CVE-2026-40583 UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt

UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred...

Kyber Ransomware Double Trouble: Windows and ESXi Attacks Explained

Overview For executive leadership, the emergence of Kyber ransomware represents a significant and immediate threat due to its specialized, dual-platform deployment capability targeting mission-critical virtualization infrastructure VMware ESXi and core Windows file systems. This cross-platform...

MINE-CYBERSECURITY-PROJECT-1

MINE-CYBERSECURITY-PROJECTS This repository contains advanced...

zebra 安全漏洞

Zebra is an open-source implementation of Zcash full node written in Rust by the Zcash Foundation. There is a security vulnerability in Zebra, which stems from a logical error in the transaction verification caching mechanism. This vulnerability could potentially allow malicious miners to...

Security update for clamav (moderate)

openSUSE security update: security update for clamav ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20479-1 Rating: moderate References: bsc1221954 bsc1258072 bsc1259207 Cross-References: CVE-2026-20031 CVSS scores: CVE-2026-20031 SUSE : 5.3...

Security update for rust1.94 (moderate)

openSUSE security update: security update for rust1.94 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20569-1 Rating: moderate References: bsc1259623 bsc1261876 Cross-References: CVE-2026-31812 CVSS scores: CVE-2026-31812 SUSE : 5.3...

SUSE-SU-2026:21357-1 Security update for rust1.94

This update for rust1.94 fixes the following issues: Changes in rust1.94: - Don't force gcc-15 on SLE-16 and higher bsc1261876 Update to rust1.94.1: - Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.1 - Avoid unwrapping varint decoding during parameters...

OPENSUSE-SU-2026:20479-1 Security update for clamav

This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file bsc1259207. Non security issue: - Support...

OPENSUSE-SU-2026:20569-1 Security update for rust1.94

This update for rust1.94 fixes the following issues: Changes in rust1.94: - Don't force gcc-15 on SLE-16 and higher bsc1261876 Update to rust1.94.1: - Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.1 - Avoid unwrapping varint decoding during parameters...

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's MCP architecture that could pave the way for remote code execution and have a cascading effect on the artificial intelligence AI supply chain. "This flaw enables Arbitrary Command Execution R...

CVE-2026-6654 Use-After-Free and Double-Free in IntoIter::drop when element drop panics

Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero...

PT-2026-33606

Some increased actor activities are shown targeting rust-coreutils CVE-2026-6435 https://t.co/IPnkuw7pJ4...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: wasm-pack, sqlx, qdrant, buck2, berg, zola, linkerd2, kdash, pixi, xh, linkerd-extension-init, ztunnel, wasmtime, tealdeer, rustup, atuin, lychee, ntpd-rs, zizmor, linkerd2-proxy, uv, wasmcloud, py3-xet-core, cargo-audit, zellij, parseable, linkerd-network-validator,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: wasm-pack, sqlx, qdrant, buck2, berg, zola, linkerd2, kdash, pixi, xh, linkerd-extension-init, ztunnel, wasmtime, tealdeer, rustup, atuin, lychee, ntpd-rs, zizmor, linkerd2-proxy, uv, wasmcloud, py3-xet-core, cargo-audit, zellij, parseable, linkerd-network-validator,...

GHSA-XPHW-CQX3-667J vulnerabilities

Vulnerabilities for packages: ruff, rust-analyzer...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: sqlx, rav1e, buck2, netavark, berg, uutils, nushell, fish, zola, linkerd2, yazi, kdash, cargo-c, pixi, xh, wasmtime, yara-x, atuin, rustup, efs-utils, just, pgcat, sdp-k8s-injector, lychee, mountpoint-s3, hurl, wizer, wadm, ntpd-rs, vector, zizmor, linkerd2-proxy,...

GHSA-XPHW-CQX3-667J vulnerabilities

Vulnerabilities for packages: typst, ruff, rust-analyzer...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: deno, atuin, cargo-audit, efs-utils, ruff, zizmor, pgcat, valkey-ldap, rye, wizer, sdp-k8s-injector, samply, just, zola, zellij, bootc, komodo, sentry-cli, wasmtime, rav1e, jujutsu, uv, virtiofsd, cargo-c, shadowsocks-rust, mdbook, wasmcloud, hurl, asciinema, nushell...

PT-2026-33584

Some increased actor activities are shown targeting rust-coreutils CVE-2026-6434 https://t.co/W5U85rXi0q...

📄 Activitypub-federation-rust 0.7.1 Server-Side Request Forgery

This is a server-side request forgery scanner for Activitypub-federation-rust version 0.7.1. ================================================================================================================================== | Title : Activitypub-federation-rust 0.7.1 Lemmy ActivityPub SSRF Scanne...