darling

Darling Darling은 macOS 애플리케이션을 위한 런타임 환경입니다. 참고: 현재 대부분의 GUI 애플리케이션은 실행되지 않습니다. 다운로드 일부 배포판용 패키지는 릴리스 페이지에서 다운로드할 수 있습니다. 빌드 방법 빌드 방법은 Darling 문서를 참조하세요. 프리픽스Prefixes Darling은 DPREFIX를 지원하며, 이는 WINEPREFIX와 매우 유사합니다. DPREFIX는 macOS와 유사한 파일시스템 구조를 가진 가상 'chroot' 환경으로, 소프트웨어를 안전하게 설치할 수 있습니다. 기본...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade Microsoft.NetCore.App.Runtime.osx-x...

Infinite loop

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Infinite loop in the FormDataReader.ProcessFormKeys...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in...

EUVD-2000-0559

Malware in sbrugna...

Use After Free

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code execution...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

CVE-2000-0563

The URLConnection function in MacOS Runtime Java MRJ 2.1 and earlier and the Microsoft virtual machine VM for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model...

CVE-2000-0563: Undefined Security Weakness

The URLConnection function in MacOS Runtime Java MRJ 2.1 and earlier and the Microsoft virtual machine VM for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model...