darling

Darling Darling 是 macOS 应用程序的运行时环境。 请注意，目前大多数 GUI 应用程序无法运行。 下载 部分发行版的软件包可在 releases 页面下载。 构建说明 构建说明请访问 Darling Docs。 前缀 Prefixes Darling 支持 DPREFIX，它与 WINEPREFIX 非常相似。它们是虚拟的“chroot”环境，具有类似 macOS 的文件系统结构，可以在其中安全地安装软件。默认的 DPREFIX 位置是 /.darling，可通过导出同名环境变量来更改。前缀会在首次使用时自动创建并初始化。 请注意，我们使用 overlayfs...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade Microsoft.NetCore.App.Runtime.osx-x...

Infinite loop

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Infinite loop in the FormDataReader.ProcessFormKeys...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in...

EUVD-2000-0559

Malware in sbrugna...

Use After Free

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code execution...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

CVE-2000-0563

The URLConnection function in MacOS Runtime Java MRJ 2.1 and earlier and the Microsoft virtual machine VM for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model...