picovolt (>=0.3.0, <=1.3.0), wasmi_c_api_impl (0.50.0) +1 more potentially affected by CVE-2025-66627 via wasmi (0.50.0)

wasmi CARGO version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmi and may be impacted: - picovolt =0.3.0, =1.3.0 - wasmicapiimpl 0.50.0 - wasmiruntimelayer 0.50.0 Source cves: CVE-2025-66627 Source advisory: OSV:GHSA-G4V2-CJQP-RFMQ...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Vulnerability Exploitation Tool Rust Version...

Exploit for Deserialization of Untrusted Data in Facebook React

Chain Reaction High-Performance Rust Scanner for React Serv...

RUSTSEC-2025-0146 `sha-rust` was removed from crates.io for malicious code

It appeared to be attempting to steal credentials from local files...

RUSTSEC-2025-0148 `finch-rust` was removed from crates.io for malicious code

It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...

`sha-rust` was removed from crates.io for malicious code

It appeared to be attempting to steal credentials from local files...

`finch-rust` was removed from crates.io for malicious code

It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...

PT-2025-54751

It depended on the sha-rust crate, which appeared to be attempting to steal credentials from local files...

RUSTSEC-2025-0147 `evm-units` was removed from crates.io for malicious code

It appeared to be attempting to steal cryptocurrency...

Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems

Cybersecurity researchers have discovered a malicious Rust package that's capable of targeting Windows, macOS, and Linux systems, and features malicious functionality to stealthily execute on developer machines by masquerading as an Ethereum Virtual Machine EVM unit helper tool. The Rust crate,...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : rust-openssl vulnerabilities (USN-7891-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7891-1 advisory. Matt Mastracci discovered that rust-openssl was incorrectly handling server lifetimes in certain functions. An attacker could...

openSUSE 16 Security Update : himmelblau (openSUSE-SU-2025-20114-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20114-1 advisory. - Update to version 0.9.23+git.0.9776141: CVE-2025-59044: Fixed GID collision of same-name groups allowing privilege escalation bsc1250687...

RUSTSEC-2025-0132 `Reader::open_mmap` unsoundly marks unsafe memmap operation as safe

maxminddb prior to version 0.27 declared Reader::openmmap as safe despite wrapping an inherently unsafe memmap2 operation with no extra step done to guarantee safety. This could have led to undefined behaviour if the file were to be modified on disk while the memory map was still active...

acril-http (0.1.0), amqp-api-shared (0.1.1) +196 more potentially affected by unknown CVE via rustls-pemfile (>=0.2.1, <=2.2.0)

rustls-pemfile CARGO version =0.2.1, =0.4.0, =0.4.0, =0.3.0, =0.1.0, =0.12.0, =0.5.5, =0.5.8, =0.5.8, =0.4.4, =0.3.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0134...

Ubuntu: Security Advisory (USN-7891-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:21158-1 Security update for himmelblau

This update for himmelblau fixes the following issues: - Update to version 0.9.23+git.0.9776141: CVE-2025-59044: Fixed GID collision of same-name groups allowing privilege escalation bsc1250687 depsrust: bump the all-cargo-updates group CVE-2025-58160: tracing-subscriber: Fixed log pollution...

USN-7891-1 rust-openssl vulnerabilities

Matt Mastracci discovered that rust-openssl was incorrectly handling server lifetimes in certain functions. An attacker could possibly use this issue to cause a denial of service or run arbitrary memory content to the client. CVE-2025-24898 It was discovered that rust-openssl was incorrectly...

libnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs)

A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::withpagesize constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch...

GHSA-2FJW-WHXM-9V4Q libnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs)

A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::withpagesize constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch...

cggmp21 data falsification vulnerability

cggmp21 is a Rust library open-sourced by Lockness. A data forgery issue vulnerability exists in versions prior to cggmp21 0.6.3, which stems from a missing check in the ZK proof that could lead to a malicious signer reconstructing the full private key...