ldqk/Masuit.Tools

GitHub

github.com

www.masuit.tools

Releases121

Frequency3 weeks 7 hours

Last Release 5 months ago

Stars6.18K

全龄段友好的C#万能工具库，码数吐司库，包含一些常用的操作类，大都是静态类，加密解密，反射操作，权重随机筛选算法，分布式短id，表达式树，linq扩展，文件压缩，多线程下载，硬件信息，字符串扩展方法，日期时间扩展操作，中国农历，大文件拷贝，图像裁剪，验证码，断点续传，集合扩展、Excel导出等常用封装。诸多功能集一身，代码量不到2MB！

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-21167 ↗	May 1, 2022Sunday, 1 May 2022, 16:15	7.5 HIGH	7.5 HIGH
All versions of package masuit.tools.core are vulnerable to Arbitrary Code Execution via the ReceiveVarData<T> function in the SocketClient.cs component. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatter.