Lucene search
+L

164 matches found

The Hacker News
The Hacker News
added 2026/04/20 10:42 a.m.32 views

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's MCP architecture that could pave the way for remote code execution and have a cascading effect on the artificial intelligence AI supply chain. "This flaw enables Arbitrary Command Execution R...

9.9CVSS7.4AI score0.42669EPSS
SaveExploits11
The Hacker News
The Hacker News
added 2026/04/08 7:47 a.m.22 views

N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust

The North Korea-linked persistent campaign known as Contagious Interview has spread its tentacles by publishing malicious packages targeting the Go, Rust, and PHP ecosystems. "The threat actor's packages were designed to impersonate legitimate developer tooling ..., while quietly functioning as...

6.2AI score
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/04/03 6:38 p.m.54 views

CVE-2026-2625

A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager RPM file. During the RPM signature verification process, this crafted file can trigger an error in the OpenPGP signature parsing code, leading to an...

5.5CVSS5.7AI score0.00085EPSS
SaveExploits0
Fedora
Fedora
added 2026/04/01 12:57 a.m.14 views

[SECURITY] Fedora 43 Update: rust-1.94.1-1.fc43

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

6.5CVSS5.8AI score0.00379EPSS
SaveExploits1
Fedora
Fedora
added 2026/03/31 12:27 a.m.16 views

[SECURITY] Fedora 44 Update: rust-1.94.1-1.fc44

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

6.5CVSS5.8AI score0.00379EPSS
SaveExploits1
Fedora
Fedora
added 2026/03/27 1:18 a.m.11 views

[SECURITY] Fedora 43 Update: kryoptic-1.5.0-2.fc43

A PKCS 11 software token written in Rust...

9.8CVSS5.8AI score0.00704EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/03/10 12:00 a.m.17 views

rssn 代码问题漏洞

rssn is a high-performance Rust scientific computing library open source by Apich Organization. rssn has code vulnerabilities, which stem from improper input validation in the JIT compilation engine, potentially allowing arbitrary code execution...

9.4CVSS6.1AI score0.0021EPSS
SaveExploits0References3
Fedora
Fedora
added 2026/03/04 12:56 a.m.25 views

[SECURITY] Fedora 43 Update: keylime-agent-rust-0.2.9-1.fc43

The Keylime agent...

9.8CVSS5.9AI score0.05525EPSS
SaveExploits0
OSV
OSV
added 2026/02/12 3:15 p.m.6 views

SUSE-SU-2026:20426-1 Security update for rust1.93

This update for rust1.93 fixes the following issues: Rust is shipped in 1.93.0 version. Please see https://github.com/rust-lang/rust/releases/tag/1.93.0 for changes...

5.8AI score
SaveExploits0References1
Fedora
Fedora
added 2026/02/10 1:34 a.m.13 views

[SECURITY] Fedora 43 Update: rust-crypto-auditing-client-0.2.4-2.fc43

Event broker client for crypto-auditing project...

7.5CVSS5.4AI score0.00461EPSS
SaveExploits1
Fedora
Fedora
added 2026/02/10 1:34 a.m.10 views

[SECURITY] Fedora 43 Update: helix-25.07.1-7.fc43

A Kakoune / Neovim inspired editor, written in Rust...

7.5CVSS5.4AI score0.00461EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2026/01/08 9:46 p.m.16 views

AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value

Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement has been implemented in th...

6.7AI score
SaveExploits0References4Affected Software100
Debian CVE
Debian CVE
added 2026/01/08 2:06 p.m.28 views

CVE-2026-21895

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

6.9CVSS5.3AI score0.0045EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/08 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-21895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics...

6.9CVSS5.8AI score0.0045EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/12/24 12:00 a.m.14 views

The vulnerability of the Rust programming language library for interacting with the SSH protocol, which allows a hacker to cause a service failure.

The vulnerability of the Rust programming language’s Russh library for interacting with the SSH protocol is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

6.8CVSS5.8AI score0.00395EPSS
SaveExploits1References3Affected Software2
Fedora
Fedora
added 2025/11/15 1:45 a.m.30 views

[SECURITY] Fedora 41 Update: ruff-0.14.3-1.fc41

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

7.2AI score
SaveExploits0
Fedora
Fedora
added 2025/11/05 2:13 a.m.16 views

[SECURITY] Fedora 43 Update: python-pydantic-core-2.41.4-1.fc43

The pydantic-core project provides the core validation logic for pydantic written in Rust...

8.1CVSS7AI score0.00677EPSS
SaveExploits1
Fedora
Fedora
added 2025/11/03 1:02 a.m.11 views

[SECURITY] Fedora 41 Update: rust-reqsign-http-send-reqwest-2.0.0-1.fc41

Reqwest-based HTTP client implementation for reqsign...

8.1CVSS7AI score0.00677EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2021-1805

Malware in sbrugna...

7.5CVSS6.9AI score0.02897EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-1778

Malware in sbrugna...

5.9CVSS5.8AI score0.01107EPSS
SaveExploits1References5
Rows per page
Query Builder