a-gpt (>=0.1.0, <=0.4.0), a2f (>=0.1.0, <=0.4.0) +6583 more potentially affected by unknown CVE via bincode (>=0.0.1, <=3.0.0)

bincode CARGO version =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.10.0-dev0, =0.3.0, =0.1.0, =0.1.13, =0.1.0, =0.1.0, =0.1.0, =0.1.1 - accountnovafi5 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0141...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a contention condition in deathlist in rustbinder...

EUVD-2025-203307

A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7rs::client::S7Client::asctwrite of the file /tests/snap7-rs/src/client.rs. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to t...

EUVD-2025-203308

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7microclient.cpp. Executing manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be us...

CVE-2025-14672

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7microclient.cpp. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be...

snap7-rs 安全漏洞

snap7-rs is a library for C++ by the individual developer gmg137. A security vulnerability exists in snap7-rs 1.142.1 and earlier versions, which stems from incorrect manipulation of the function snap7rs::client::S7Client::asctwrite in the file /tests/snap7-rs/src/client.rs, which could result in...

Sequoia PGP 安全漏洞

Sequoia PGP is a Rust library open-sourced by sequoia-pgp. A security vulnerability exists in Sequoia PGP versions prior to 2.1.0, which stems from the fact that aeskeyunwrap crashes when passing too short a ciphertext, potentially crashing the application...

RUSTSEC-2025-0151 `sha-rst` was removed from crates.io for malicious code

This crate was used as a dependency by finchclirust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crates...

`sha-rst` was removed from crates.io for malicious code

This crate was used as a dependency by finchclirust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crates...

PT-2025-54755

This crate was used as a dependency by finch cli rust and finch-rst and contained a malware payload to exfiltrate credentials. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 22 times. Other than the other crates above that were part of the attack, no other crate...

Matrix Rust SDK 安全漏洞

Matrix Rust SDK is an open source Rust-based Matrix client server development toolkit from The Matrix.org Foundation. A security vulnerability exists in Matrix Rust SDK 0.14.1 and earlier versions, which stems from a serialization error that could lead to a denial of service...

picovolt (>=0.3.0, <=1.3.0), wasmi_c_api_impl (0.50.0) +1 more potentially affected by CVE-2025-66627 via wasmi (0.50.0)

wasmi CARGO version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmi and may be impacted: - picovolt =0.3.0, =1.3.0 - wasmicapiimpl 0.50.0 - wasmiruntimelayer 0.50.0 Source cves: CVE-2025-66627 Source advisory: OSV:GHSA-G4V2-CJQP-RFMQ...

alerter (>=0.3.0, <=0.3.2), crate_glitch (0.2.0) +14 more potentially affected by CVE-2025-66622 via matrix-sdk-base (>=0.1.0, <=0.5.1)

matrix-sdk-base CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 and more Source cves: CVE-2025-66622 Source advisory: OSV:GHSA-JJ6P-3M75-G2P3...

alerter (>=0.3.0, <=0.3.2), crate_glitch (0.2.0) +14 more potentially affected by CVE-2025-66622 via matrix-sdk-base (>=0.1.0, <=0.5.1)

matrix-sdk-base CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 and more Source cves: CVE-2025-66622 Source advisory: OSV:RUSTSEC-2025-0135...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Vulnerability Exploitation Tool Rust Version...

Exploit for Deserialization of Untrusted Data in Facebook React

Chain Reaction High-Performance Rust Scanner for React Serv...

RUSTSEC-2025-0146 `sha-rust` was removed from crates.io for malicious code

It appeared to be attempting to steal credentials from local files...

RUSTSEC-2025-0148 `finch-rust` was removed from crates.io for malicious code

It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...

`sha-rust` was removed from crates.io for malicious code

It appeared to be attempting to steal credentials from local files...

`finch-rust` was removed from crates.io for malicious code

It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...