248 matches found
apk-info
apk-info Un analizador apk completo. Características Un extractor zip amigable con malware. Excelente artículo sobre la técnica BadPack; Un extractor axml y arsc amigable con malware; Una implementación completa de AXML Android Binary XML; Una implementación completa de ARSC Recursos de Android;...
zap-api-rust
ZAP Rust API 用于访问 ZAP API 的 Rust 实现。有关 ZAP 的更多信息,请参阅(主)ZAP 项目。 该项目尚处于早期阶段,不应在生产环境中使用! 获取帮助 有关使用 ZAP API 的帮助,请参阅: 示例 - 使用该库的示例集合; API 文档; ZAP 用户组 - 用于提问; 问题 若要报告与 ZAP API 相关的问题、错误和功能请求,请使用 ZAP 主项目的问题跟踪器。 构建 该项目使用 Cargo: root@kitploit: cargo build 安装 该 API 可通过 https://crates.io/crates/zapapi 获取...
kangaroo
袋鼠 基于GPU加速的Pollard袋鼠算法,用于求解secp256k1上的椭圆曲线离散对数问题(ECDLP)。 特性 🖥️ 跨平台GPU — 通过wgpu支持Vulkan(AMD、NVIDIA、Intel)、Metal(Apple Silicon)、DX12(Windows) 🦀 纯Rust + WGSL — 无CUDA依赖,计算着色器在运行时编译 ⚡ 区分点(Distinguished Points) — 通过自动调整DP位实现高效碰撞检测 🔄 取反映射(Negation map) — 通过基于Y奇偶性的定向行走与循环防护实现约1.29倍加速 🦘 多组袋鼠 —...
clroxide
ClrOxide ClrOxide es una biblioteca de Rust que te permite alojar el CLR y ejecutar dinámicamente binarios de dotnet. Quería llamarlo Kepler sin ninguna razón en particular, pero ya existe un paquete llamado kepler en cargo. : He estado trabajando en alojar el CLR con Rust de forma intermitente...
qscan
Escáner rápido de red El proyecto Quick Network Scanner incluye: qscan: una biblioteca de Rust para el escaneo asíncrono de puertos de red consulta README. qsc: una utilidad de línea de comandos construida sobre la biblioteca qscan para actividades rápidas de escaneo de red consulta README. NOTA:...
macos-UnifiedLogs
macos-unifiedlogs Una biblioteca simple de Rust que puede ayudar a analizar los archivos Unified Log de macOS. Los Unified Logs se introdujeron en la versión 10.12 de macOS Sierra, 2016. Parte del objetivo de Apple de crear un formato de registro unificado para todos los productos Apple. Existen ...
CVE-2026-86808 moltis-org moltis vault.rs vault_recovery_handler missing authentication
A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vaultunlockhandler/vaultrecoveryhandler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been...
Linux Distros Unpatched Vulnerability : CVE-2026-53600
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis- applies a buffered PAX size extension to an intermedia...
CVE-2026-53600
A flaw was found in async-tar, a library for reading and writing tar archives in Rust. The library incorrectly applies a buffered PAX size extension to an intermediary extension header instead of the intended next file entry. This allows an attacker to craft a malicious tar archive that manipulat...
DEBIAN-CVE-2026-53600
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header a GNU longname L, a GNU longlink K, or a PAX x/g header instead of to the next file entry. POSIX requires a PAX...
CVE-2026-53600
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header a GNU longname L, a GNU longlink K, or a PAX x/g header instead of to the next file entry. POSIX requires a PAX...
CVE-2026-53600 async-tar PAX extension-header desync enables tar entry/content smuggling
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header a GNU longname L, a GNU longlink K, or a PAX x/g header instead of to the next file entry. POSIX requires a PAX...
CVE-2026-53600 async-tar PAX extension-header desync enables tar entry/content smuggling
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header a GNU longname L, a GNU longlink K, or a PAX x/g header instead of to the next file entry. POSIX requires a PAX...
EUVD-2026-70200
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header a GNU longname L, a GNU longlink K, or a PAX x/g header instead of to the next file entry. POSIX requires a PAX...
CVE-2026-53600
async-tar (crates.io), a tar archive reading/writing library for async Rust, is vulnerable in versions
UBUNTU-CVE-2026-82253
gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...
actix-postgres (>=0.1.0, <=0.4.0), actyx_sdk (>=0.1.0, <=0.3.0) +562 more potentially affected by unknown CVE via postgres-protocol (>=0.4.0, <=0.6.10)
postgres-protocol CARGO version =0.4.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5X78-73V4-XG6W...
UBUNTU-CVE-2026-77651
The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...
openSUSE 16: git-cliff / git-cliff-bash-completion / git-cliff-fish-completion / etc (openSUSE-SU-2026:21584-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21584-1 advisory. Changes in git-cliff: - Update to version 2.13.1: Support more configuration file locations Add per-commit statistics Expose determined bump typ...
avml (>=0.4.1, <=0.6.1), azure_data_cosmos (0.1.0) +241 more potentially affected by unknown CVE via azure_core (0.1.1)
azurecore CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on azurecore and may be impacted: - avml =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory:...