rust inspirada no conceito do portspoof, oferecendo desempenho e flexibilidade aprimorados. Características Emulação Dinâmica de Portas : Respond...

PT-2026-60502

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the OwnedView type allowed safe Rust code to trigger a use-after-free: the OwnedView::decode constructor transmuted a borrowed slice to &'static u8, and the Deref...

CVE-2026-46543

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote peer can crash any full node by sending a RequestBatchSet message containing the genesis block's hash. The handler calls getepochchunks which iterates...

PT-2026-49122

This crate provides Rust bindings to ML-KEM FIPS 203 via C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches or bug fixes will be applied to the upstream implementations. As a result, this crat...

[SECURITY] Fedora 44 Update: uv-0.11.15-1.fc44

An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...

[SECURITY] Fedora 43 Update: rust-astral-tokio-tar-0.6.2-1.fc43

A Rust implementation of an async TAR file reader and writer. This library does not currently handle compression, but it is abstract over all I/O readers and writers. Additionally, great lengths are taken to ensure that the entire contents are never required to be entirely resident in memory all ...

zebra 数据伪造问题漏洞

Zebra is an open-source Zcash implementation built with Rust by the Zcash Foundation. Versions of Zebra prior to 4.4.0 had a data forgery vulnerability, which stemmed from insufficient error handling when sighash types were invalid, potentially leading to consensus splits...

BIT-THRIFT-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-43868

CVE-2026-43868 concerns a memory allocation with an excessive size value in Apache Thrift. Affected: Thrift versions prior to 0.23.0 (per initial description). Exploitation could cause high memory usage and denial of service; no in-wild exploit details provided. Remediation: upgrade to Apache Thr...

CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

SNF - Shadow Network Fingerprinting Engine

SNF Shadow Network Fingerprinting Engine is a 100% offline, air-gap-native passive network intelligence engine written entirely in Rust. It was designed from the ground up for environments where outbound connectivity is not just unavailable but prohibited: classified defense networks, nuclear...