493 matches found
lacuna-rs
lacuna-rs Ghost-frame call-stack spoofing + runtime indirect syscalls for Windows x64 — ported to Rust. Ported from LACUNA Chain lacunachain.c by Mohamed Alzhrani 0xmaz. lacuna-rs is a reusable Rust crate that provides the same primitives as the original C TTP, structured so it can be dropped int...
vuke
vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...
Shelter
Shelter Shelter es una técnica de ofuscación de suspensión completamente armada que permite cifrar por completo tu payload en memoria haciendo un uso extensivo de ROP. Este crate viene con las siguientes características: Cifrado AES-128. Capacidad de cifrar el PE completo. Eliminación del permiso...
goblin
libgoblin Documentación https://docs.rs/goblin/ registro de cambios Uso Goblin requiere rustc 1.85.0 Rust edición 2024. Añade a tu Cargo.toml dependencies goblin = "0.10" Características nombre increíble del crate implementación zero-copy, multiplataforma, consciente de endianness, ELF64/32 - ¡wo...
boha
@agntn/puzzles Puzzles y recompensas cripto públicas, como registros tipados. Pides un puzzle y obtienes su dirección, su material de clave y lo que ocurrió en la cadena. ¿Por qué? Cada hilo de puzzles tiene las mismas tres cosas: las direcciones, los premios y quién resolvió qué. Cada escáner y...
rustdllproxy
rustdllproxy A Rust crate utility to easily generate and develop proxy DLLs for Windows applications. Installation cargo install rustdllproxy Compatibility This crate currently only supports the standard DLL PE format. Current Limitations When hooking functions with custom code, the function...
checkout-index
checkout-index - Reproductor para CVE-2025-22620 Este es el código de prueba de concepto para RUSTSEC-2025-0001 CVE-2025-22620, GHSA-fqmf-w4xh-33rh. Es el mismo código que en el aviso, pero en forma de un proyecto Rust, con Cargo.toml y Cargo.lock incluidos. Este repositorio fue útil mientras se...
Fedora 43 : rust-lru / rust-lru0.16 (2026-332a62112c)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-332a62112c advisory. Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: Rebuild tracker: Tenable...
[SECURITY] Fedora 43 Update: rust-hickory-net-0.26.2-1.fc43
Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
rustsec platforms/v4.2.0
RustSec Crates 🦀🛡️📦 The RustSec Advisory Database is a repository of security advisories filed against Rust crates published via crates.io. The advisory database itself can be found at: https://github.com/RustSec/advisory-db About this repository This repository contains a Cargo Workspace with all...
OPENSUSE-SU-2026:21782-1 Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...
rscrypto v0.9.0
rscrypto rscrypto is a Rust library of cryptographic primitives, hashes, password hashing, and checksums. One feature model controls all of them. Portable Rust is the reference implementation. SIMD and assembly backends make it faster on supported targets. Production builds do not depend on C, FF...
CVE-2026-78422
Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...
Linux Distros Unpatched Vulnerability : CVE-2026-77650
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency...
kas (>=0.3.0, <=0.10.1), kas-core (>=0.10.0, <=0.10.1) +3 more potentially affected by unknown CVE via stack_dst (0.6.1)
stackdst CARGO version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on stackdst and may be impacted: - kas =0.3.0, =0.10.0, =0.3.0, =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0272...
[SECURITY] Fedora 44 Update: rust-crates-io-0.41.0-1.fc44
Helpers for interacting with crates.io...
CVE-2026-77651
The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...
CVE-2026-77650
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...
CVE-2026-77650
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...
UBUNTU-CVE-2026-77650
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...