12403 matches found
Cybersecurity Researchers Warn of New Rust-Based Splinter Post-Exploitation Tool
Cybersecurity researchers have flagged the discovery of a new post-exploitation red team tool called Splinter in the wild. Palo Alto Networks Unit 42 shared its findings after it discovered the program on several customers' systems. "It has a standard set of features commonly found in penetration...
a-bot (0.0.1), a11ywatch_cli (>=0.0.5, <=0.6.51) +17426 more potentially affected by unknown CVE via atty (>=0.1.2, <=0.2.14)
atty CARGO version =0.1.2, =0.0.5, =0.0.1, =0.0.2, =0.4.1, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.4, =2.0.0 - abi-cafe 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0375...
RUSTSEC-2024-0375 `atty` is unmaintained
The maintainer of atty has published an official notice that the crate is no longer under development, and that users should instead rely on the functionality in the standard library's IsTerminal trait. Alternatives - std::io::IsTerminal - Stable since Rust 1.70.0 and the recommended replacement...
`atty` is unmaintained
The maintainer of atty has published an official notice that the crate is no longer under development, and that users should instead rely on the functionality in the standard library's IsTerminal trait. Alternatives - std::io::IsTerminal - Stable since Rust 1.70.0 and the recommended replacement...
PT-2024-40922 · Atty +1 · Atty +1
Name of the Vulnerable Software and Affected Versions: atty affected versions not specified Description: The maintainer of atty has announced that the crate is no longer under development. Users are recommended to rely on the functionality in the standard library's IsTerminal trait instead...
Rust: Multiple Vulnerabilities
Background A systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. Description Multiple vulnerabilities have been discovered in Rust. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...
GLSA-202409-07 : Rust: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202409-07 Rust: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Rust. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from th...
Malware in rust-functions
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
lexical-core has multiple soundness issues
RUSTSEC-2024-0377 contains multiple soundness issues: 1. Bytes::read allows creating instances of types with invalid bit patterns 1. BytesIter::read advances iterators out of bounds 1. The BytesIter trait has safety invariants but is public and not marked unsafe 1. writefloat calls...
GHSA-2326-PFPJ-VX3H lexical-core has multiple soundness issues
RUSTSEC-2024-0377 contains multiple soundness issues: 1. Bytes::read allows creating instances of types with invalid bit patterns 1. BytesIter::read advances iterators out of bounds 1. The BytesIter trait has safety invariants but is public and not marked unsafe 1. writefloat calls...
Internet Bug Bounty: `std::process::Command` batch files argument escaping could be bypassed with trailing whitespace or periods
The Rust Security Response WG disclosed a vulnerability in the std::process::Command module on Windows, where it incorrectly escaped arguments when invoking batch files. This allowed for bypassing the fix by including trailing whitespace or periods in the batch file name, which are ignored and...
MAL-2024-8875 Malicious code in rust-functions (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879e91954c530c7fda9e73575ef2f4a945be9a29a5761866d4a4470b32469ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rust-functions (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879e91954c530c7fda9e73575ef2f4a945be9a29a5761866d4a4470b32469ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
afarray (>=0.1.0, <=0.1.1), get-size (>=0.1.0, <=0.1.4) +13 more potentially affected by unknown CVE via get-size-derive (>=0.1.2, <=0.1.3)
get-size-derive CARGO version =0.1.2, =0.1.0, =0.1.0, =0.0.0, =0.0.0, =0.0.1, =0.21.0, =0.21.0, =0.1.0, =0.7.0, =0.30.0, =0.30.0, =0.7.0, =0.7.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0427...
afarray (>=0.1.0, <=0.1.1), get-size-derive (0.1.2) +16 more potentially affected by unknown CVE via get-size (>=0.1.3, <=0.1.4)
get-size CARGO version =0.1.3, =0.1.0, =0.1.0, =0.0.0, =0.0.0, =0.0.1, =0.21.0, =0.21.0, =0.1.0, =0.7.0, =0.30.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0425...
RHSA-2024:3418 Red Hat Security Advisory: rust security update
Bulletin has no description...
RHSA-2024:3428 Red Hat Security Advisory: rust-toolset:rhel8 security update
Bulletin has no description...
RHSA-2023:4651 Red Hat Security Advisory: rust-toolset-1.66-rust security update
Bulletin has no description...