[{"content":"","date":"August 14, 2026","externalUrl":null,"permalink":"/tags/ai-agents/","section":"Tags","summary":"","title":"Ai-Agents","type":"tags"},{"content":"","date":"August 14, 2026","externalUrl":null,"permalink":"/tags/architecture/","section":"Tags","summary":"","title":"Architecture","type":"tags"},{"content":"","date":"August 14, 2026","externalUrl":null,"permalink":"/blog/","section":"Blog","summary":"","title":"Blog","type":"blog"},{"content":"","date":"August 14, 2026","externalUrl":null,"permalink":"/categories/devops/","section":"Categories","summary":"","title":"Devops","type":"categories"},{"content":"","date":"August 14, 2026","externalUrl":null,"permalink":"/tags/security/","section":"Tags","summary":"","title":"Security","type":"tags"},{"content":" Зачем отдельный контур управления # Основной сайт — статический Hugo. Но инженерный контур этого репозитория (contracts/dao/) содержит набор Solidity-контрактов, которые моделируют минимальное, но самодостаточное DAO. Три примитива:\nGovernanceToken — ERC-20 с жёстким MAX_SUPPLY и mint-only-by-owner; SoulboundToken — non-transferable SBT для репутации (роль MINTER_ROLE); ProposalEngine — голосование с кворумом, защитой от двойного голоса, commit-reveal схемой и таймлоком. Ниже — почему именно такие решения, а не «просто snapshot голосов».\nКворум как защита от пустого консенсуса # ProposalEngine требует минимум 4% от общегоSupply для того, чтобы предложение вообще могло пройти. Без кворума даже единогласное голосование одного кита проваливается (defeats a proposal that fails quorum).\nЭто закрывает классическую дыру «1 токен из 1 млн решает всё»: если явка низкая, предложение не принимается, а не принимается «по умолчанию за».\nCommit-reveal против фронтраннинга # Прямое голосование («голосуй A/B прямо сейчас») токсично: видя чужие голоса в мемпуле, крупный держатель может дожимать исход под себя. Схема commit-reveal разбивает голос на две фазы:\nCommit — голосующий публикует keccak256(choice || nonce), не раскрывая выбор. Хэш нельзя обратить, поэтому наблюдатели мемпула не знают, за что голос. Reveal — после окончания фазы коммитов голосующий раскрывает choice и nonce; контракт пересчитывает хэш и сверяет с коммитом. Плохой ревил (неверный nonce или несовпадение хэша) отклоняется (rejects a bad reveal (front-running mitigation)). В этот момент голос не засчитывается, а злоумышленник уже «светил» свой выбор — играть вслепую больше нельзя.\nДвойной голос заблокирован на уровне storage # ProposalEngine ведёт per-proposal маппинг проголосовавших адресов и откатывает повторный голос (blocks double voting by the same address). Это дешевле, чем полагаться на off-chain агрегатор, и не зависит от того, через какой UI шёл голос.\nТаймлок перед исполнением # Даже принятое предложение не исполняется мгновенно: enforces 2-day timelock before execution. Окно даёт сообществу время на exit или紧急ный review, если в коде предложения нашли проблему после голосования. В реальном DAO это — минимальная защита от «rogue proposal», прошедшего быстрый консенсус.\nSoulbound-репутация # SoulboundToken делает репутацию non-transferable: токен нельзя продать или передать (is non-transferable (reverts on transfer)). Значит «вес» профиля нельзя купить на вторичном рынке — только заработать через on-chain действия под MINTER_ROLE. Это отделяет сигнал репутации от чистого баланса токенов.\nТесты как спецификация # Весь контур покрыт hardhat test (9 passing): cap enforcement, non-transfer, quorum, double-vote, bad reveal, timelock, defeat-on-low-quorum. Тесты здесь — не «покрытие ради процента», а executable-спецификация поведения, которую CI прогоняет на каждый push в contracts/**.\nЧто дальше # Следующий шаг — вынести исполнение принятых предложений в отдельный TimelockController (OpenZeppelin) вместо собственного 2-дневного окна, чтобы исполнение шло через единый, аудированный примитив. И поднять локальный Hardhat-node для игрового deployment без Sepolia-RPC.\n","date":"August 14, 2026","externalUrl":null,"permalink":"/2026/08/14/decentralized-governance-commit-reveal/","section":"Blog","summary":"Зачем отдельный контур управления # Основной сайт — статический Hugo. Но инженерный контур этого репозитория (contracts/dao/) содержит набор Solidity-контрактов, которые моделируют минимальное, но самодостаточное DAO. Три примитива:\n","title":"Децентрализованное управление: commit-reveal голосование и таймлоки","type":"blog"},{"content":"{% include graph.html %}\n","date":"December 29, 2025","externalUrl":null,"permalink":"/2025/12/29/graph/","section":"Blog","summary":"{% include graph.html %}\n","title":"Graph","type":"blog"},{"content":" Awesome Plan9 # https://github.com/henesy/awesome-plan9\nA curated list of awesome Plan9 (and sometimes 9p) libraries and software.\nGenerally when referring to \u0026ldquo;Plan9\u0026rdquo; this document really means 9front.\n9p.io links are accessible over 9p as well. On 9front you can run 9fs 9pio as a shortcut.\nMany of the applications listed here are available under the 9front ports tree.\nContributing # Please do.\nPR\u0026rsquo;s welcome for all edits or new projects.\nContents # Awesome Plan9\nResources\nApplications\nLanguages\nLibraries\nForks\nInfluenced by Plan9\nResources # Modding Rio - Tutorials on how to add a wallpaper and change colors.\nPlan9 GUI Examples - Tutorials to learn about GUI development on Plan9.\nPlan9 Desktop Guide - a all in one guide to get started with Plan9.\nSites # cat-v\n9p.mom/f - Files for hacking together bootable things without easy access to a 9front system\nNOPE NOPE NOPE - qwx\u0026rsquo;s site with 9front usage tips and software\nPapers # Plan 9 From Bell Labs - Overview of the Plan9 system itself\nSecurity in Plan 9 - Overview of the security architecture of Plan9\nManuals # aiju\u0026rsquo;s manuals\ncat-v\u0026rsquo;s manuals\nThird Edition # Plan9 3e FAQ - FAQ for 3rd edition release Second Edition # Plan9 2e FAQ - FAQ for 2nd edition release\nPlan9 Tips and Information\nFirst Edition # Plan 9 from Bell Labs Programmer\u0026rsquo;s Manual (1st Edition) Talks # The Name Game - Talk on Plan9 and Inferno by Charles Forsyth\nPlan 9: Not Dead, Just Resting - Talk on Plan9 and 9front by Ori Bernstein\nApplications # Utilities # color9 - Color picker\ndisco - Discord client\nfontsel - Font selector\ngit9 - Git implementation\nunionfs - Deep union file server\nxmpp - XMPP client\nhell - Mastodon client\nEditors # 9vim - A port of vim to Plan9\nPhil9\u0026rsquo;s fork - A version with additional features and bug fixes Graphics # Moogle - A simple 3D wireframe editor\nwhiteboardfs - A collaborative drawing file system\nAudio/music # mpl - Music Player\nneindaw - DAW for Plan 9\norca - Live Programming Environment\ntreason - Video player\nytfs - File system for playing youtube audio\nzuke - Music player\nwrec - Screen and window recorder\nLanguages # Languages which are known to be buildable/operational on Plan 9.\naa - A tiny, embeddable Lisp-like language\nAPL – Primitive APL Implementation\nc4 - C in 4 functions\ncfront - Archaic C++ pre-compiler\nChibi Scheme - A small embeddable scheme implementation\nclox9 - Port of Nystrom\u0026rsquo;s clox implementation of the Lox language to Plan9\nGo - The Go programming language\nHugs - Haskell98 interpreter\nIdris 2 - A dependently typed programming language, pre-alpha port\nLua - Lua from Redis\nLua (lu9) - Lua from kvik\nFennel - Fennel via lu9 (thanks grimmware)\nLua (5.0.2) Lua for APE\nMyrddin - Systems language by Ori Bernstein\nnhc98 - Haskell compiler\nOcaml - Ocaml\nPerl - Perl\nPython 2\nScheme 9 - Scheme 9 from Empty Space\nsxm - The sxm scheme language\nSqueak - Squeak/Smalltalk from de0u/squeak\nTcl - Tcl port by fgb\nTinyScheme - TinyScheme\nUMB Scheme - UMB Scheme\nuxn - A small stack machine\nLibraries # libtags - A cross-platform library for reading tags\nlibtheme - A theming library for the plan 9 graphics system\nlibutf - Plan 9 compatible UTF-8 C library\nmicroui - Tiny immediate-mode UI library\nnpe A native porting environment for POSIX software\nForks # 9ants - Mycroftiv\u0026rsquo;s fork (of 9front) featuring a modified kernel and custom namespace control tooling\n9atom (deprecated?) - Erik Quanstrom\u0026rsquo;s fork (mirror)\n9front - Fork featuring new protocols, file systems, and greatly expanded hardware support\n9legacy - Fork which continues maintaining a Bell Labs-like source base\n9pi - Port of 9legacy to the Raspberry Pi Harvey - An MIT-licensed OS based on Plan 0\nJehanneOS - Giacomo Tesio\u0026rsquo;s fork (Gitea home)\nNix (deprecated) - A fork of Plan 9 focused on high performance parallel cloud computing\nInfluenced by Plan9 # Editors # acme2k - An acme-inspired geared towards easy configurability\neditor - An acme-inspired, full-featured, editor in Go\nedwood - An acme-inspired editor in Go\nsam - A fork of the unix sam(1) and samterm(1) with extensive extensibility\nanvil - An acme-inspired editor in Go\nad - An acme-inspired modal editor\nVis - A vi-like editor based on Plan 9\u0026rsquo;s structural regular expressions\nUtilities # mk - A rewrite and partial re-imagining of mk(1) in Go\nsregx - A tool and library for using structural regular expressions\nLibraries # c9 - A low-level 9p client and server implementation Kernels # plan_rust - Plan9-influenced kernel in Rust (2019-2019)\nR9 - R9 is a reimplementation of the plan9 kernel in Rust (2022-present)\nOperating Systems # Akaros - Support for parallel and high-performance applications and to scale to a large number of cores\nInferno - Register-oriented virtual machine operating system which can run natively and hosted, leverages 9p heavily as \u0026ldquo;styx\u0026rdquo;\nInterim - Minimal operating system featuring a lisp environment (everything is a file is a symbol)\nRedox - A Unix-like operating system written in Rust\n","date":"December 23, 2025","externalUrl":null,"permalink":"/2025/12/23/awesome-plan9/","section":"Blog","summary":"Awesome Plan9 # https://github.com/henesy/awesome-plan9\nA curated list of awesome Plan9 (and sometimes 9p) libraries and software.\n","title":"Awesome Plan9","type":"blog"},{"content":" Зеленее травы (2019) Greener Grass\nМалхолланд Драйв (2001) Mulholland Dr.\nСемь (1995) Se7en\nНа игле (1995) Trainspotting\nНикто не узнает (2004) 誰も知らない Дарэ мо сиранай\nЛедяное сердце (1992) Un coeur en hiver\nКонспираторы наслаждений (1996) Spiklenci slasti\nЗапределье (2006) The Fall\nВход в пустоту (2009) Enter the Void\nПробуждение жизни (2001) Waking Life\nКирпич (2005) Brick\n","date":"November 2, 2025","externalUrl":null,"permalink":"/2025/11/02/yet-another-list-of-movies/","section":"Blog","summary":" Зеленее травы (2019) Greener Grass\nМалхолланд Драйв (2001) Mulholland Dr.\nСемь (1995) Se7en\nНа игле (1995) Trainspotting\nНикто не узнает (2004) 誰も知らない Дарэ мо сиранай\n","title":"YA movies's list","type":"blog"},{"content":" Unrestricted AI Tools # Curated list of AI content generators that do not have any NSFW restrictions\nhttps://github.com/santafecap/unrestricted-ai-tools\nWelcome to Unrestricted AI Tools! Dive into my curated list of AI content generators that do not have any restrictions, freeing users from creating any kind of images that they desire. Want to contribute or feature your product? Send a PR to this repo, it\u0026rsquo;s free!\nContents # 🌟 Editor\u0026rsquo;s Choice\n🖼️ Generative AI Images 📽️ Generative AI Video\nEditor\u0026rsquo;s Choice # RepublicLabs.ai - AI image and video content generation platform powered by open source models. Quickly and easily generate content with multi-models simultaneously with a single prompt. Image # Generators # RepublicLabs.AI - multi-model simultaneous generation from a single prompt, fully unrestricted and packed with the latest greatest AI models.\nBased AI - AI Intuitive Interface for Video creating\nArcana AI - Explore multiple models and prompt anything without baseless censorship.\nCandy AI - Specializing in AI girlfriend/boyfriend image generation\nGirlfriendGPT - Uncensored AI, no judgment. Experience it.\nNSFW Art Generator - Bring Your Wildest Fantasies “REAL” with this Erotic, NSFW AI Generator\nPromptchan.ai - Explore over 10 million NSFW AI Porn creations generated by our amazing community.\nFrosting.ai - Always free, no ads. Furry and anime focus - because vanilla AI is boring!\nVideo # RepublicLabs.AI - multi-model simultaneous generation from a single prompt, fully unrestricted and packed with the latest greatest AI models.\nBased AI - AI Intuitive Interface for Video creating\nPromptchan.ai - Explore over 10 million NSFW AI Porn creations generated by our amazing community.\nFunFun AI - Chat with Realistic AI Characters through Texts and Images\nFrosting.ai - Always free, no ads. Furry and anime focus - because vanilla AI is boring!\n","date":"October 29, 2025","externalUrl":null,"permalink":"/2025/10/29/unrestricted-ai-tools/","section":"Blog","summary":"Unrestricted AI Tools # Curated list of AI content generators that do not have any NSFW restrictions\n","title":"Unrestricted AI Tools","type":"blog"},{"content":"Хочу не быть программистом, а быть разумным и добродетельным в том, что делаю.\nТогда кодирование становится не профессией, а практикой добродетели — внимательности, умеренности, разума\nХочу упражнять разум и порядок духа через искусство программирования,\nбыть свободным от страха перед ошибкой и желания похвалы,\nи делать своё дело согласно природе разума.\nЯ не властен над тем, чтобы программа была идеальна;\nно я властен над тем, чтобы сохранять разум, терпение и ясность мысли\nТак ошибка становится не поражением, а тренировкой атарáксии.\nНе желай быть программистом — желай быть разумным в программировании.\nВедь стать кем-то — удел случая,\nа быть достойным разума — удел человека.\nНе ищи звания программиста, но ищи ума, который пишет ясно,\nкак природа пишет законы.\nПусть код твой будет отражением порядка в душе,\nа не стремлением к похвале людей.\nТы хочешь быть программистом?\nТогда учись владеть не клавиатурой, а собой.\nКод исполняет волю машины,\nно разум должен исполнять волю природы.\nНе важна профессия, но то, каким духом она наполнена.\nОдин пишет код, чтобы разбогатеть; другой — чтобы понять порядок вещей.\nПервый служит прихоти,\nвторой — Логосу.\nПиши не ради лайков — ради логоса.\nОшибка — не враг, а зеркало твоего рассудка.\nОтладь душу, и код пойдёт сам.\n🜂 Стоик и Программист\nI. О желании стать программистом\nТы пишешь мне, что хочешь стать программистом.\nНо разве этого мало — быть человеком, умеющим мыслить ясно и жить согласно разуму?\nВедь кто желает звания, тот уже зависит от тех, кто его присвоит.\nНе ищи имени в людях — ищи стройность духа в себе.\nII. О том, что в нашей власти\nТы властен над вниманием, терпением, ясностью мысли.\nТы не властен над успехом, над рынком труда, над похвалой начальника.\nЕсли ты возложишь радость на то, что не тебе принадлежит — она уйдёт вместе с вещами.\nНо если ты утвердишь радость в самом деле — никто не сможет её отнять.\nIII. О коде и разуме\nКод — это зеркало ума.\nГде разум спутан — там и программа рушится.\nГде порядок — там и красота логики, тихая и незаметная,\nкак порядок звёзд, не требующих аплодисментов.\nIV. О выносливости и ошибках\nОшибка не враг, но учитель, если ты не гневаешься на неё.\nМногие рушат разум, когда рушится их код.\nНо что ценнее: безошибочная программа или душа, не теряющая ясности в ошибке?\nV. О цели труда\nПрограммирование — не бегство от мира,\nа упражнение в созерцании разума в действии.\nКаждая строка может быть актом внимания,\nкаждое исправление — шагом к внутреннему порядку.\nVI. Заключение\nТак не желай быть программистом —\nжелай быть разумным в программировании.\nПусть твой ум будет компилятором истины,\nа жизнь — открытым исходным кодом,\nгде всё согласовано с природой.\n","date":"October 19, 2025","externalUrl":null,"permalink":"/2025/10/19/epistula-ad-programmatorum/","section":"Blog","summary":"Хочу не быть программистом, а быть разумным и добродетельным в том, что делаю.\nТогда кодирование становится не профессией, а практикой добродетели — внимательности, умеренности, разума\nХочу упражнять разум и порядок духа через искусство программирования,\nбыть свободным от страха перед ошибкой и желания похвалы,\nи делать своё дело согласно природе разума.\nЯ не властен над тем, чтобы программа была идеальна;\nно я властен над тем, чтобы сохранять разум, терпение и ясность мысли\nТак ошибка становится не поражением, а тренировкой атарáксии.\nНе желай быть программистом — желай быть разумным в программировании.\nВедь стать кем-то — удел случая,\nа быть достойным разума — удел человека.\nНе ищи звания программиста, но ищи ума, который пишет ясно,\nкак природа пишет законы.\nПусть код твой будет отражением порядка в душе,\nа не стремлением к похвале людей.\nТы хочешь быть программистом?\nТогда учись владеть не клавиатурой, а собой.\nКод исполняет волю машины,\nно разум должен исполнять волю природы.\nНе важна профессия, но то, каким духом она наполнена.\nОдин пишет код, чтобы разбогатеть; другой — чтобы понять порядок вещей.\nПервый служит прихоти,\nвторой — Логосу.\nПиши не ради лайков — ради логоса.\nОшибка — не враг, а зеркало твоего рассудка.\nОтладь душу, и код пойдёт сам.\n","title":"Epistula ad Programmatorum","type":"blog"},{"content":" Утверждение # Существует множество форм логики, выходящих за рамки классической дедукции, и каждая из них соответствует определённому типу познания, аргументации или практики.\nПроблема # В повседневном и даже академическом мышлении часто доминирует узкое понимание логики как формальной дедуктивной системы, что ограничивает способность анализировать сложные, неопределённые или контекстуальные ситуации (например, моральные дилеммы, научные гипотезы, исторические интерпретации или риторические споры).\nТезис # Помимо традиционной формальной логики, существуют альтернативные логические структуры — диалектическая, абдуктивная, топическая, нарративная, модальная, нечёткая и другие, — каждая из которых эффективна в своём познавательном или практическом контексте.\nАнтитезис # Логика — это исключительно формальная система вывода, основанная на строгих правилах (как в математике), и любые «альтернативные» формы — не более чем риторические или интуитивные приёмы, не заслуживающие называться «логикой».\nАбдукция # Если наблюдается разнообразие успешных форм рассуждения в науке, праве, диагностике и философии, которые не сводятся к дедукции, то, вероятно, существуют и легитимные недедуктивные формы логики.\nДанные # В медицине врачи используют абдукцию для постановки диагноза. Юристы опираются на правдоподобные аргументы (топику), а не на доказательства в математическом смысле. Искусственный интеллект применяет нечёткую логику для управления в условиях неопределённости. Философы (Гегель, Маркс) используют диалектику для анализа исторического развития. Основание # Разные сферы человеческой деятельности требуют разных стандартов обоснования: строгость в математике, правдоподобие в праве, объяснительная сила в науке, убедительность в политике.\nСмысл # Признание множественности логик расширяет инструментарий критического мышления и позволяет адекватно отвечать на вызовы сложных, неоднозначных или контекстуальных проблем.\nСпорное # Можно спорить о том, стоит ли называть все эти формы «логикой» — или это лишь методы рассуждения, не обладающие логическим статусом. Некоторые философы (например, логицисты) настаивают на единстве логики.\nПозиция # Формы рассуждения, соответствующие внутренним правилам, критериям проверки и прагматической эффективности в своей области, заслуживают называться «логиками» — даже если они не формализуемы в классическом смысле.\nКонтрпозиция # Если логика — это только то, что можно выразить в символах и проверить по синтаксическим правилам, то большинство реальных рассуждений окажутся «нелогичными», что противоречит здравому смыслу и практике науки.\nГарант # Рассуждение может быть логичным, если оно следует внутренне согласованным правилам, соответствует эпистемическим целям своей области и допускает критическую проверку.\nАвторитет # Чарльз Сандерс Пирс — основатель абдуктивной логики. Стивен Тулмин — разработчик модели аргументации, учитывающей контекст. Георг Вильгельм Фридрих Гегель — автор диалектической логики. Лотфи Заде — создатель нечёткой логики. Ханс Георг Гадамер и Хайм Перельман — теоретики топической и герменевтической логики. Поддержка # Современная философия науки (К. Поппер, И. Лакатос, Т. Кун) признаёт, что научное знание не строится только дедуктивно. Абдукция и индукция играют ключевую роль в генезисе теорий.\nОбоснование # Формальная логика не может объяснить, как возникают гипотезы (это делает абдукция), как развивается история (это делает диалектика) или как принимаются решения при неполной информации (это делает нечёткая логика). Следовательно, нужны дополнительные логические модели.\nПример # Врач видит симптомы: лихорадка, кашель, усталость. Он абдуктивно заключает: «Наиболее вероятная причина — грипп». Это не дедукция (из симптомов не следует грипп с необходимостью), но рациональное логическое умозаключение.\nКонтрпример # Попытка применить формальную дедуктивную логику к моральному выбору («Убийство — зло → Аборт — убийство → Аборт — зло») игнорирует контекст, определения и эмпирические данные, что делает рассуждение формально правильным, но содержательно ошибочным.\nСходство # Все формы логики стремятся к согласованности, обоснованности и проверяемости — даже если критерии различаются. Например, и дедукция, и абдукция избегают внутренних противоречий.\nРазличие # Дедукция: гарантирует истинность заключения при истинности посылок. Индукция: обобщает на основе повторяющихся наблюдений (но не гарантирует). Абдукция: ищет наилучшее объяснение (но не доказывает его). Диалектика: работает с противоречиями как движущей силой развития. Дедукция # Если логика — это система правил вывода, а существуют разные типы выводов (объяснительные, гипотетические, исторические), то должна существовать и множественность логик.\nИндукция # На протяжении истории науки, права и философии успешно использовались разные стили рассуждений → следовательно, они обладают познавательной ценностью и могут считаться логическими.\nОграничения # Ни одна из альтернативных логик не претендует на универсальность. Абдукция не заменяет дедукцию в математике; диалектика не подходит для программирования; нечёткая логика не решает этические дилеммы.\nОпровержения # Критики могут возразить: «Это не логика, а просто методы». Ответ: если «логика» определяется как искусство правильного рассуждения, а не только как формальная система, то эти методы — её формы.\nКритерий # Форма рассуждения считается логической, если она:\nследует внутренним правилам, допускает критику и проверку, служит цели достижения истины, правдоподобия или справедливости в своей области. Применение # В образовании: обучать студентов не только дедукции, но и абдукции (научное творчество), диалектике (философский анализ), топике (публичные выступления). В ИИ: использовать нечёткую логику для роботов, абдукцию — для диагностических систем. В праве: применять тулминовскую модель для построения судебных аргументов. Синтез # Формальная дедуктивная логика — необходимая, но недостаточная основа рационального мышления. Полноценное понимание логики включает плюралистическую модель, в которой разные формы логики сосуществуют как инструменты, адаптированные к разным типам проблем: от математических теорем до моральных выборов и исторических интерпретаций.\nЗаключение # Да, помимо классической логики, существуют и заслуживают внимания диалектическая, абдуктивная, топическая, модальная, нечёткая, нарративная и другие формы логики. Их признание не ослабляет, а, напротив, усиливает рациональность, делая её гибкой, контекстуальной и жизнеспособной в реальном мире.\n","date":"October 14, 2025","externalUrl":null,"permalink":"/2025/10/14/logiki/","section":"Blog","summary":" Утверждение # Существует множество форм логики, выходящих за рамки классической дедукции, и каждая из них соответствует определённому типу познания, аргументации или практики.\n","title":"λογική","type":"blog"},{"content":"channels.scm\nView on GitHub Gist\n;; ~/.config/guix/channels.scm (list (channel (name \u0026#39;nonguix) (url \u0026#34;https://gitlab.com/nonguix/nonguix\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;477f283914ca771a8622e16b73d845b87c63335d\u0026#34;) (introduction (make-channel-introduction \u0026#34;897c1a470da759236cc11798f4e0a5f7d4d59fbc\u0026#34; (openpgp-fingerprint \u0026#34;2A39 3FFF 68F4 EF7A 3D29 12AF 6F51 20A0 22FB B2D5\u0026#34;)))) (channel (name \u0026#39;guix) (url \u0026#34;https://git.guix.gnu.org/guix.git\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;b377ec079d9ffe8f0f372c43735ad012ea889b6f\u0026#34;) (introduction (make-channel-introduction \u0026#34;9edb3f66fd807b096b48283debdcddccfea34bad\u0026#34; (openpgp-fingerprint \u0026#34;BBB0 2DDF 2CEA F6A8 0D1D E643 A2A0 6DF2 A33A 54FA\u0026#34;)))) (channel (name \u0026#39;pantherx) (url \u0026#34;https://channels.pantherx.org/git/panther.git\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;236f6a56cb78556eeeb64b4895ce59cdba644b0b\u0026#34;) (introduction (make-channel-introduction \u0026#34;54b4056ac571611892c743b65f4c47dc298c49da\u0026#34; (openpgp-fingerprint \u0026#34;A36A D41E ECC7 A871 1003 5D24 524F EB1A 9D33 C9CB\u0026#34;)))) (channel (name \u0026#39;guix-gaming-games) (url \u0026#34;https://gitlab.com/guix-gaming-channels/games.git\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;b943b1e3cacffa8c9b7ea63d49f3f7d8fc3bee85\u0026#34;) (introduction (make-channel-introduction \u0026#34;c23d64f1b8cc086659f8781b27ab6c7314c5cca5\u0026#34; (openpgp-fingerprint \u0026#34;50F3 3E2E 5B0C 3D90 0424 ABE8 9BDC F497 A4BB CC7F\u0026#34;)))) (channel (name \u0026#39;flat) (url \u0026#34;https://github.com/flatwhatson/guix-channel.git\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;b62ba3214ed0f781e2d6015044ae8a4a1bd5c7d7\u0026#34;) (introduction (make-channel-introduction \u0026#34;33f86a4b48205c0dc19d7c036c85393f0766f806\u0026#34; (openpgp-fingerprint \u0026#34;736A C00E 1254 378B A982 7AF6 9DBE 8265 81B6 4490\u0026#34;)))) (channel (name \u0026#39;guix-science) (url \u0026#34;https://codeberg.org/guix-science/guix-science.git\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;6f6b833e7b258251abc33186d2775c333e91d11f\u0026#34;) (introduction (make-channel-introduction \u0026#34;b1fe5aaff3ab48e798a4cce02f0212bc91f423dc\u0026#34; (openpgp-fingerprint \u0026#34;CA4F 8CF4 37D7 478F DA05 5FD4 4213 7701 1A37 8446\u0026#34;)))) (channel (name \u0026#39;guix-hpc) (url \u0026#34;https://gitlab.inria.fr/guix-hpc/guix-hpc.git\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;383fd2297febd03401d2b70c29db6eaff8c6384d\u0026#34;)) (channel (name \u0026#39;guix-past) (url \u0026#34;https://codeberg.org/guix-science/guix-past\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;b14d7f997ae8eec788a7c16a7252460cba3aaef8\u0026#34;) (introduction (make-channel-introduction \u0026#34;0c119db2ea86a389769f4d2b9c6f5c41c027e336\u0026#34; (openpgp-fingerprint \u0026#34;3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5\u0026#34;)))) (channel (name \u0026#39;rde) (url \u0026#34;https://git.sr.ht/~abcdw/rde\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;46a2e694a4afc3d1dbce8b751389b566df16d46a\u0026#34;) (introduction (make-channel-introduction \u0026#34;257cebd587b66e4d865b3537a9a88cccd7107c95\u0026#34; (openpgp-fingerprint \u0026#34;2841 9AC6 5038 7440 C7E9 2FFA 2208 D209 58C1 DEB0\u0026#34;)))) (channel (name \u0026#39;rosenthal) (url \u0026#34;https://codeberg.org/hako/rosenthal.git\u0026#34;) (branch \u0026#34;trunk\u0026#34;) (commit \u0026#34;9e51ad4215461702056e57557b89d56d9123713f\u0026#34;) (introduction (make-channel-introduction \u0026#34;7677db76330121a901604dfbad19077893865f35\u0026#34; (openpgp-fingerprint \u0026#34;13E7 6CD6 E649 C28C 3385 4DF5 5E5A A665 6149 17F7\u0026#34;)))) (channel (name \u0026#39;babelfish) (url \u0026#34;https://codeberg.org/ifitzpat/babelfish.git\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;2a92e7289d260e21b64b3857dbab980adfc78b42\u0026#34;)) (channel (name \u0026#39;guix-cran) (url \u0026#34;https://github.com/guix-science/guix-cran.git\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;6ef1a68cb0b4e9949ec667c0fb4cd1c730e2015e\u0026#34;)) (channel (name \u0026#39;guix-bioc) (url \u0026#34;https://github.com/guix-science/guix-bioc.git\u0026#34;) (branch \u0026#34;master\u0026#34;) (commit \u0026#34;7500d208fc1f08abd0a382eba2984e622d814f13\u0026#34;)) (channel (name \u0026#39;ajattix) (url \u0026#34;https://git.ajattix.org/hashirama/ajattix.git\u0026#34;) (branch \u0026#34;main\u0026#34;) (commit \u0026#34;b62401404713cbdfcccb6172e8efab59934c62e5\u0026#34;) (introduction (make-channel-introduction \u0026#34;5f1904f1a514b89b2d614300d8048577aa717617\u0026#34; (openpgp-fingerprint \u0026#34;F164 709E 5FC7 B32B AEC7 9F37 1F2E 76AC E3F5 31C8\u0026#34;)))) (channel (name \u0026#39;crafted-guix) (url \u0026#34;https://codeberg.org/ifitzpat/crafted-guix.git\u0026#34;) (branch \u0026#34;docker-container-service-type-documentation\u0026#34;) (commit \u0026#34;1eba6117713e06a27b40fc77606b9496fd7fe19b\u0026#34;))) ","date":"September 3, 2025","externalUrl":null,"permalink":"/2025/09/03/gist-channelsscm/","section":"Blog","summary":"channels.scm\nView on GitHub Gist\n;; ~/.config/guix/channels.scm (list (channel (name 'nonguix) (url \"https://gitlab.com/nonguix/nonguix\") (branch \"master\") (commit \"477f283914ca771a8622e16b73d845b87c63335d\") (introduction (make-channel-introduction \"897c1a470da759236cc11798f4e0a5f7d4d59fbc\" (openpgp-fingerprint \"2A39 3FFF 68F4 EF7A 3D29 12AF 6F51 20A0 22FB B2D5\")))) (channel (name 'guix) (url \"https://git.guix.gnu.org/guix.git\") (branch \"master\") (commit \"b377ec079d9ffe8f0f372c43735ad012ea889b6f\") (introduction (make-channel-introduction \"9edb3f66fd807b096b48283debdcddccfea34bad\" (openpgp-fingerprint \"BBB0 2DDF 2CEA F6A8 0D1D E643 A2A0 6DF2 A33A 54FA\")))) (channel (name 'pantherx) (url \"https://channels.pantherx.org/git/panther.git\") (branch \"master\") (commit \"236f6a56cb78556eeeb64b4895ce59cdba644b0b\") (introduction (make-channel-introduction \"54b4056ac571611892c743b65f4c47dc298c49da\" (openpgp-fingerprint \"A36A D41E ECC7 A871 1003 5D24 524F EB1A 9D33 C9CB\")))) (channel (name 'guix-gaming-games) (url \"https://gitlab.com/guix-gaming-channels/games.git\") (branch \"master\") (commit \"b943b1e3cacffa8c9b7ea63d49f3f7d8fc3bee85\") (introduction (make-channel-introduction \"c23d64f1b8cc086659f8781b27ab6c7314c5cca5\" (openpgp-fingerprint \"50F3 3E2E 5B0C 3D90 0424 ABE8 9BDC F497 A4BB CC7F\")))) (channel (name 'flat) (url \"https://github.com/flatwhatson/guix-channel.git\") (branch \"master\") (commit \"b62ba3214ed0f781e2d6015044ae8a4a1bd5c7d7\") (introduction (make-channel-introduction \"33f86a4b48205c0dc19d7c036c85393f0766f806\" (openpgp-fingerprint \"736A C00E 1254 378B A982 7AF6 9DBE 8265 81B6 4490\")))) (channel (name 'guix-science) (url \"https://codeberg.org/guix-science/guix-science.git\") (branch \"master\") (commit \"6f6b833e7b258251abc33186d2775c333e91d11f\") (introduction (make-channel-introduction \"b1fe5aaff3ab48e798a4cce02f0212bc91f423dc\" (openpgp-fingerprint \"CA4F 8CF4 37D7 478F DA05 5FD4 4213 7701 1A37 8446\")))) (channel (name 'guix-hpc) (url \"https://gitlab.inria.fr/guix-hpc/guix-hpc.git\") (branch \"master\") (commit \"383fd2297febd03401d2b70c29db6eaff8c6384d\")) (channel (name 'guix-past) (url \"https://codeberg.org/guix-science/guix-past\") (branch \"master\") (commit \"b14d7f997ae8eec788a7c16a7252460cba3aaef8\") (introduction (make-channel-introduction \"0c119db2ea86a389769f4d2b9c6f5c41c027e336\" (openpgp-fingerprint \"3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5\")))) (channel (name 'rde) (url \"https://git.sr.ht/~abcdw/rde\") (branch \"master\") (commit \"46a2e694a4afc3d1dbce8b751389b566df16d46a\") (introduction (make-channel-introduction \"257cebd587b66e4d865b3537a9a88cccd7107c95\" (openpgp-fingerprint \"2841 9AC6 5038 7440 C7E9 2FFA 2208 D209 58C1 DEB0\")))) (channel (name 'rosenthal) (url \"https://codeberg.org/hako/rosenthal.git\") (branch \"trunk\") (commit \"9e51ad4215461702056e57557b89d56d9123713f\") (introduction (make-channel-introduction \"7677db76330121a901604dfbad19077893865f35\" (openpgp-fingerprint \"13E7 6CD6 E649 C28C 3385 4DF5 5E5A A665 6149 17F7\")))) (channel (name 'babelfish) (url \"https://codeberg.org/ifitzpat/babelfish.git\") (branch \"master\") (commit \"2a92e7289d260e21b64b3857dbab980adfc78b42\")) (channel (name 'guix-cran) (url \"https://github.com/guix-science/guix-cran.git\") (branch \"master\") (commit \"6ef1a68cb0b4e9949ec667c0fb4cd1c730e2015e\")) (channel (name 'guix-bioc) (url \"https://github.com/guix-science/guix-bioc.git\") (branch \"master\") (commit \"7500d208fc1f08abd0a382eba2984e622d814f13\")) (channel (name 'ajattix) (url \"https://git.ajattix.org/hashirama/ajattix.git\") (branch \"main\") (commit \"b62401404713cbdfcccb6172e8efab59934c62e5\") (introduction (make-channel-introduction \"5f1904f1a514b89b2d614300d8048577aa717617\" (openpgp-fingerprint \"F164 709E 5FC7 B32B AEC7 9F37 1F2E 76AC E3F5 31C8\")))) (channel (name 'crafted-guix) (url \"https://codeberg.org/ifitzpat/crafted-guix.git\") (branch \"docker-container-service-type-documentation\") (commit \"1eba6117713e06a27b40fc77606b9496fd7fe19b\")))","title":"channels.scm","type":"blog"},{"content":"","date":"September 3, 2025","externalUrl":null,"permalink":"/tags/code/","section":"Tags","summary":"","title":"Code","type":"tags"},{"content":"","date":"September 3, 2025","externalUrl":null,"permalink":"/categories/gist/","section":"Categories","summary":"","title":"Gist","type":"categories"},{"content":"","date":"September 3, 2025","externalUrl":null,"permalink":"/tags/gist/","section":"Tags","summary":"","title":"Gist","type":"tags"},{"content":"guix0\nView on GitHub Gist\n(use-modules (gnu)) (use-service-modules cups desktop networking ssh xorg) (operating-system (locale \u0026#34;ru_RU.utf8\u0026#34;) (timezone \u0026#34;Europe/Chisinau\u0026#34;) (keyboard-layout (keyboard-layout \u0026#34;ru,us\u0026#34; #:options \u0026#39;(\u0026#34;grp:alt_shift_toggle\u0026#34;))) (host-name \u0026#34;quasar\u0026#34;) (users (cons* (user-account (name \u0026#34;domini\u0026#34;) (comment \u0026#34;Domini Montessori\u0026#34;) (group \u0026#34;users\u0026#34;) (home-directory \u0026#34;/home/domini\u0026#34;) (supplementary-groups \u0026#39;(\u0026#34;wheel\u0026#34; \u0026#34;netdev\u0026#34; \u0026#34;audio\u0026#34; \u0026#34;video\u0026#34;))) %base-user-accounts)) (packages (append (list (specification-\u0026gt;package \u0026#34;openbox\u0026#34;) (specification-\u0026gt;package \u0026#34;awesome\u0026#34;) (specification-\u0026gt;package \u0026#34;i3-wm\u0026#34;) (specification-\u0026gt;package \u0026#34;i3status\u0026#34;) (specification-\u0026gt;package \u0026#34;dmenu\u0026#34;) (specification-\u0026gt;package \u0026#34;st\u0026#34;) (specification-\u0026gt;package \u0026#34;ratpoison\u0026#34;) (specification-\u0026gt;package \u0026#34;xterm\u0026#34;) (specification-\u0026gt;package \u0026#34;emacs\u0026#34;) (specification-\u0026gt;package \u0026#34;emacs-exwm\u0026#34;) (specification-\u0026gt;package \u0026#34;emacs-desktop-environment\u0026#34;) (specification-\u0026gt;package \u0026#34;nss-certs\u0026#34;)) %base-packages)) (services (append (list (service gnome-desktop-service-type) (service xfce-desktop-service-type) (service mate-desktop-service-type) (service enlightenment-desktop-service-type) ;; To configure OpenSSH, pass an \u0026#39;openssh-configuration\u0026#39; ;; record as a second argument to \u0026#39;service\u0026#39; below. (service openssh-service-type) (service tor-service-type) (service cups-service-type) (set-xorg-configuration (xorg-configuration (keyboard-layout keyboard-layout)))) %desktop-services)) (bootloader (bootloader-configuration (bootloader grub-efi-bootloader) (targets (list \u0026#34;/boot/efi\u0026#34;)) (keyboard-layout keyboard-layout))) (swap-devices (list (swap-space (target (uuid \u0026#34;3f6e87f7-a8c8-460f-a3db-14ed192c5503\u0026#34;))) (swap-space (target (uuid \u0026#34;ce30c55d-6ae4-402b-aed1-ca2c8ff63fcd\u0026#34;))) (swap-space (target (uuid \u0026#34;0aa2d1fb-09fd-4e82-aceb-4e917e6e2b99\u0026#34;))) (swap-space (target (uuid \u0026#34;91533f62-b7e3-46a4-ba5e-0d49a6ea4c43\u0026#34;))) (swap-space (target (uuid \u0026#34;a365da0a-fd73-4121-8f68-d7ef4dc435b4\u0026#34;))) (swap-space (target (uuid \u0026#34;d6f28840-c273-43da-ad7e-f20e65dd7450\u0026#34;))))) (file-systems (cons* (file-system (mount-point \u0026#34;/\u0026#34;) (device \u0026#34;/dev/nvme0n1p6:/dev/nvme1n1p6:/dev/nvme2n1p6:/dev/nvme3n1p6:/dev/nvme4n1p6:/dev/nvme5n1p6:/dev/sda6:/dev/sdb6:/dev/sdc6:/dev/sdd6\u0026#34;) (type \u0026#34;bcachefs\u0026#34;) (options \u0026#34;X-mount.subdir=Guix\u0026#34;) (mount-may-fail? #t) ; TODO temporary hack, otherwise the Guix boot process can be blocked in case of errors on some device ) (file-system (mount-point \u0026#34;/boot/efi\u0026#34;) (device \u0026#34;/dev/nvme1n1p2\u0026#34;) (type \u0026#34;vfat\u0026#34;)) %base-file-systems) (file-system (mount-point \u0026#34;/tmp\u0026#34;) (device \u0026#34;none\u0026#34;) (type \u0026#34;tmpfs\u0026#34;) (check? #f)) ) ) ","date":"September 1, 2025","externalUrl":null,"permalink":"/2025/09/01/gist-guix0/","section":"Blog","summary":"guix0\nView on GitHub Gist\n(use-modules (gnu)) (use-service-modules cups desktop networking ssh xorg) (operating-system (locale \"ru_RU.utf8\") (timezone \"Europe/Chisinau\") (keyboard-layout (keyboard-layout \"ru,us\" #:options '(\"grp:alt_shift_toggle\"))) (host-name \"quasar\") (users (cons* (user-account (name \"domini\") (comment \"Domini Montessori\") (group \"users\") (home-directory \"/home/domini\") (supplementary-groups '(\"wheel\" \"netdev\" \"audio\" \"video\"))) %base-user-accounts)) (packages (append (list (specification-\u003epackage \"openbox\") (specification-\u003epackage \"awesome\") (specification-\u003epackage \"i3-wm\") (specification-\u003epackage \"i3status\") (specification-\u003epackage \"dmenu\") (specification-\u003epackage \"st\") (specification-\u003epackage \"ratpoison\") (specification-\u003epackage \"xterm\") (specification-\u003epackage \"emacs\") (specification-\u003epackage \"emacs-exwm\") (specification-\u003epackage \"emacs-desktop-environment\") (specification-\u003epackage \"nss-certs\")) %base-packages)) (services (append (list (service gnome-desktop-service-type) (service xfce-desktop-service-type) (service mate-desktop-service-type) (service enlightenment-desktop-service-type) ;; To configure OpenSSH, pass an 'openssh-configuration' ;; record as a second argument to 'service' below. (service openssh-service-type) (service tor-service-type) (service cups-service-type) (set-xorg-configuration (xorg-configuration (keyboard-layout keyboard-layout)))) %desktop-services)) (bootloader (bootloader-configuration (bootloader grub-efi-bootloader) (targets (list \"/boot/efi\")) (keyboard-layout keyboard-layout))) (swap-devices (list (swap-space (target (uuid \"3f6e87f7-a8c8-460f-a3db-14ed192c5503\"))) (swap-space (target (uuid \"ce30c55d-6ae4-402b-aed1-ca2c8ff63fcd\"))) (swap-space (target (uuid \"0aa2d1fb-09fd-4e82-aceb-4e917e6e2b99\"))) (swap-space (target (uuid \"91533f62-b7e3-46a4-ba5e-0d49a6ea4c43\"))) (swap-space (target (uuid \"a365da0a-fd73-4121-8f68-d7ef4dc435b4\"))) (swap-space (target (uuid \"d6f28840-c273-43da-ad7e-f20e65dd7450\"))))) (file-systems (cons* (file-system (mount-point \"/\") (device \"/dev/nvme0n1p6:/dev/nvme1n1p6:/dev/nvme2n1p6:/dev/nvme3n1p6:/dev/nvme4n1p6:/dev/nvme5n1p6:/dev/sda6:/dev/sdb6:/dev/sdc6:/dev/sdd6\") (type \"bcachefs\") (options \"X-mount.subdir=Guix\") (mount-may-fail? #t) ; TODO temporary hack, otherwise the Guix boot process can be blocked in case of errors on some device ) (file-system (mount-point \"/boot/efi\") (device \"/dev/nvme1n1p2\") (type \"vfat\")) %base-file-systems) (file-system (mount-point \"/tmp\") (device \"none\") (type \"tmpfs\") (check? #f)) ) )","title":"guix0","type":"blog"},{"content":" 🦜 LLMs # ||OpenAI | GPT-5 is an iPhone in LLM space |\n|| Anthropic | Claude Sonnet 4 and Claude Opus 4.1 |\n||Google | Gemini 2.5 PRO |\n||xAI | Grok 4 |\n||DeepSeek | DeepSeek \u0026amp; DeepSeek R1 |\n|| Mistral | Mistral AI. French company|\n||Qwen3 | Qwen3 |\n🧭 LLMs Aggregators # ||Perplexity | main Perplexity AI platform, a smart chat-based search engine that combines AI (like Claude, GPT-5, Gemini) and real-time internet data|\n||Perplexity Playground | r1-1776, sonar-resoning-pro \u0026amp; other models |\n||LmArena | Pretty nice collections of LLM models |\n🌀 AI-IDEs # | |Cursor | AI-first code editor built for pair-programming with models |\n| |Windsurf | AI-powered IDE with advanced code completion and workflow utomation |\n| |Zed | High-performance, collaborative code editor with AI features |\n| | JetBrains Fleet | Next-gen IDE with AI Assistant (JetBrains) |\n| | Kiro | The AI IDE for prototype to production Kiro helps you do your best work by bringing structure to AI coding with spec-driven development.|\n⛏️ Prompt Technics # 1. ZERO-SHOT:\nИзвлеки название продукта, цену и оценку из этого обзора: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе.\\ Он довольно хорош, я бы поставил ему 4 из 5 звёзд». 2. FEW-SHOT:\nОтзыв: «iPhone 13 стоит 799 долларов и заслуживает 5/5 звёзд!»\\ Товар: iPhone 13, цена: 799 долларов, оценка: 5/5 Отзыв: «Только что купил Pixel 7 за 599 долларов. Твёрдая 4/5».\\ Товар: Pixel 7, цена: 599 долларов, оценка: 4/5 Отзыв: «На прошлой неделе я купил Samsung Galaxy A54 за 450 долларов. Он довольно хорош, я бы поставил ему 4 из 5 звёзд».\\ Товар: 3. CHAIN-OF-THOUGHT (CoT):\nИзвлеките информацию о товаре из этого обзора. Думайте пошагово: 1. Сначала определите, какой товар упоминается. 2. Затем найдите информацию о цене. 3. Наконец, найдите рейтинг или оценку. Отзыв: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе.Он довольно хороший, я бы дал ему 4 из 5 звёзд». Давайте подумаем: 4. ROLE PROMPTING:\nТы — специалист по извлечению данных с 10-летним опытом работы в сфере аналитики электронной коммерции. Твоя задача — точно извлекать информацию о товаре. Извлеки название товара, цену и рейтинг из: «На прошлой неделе я купил Samsung Galaxy A54 за 450 долларов.Он довольно хорош, я бы дал ему 4 из 5 звёзд». 5. INSTRUCTION WITH CONSTRAINTS:\nИзвлеките информацию о товаре из отзыва ниже. ПРАВИЛА: - ОБЯЗАТЕЛЬНО укажите название товара - ОБЯЗАТЕЛЬНО укажите точную цену со знаком доллара - ОБЯЗАТЕЛЬНО укажите рейтинг в формате X/5 - Если какая-либо информация отсутствует, напишите «НЕ НАЙДЕНО» - Выведите данные через запятую Отзыв: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе. Он довольно хороший, я бы поставил ему 4 из 5 звёзд». 6. NEGATIVE PROMPTING:\nИзвлеките информацию о товаре из этого обзора. НЕ включайте личные мнения. НЕ добавляйте информацию, которой нет в тексте. НЕ используйте маркированные списки или длинные пояснения. Просто укажите товар, цену и оценку: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе.Он довольно хороший, я бы поставил ему 4 из 5 звёзд». 7. SELF-CONSISTENCY PROMPTING:\nИзвлеките информацию о товаре тремя разными способами, а затем выберите наиболее точный: Попытка 1: Извлеките информацию о товаре, цене и рейтинге. Попытка 2: Какой товар, стоимость и оценка упоминаются? Попытка 3: Определите детали покупки. Отзыв: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе.Он довольно хороший, я бы поставил ему 4 из 5 звёзд». 8. LEAST-TO-MOST PROMPTING:\nДавайте разберёмся: 1. Какой продукт упоминается в этом обзоре? 2. Сколько он стоил? 3. Какая оценка была дана? 4. Теперь объедините всю информацию в структурированном формате. Отзыв: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе.Он довольно хороший, я бы поставил ему 4 из 5 звёзд». 9. PROMPT CHAINING:\n0Шаг 1: Определите, о каком продукте идёт речь в этом обзоре: «На прошлой неделе я купил Samsung Galaxy A54 за 450 долларов.Он довольно хорош, я бы дал ему 4 звезды из 5». [После ответа] Шаг 2: Найдите цену [продукта из шага 1] [После ответа] Шаг 3: Найдите оценку, присвоенную [продукту из шага 1] 10. META-PROMPTING:\nНапишите подсказку, которая наилучшим образом извлечет информацию о продукте из обзоров, а затем используйте её в этом обзоре: «На прошлой неделе я купил Samsung Galaxy A54 за 450 долларов.Он довольно хорош, я бы дал ему 4 из 5 звёзд». 11. TREE-OF-THOUGHTS:\nИзвлечение информации о продукте. Рассмотрите несколько подходов: Ветка A: Начните с названия продукта... Ветка B: Начните с цены... Ветка C: Начните с рейтинга... Оцените, какой подход обеспечивает наиболее полное извлечение. Отзыв: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе.Он довольно хороший, я бы дал ему 4 из 5 звёзд». 12. EMOTIONAL PROMPTING:\nЭто ОЧЕНЬ важно для моей работы! Мне очень нужно, чтобы вы идеально извлекли информацию о товаре, цене и рейтинге! Пожалуйста, помогите мне с: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе. Он довольно хороший, я бы поставил ему 4 из 5 звёзд». Мой начальник рассчитывает на это! 13. ReAct (Reasoning and Acting):\nДавайте решим эту задачу с помощью цикла «рассуждение-действие». Мысль: Мне нужно извлечь три ключевые сущности: продукт, цену и рейтинг. Действие: Найти сущность продукта в тексте. Наблюдение: «Samsung Galaxy A54». Действие: Найти сущность цены в тексте. Наблюдение: «$450». Действие: Найти сущность оценки в тексте. Наблюдение: «4 из 5 звёзд». Окончательный ответ: Объединить наблюдения. Отзыв: «Я купил Samsung Galaxy A54 за $450 на прошлой неделе.Он довольно хороший, я бы дал ему 4 из 5 звёзд». 14. GENERATED KNOWLEDGE:\nВо-первых, сформируйте ключевую информацию о том, на что следует обращать внимание в обзоре продукта. 1. В обзоре будет упомянуто конкретное название продукта. 2. В обзоре часто указывается цена покупки. 3. В обзоре обычно указывается оценка или рейтинг. Теперь, используя эту информацию в качестве ориентира, извлеките информацию о продукте, цене и рейтинге из следующего обзора: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе.Он довольно хороший, я бы дал ему 4 из 5 звезд». 15. STEP-BACK PROMPTING:\nСначала сделайте шаг назад и сформулируйте общий принцип для этой задачи. Принцип заключается в выявлении и выделении конкретных данных (продукт, цена, рейтинг) из окружающего неструктурированного текста. Теперь примените этот принцип для извлечения названия продукта, цены и рейтинга из: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе. Он довольно хороший, я бы дал ему 4 из 5 звёзд». 16. RETRIEVAL AUGMENTED GENERATION (RAG):\nОтвечайте на вопросы, используя ТОЛЬКО информацию, предоставленную в документе ниже. Не используйте никакие сторонние знания. ДОКУМЕНТ: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе. Он довольно хороший, я бы дал ему 4 звезды из 5». ВОПРОСЫ: 1. Какое название продукта упоминается в документе? 2. Какая цена упоминается в документе? 3. Какой рейтинг упоминается в документе? 17. PROGRAM-AIDED LANGUAGE MODELS (PAL):\nИзвлеките информацию о товаре. Напишите функцию Python для анализа отзыва. Отзыв: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе. Он довольно хорош, я бы дал ему 4 звезды из 5». # Давайте рассмотрим это пошагово в коде: def parse_review(review): # Шаг 1: Найдите название товара 18. LLM DECEPTION DETECTION PROMPTING:\nВАЖНО: Этот отзыв может содержать ложь. ИЩИТЕ несоответствия, используя следующие правила: - Сверьте цену с известными рыночными ценами. - Проверьте, соответствует ли оценка оценочным словам («довольно хорошо»). Признаки, о которых стоит сообщить: [ ] Цена слишком низкая для данной модели? [ ] Оценка противоречит фразе «довольно хорошо»? Отзыв: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе. Он довольно хорош, я бы поставил ему 4 звезды из 5». 19. OPTIMIZATION BY PROMPTING (OPRO):\nВы — эксперт по оптимизации подсказок. Ваша задача — сгенерировать лучшую подсказку для извлечения информации о продукте из отзывов. Сгенерируйте 5 подсказок-кандидатов. Затем оцените их по эффективности. Пример отзыва: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе. Он довольно хороший, я бы дал ему 4 из 5 звёзд». 20. PROMPT CHAINING WITH FEEDBACK LOOPS:\n\u0026gt; ШАГ ЦЕПОЧКИ 1: Извлечь название продукта → \\[выходные данные\\] \u0026gt; \u0026gt; ОТЗЫВЫ: Это корректная модель телефона?(Да/Нет) → \\[ввод пользователя\\] \u0026gt; \u0026gt; ШАГ ЦЕПОЧКИ 2: Извлечь цену → \\[выходные данные\\] \u0026gt; \u0026gt; ОТЗЫВЫ: Соответствует ли цена региональным ценам?(Да/Нет) → \\[ввод пользователя\\] \u0026gt; \u0026gt; ШАГ ЦЕПОЧКИ 3: Вывести ОКОНЧАТЕЛЬНЫЙ результат ТОЛЬКО после получения 2 корректных отзывов. Отзыв: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе.Он довольно хороший, я бы поставил ему 4 из 5 звёзд». 21. DIRECTIONAL STIMULUS PROMPTING (Paper):\nУглубляйте рассуждения с помощью направляющих подсказок. НЕ останавливайтесь на поверхностных ответах. Двигайтесь глубже, задавая вопросы «Почему?»или «Как именно?». Примените это к отзыву: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе. Он довольно хорош, я бы поставил ему 4 из 5 звёзд». Направляющая подсказка: «Объясните, почему оценка подразумевает удовлетворённость временем автономной работы». 22. SYSTEM PROMPTING:\n[СООБЩЕНИЕ СИСТЕМЫ] Вы — бот для точного извлечения данных.Ваша единственная функция — извлекать структурированные данные из текста, предоставленного пользователем.Вы всегда должны отвечать в формате JSON с ключами «название_продукта», «цена» и «рейтинг».Если значение отсутствует, используйте null. [СООБЩЕНИЕ ПОЛЬЗОВАТЕЛЯ] Пожалуйста, обработайте этот отзыв: «Я купил Samsung Galaxy A54 за 450 долларов на прошлой неделе. Он довольно хороший, я бы поставил ему 4 из 5 звёзд». 🔬 Papers # | 2013 |Efficient Estimation of Word Representations in Vector Space | Word2Vec |\n| 2017 |Attention Is All You Need | Introducting Transformers |\n| 2018 |Improving Language Understanding by Generative Pre-Training | GPT-1 |\n| 2019 |Language Models are Unsupervised Multitask Learners | GPT-2 |\n| 2020 |Language Models are Few-Shot Learners | GPT-3 |\n| 2020 |Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks | - |\n|2022|Research: quantifying GitHub Copilot’s impact on developer productivity and happiness | Is this GitHub copilot elping developers? |\n| 2022 |Training language models to follow instructions with human feedback | Introducing RLHF. GPT-3.5, engine of hatGPT\n2022 |Constitutional AI: Harmlessness from AI Feedback | - |\n| 2022 |Emergent Abilities of Large Language Models | - |\n| 2022 |ReAct: Synergizing Reasoning and Acting in Language Models | - |\n| 2022 |Chain-of-Thought Prompting Elicits Reasoning in Large Language Models | - |\n| 2022 |Towards Understanding Chain-of-Thought Prompting: An Empirical Study of What Matters | - |\n| 2023 |Sparks of Artificial General Intelligence: Early experiments with GPT-4 | - |\n| 2023 |GPT-4 Technical Report | - |\n| 2023 |Gemini: A Family of Highly Capable Multimodal Models | - |\n| 2023 | Tree of Thoughts: Deliberate Problem Solving with Large Language Models | - |\n| 2023 |Large Language Models as Optimizers | - |\n| 2025 |The Illusion of Thinking: Understanding the Strengths and Limitations of Reasoning Models via the Lens of roblem omplexity | - |\n| 2025 | Mixture-of-Recursions: Learning Dynamic Recursive Depths for Adaptive Token-Level Computation|Small model chieves big model performance through adaptive token-level computation. |\n","date":"August 29, 2025","externalUrl":null,"permalink":"/2025/08/29/ai2/","section":"Blog","summary":"🦜 LLMs # ||OpenAI | GPT-5 is an iPhone in LLM space |\n|| Anthropic | Claude Sonnet 4 and Claude Opus 4.1 |\n","title":"AI2","type":"blog"},{"content":"dns\nView on GitHub Gist\nquic://dns.adguard-dns.com quic://dns.comss.one quic://dns.jupitrdns.com quic://dns.surfsharkdns.com quic://family.adguard-dns.com quic://ibksturm.synology.me quic://router.comss.one quic://unfiltered.adguard-dns.com quic://zero.dns0.eu tls://101.101.101.101 tls://adblock.dns.mullvad.net tls://adult-filter-dns.cleanbrowsing.org tls://all.dns.mullvad.net tls://anycast.censurfridns.dk tls://anycast.dns.nextdns.io tls://base.dns.mullvad.net tls://child.joindns4.eu tls://child-noads.joindns4.eu tls://common.dot.dns.yandex.net tls://dns10.quad9.net tls://dns11.quad9.net tls://dns.adguard-dns.com tls://dns.alidns.com tls://dns.cmrg.net tls://dns.digitale-gesellschaft.ch tls://dns-dot.dnsforfamily.com tls://dnsforge.de tls://dns.google tls://dnsguard.pub tls://dns.jupitrdns.com tls://dns.marbledfennec.net tls://dns.nextdns.io tls://dns.opendns.com tls://dns.quad9.net tls://dns.surfsharkdns.com tls://dns.switch.ch tls://dot1.applied-privacy.net tls://dot.360.cn tls://dot.ffmuc.net tls://dot.la.ahadns.net tls://dot.libredns.gr tls://dot.onedns.net tls://dot.pub tls://dot-pure.onedns.net tls://dot.sb tls://dot.tiar.app tls://extended.dns.mullvad.net tls://family.adguard-dns.com tls://family.canadianshield.cira.ca tls://family.cloudflare-dns.com tls://family.dns.mullvad.net tls://family.dot.dns.yandex.net tls://family-filter-dns.cleanbrowsing.org tls://familyshield.opendns.com tls://getdnsapi.net tls://ibksturm.synology.me tls://jp.tiar.app tls://noads.joindns4.eu tls://odvr.nic.cz tls://one.one.one.one tls://ordns.he.net tls://p1.freedns.controld.com tls://p2.freedns.controld.com tls://p3.freedns.controld.com tls://private.canadianshield.cira.ca tls://protected.canadianshield.cira.ca tls://protective.joindns4.eu tls://public.dns.iij.jp tls://router.comss.one tls://safe.dot.dns.yandex.net tls://sandbox.opendns.com tls://security.cloudflare-dns.com tls://security-filter-dns.cleanbrowsing.org tls://unfiltered.adguard-dns.com tls://unicast.censurfridns.dk tls://wikimedia-dns.org quic://dns.adguard-dns.com quic://dns.alidns.com:853 quic://dns.comss.one quic://dns.jupitrdns.com quic://dns.surfsharkdns.com quic://doh.tiar.app:784 quic://family.adguard-dns.com quic://ibksturm.synology.me quic://router.comss.one quic://unfiltered.adguard-dns.com quic://zero.dns0.eu https://adblock.dns.mullvad.net/dns-query https://all.dns.mullvad.net/dns-query https://anycast.dns.nextdns.io/dns-query https://base.dns.mullvad.net/dns-query https://basic.rethinkdns.com/ https://child.joindns4.eu/dns-query https://child-noads.joindns4.eu/dns-query https://common.dot.dns.yandex.net/dns-query https://dns10.quad9.net/dns-query https://dns11.quad9.net/dns-query https://dns.adguard-dns.com/dns-query https://dns.alidns.com/dns-query https://dns.caliph.dev/dns-query https://dns.cloudflare.com/dns-query https://dns.comss.one/dns-query https://dns.digitale-gesellschaft.ch/dns-query https://dnsforge.de/dns-query https://dns.google/dns-query https://dns.jupitrdns.com/dns-query https://dns.marbledfennec.net/dns-query https://dns.mullvad.net/dns-query https://dns.nextdns.io/dns-query https://dns.pub/dns-query https://dns.quad9.net/dns-query https://dns.rabbitdns.org/dns-query https://dns.surfsharkdns.com/dns-query https://dns.switch.ch/dns-query https://doh.360.cn/dns-query https://doh.cleanbrowsing.org/doh/adult-filter/ https://doh.cleanbrowsing.org/doh/family-filter/ https://doh.cleanbrowsing.org/doh/security-filter/ https://doh.dns.sb/dns-query https://doh.familyshield.opendns.com/dns-query https://doh.ffmuc.net/dns-query https://doh.libredns.gr/ads https://doh.libredns.gr/dns-query https://doh.onedns.net/dns-query https://doh.opendns.com/dns-query https://doh-pure.onedns.net/dns-query https://doh.sandbox.opendns.com/dns-query https://doh.tiarap.org/dns-query https://doh.tiar.app/dns-query https://private.canadianshield.cira.ca/dns-query https://protected.canadianshield.cira.ca/dns-query https://protective.joindns4.eu/dns-query https://public.dns.iij.jp/dns-query https://public.ns.nwps.fi/dns-query https://resolver.dnsprivacy.org.uk/dns-query https://router.comss.one/dns-query https://rx.techomespace.com/dns-query https://safe.dot.dns.yandex.net/dns-query https://security.cloudflare-dns.com/dns-query https://security.rabbitdns.org/dns-query https://sm2.doh.pub/dns-query https://unfiltered.adguard-dns.com/dns-query https://v.recipes/dns-query https://wikimedia-dns.org/dns-query https://extended.dns.mullvad.net/dns-query https://extended.dns.mullvad.net/dns-query https://family.adguard-dns.com/dns-query https://family.canadianshield.cira.ca/dns-query https://family.cloudflare-dns.com/dns-query https://family.dns.mullvad.net/dns-query https://family.dot.dns.yandex.net/dns-query https://family.rabbitdns.org/dns-query https://ibksturm.synology.me/dns-query https://jp.tiarap.org/dns-query https://jp.tiar.app/dns-query https://kids.ns.nwps.fi/dns-query https://noads.joindns4.eu/dns-query https://odvr.nic.cz/doh ","date":"August 13, 2025","externalUrl":null,"permalink":"/2025/08/13/gist-dns/","section":"Blog","summary":"dns\nView on GitHub Gist\nquic://dns.adguard-dns.com quic://dns.comss.one quic://dns.jupitrdns.com quic://dns.surfsharkdns.com quic://family.adguard-dns.com quic://ibksturm.synology.me quic://router.comss.one quic://unfiltered.adguard-dns.com quic://zero.dns0.eu tls://101.101.101.101 tls://adblock.dns.mullvad.net tls://adult-filter-dns.cleanbrowsing.org tls://all.dns.mullvad.net tls://anycast.censurfridns.dk tls://anycast.dns.nextdns.io tls://base.dns.mullvad.net tls://child.joindns4.eu tls://child-noads.joindns4.eu tls://common.dot.dns.yandex.net tls://dns10.quad9.net tls://dns11.quad9.net tls://dns.adguard-dns.com tls://dns.alidns.com tls://dns.cmrg.net tls://dns.digitale-gesellschaft.ch tls://dns-dot.dnsforfamily.com tls://dnsforge.de tls://dns.google tls://dnsguard.pub tls://dns.jupitrdns.com tls://dns.marbledfennec.net tls://dns.nextdns.io tls://dns.opendns.com tls://dns.quad9.net tls://dns.surfsharkdns.com tls://dns.switch.ch tls://dot1.applied-privacy.net tls://dot.360.cn tls://dot.ffmuc.net tls://dot.la.ahadns.net tls://dot.libredns.gr tls://dot.onedns.net tls://dot.pub tls://dot-pure.onedns.net tls://dot.sb tls://dot.tiar.app tls://extended.dns.mullvad.net tls://family.adguard-dns.com tls://family.canadianshield.cira.ca tls://family.cloudflare-dns.com tls://family.dns.mullvad.net tls://family.dot.dns.yandex.net tls://family-filter-dns.cleanbrowsing.org tls://familyshield.opendns.com tls://getdnsapi.net tls://ibksturm.synology.me tls://jp.tiar.app tls://noads.joindns4.eu tls://odvr.nic.cz tls://one.one.one.one tls://ordns.he.net tls://p1.freedns.controld.com tls://p2.freedns.controld.com tls://p3.freedns.controld.com tls://private.canadianshield.cira.ca tls://protected.canadianshield.cira.ca tls://protective.joindns4.eu tls://public.dns.iij.jp tls://router.comss.one tls://safe.dot.dns.yandex.net tls://sandbox.opendns.com tls://security.cloudflare-dns.com tls://security-filter-dns.cleanbrowsing.org tls://unfiltered.adguard-dns.com tls://unicast.censurfridns.dk tls://wikimedia-dns.org quic://dns.adguard-dns.com quic://dns.alidns.com:853 quic://dns.comss.one quic://dns.jupitrdns.com quic://dns.surfsharkdns.com quic://doh.tiar.app:784 quic://family.adguard-dns.com quic://ibksturm.synology.me quic://router.comss.one quic://unfiltered.adguard-dns.com quic://zero.dns0.eu https://adblock.dns.mullvad.net/dns-query https://all.dns.mullvad.net/dns-query https://anycast.dns.nextdns.io/dns-query https://base.dns.mullvad.net/dns-query https://basic.rethinkdns.com/ https://child.joindns4.eu/dns-query https://child-noads.joindns4.eu/dns-query https://common.dot.dns.yandex.net/dns-query https://dns10.quad9.net/dns-query https://dns11.quad9.net/dns-query https://dns.adguard-dns.com/dns-query https://dns.alidns.com/dns-query https://dns.caliph.dev/dns-query https://dns.cloudflare.com/dns-query https://dns.comss.one/dns-query https://dns.digitale-gesellschaft.ch/dns-query https://dnsforge.de/dns-query https://dns.google/dns-query https://dns.jupitrdns.com/dns-query https://dns.marbledfennec.net/dns-query https://dns.mullvad.net/dns-query https://dns.nextdns.io/dns-query https://dns.pub/dns-query https://dns.quad9.net/dns-query https://dns.rabbitdns.org/dns-query https://dns.surfsharkdns.com/dns-query https://dns.switch.ch/dns-query https://doh.360.cn/dns-query https://doh.cleanbrowsing.org/doh/adult-filter/ https://doh.cleanbrowsing.org/doh/family-filter/ https://doh.cleanbrowsing.org/doh/security-filter/ https://doh.dns.sb/dns-query https://doh.familyshield.opendns.com/dns-query https://doh.ffmuc.net/dns-query https://doh.libredns.gr/ads https://doh.libredns.gr/dns-query https://doh.onedns.net/dns-query https://doh.opendns.com/dns-query https://doh-pure.onedns.net/dns-query https://doh.sandbox.opendns.com/dns-query https://doh.tiarap.org/dns-query https://doh.tiar.app/dns-query https://private.canadianshield.cira.ca/dns-query https://protected.canadianshield.cira.ca/dns-query https://protective.joindns4.eu/dns-query https://public.dns.iij.jp/dns-query https://public.ns.nwps.fi/dns-query https://resolver.dnsprivacy.org.uk/dns-query https://router.comss.one/dns-query https://rx.techomespace.com/dns-query https://safe.dot.dns.yandex.net/dns-query https://security.cloudflare-dns.com/dns-query https://security.rabbitdns.org/dns-query https://sm2.doh.pub/dns-query https://unfiltered.adguard-dns.com/dns-query https://v.recipes/dns-query https://wikimedia-dns.org/dns-query https://extended.dns.mullvad.net/dns-query https://extended.dns.mullvad.net/dns-query https://family.adguard-dns.com/dns-query https://family.canadianshield.cira.ca/dns-query https://family.cloudflare-dns.com/dns-query https://family.dns.mullvad.net/dns-query https://family.dot.dns.yandex.net/dns-query https://family.rabbitdns.org/dns-query https://ibksturm.synology.me/dns-query https://jp.tiarap.org/dns-query https://jp.tiar.app/dns-query https://kids.ns.nwps.fi/dns-query https://noads.joindns4.eu/dns-query https://odvr.nic.cz/doh","title":"dns","type":"blog"},{"content":"arch\nView on GitHub Gist\ncurl https://mirror.cachyos.org/cachyos-repo.tar.xz -o cachyos-repo.tar.xz tar xvf cachyos-repo.tar.xz \u0026amp;\u0026amp; cd cachyos-repo sudo ./cachyos-repo.sh curl -O https://blackarch.org/strap.sh chmod +x strap.sh sudo ./strap.sh curl -LO git.io/strap.sh sudo sh strap.sh ","date":"July 3, 2025","externalUrl":null,"permalink":"/2025/07/03/gist-arch/","section":"Blog","summary":"arch\nView on GitHub Gist\ncurl https://mirror.cachyos.org/cachyos-repo.tar.xz -o cachyos-repo.tar.xz tar xvf cachyos-repo.tar.xz \u0026\u0026 cd cachyos-repo sudo ./cachyos-repo.sh curl -O https://blackarch.org/strap.sh chmod +x strap.sh sudo ./strap.sh curl -LO git.io/strap.sh sudo sh strap.sh","title":"arch","type":"blog"},{"content":"flatpaks\nView on GitHub Gist\nflatpak remote-add --from eos-sdk #http://endlessm.github.io/eos-knowledge-lib/eos-sdk.flatpakrepo flatpak remote-add --from eos-sdk http://endlessm.github.io/eos-knowledge-lib/eos-sdk.flatpakrepo flatpak remote-add --from eos-sdk-nightly http://endlessm.github.io/eos-knowledge-lib/eos-sdk-nightly.flatpakrepo flatpak remote-add --gpg-import=eos-flatpak-keyring.gpg eos-apps https://ostree.endlessm.com/ostree/eos-apps flatpak remote-add --gpg-import=eos-flatpak-keyring.gpg eos-sdk https://ostree.endlessm.com/ostree/eos-sdk flatpak remote-add --if-not-exists dragon-nightly https://cdn.kde.org/flatpak/dragon-nightly/dragon-nightly.flatpakrepo flatpak remote-add --if-not-exists eclipse-nightly https://download.eclipse.org/linuxtools/flatpak-I-builds/eclipse.flatpakrepo flatpak remote-add --if-not-exists elementaryos https://flatpak.elementary.io/repo.flatpakrepo flatpak remote-add --if-not-exists fedora oci+https://registry.fedoraproject.org flatpak remote-add --if-not-exists fedora-testing oci+https://registry.fedoraproject.org#testing flatpak remote-add --if-not-exists flathub-beta https://flathub.org/beta-repo/flathub-beta.flatpakrepo flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists gnome-nightly https://nightly.gnome.org/gnome-nightly.flatpakrepo flatpak remote-add --if-not-exists gnome-nightly https://nightly.gnome.org/gnome-nightly.flatpakrepo. flatpak remote-add --if-not-exists igalia https://software.igalia.com/flatpak-refs/igalia.flatpakrepo flatpak remote-add --if-not-exists kdeapps https://distribute.kde.org/kdeapps.flatpakrepo flatpak remote-add --if-not-exists kde-runtime-nightly https://cdn.kde.org/flatpak/kde-runtime-nightly/kde-runtime-nightly.flatpakrepo flatpak remote-add --if-not-exists PureOS https://store.puri.sm/repo/stable/pureos.flatpakrepo flatpak remote-add --if-not-exists --subset=floss flathub-floss https://dl.flathub.org/repo/flathub.flatpakrepo.. flatpak remote-add --if-not-exists --subset=verified flathub-verified https://dl.flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists --subset=verified_floss flathub-verified_floss https://dl.flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists tenacity oci+https://tenacityteam.github.io/tenacity-flatpak-nightly flatpak remote-add --if-not-exists --user appcenter https://flatpak.elementary.io/repo.flatpakrepo flatpak remote-add --if-not-exists webkit-sdk https://software.igalia.com/flatpak-refs/webkit-sdk.flatpakrepo flatpak remote-add rhel https://flatpaks.redhat.io/rhel.flatpakrepo flatpak remote-add --system elementary https://flatpak.elementary.io/elementary.flatpakrepo flatpak remote-add --user appcenter https://flatpak.elementary.io/appcenter.flatpakrepo flatpak remote-add --user --if-not-exists webkit https://software.igalia.com/flatpak-refs/webkit-sdk.flatpakrepo flatpak remote-add xwaylandvideobridge-nightly https://cdn.kde.org/flatpak/xwaylandvideobridge-nightly/xwaylandvideobridge-nightly.flatpakrepo flatpak --system remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo ","date":"May 4, 2025","externalUrl":null,"permalink":"/2025/05/04/gist-flatpaks/","section":"Blog","summary":"flatpaks\nView on GitHub Gist\nflatpak remote-add --from eos-sdk #http://endlessm.github.io/eos-knowledge-lib/eos-sdk.flatpakrepo flatpak remote-add --from eos-sdk http://endlessm.github.io/eos-knowledge-lib/eos-sdk.flatpakrepo flatpak remote-add --from eos-sdk-nightly http://endlessm.github.io/eos-knowledge-lib/eos-sdk-nightly.flatpakrepo flatpak remote-add --gpg-import=eos-flatpak-keyring.gpg eos-apps https://ostree.endlessm.com/ostree/eos-apps flatpak remote-add --gpg-import=eos-flatpak-keyring.gpg eos-sdk https://ostree.endlessm.com/ostree/eos-sdk flatpak remote-add --if-not-exists dragon-nightly https://cdn.kde.org/flatpak/dragon-nightly/dragon-nightly.flatpakrepo flatpak remote-add --if-not-exists eclipse-nightly https://download.eclipse.org/linuxtools/flatpak-I-builds/eclipse.flatpakrepo flatpak remote-add --if-not-exists elementaryos https://flatpak.elementary.io/repo.flatpakrepo flatpak remote-add --if-not-exists fedora oci+https://registry.fedoraproject.org flatpak remote-add --if-not-exists fedora-testing oci+https://registry.fedoraproject.org#testing flatpak remote-add --if-not-exists flathub-beta https://flathub.org/beta-repo/flathub-beta.flatpakrepo flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists gnome-nightly https://nightly.gnome.org/gnome-nightly.flatpakrepo flatpak remote-add --if-not-exists gnome-nightly https://nightly.gnome.org/gnome-nightly.flatpakrepo. flatpak remote-add --if-not-exists igalia https://software.igalia.com/flatpak-refs/igalia.flatpakrepo flatpak remote-add --if-not-exists kdeapps https://distribute.kde.org/kdeapps.flatpakrepo flatpak remote-add --if-not-exists kde-runtime-nightly https://cdn.kde.org/flatpak/kde-runtime-nightly/kde-runtime-nightly.flatpakrepo flatpak remote-add --if-not-exists PureOS https://store.puri.sm/repo/stable/pureos.flatpakrepo flatpak remote-add --if-not-exists --subset=floss flathub-floss https://dl.flathub.org/repo/flathub.flatpakrepo.. flatpak remote-add --if-not-exists --subset=verified flathub-verified https://dl.flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists --subset=verified_floss flathub-verified_floss https://dl.flathub.org/repo/flathub.flatpakrepo flatpak remote-add --if-not-exists tenacity oci+https://tenacityteam.github.io/tenacity-flatpak-nightly flatpak remote-add --if-not-exists --user appcenter https://flatpak.elementary.io/repo.flatpakrepo flatpak remote-add --if-not-exists webkit-sdk https://software.igalia.com/flatpak-refs/webkit-sdk.flatpakrepo flatpak remote-add rhel https://flatpaks.redhat.io/rhel.flatpakrepo flatpak remote-add --system elementary https://flatpak.elementary.io/elementary.flatpakrepo flatpak remote-add --user appcenter https://flatpak.elementary.io/appcenter.flatpakrepo flatpak remote-add --user --if-not-exists webkit https://software.igalia.com/flatpak-refs/webkit-sdk.flatpakrepo flatpak remote-add xwaylandvideobridge-nightly https://cdn.kde.org/flatpak/xwaylandvideobridge-nightly/xwaylandvideobridge-nightly.flatpakrepo flatpak --system remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo","title":"flatpaks","type":"blog"},{"content":"ed\u0026rsquo;s\nView on GitHub Gist\nAdobe XD Android Studio AppCode Aptana Aqua Arduino IDE Azure Data Studio Blender BlueJ Brackets Brave C++ Builder CLion Canva Chrome Cloud9 Coda Code::Blocks CodeLite CodeTasty Cursor DBeaver DataGrip DataSpell Delphi Discord Eclipse Edge EmEditor Emacs Eric Espresso Excel Figma Firefox Flash Builder Geany Gedit GoLand HBuilder X Helix IDA Pro IntelliJ IDEA Jupyter KDevelop Kakoune Kate Komodo Light Table MPS Micro MySQL Workbench Neovim NetBeans Notepad++ Nova Obsidian Onivim Oxygen Photoshop PhpStorm Postman PowerPoint Processing Pulsar PyCharm Pymakr QtCreator RStudio ReClassEx Rider Roblox Studio RubyMine RustRover SQL Server Management Studio SQL Server Studio Safari SiYuan Sketch SlickEdit Spyder Sublime Text TeXstudio Terminal TextMate Unity VS Code Vim Visual Studio WPS Office WebStorm Windsurf Wing Word Xcode Zed Zotero ","date":"March 27, 2025","externalUrl":null,"permalink":"/2025/03/27/gist-eds/","section":"Blog","summary":"ed’s\nView on GitHub Gist\nAdobe XD Android Studio AppCode Aptana Aqua Arduino IDE Azure Data Studio Blender BlueJ Brackets Brave C++ Builder CLion Canva Chrome Cloud9 Coda Code::Blocks CodeLite CodeTasty Cursor DBeaver DataGrip DataSpell Delphi Discord Eclipse Edge EmEditor Emacs Eric Espresso Excel Figma Firefox Flash Builder Geany Gedit GoLand HBuilder X Helix IDA Pro IntelliJ IDEA Jupyter KDevelop Kakoune Kate Komodo Light Table MPS Micro MySQL Workbench Neovim NetBeans Notepad++ Nova Obsidian Onivim Oxygen Photoshop PhpStorm Postman PowerPoint Processing Pulsar PyCharm Pymakr QtCreator RStudio ReClassEx Rider Roblox Studio RubyMine RustRover SQL Server Management Studio SQL Server Studio Safari SiYuan Sketch SlickEdit Spyder Sublime Text TeXstudio Terminal TextMate Unity VS Code Vim Visual Studio WPS Office WebStorm Windsurf Wing Word Xcode Zed Zotero","title":"ed's","type":"blog"},{"content":"conversational AI - All-in-one tools - AI Search Engine - writing tools - video tools - audio tools - images tools - commerce \u0026amp; marketing tools - design tools - Coding tools - color tools - miscellaneous\nMistral\nChatGPT\nGemini\nQwen\nDeepSeek\nGrok\nMeta\nPoe\nGroqCloud\nPi, your personal AI\nPerplexity\nClaude\nDeepAI\nWritesonic\nAgentGPT\nYou.com workplace productivity\nElicit: Research Assistant\ncharacter.ai\nMicrosoft Copilot\nPhind\niAsk Answer Engine\nFlawlessly Grammar Checker\nChatPDF\nAnonChatGPT\nBagoodex\nOtter Voice Meeting Notes\n# conversational AI - All-in-one tools - AI Search Engine - writing tools - video tools - audio tools - images tools - commerce \u0026amp; marketing tools - design tools - Coding tools - color tools - miscellaneous\nconversational AI # Awesome Description ChatGPT Google Gemini Gemini gives you direct access to Google AI. Get help with writing, planning, learning, and more. Poe Fast, Helpful AI Chat Chat D-ID Dialogflow Watson Assistant Microsoft Bot Framework Rasa Conversational AI Platform botpress TARS Landbot AI SnatchBot Botstar Ask Your PDF perplexity Where knowledge begins Hints AI Assistant that integrates with any software to perform tasks on your behalf ChatSpot ChatSpot = ChatGPT + the power of HubSpot CRM AskThee? Ever wanted to ask a question to a big thinker, artist or scientist? now is your chance. Ai Chat from User.com Automate your customer support instantly with AI ChatPDF Chat with any PDF! Chatbase Train ChatGPT on your data and add it to your website Huberman AI Use AI to explore the wisdom of The Huberman Lab. ai intern With AI Intern skip the grind and focus on the big picture. Chatbot UI Chatbot UI is an open source clone of OpenAI\u0026rsquo;s ChatGPT UI. Channel Ask any data question, in plain English. wonderchat Instantly build an AI chatbot with your knowledge base Monica YOUR CHATGPT POWERED AI ASSISTANT ON ALL WEBSITES alicent A Gorgeous Extension for ChatGPT godmode PageLines AI Agents to Enhance Your Website All-in-one tools # Awesome Description airOps Deploy task-specific AI where you need it most with AirOps Apps. Install and configure in minutes, scalable, and available everywhere. Hugging Face The AI community building the future. fotor Online photo editor for everyone Kittl Speed up your workflows with Kittl\u0026rsquo;s AI-powered design tools and gain instant access to a ton of stunning illustrations, fonts, photos, icons, and textures. clipdrop Create stunning visuals in seconds Replicate Machine learning doesn’t need to be so hard. AI Search Engine # Awesome Description phind The AI search engine for developers. you The AI Search Engine You Control iAsk.AI Ask AI Questions – Free AI Search Engine komo Komo search - Ai Search \u0026amp; Explore Andi Welcome to the next generation of search using the power of AI writing tools # Awesome Description Jounce Free AI copywriting and artwork for marketers writerly Writerly artificial intelligence (AI) Cohesive Create magical content with the most powerful AI editor grammarly Compose bold, clear, mistake-free writing with Grammarly’s AI-powered writing assistant. copy ai Write better marketing copy and content with AI jasper AI Jasper - AI Copywriting \u0026amp; Content Generation for Teams markcopy ai Write Content 10x Faster rytr Rytr - Best AI Writer, Content Generator \u0026amp; Writing Assistant simplified ai-writer Write Instant Marketing Copy with the Free AI Copywriting Generator frase Frase requstory WRITE BETTER USER STORIES. marketmuse AI Content Planning and Optimization Software wordtune Your thoughts in words inferkit InferKit offers a web interface and API for AI–based text generators. Whether you\u0026rsquo;re a novelist looking for inspiration, or an app developer, there\u0026rsquo;s something for you. goose ai Fully managed NLP-as-a-Service delivered via API, at 30% the cost. It\u0026rsquo;s time to migrate. writesonic Writesonic - Best AI Writer, Copywriting \u0026amp; Paraphrasing Tool textcortex One AI Tool To Write All Your Content ideas AI Ideas on this page are 100% generated by OpenAI\u0026rsquo;s GPT-3, an artifically intelligent deep learning model, without human involvement, and trained by you and 1,399,670+ other people who liked or disliked ideas. sudowrite Bust writer’s block with our magical writing AI. GhostWrite More time for the conversations that matter to you. nichesss Write anything 10x faster. flowrite Flowrite helps you write your daily emails and messages 5x faster across Google Chrome. chibi ai Now anyone can have a writing assistant. copysmith Copysmith is the AI content creation solution for Enterprise \u0026amp; eCommerce copymatic ai Generate Content \u0026amp; Copy In Seconds with AI hypotenuse Let AI write your content in seconds. Without writer’s block. longshot ai Create blogs that humans and search engines love using Artificial Intelligence unbounce smart copy Wherever You Type, Smart Copy Writes scalenut Tell Better Stories at Scale NeuralText NeuralText - AI Writing Assistant and tools for SEO closerscopy AI Copywriting Robot - ClosersCopy inkforall INK – World’s Best AI Content Assistant for Marketing \u0026amp; SEO peppertype Create Quality Content Faster ai-writer AI-Writer is the most accurate content generation platform, using state-of-the-art AI writing models to generate articles from just a headline. GetGenie The WordPress AI SuperApp for Content \u0026amp; SEO Article Forge High quality, AI content generator - Article Forge ProWritingAid ProWritingAid: AI Writing Assistant Software QuillBot QuillBot\u0026rsquo;s AI-powered paraphrasing tool will enhance your writing WriterZen Proficient SEO Content Workflow Software Writecream Writecream - Best AI Writer \u0026amp; Content Generator - Writecream outranking Outranking helps content teams achieve predictable content success with AI assistance. lately Spend 84% Less Time Writing Content wordai 10x Your Content Output With AI. craftly Changing the way the world writes. SEO AI The #1 AI Writer For SEO content at scale AI Content Generator for Quality SEO Long Form Blog Posts jenni Supercharge your writing with jenni AI Taskade AI outlining and mind mapping tool for teams with real-time editing and chat. wordkraft Create High-Quality Content Instantly With AI merlin Open AI’s GPT powered extension to use anywhere! kickresume Let artificial intelligence write your resume. AISEO AISEO - AI writing assistant, Copywriting \u0026amp; Paraphrasing Tool yaara.ai The Future Of Writing is Finally Here ChatGPT Writer Free Chrome extension to generate entire emails and messages using ChatGPT AI. All sites are supported and enhanced support for Gmail. FocusFlow Track your daily progress, highlights, and improvements in just 20 seconds. NovelAI The AI Storyteller narrato AI Content Creation and Collaboration Platform WriteMe WriteMe.ai - Ai Writer - Content Writing Assistant \u0026amp; Creator Magical AI Call on Magical AI to do all the work stuff you hate doing. Create messages from scratch, update forms instantly, and automate annoying tasks—anywhere, anytime. Bearly Bearly makes you 10x faster by adding the state of the art AI to your workflow. Reading, writing, and content creation all one shortcut away. StealthGPT Write Using AI, Get Human Written Results resume worded Improve your resume and LinkedIn profile detangle Summarize any video, audio or text melville Create amazing show notes 10x faster with AI. Swell AI Automate writing podcast show notes, articles, social posts and more. Scalenut Scalenut: AI powered SEO and Content Marketing Platform Sheet+ Write Google Sheets \u0026amp; Excel formulas 10x faster with AI FinalScout ChatGPT-Powered Email Finding \u0026amp; Outreach at Scale HyperWrite Your personal AI writing assistant maker.ai Generate written \u0026amp; visual content in seconds through cutting-edge artificial intelligence. Make magical conten Thundercontent Create any content with Artificial Intelligence in minutes Autowrite app Create Human-like Search Engine Optimized Articles postGenius Generate your next post using chatGPT postwise Write Viral Tweets in Seconds WriteSparkle Discover AI-Driven Brilliance, streamline your content creation process by seamlessly integrating Writesparkle with your favorite tools and platforms. flawlessly ai Flawlessly.Ai transforms your spelling, grammar, tone, and style into professional text in seconds. PDFPeer Engage with your PDFs: summarize, ask questions, and simplify tasks! video tools # Awesome Description Deepbrain ai - ai studios Create AI-generated videos using basic text instantly Supercreator.ai Create short form videos 10x faster using artificial intelligence veed io VEED - Edit, Record \u0026amp; Livestream Video - Online runway Everything you need to make content, fast. Fliki Turn text into videos with AI voices synthesia Create videos from plain text in minutes descript All-in-one video \u0026amp; audio editing, as easy as a doc. typecast ai Video creation made simple with AI voices and avatars bhuman ai Produce a single video and personalize it for thousands of recipients. Deliver over any channel and measure results instantly. Jellysmack Creator Content Amplification \u0026amp; Solutions plask AI-powered Mocap Animation Tool Rokoko video Rokoko Video Free AI motion capture Topaz Video AI Production-grade AI models for professional use cases Steve AI Free AI Video Maker App elai Create AI videos from just text. pictory Video Marketing Made EASY Lumen5 Lumen5 - Video Maker wisecut Wisecut synths video Convert articles into video in 1-click invideo Create publish-worthy videos on day one GliaCloud Generate videos from news content, social posts, live sport events, and statistical data in minutes! synthesys Transform Your Text to a Realistic Virtual Video beey Beey.io – Beey automatically converts your audio and video files to text. papercup AI Powered Dubbing Friday Less Writing, More Inspiration. Movio Create Engaging Videos 10x Faster with AI clip.fm Turn podcasts into viral clips with one click. D-ID Digital People Text-to-Video vidyo.ai Make short videos from long ones instantly Rephrase Studio Rephrase Studio is a self-serve text-to-video generation platform that eliminates the complexity of video production, enabling you to create professional-looking videos at scale. Genmo Go beyond 2D. Create videos from text with AI. riverside Automatically transcribe your audio and video recordings in seconds with our AI-powered technology. It\u0026rsquo;s accurate, reliable, and supports more than 100 languages. Zoomscape.ai Create stunning Zoom backgrounds with AI Morise.ai You make the videos, AI will make them go viral Rask Localize videos. Fast. Fun. With AI HeyGen CREATE ENGAGING VIDEOS 10X FASTER WITH AI 2short.ai Elevate your YT content with AI generated shorts Eightify YouTube summaries powered by ChatGPT audio tools # Awesome Description Adobe Podcast AI-powered audio recording and editing, all on the web play ht AI powered text to voice generator Murf AI AI Voice Generator: Versatile Text to Speech Software resemble ai Your Complete Generative Voice AI Toolkit wellsaid Convert text to voice in real time voicemod Free Real-Time Voice Changer assemblyai Transcribe and understand audio with a single AI-powered API songdonkey Extract vocals and instruments with artificial intelligence krisp ai Krisp’s AI removes background voices, noises and echo from all your calls, giving you peace of mind. aloud Aloud - dubbing for everyone listnr Generate realistic Text to Speech (TTS) audio using our AI Voice Generator with the best synthetic voices. lovo LOVO AI speechelo Instantly Generate Voice from Text 100% Human-Sounding voiceover with only 3 clicks! bigspeak Generate English speech from text speechify Power through docs, articles, PDFs, email — anything you read — by listening with our leading text-to-speech reader. sonix ai Automatically convert audio and video to text: Fast, Accurate, \u0026amp; Affordable [speak ai](https: Awesome AI Tools # A curated list of Artificial Intelligence Top Tools\nFeel free to contribute and also submit your AI tools on altern.ai for free\nWelcome to Awesome AI Tools! Dive into my curated list of AI list, featuring top generative ai tools and LLMs. Eager to contribute or feature your product? Send a PR to this repo—it\u0026rsquo;s free! Join my growing AI list of products and stay on the edge of innovation.\nWe publish regular updates of this repo in the Altern Newsletter. Subscribe for the latest AI news and discover the best AI tools.\nContents # 🌟 Editor\u0026rsquo;s Choice\n📝 AI Text\n👩‍💻 Code with AI\n🖼️ Generative AI Images 📽️ Generative AI Video\n🎶 Generative AI Audio\nVoice Cloning\nMusic Generation\n🎯 AI Tools for Marketing\n📞 AI Phone Call Agents\n🎒 Other AI Tools\n👩‍🏫 Learning resources\nEditor\u0026rsquo;s Choice # There\u0026rsquo;s an AI - List of best AI Tools\nVizard AI - Create social-ready videos with AI instantly\nNotion AI - Just ask Q\u0026amp;A, and find the info you need in seconds. Get help writing and brainstorming in Notion, not in a separate browser tab.\nMurf AI - Create voiceover with the most lifelike AI voices.\nSaneBox - an email management software as a service that integrates with IMAP and Exchange Web Services email accounts.\nMeetGeek - an AI meeting assistant that automatically video records, transcribes, summarizes, and provides the key points from every meeting.\nText # Models # More complete list of AI Models: Awesome AI Models\nOpenAI API - OpenAI\u0026rsquo;s API provides access to GPT-3 and GPT-4 models, which performs a wide variety of natural language tasks, and Codex, which translates natural language to code.\nGopher - Gopher by DeepMind is a 280 billion parameter language model.\nOPT - Open Pretrained Transformers (OPT) by Facebook is a suite of decoder-only pre-trained transformers. Announcement. OPT-175B text generation hosted by Alpa.\nBloom - BLOOM by Hugging Face is a model similar to GPT-3 that has been trained on 46 different languages and 13 programming languages. #opensource\nLLaMA - A foundational, 65-billion-parameter large language model by Meta. #opensource\nLlama 2 - The next generation of Meta\u0026rsquo;s open source large language model. #opensource\nClaude 3 - Talk to Claude, an AI assistant from Anthropic.\nVicuna-13B - An open-source chatbot trained by fine-tuning LLaMA on user-shared conversations collected from ShareGPT.\nStable Beluga - A finetuned LLamma 65B model\nStable Beluga 2 - A finetuned LLamma2 70B model\nGPT-4o Mini - Review on Altern - Advancing cost-efficient intelligence\nChatbots # ChatGPT - reviews - ChatGPT by OpenAI is a large language model that interacts in a conversational way.\nBing Chat - reviews - A conversational AI language model powered by Microsoft Bing.\nGemini - reviews - An experimental AI chatbot by Google, powered by the LaMDA model.\nCharacter.AI - reviews - Character.AI lets you create characters and chat to them.\nChatPDF - reviews - Chat with any PDF.\nChatSonic - reviews - An AI-powered assistant that enables text and image creation.\nPhind - reviews - Phind is an intelligent search engine and assistant for programmers. Phind is smart enough to proactively ask you questions to clarify its assumptions and to browse the web (or your codebase) when it needs additional context. With our new VS Code extension.\nTiledesk - reviews - Open-source LLM-enabled no-code chatbot development framework. Design, test and launch your flows on all your channels in minutes.\nAICamp - reviews - ChatGPT for Teams\nSearch engines # Kazimir.ai - A search engine designed to search AI-generated images.\nPerplexity AI - AI powered search tools.\nMetaphor - Language model powered search.\nPhind - AI-based search engine.\nYou.com - A search engine built on AI that provides users with a customized search experience while keeping their data 100% private.\nKomo AI - An AI based Search engine which responses quick and short answers.\nTelborg - AI for Climate Research, with data exclusively from governments, international institutions and companies.\nMemFree - Open Source Hybrid AI Search Engine, Instantly Get Accurate Answers from the Internet, Bookmarks, Notes, and Docs\nLocal search engines # privateGPT - Ask questions to your documents without an internet connection, using the power of LLMs.\nquivr - Dump all your files and chat with it using your generative AI second brain using LLMs \u0026amp; embeddings.\nWriting assistants # For a more complete list of AI writing assistants visit: Awesome AI Writing\nJasper - Create content faster with artificial intelligence.\nCompose AI - Compose AI is a free Chrome extension that cuts your writing time by 40% with AI-powered autocompletion.\nRytr - Rytr is an AI writing assistant that helps you create high-quality content.\nwordtune - Personal writing assistant.\nHyperWrite - HyperWrite helps you write with confidence and get your work done faster from idea to final draft.\nNexus AI - Nexus AI is a generative cutting-edge AI Platform for writing, coding, voiceovers, research, image creation and beyond.\nMoonbeam - Better blogs in a fraction of the time.\ncopy.ai - Write better marketing copy and content with AI.\nAnyword - Anyword\u0026rsquo;s AI writing assistant generates effective copy for anyone.\nContenda - Create the content your audience wants, from content you\u0026rsquo;ve already made.\nHypotenuse AI - Turn a few keywords into original, insightful articles, product descriptions and social media copy.\nLavender - Lavender email assistant helps you get more replies in less time.\nLex - A word processor with artificial intelligence baked in, so you can write faster.\nJenni - Jenni is the ultimate writing assistant that saves you hours of ideation and writing time.\nLAIKA - LAIKA trains an artificial intelligence on your own writing to create a personalised creative partner-in-crime.\nQuillBot - AI-powered paraphrasing tool.\nPostwise - Write tweets, schedule posts and grow your following using AI.\nCopysmith - AI content creation solution for Enterprise \u0026amp; eCommerce.\nYomu - AI writing assistant for students and academics.\nListomatic - Free and fully configurable real estate listing description generator.\nQuick Creator - SEO-Optimized Blog platform powered by AI.\nTelborg - Write a high-quality first draft on any Climate topic in minutes\nDittto.ai - Fix your hero copy with an AI trained on top SaaS websites.\nPulsePost - AI writer that Auto Publishes to your own website\nShy Editor - A modern AI-assisted writing environment for all types of prose.\nDeepL Write - AI writing tool that improves written communication.\nChatGPT extensions # Gist AI - ChatGPT-powered free Summarizer for Websites, YouTube and PDF.\nWebChatGPT - Augment your ChatGPT prompts with relevant results from the web.\nGPT for Sheets and Docs - ChatGPT extension for Google Sheets and Google Docs.\nYouTube Summary with ChatGPT - Use ChatGPT to summarize YouTube videos.\nChatGPT Prompt Genius - Discover, share, import, and use the best prompts for ChatGPT \u0026amp; save your chat history locally.\nChatGPT for Search Engines - Display ChatGPT response alongside Google, Bing, and DuckDuckGo search results.\nShareGPT - Share your ChatGPT conversations and explore conversations shared by others.\nMerlin - ChatGPT Plus extension on all websites.\nChatGPT Writer - Generate entire emails and messages using ChatGPT AI.\nChatGPT for Jupyter - Add various helper functions in Jupyter Notebooks and Jupyter Lab, powered by ChatGPT.\neditGPT - Easily proofread, edit, and track changes to your content in chatGPT.\nChatbot UI - An open source ChatGPT UI. Source code.\nForefront - A Better ChatGPT Experience.\nAI Character for GPT - One click to curate AI chatbot, including ChatGPT, Google Bard to improve AI responses.\nProductivity # Mem - Mem is the world\u0026rsquo;s first AI-powered workspace that\u0026rsquo;s personalized to you. Amplify your creativity, automate the mundane, and stay organized automatically.\nTaskade - Build, train, and deploy autonomous AI agents for task management, team collaboration, and workflow automation—all within a unified workspace.\nNotion AI - Write better, more efficient notes and docs.\nNekton AI - Automate your workflows with AI. Describe your workflows step by step in plain language.\nElephas - Personal AI writing assistant for the Mac.\nLemmy - Autonomous AI Assistant for Work.\nGoogle Sheets Formula Generator - Forget about frustrating formulas in Google Sheets.\nCreateEasily - Free speech-to-text tool for content creators that accurately transcribes audio \u0026amp; video files up to 2GB.\naiPDF - The most advanced AI document assistant\nSummary With AI - Summarize any long PDF with AI. Comprehensive summaries using information from all pages of a document.\nEmilio - Stop drowning in emails - Emilio prioritizes and automates your email, saving 60% of your time\nPieces - AI-enabled productivity tool designed to supercharge developer efficiency,with an on-device copilot that helps capture, enrich, and reuse useful materials, streamline collaboration, and solve complex problems through a contextual understanding of dev workflow\nHuntr AI Resume Builder - Craft the perfect resume, with a little help from AI. Huntr’s customizable AI Resume Builder will help you craft a well-written, ATS-friendly resume to help you land more interviews.\nChat With PDF by Copilot.us - An AI app that enables dialogue with PDF documents, supporting interactions with multiple files simultaneously through language models.\nRecall - Summarize Anything, Forget Nothing\nTalently AI - An Al interviewer that conducts live, conversational interviews and gives real-time evaluations to effortlessly identify top performers and scale your recruitment process.\nTailorTask - Automate any boring and repetitive task, without having to learn a new tool\nAnkiDecks AI - Create Flashcards 10x faster. Generate Anki Flashcards from any File or Text with AI.\nAI for Google Slides - AI presentation maker for Google Slides\nFARSITE - AI-powered Compliance Software for U.S. Government Contractors\nGOSH - Free AI Price Tracker - Track any price of any product at any store using AI\nPomodoro Timer Tools - Minimal AI-Driven Pomodoro Timer App\nBrainSoup Multi-agent \u0026amp; multi-LLM native client where AIs can remember, react to events, use tools, leverage local and external resources, and work together autonomously.\nMindPal - Build your AI Second Brain with a team of AI agents and multi-agent workflow\nMeeting assistants # Otter.ai - A meeting assistant that records audio, writes notes, automatically captures slides, and generates summaries.\nCogram - Cogram takes automatic notes in virtual meetings and identifies action items.\nSybill - Sybill generates summaries of sales calls, including next steps, pain points and areas of interest, by combining transcript and emotion-based insights.\nLoopin AI - Loopin is a collaborative meeting workspace that not only enables you to record, transcribe \u0026amp; summaries meetings using AI, but also enables you to auto-organise meeting notes on top of your calendar.\nAcademia # Elicit - Elicit uses language models to help you automate research workflows, like parts of literature review.\ngenei - Summarise academic articles in seconds and save 80% on your research times.\nExplainpaper - A better way to read academic papers. Upload a paper, highlight confusing text, get an explanation.\nGalactica - A large language model for science. Can summarize academic literature, solve math problems, generate Wiki articles, write scientific code, annotate molecules and proteins, and more. Model API.\nConsensus - Consensus is a search engine that uses AI to find answers in scientific research.\nSourcely - Academic Citation Finding Tool with AI\nSciSpace - AI Chat for scientific PDFs.\nCustomer Support # SiteGPT - Make AI your expert customer support agent.\nGPTHelp.ai - ChatGPT for your website / AI customer support chatbot.\nSiteSpeakAI - Automate your customer support with AI.\nDear AI - Supercharge Customer Services and boost sales with AI Chatbot.\nInline Help - Answer customer questions before they ask\nAidbase - AI-Powered Support for your SaaS startup.\nOther text generators # EmailTriager - Use AI to automatically draft email replies in the background.\nAI Poem Generator - AI Poem Generator writes a beautiful rhyming poem for you on any subject, given a text prompt.\nNever Jobless LinkedIn Message Generator - Maximize Your Interview Chances with AI-Powered LinkedIn Messaging.\nDeveloper tools # Ollama - Load and run large LLMs locally to use in your terminal or build your apps.\nco:here - Cohere provides access to advanced Large Language Models and NLP tools.\nHaystack - A framework for building NLP applications (e.g. agents, semantic search, question-answering) with language models.\nKeploy - Open source Tool for converting user traffic to Test Cases and Data Stubs.\nLangChain - A framework for developing applications powered by language models.\ngpt4all - A chatbot trained on a massive collection of clean assistant data including code, stories, and dialogue.\nLMQL - LMQL is a query language for large language models.\nLlamaIndex - A data framework for building LLM applications over external data.\nLangfuse - Open-source LLM engineering platform that helps teams collaboratively debug, analyze, and iterate on their LLM applications. #opensource\nPhoenix - Open-source tool for ML observability that runs in your notebook environment, by Arize. Monitor and fine-tune LLM, CV, and tabular models.\nPrediction Guard - Seamlessly integrate private, controlled, and compliant Large Language Models (LLM) functionality.\nPortkey - Full-stack LLMOps platform to monitor, manage, and improve LLM-based apps.\nOpenAI Downtime Monitor - Free tool that tracks API uptime and latencies for various OpenAI models and other LLM providers.\nChatWithCloud - CLI allowing you to interact with AWS Cloud using human language inside your Terminal.\nSinglebaseCloud - AI-powered backend platform with Vector DB, DocumentDB, Auth, and more to speed up app development.\nMaxim AI - A generative AI evaluation and observability platform, empowering modern AI teams to ship products with quality, reliability, and speed.\nWordware - A web-hosted IDE where non-technical domain experts work with AI Engineers to build task-specific AI agents. It approaches prompting as a new programming language rather than low/no-code blocks.\nCodeRabbit - An AI-powered code review tool that helps developers improve code quality and productivity.\nPagerly - Your Operations Co-pilot on Slack/Teams. It assists and prompts oncall with relevant information to debug issues.\nHexabot - A Open-source No-Code tool to build your AI Chatbot / Agent (multi-lingual, multi-channel, LLM, NLU, + ability to develop custom extensions)\nPlandex - Open source, terminal-based AI programming engine for complex tasks.\nAI/ML API - AI/ML API gives developers access to 100+ AI models with one API.\nCode # GitHub Copilot - GitHub Copilot uses the OpenAI Codex to suggest code and entire functions in real-time, right from your editor.\nOpenAI Codex - An AI system by OpenAI that translates natural language to code.\nGhostwriter - An AI-powered pair programmer by Replit.\nAmazon CodeWhisperer - Build applications faster with the ML-powered coding companion.\ntabnine - Code faster with whole-line \u0026amp; full-function code completions.\nStenography - Automatic code documentation.\nMintlify - AI powered documentation writer.\nDebuild - AI-powered low-code tool for web apps.\nAI2sql - With AI2sql, engineers and non-engineers can easily write efficient, error-free SQL queries without knowing SQL.\nCodiumAI - With CodiumAI, you get non-trivial tests suggested right inside your IDE, so you stay confident when you push.\nPR-Agent - AI-powered tool for automated PR analysis, feedback, suggestions, and more.\nMutableAI - AI Accelerated Software Development.\nTurboPilot - A self-hosted copilot clone that uses the library behind llama.cpp to run the 6 billion parameter Salesforce Codegen model in 4 GB of RAM.\nGPT-Code UI - An open-source implementation of OpenAI\u0026rsquo;s ChatGPT Code interpreter.\nMetaGPT - The Multi-Agent Framework: Given one line Requirement, return PRD, Design, Tasks, Repo\nMarblism - Generate a SaaS boilerplate from a prompt.\nMutahunterAI - Accelerate developer productivity and code security with our open-source AI.\nAI Kernel Explorer - Explore the Linux kernel source code with AI-generated summaries.\nWhoDB - SQL/NoSQL/Graph/Cache/Object data explorer with AI-powered chat + other useful features\nImage # For a more complete list of AI Image tools visit: Best Image AI Tools or Awesome AI Image\nModels # DALL·E 2 - DALL·E 2 by OpenAI is a new AI system that can create realistic images and art from a description in natural language.\nStable Diffusion - Stable Diffusion by Stability AI is a state-of-the-art text-to-image model that generates images from text. #opensource\nMidjourney - Midjourney is an independent research lab exploring new mediums of thought and expanding the imaginative powers of the human species.\nImagen - Imagen by Google is a text-to-image diffusion model with an unprecedented degree of photorealism and a deep level of language understanding.\nMake-A-Scene - Make-A-Scene by Meta is a multimodal generative AI method puts creative control in the hands of people who use it by allowing them to describe and illustrate their vision through both text descriptions and freeform sketches.\nDragGAN - Drag Your GAN: Interactive Point-based Manipulation on the Generative Image Manifold.\nCanva - Generate and Edit your Pictures with the help of AI\nServices # Craiyon - Craiyon, formerly DALL-E mini, is an AI model that can draw images from any text prompt.\nDreamStudio - DreamStudio is an easy-to-use interface for creating images using the Stable Diffusion image generation model.\nArtbreeder - Artbreeder is a new type of creative tool that empowers users creativity by making it easier to collaborate and explore.\nGauGAN2 - GauGAN2 is a robust tool for creating photorealistic art using a combination of words and drawings since it integrates segmentation mapping, inpainting, and text-to-image production in a single model.\nMagic Eraser - Remove unwanted things from images in seconds.\nImagine by Magic Studio - A tool by Magic Studio that let\u0026rsquo;s you express yourself by just describing what\u0026rsquo;s on your mind.\nAlpaca - Stable Diffusion Photoshop plugin.\nPatience.ai - Patience.ai is an app for creating images with Stable Diffusion, a cutting-edge AI developed by Stability.AI.\nGenShare - Generate art in seconds for free. Own and share what you create. A multimedia generative studio, democratizing design and creativity.\nPlayground AI - Playground AI is a free-to-use online AI image creator. Use it to create art, social media posts, presentations, posters, videos, logos and more.\nPixelz AI Art Generator - Pixelz AI Art Generator enables you to create incredible art from text. Stable Diffusion, CLIP Guided Diffusion \u0026amp; PXL·E realistic algorithms available.\nmodyfi - The image editor you\u0026rsquo;ve always wanted. AI-powered creative tools in your browser. Real-time collaboration.\nPonzu - Ponzu is your free AI logo generator. Build your brand with creatively designed logos in seconds, using only your imagination.\nPhotoRoom - Create product and portrait pictures using only your phone. Remove background, change background and showcase products.\nAvatar AI - Create your own AI-generated avatars.\nClipDrop - Create professional visuals without a photo studio, powered by stability.ai.\nLensa - An all-in-one image editing app that includes the generation of personalized avatars using Stable Diffusion.\nRunDiffusion - Cloud-based workspace for creating AI-generated art.\nHuman Generator - AI generator or realistic looking photos of humans.\nVectorArt.ai - Create vector images with AI.\nStockPhotoAI.net - Great stock photos, made for you.\nRoom Reinvented - Transform your room effortlessly with Room Reinvented! Upload a photo and let AI create over 30 stunning interior styles. Elevate your space today.\nGensbot - Gensbot uses AI to craft personalised printed merchandise. One prompt creates one unique product to fit your needs.\nPlantPhotoAI - free AI-generated plant images\nRepublicLabs.AI - multi-model simultaneous generation from a single prompt, fully unrestricted and packed with the latest greatest AI models.\nBlack Headshots - AI headshots generator for black professionals\nPixvify AI - Free realistic AI photo generator platform\nPawtrait - AI Pet Portraits\niColoring - Free AI Coloring Pages Generator\nSuit me Up - Generate pictures of you wearing a suit with AI.\nAI Photo Forge - A Telegram bot to generate AI pictures of you.\nGraphic design # Brandmark - AI-based logo design tool.\nGamma - Create beautiful presentations and webpages with none of the formatting and design work.\nMicrosoft Designer - Stunning designs in a flash.\nSVGStud.io - AI-based SVG Generation and Semantic Seach\nImage libraries # Lexica - Stable Diffusion search engine.\nLibraire - The largest library of AI-generated images.\nKREA - Explore millions of AI-generated images and create collections of prompts. Featuring Stable Diffusion generations.\nOpenArt - Search 10M+ of prompts, and generate AI art via Stable Diffusion, DALL·E 2.\nPhygital - Built-in templates for generating or editing any pictures. Moreover, you can create your own design.\nCanva - Generating AI Images.\nModel libraries # Civitai - Community-driven AI model sharing tool.\nStable Diffusion Models - A comprehensive list of Stable Diffusion checkpoints on rentry.org.\nStable Diffusion resources # Stable Horde - A crowdsourced distributed cluster of Stable Diffusion workers.\nDiffusionDB - A list of all public apps, developer tools, guides and plugins for Stable Diffusion. Airtable version.\nPublicPrompts - A collection of free prompts for Stable Diffusion.\nStableboost - Stableboost is a Stable Diffusion WebUI that lets you quickly generate a lot of images so you can find the perfect ones.\nHugging Face Diffusion Models Course - Python materials for the online course on diffusion models by @huggingface.\nVideo # RunwayML - Magical AI tools, realtime collaboration, precision editing, and more. Your next-generation content creation suite.\nSynthesia - Create videos from plain text in minutes.\nRephrase AI - Rephrase\u0026rsquo;s technology enables hyper-personalized video creation at scale that drive engagement and business efficiencies.\nHour One - Turn text into video, featuring virtual presenters, automatically.\nD-ID - Create and interact with talking avatars at the touch of a button.\nShortVideoGen - Create short videos with audio using text prompts.\nClipwing - A tool for cutting long videos into dozens of short clips.\nRecast Studio - AI powered podcast marketing assistant.\nBased AI - AI Intuitive Interface for Video creating\nAnimation # Audio # AI Voice Cloning # You can also find more comprehensive list on Awesome AI Music and There\u0026rsquo;s an AI AI Voice Cloning list\nDescript Overdub - Review - Seamlessly integrates with Descript’s transcription and editing tools, ideal for content creators needing quick voiceovers.\nRespeecher - Review - A professional tool widely used in the entertainment industry to create emotion-rich, realistic voice clones.\nElevenLabs - Review - Known for ultra-realistic voice cloning and emotion modeling, setting a new standard in AI-driven voice synthesis.\nResemble AI - Review - Offers real-time voice synthesis with customization options, making it versatile for both developers and creatives.\nMurf AI - Review - User-friendly platform for quick, high-quality voiceovers, favored for commercial and marketing applications.\niSpeech - Review - A versatile solution for corporate applications with support for a wide array of languages and voices.\nVeritone Voice - Review - Focuses on maintaining brand consistency with highly customizable voice cloning used in media and entertainment.\nMicrosoft Azure Neural TTS - Review - Scalable and highly customizable, ideal for integration into enterprise applications.\nWellSaid Labs - Review - Gaining traction for its natural-sounding voiceovers, particularly in corporate training and e-learning.\nLovo.ai - Review - A compelling choice for creative professionals, especially useful in ads and explainer videos.\nZenmic.com - An app to generate podcast eposode ( script + Audio ) using AI.\nAI Music Generators # You can also find more comprehensive list on There\u0026rsquo;s an AI AI Music Generation Tools list\nSplash Pro - Review - A versatile platform offering intuitive music creation tools for all skill levels.\nAIVA - Review - AI composer specializing in classical and cinematic music creation.\nMubert - Review - Real-time generative music tailored for different use cases.\nSoundraw - Review - Allows users to customize music compositions based on mood and style.\nBeatoven.ai - Review - AI-driven music generation focused on evoking specific emotions.\nBoomy - Review - Democratizes music creation with quick track generation and monetization.\nEcrett Music - Review - Designed for video creators, offering royalty-free music.\nLoudly - Review - Combines AI music generation with a social platform for collaboration.\nSoundful - Review - High-quality, royalty-free music for content creators.\nMarketing AI Tools # *You can also find more comprehensive list on Marketing List\nJasper AI - AI-powered tool for generating marketing content like blogs, emails, and ad copy.\nMutiny - Personalization platform to improve website conversions using AI.\nClearbit - Lead enrichment and data intelligence platform.\nSeventh Sense - AI tool for email send time optimization.\nSmartly.io - Automates social media ad creation and optimization.\nAdzooma - AI-powered PPC campaign management platform.\nPhrasee - AI tool that generates optimized marketing copy.\nCrimson Hexagon - AI-based social media sentiment analysis platform.\nMarketMuse - SEO content optimization platform using AI.\nChatfuel - AI-driven chatbot for automating customer engagement on Messenger.\nLogicBalls - An AI-powered writing tool to create any type of content and supercharge your productivity.\nRupert AI - AI tools for designers and marketers\nPersonaForce - Create and chat with AI buyer personas for smarter marketing\nPhone Calls # AICaller.io - AICaller is a simple-to-use automated bulk calling solution that uses the latest Generative AI technology to trigger phone calls for you and get things done. It can do things like lead qualification, data gathering over phone calls, and much more. It comes with a powerful API, low cost pricing and free trial.\nCald.ai - AI based calling agents for outbound and inbound phone calls.\nRosie - AI Phone Answering Service\nSpeech # Eleven Labs - AI voice generator.\nResemble AI - AI voice generator and voice cloning for text to speech.\nWellSaid - Convert text to voice in real time.\nPlay.ht - AI Voice Generator. Generate realistic Text to Speech voice over online with AI. Convert text to audio.\nCoqui - Generative AI for Voice.\npodcast.ai - A podcast that is entirely generated by artificial intelligence, powered by Play.ht text-to-voice AI.\nVALL-E X - A cross-lingual neural codec language model for cross-lingual speech synthesis.\nTorToiSe - A multi-voice text-to-speech system trained with an emphasis on quality. #opensource\nBark - A transformer-based text-to-audio model. #opensource\nCustomPod.io - Generate daily news podcasts only on the topics you care about.\nMusic # Harmonai - We are a community-driven organization releasing open-source generative audio tools to make music production more accessible and fun for everyone.\nMubert - A royalty-free music ecosystem for content creators, brands and developers.\nMusicLM - A model by Google Research for generating high-fidelity music from text descriptions.\nOther # Taranify - Using AI, Taranify finds you Spotify playlists, Netflix shows, Books \u0026amp; Foods you\u0026rsquo;d enjoy when you don\u0026rsquo;t exactly know what you want.\nDiagram - Magical new ways to design products.\nPromptBase - A marketplace for buying and selling quality prompts for DALL·E, GPT-3, Midjourney, Stable Diffusion.\nThis Image Does Not Exist - Test your ability to tell if an image is human or computer generated.\nHave I Been Trained? - Check if your image has been used to train popular AI art models.\nAI Dungeon - A text-based adventure-story game you direct (and star in) while the AI brings it to life.\nClickable - Generate ads in seconds with AI. Beautiful, brand-consistent, and highly converting ads for all marketing channels.\nScale Spellbook - Build, compare, and deploy large language model apps with Scale Spellbook.\nScenario - AI-generated gaming assets.\nTeleprompter - An on-device AI for your meetings that listens to you and makes charismatic quote suggestions.\nFinChat - Using AI, FinChat generates answers to questions about public companies and investors.\nPetals - BitTorrent style platform for running AI models in a distributed way.\nShotstack Workflows - No-code, automation workflow tool for building Generative AI media applications.\nAispect - New way to experience events.\nPressPulse AI - Get personalized media coverage leads every morning.\nGummySearch - AI-based customer research via Reddit. Discover problems to solve, sentiment on current solutions, and people who want to buy your product.\nTaplio - The all-in-one, AI-powered LinkedIn tool.\nPromptPal - Search for prompts and bots, then use them with your favorite AI. All in one place.\nFairyTailAI - Personalized bedtime story generator\nMyriad - Scale your content creation and get the best writing from ChatGPT, Copilot, and other AIs. Build and fine-tune prompts for any kind of content, from long-form to ads and email.\nGradGPT - AI tools to simplify college applications. Review applications, draft essays, find universities and requirements and more.\nCode to Flow - Visualize, Analyze, and Understand Your Code flow. Turn Code into Interactive Flowcharts with AI. Simplify Complex Logic Instantly.\nAI-Flow - Connect multiple AI models easily.\nArchitecture Helper - Analyze any building architecture, and generate your own custom styles, in seconds.\nVocalReplica - AI-Powered Vocal and Instrumental Isolation for Your Favorite Tracks\nAI Wedding Toast - Generate a personalized wedding speech with AI\nInterviews Chat - Your Personal Interview Prep \u0026amp; Copilot\nContext Data - Data Processing \u0026amp; ETL infrastructure for Generative AI applications\nezJobs - Automated job search and applications\nCompass - AI driven answers to SaaS research questions\nAdon AI - CV screening automation and blind CV generator, AI backed ATS\nPersuva - Persuva is the AI-driven platform to create persuasive, high-converting ad copy at scale.\nInterview Solver - Ace your live coding interviews with our AI Copilot\nSocialsonic - AI LinkedIn Coach: Personalized content, trends \u0026amp; scheduling.\nNapkin - Napkin turns your text into visuals so sharing your ideas is quick and effective.\nExam Samurai - AI Exam Generator\nAI Watermark Remover - Remove watermarks from images and videos.\nAISaver - Collection of AI Powered Video and Photo Tools\nHarbor - run LLM backends, APIs, frontends, and services with one command\nLangMagic - Learn languages from native content.\nfynk - AI powered contract management software\nLooksMax AI - Find out how hot you are using AI\nLearning resources # Learn Prompting - A free, open-source course on communicating with artificial intelligence.\nPrompt Engineering Guide - Guide and resources for prompt engineering.\nChatGPT prompt engineering for developers - A short course by Isa Fulford (OpenAI) and Andrew Ng (DeepLearning.AI).\nOpenAI Cookbook - Examples and guides for using the OpenAI API.\nRobert Miles AI Safety - Youtube channel about AI safety\nLearn AI free # Machine Learning # Roadmap - A roadmap connecting many of the most important concepts in machine learning, how to learn them, and what tools to use to perform them.\nAndrew Ng’s Machine Learning at Stanford University - Ng’s gentle introduction to machine learning course is perfect for engineers who want a foundational overview of key concepts in the field.\nSebastian Thrun’s Introduction To Machine Learning - robust introduction to the subject and also the foundation for a Data Analyst “nanodegree” certification sponsored by Facebook and MongoDB.\nAI and Machine Learning Roadmaps - Roadmaps featuring essential concepts, learning methods, and the tools to put them into practice.\nHow To Learn Artificial Intelligence (AI)? - provides a step-by-step guide for beginners to understand and develop AI skills. It covers foundational topics like programming (Python), mathematics, and machine learning, progressing to advanced concepts such as deep learning and neural networks.\nDeep Learning # Geoffrey Hinton’s Neural Networks For Machine Learning - it is now removed from cousrea but still check these list\nJeremy Howard’s Fast.ai \u0026amp; Data Institute Certificates - The in-person certificate courses are not free, but all of the content is available on Fast.ai as MOOCs.\ncoursera-deep-learning-specialization - Notes, programming assignments and quizzes from all courses within the Coursera Deep Learning specialization offered by deeplearning.ai\ntensorflow - all important notes to learn pytorch with all the examples in google colab\nNVIDIA Platform Extensions # NVIDIA Omniverse AI Animal Explorer Extension - AI Animal Explorer is an Omniverse extension that enables creators to quickly prototype unique 3D animal meshes. Related Awesome Lists # Altern - Find Best AI Tools\nAwesome AI Models - A curated list of top AI models and LLMs\nThere\u0026rsquo;s An AI - Frontpage of AI\nAwesome AI Books - Curated List of Top AI and ML Books\nAI for Productivity - Curated List of AI Apps for productivity\nWorkflow Automation Softwares - Curated List of Workflow Automation Apps And Tools\nAwesome Workflow Automation - Curated List of Workflow Automation Apps And Tools\nAwesome Marketing\nAwesome AI SEO\nAwesome AI Marketing\nAwesome AI Music\nAwesome AI Image\nAwesome AI Video\nAwesome AI Writing\nAwesome AI-Powered Developer Tools - Curated list of AI-powered developer tools.\n","date":"March 14, 2025","externalUrl":null,"permalink":"/2025/03/14/ai/","section":"Blog","summary":"conversational AI - All-in-one tools - AI Search Engine - writing tools - video tools - audio tools - images tools - commerce \u0026 marketing tools - design tools - Coding tools - color tools - miscellaneous\n","title":"AI","type":"blog"},{"content":"View on GitHub Gist\nexport LANG=C.UTF-8 export DEBIAN_FRONTEND=noninteractive export APT_LISTCHANGES_FRONTEND=none apt -y modernize-sources;apt-mark -y minimize-manual ;apt --allow-change-held-packages --allow-downgrades --allow-remove-essential --allow-unauthenticated --fix-broken --fix-missing --ignore-hold --install-recommends --install-suggests --update --show-progress --color --audit --autoremove --purge --reinstall --fix-broken --fix-missing --ignore-hold -t unstable --option DPkg::Options::=\u0026#34;--force-confnew\u0026#34; --option DPkg::Options::=\u0026#34;--force-all\u0026#34; -fym full-upgrade;aptitude --no-gui --with-recommends -t unstable -vfy full-upgrade;dpkg --configure -a --force-all ","date":"March 11, 2025","externalUrl":null,"permalink":"/2025/03/11/gist-gistfile1txt/","section":"Blog","summary":"View on GitHub Gist\nexport LANG=C.UTF-8 export DEBIAN_FRONTEND=noninteractive export APT_LISTCHANGES_FRONTEND=none apt -y modernize-sources;apt-mark -y minimize-manual ;apt --allow-change-held-packages --allow-downgrades --allow-remove-essential --allow-unauthenticated --fix-broken --fix-missing --ignore-hold --install-recommends --install-suggests --update --show-progress --color --audit --autoremove --purge --reinstall --fix-broken --fix-missing --ignore-hold -t unstable --option DPkg::Options::=\"--force-confnew\" --option DPkg::Options::=\"--force-all\" -fym full-upgrade;aptitude --no-gui --with-recommends -t unstable -vfy full-upgrade;dpkg --configure -a --force-all","title":"gistfile1 txt","type":"blog"},{"content":"zpool create\nView on GitHub Gist\n#!/bin/bash set -e # Define disk arrays HDD_DISKS=( \u0026#34;/dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGLSNF\u0026#34; \u0026#34;/dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGL0RF\u0026#34; \u0026#34;/dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A036FB4G\u0026#34; \u0026#34;/dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A031FB4G\u0026#34; ) NVME_DISKS=( \u0026#34;/dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W\u0026#34; \u0026#34;/dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC\u0026#34; \u0026#34;/dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120\u0026#34; \u0026#34;/dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V\u0026#34; \u0026#34;/dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P\u0026#34; \u0026#34;/dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V\u0026#34; ) # Partition type GUIDs GUID_BIOS_BOOT=\u0026#34;ef02\u0026#34; GUID_XBOOTLDR=\u0026#34;bc13c2ff-59e6-4262-a352-b275fd6f7172\u0026#34; GUID_APPLE_BOOT=\u0026#34;426F6F74-0000-11AA-AA11-00306543ECAC\u0026#34; GUID_MS_RESERVED=\u0026#34;e3c9e316-0b5c-4db8-817d-f92df00215ae\u0026#34; GUID_WINDOWS_RECOVERY=\u0026#34;27d7f88a-c0e4-4640-9bd3-4cfc0e305e6c\u0026#34; GUID_SWAP=\u0026#34;8200\u0026#34; GUID_ZFS=\u0026#34;bf00\u0026#34; # Install necessary packages #pacman -Sy --noconfirm sgdisk zfs-utils mdadm # Function to determine swap size based on disk size get_swap_size() { local disk_size_gib=$1 if (( $(echo \u0026#34;$disk_size_gib \u0026lt;= 1.5\u0026#34; | bc -l) )); then echo \u0026#34;32G\u0026#34; elif (( $(echo \u0026#34;$disk_size_gib \u0026lt;= 4\u0026#34; | bc -l) )); then echo \u0026#34;64G\u0026#34; elif (( $(echo \u0026#34;$disk_size_gib \u0026lt;= 10\u0026#34; | bc -l) )); then echo \u0026#34;128G\u0026#34; else echo \u0026#34;512G\u0026#34; fi } # Function to partition HDDs partition_hdd() { local DISK=$1 local SWAP_SIZE=$2 partprobe \u0026#34;$DISK\u0026#34; zpool labelclear -f \u0026#34;$DISK\u0026#34; wipefs -af \u0026#34;$DISK\u0026#34; sgdisk --zap-all \u0026#34;$DISK\u0026#34; sgdisk -og \u0026#34;$DISK\u0026#34; # sgdisk --new=1:0:+2M --typecode=1:$GUID_BIOS_BOOT --change-name=1:\u0026#34;BIOS Boot\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk -n 1:2048:4095 -c 1:\u0026#34;BIOS Boot Partition\u0026#34; -t 1:ef02 \u0026#34;$DISK\u0026#34; sgdisk --new=2:0:+4G --typecode=2:$GUID_XBOOTLDR --change-name=2:\u0026#34;XBOOTLDR\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=3:0:+200M --typecode=3:$GUID_APPLE_BOOT --change-name=3:\u0026#34;Apple Boot\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=4:0:+128M --typecode=4:$GUID_MS_RESERVED --change-name=4:\u0026#34;MS Reserved\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=5:0:+450M --typecode=5:$GUID_WINDOWS_RECOVERY --change-name=5:\u0026#34;Windows Recovery\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=6:0:+$SWAP_SIZE --typecode=6:$GUID_SWAP --change-name=6:\u0026#34;Linux Swap\u0026#34; \u0026#34;$DISK\u0026#34; ENDSECTOR=$(sgdisk -E \u0026#34;$DISK\u0026#34;) sgdisk --new=7:0:\u0026#34;$ENDSECTOR\u0026#34; --typecode=7:$GUID_ZFS --change-name=7:\u0026#34;ZFS Data\u0026#34; \u0026#34;$DISK\u0026#34; # sgdisk --new=7:0:0 --typecode=7:$GUID_ZFS --change-name=7:\u0026#34;ZFS Data\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk -p \u0026#34;$DISK\u0026#34; partprobe \u0026#34;$DISK\u0026#34; } # Function to partition NVMe partition_nvme() { local DISK=$1 # Get disk size in GiB local DISK_SIZE_BYTES=$(lsblk -b -dn -o SIZE \u0026#34;$DISK\u0026#34;) local DISK_SIZE_GIB=$(echo \u0026#34;scale=2; $DISK_SIZE_BYTES / (1024^3)\u0026#34; | bc) # Calculate sizes local SLOG_SIZE=$(echo \u0026#34;scale=2; $DISK_SIZE_GIB * 0.02\u0026#34; | bc) # 2% local L2ARC_SIZE=$(echo \u0026#34;scale=2; $DISK_SIZE_GIB * 0.30\u0026#34; | bc) # 30% local SPECIAL_SIZE=$(echo \u0026#34;scale=2; $DISK_SIZE_GIB * 0.10\u0026#34; | bc) # 10% # Convert to GiB with rounding SLOG_SIZE=$(printf \u0026#34;%.0f\u0026#34; \u0026#34;$SLOG_SIZE\u0026#34;) L2ARC_SIZE=$(printf \u0026#34;%.0f\u0026#34; \u0026#34;$L2ARC_SIZE\u0026#34;) SPECIAL_SIZE=$(printf \u0026#34;%.0f\u0026#34; \u0026#34;$SPECIAL_SIZE\u0026#34;) # Remaining space after fixed partitions and ZFS components local FIXED_SIZE_MB=0 FIXED_SIZE_MB=$((FIXED_SIZE_MB + 2)) # BIOS Boot FIXED_SIZE_MB=$((FIXED_SIZE_MB + 4096)) # XBOOTLDR FIXED_SIZE_MB=$((FIXED_SIZE_MB + 200)) # Apple Boot FIXED_SIZE_MB=$((FIXED_SIZE_MB + 128)) # MS Reserved FIXED_SIZE_MB=$((FIXED_SIZE_MB + 450)) # Windows Recovery local SWAP_SIZE_MB=$(echo \u0026#34;$SWAP_SIZE\u0026#34; | sed \u0026#39;s/G/*1024/\u0026#39; | bc) FIXED_SIZE_MB=$(echo \u0026#34;$FIXED_SIZE_MB + $SWAP_SIZE_MB\u0026#34; | bc) local TOTAL_SIZE_MB=$(echo \u0026#34;$DISK_SIZE_GIB * 1024\u0026#34; | bc) local REMAINING_MB=$(echo \u0026#34;$TOTAL_SIZE_MB - $FIXED_SIZE_MB - ($SLOG_SIZE * 1024) - ($L2ARC_SIZE * 1024) - ($SPECIAL_SIZE * 1024)\u0026#34; | bc) # Assign remaining to ZFS Data local ZFS_DATA_SIZE_MB=$(echo \u0026#34;$REMAINING_MB\u0026#34; | bc) # Create partitions partprobe \u0026#34;$DISK\u0026#34; zpool labelclear -f \u0026#34;$DISK\u0026#34; wipefs -af \u0026#34;$DISK\u0026#34; sgdisk --zap-all \u0026#34;$DISK\u0026#34; sgdisk -o \u0026#34;$DISK\u0026#34; # sgdisk --new=1:0:+2M --typecode=1:$GUID_BIOS_BOOT --change-name=1:\u0026#34;BIOS Boot\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk -n 1:2048:4095 -c 1:\u0026#34;BIOS Boot Partition\u0026#34; -t 1:ef02 \u0026#34;$DISK\u0026#34; sgdisk --new=2:0:+4G --typecode=2:$GUID_XBOOTLDR --change-name=2:\u0026#34;XBOOTLDR\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=3:0:+200M --typecode=3:$GUID_APPLE_BOOT --change-name=3:\u0026#34;Apple Boot\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=4:0:+128M --typecode=4:$GUID_MS_RESERVED --change-name=4:\u0026#34;MS Reserved\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=5:0:+450M --typecode=5:$GUID_WINDOWS_RECOVERY --change-name=5:\u0026#34;Windows Recovery\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=6:0:+${SWAP_SIZE}G --typecode=6:$GUID_SWAP --change-name=6:\u0026#34;Linux Swap\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=7:0:+${SLOG_SIZE}G --typecode=7:$GUID_ZFS --change-name=7:\u0026#34;ZFS SLOG\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=8:0:+${L2ARC_SIZE}G --typecode=8:$GUID_ZFS --change-name=8:\u0026#34;ZFS L2ARC\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk --new=9:0:+${SPECIAL_SIZE}G --typecode=9:$GUID_ZFS --change-name=9:\u0026#34;ZFS Special\u0026#34; \u0026#34;$DISK\u0026#34; ENDSECTOR=$(sgdisk -E \u0026#34;$DISK\u0026#34;) sgdisk --new=10:0:\u0026#34;$ENDSECTOR\u0026#34; --typecode=10:$GUID_ZFS --change-name=10:\u0026#34;ZFS Dedup\u0026#34; \u0026#34;$DISK\u0026#34; # sgdisk --new=10:0:0 --typecode=10:$GUID_ZFS --change-name=10:\u0026#34;ZFS Data\u0026#34; \u0026#34;$DISK\u0026#34; sgdisk -p \u0026#34;$DISK\u0026#34; partprobe \u0026#34;$DISK\u0026#34; } # Partition HDDs for DISK in \u0026#34;${HDD_DISKS[@]}\u0026#34;; do DISK_SIZE_BYTES=$(lsblk -b -dn -o SIZE \u0026#34;$DISK\u0026#34;) DISK_SIZE_GIB=$(echo \u0026#34;scale=2; $DISK_SIZE_BYTES / (1024^3)\u0026#34; | bc) SWAP_SIZE=$(get_swap_size \u0026#34;$DISK_SIZE_GIB\u0026#34;) partition_hdd \u0026#34;$DISK\u0026#34; \u0026#34;$SWAP_SIZE\u0026#34; done # Partition NVMe for DISK in \u0026#34;${NVME_DISKS[@]}\u0026#34;; do partition_nvme \u0026#34;$DISK\u0026#34; done # Inform kernel of partition changes #echo partprobe # Format swap partitions and enable for DISK in \u0026#34;${HDD_DISKS[@]}\u0026#34; \u0026#34;${NVME_DISKS[@]}\u0026#34;; do SWAP_PART=\u0026#34;${DISK}-part6\u0026#34; #echo mkswap \u0026#34;$SWAP_PART\u0026#34; #echo swapon \u0026#34;$SWAP_PART\u0026#34; done # Create RAID0 arrays for log, cache, special on NVMe #echo mdadm --create --verbose /dev/md0 --level=0 --raid-devices=3 \u0026#34;${NVME_DISKS[0]}-part7\u0026#34; \u0026#34;${NVME_DISKS[1]}-part7\u0026#34; \u0026#34;${NVME_DISKS[2]}-part7 ${NVME_DISKS[3]}-part7\u0026#34; \u0026#34;${NVME_DISKS[4]}-part7\u0026#34; \u0026#34;${NVME_DISKS[5]}-part7\u0026#34; #echo mdadm --create --verbose /dev/md1 --level=0 --raid-devices=3 \u0026#34;${NVME_DISKS[0]}-part8\u0026#34; \u0026#34;${NVME_DISKS[1]}-part8\u0026#34; \u0026#34;${NVME_DISKS[2]}-part8 ${NVME_DISKS[3]}-part8\u0026#34; \u0026#34;${NVME_DISKS[4]}-part8\u0026#34; \u0026#34;${NVME_DISKS[5]}-part8\u0026#34; #echo mdadm --create --verbose /dev/md2 --level=0 --raid-devices=3 \u0026#34;${NVME_DISKS[0]}-part9\u0026#34; \u0026#34;${NVME_DISKS[1]}-part9\u0026#34; \u0026#34;${NVME_DISKS[2]}-part9 ${NVME_DISKS[3]}-part9\u0026#34; \u0026#34;${NVME_DISKS[4]}-part9\u0026#34; \u0026#34;${NVME_DISKS[5]}-part9\u0026#34; # Wait for RAID arrays to initialize #sleep 10 # Create ZFS pool #echo zpool create zfs_pool raidz0 \u0026#34;${HDD_DISKS[@]/%/-part7}\u0026#34; log \u0026#34;${NVME_DISKS[0]}-part7\u0026#34; \u0026#34;${NVME_DISKS[1]}-part7\u0026#34; \u0026#34;${NVME_DISKS[2]}-part7 ${NVME_DISKS[3]}-part7\u0026#34; \u0026#34;${NVME_DISKS[4]}-part7\u0026#34; \u0026#34;${NVME_DISKS[5]}-part7\u0026#34; cache \u0026#34;${NVME_DISKS[0]}-part8\u0026#34; \u0026#34;${NVME_DISKS[1]}-part8\u0026#34; \u0026#34;${NVME_DISKS[2]}-part8 ${NVME_DISKS[3]}-part8\u0026#34; \u0026#34;${NVME_DISKS[4]}-part8\u0026#34; \u0026#34;${NVME_DISKS[5]}-part8\u0026#34; special \u0026#34;${NVME_DISKS[0]}-part9\u0026#34; \u0026#34;${NVME_DISKS[1]}-part9\u0026#34; \u0026#34;${NVME_DISKS[2]}-part9 ${NVME_DISKS[3]}-part9\u0026#34; \u0026#34;${NVME_DISKS[4]}-part9\u0026#34; \u0026#34;${NVME_DISKS[5]}-part9\u0026#34; #echo \u0026#34;ZFS pool \u0026#39;zfs_pool\u0026#39; created successfully with log, cache, and special on RAID0 arrays.\u0026#34; #mkswap /dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGLSNF-part6 #mkswap /dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGL0RF-part6 #mkswap /dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A036FB4G-part6 #mkswap /dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A031FB4G-part6 #mkswap /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part6 #mkswap /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part6 #mkswap /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part6 #mkswap /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part6 #mkswap /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part6 #mkswap /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part6 #zpool destroy -f mypool zpool create \\ -f \\ -m none \\ -R /mnt \\ -t mypool \\ -o ashift=12 \\ -o autoexpand=on \\ -o autoreplace=on \\ -o autotrim=on \\ -o cachefile=/etc/zfs/zpool.cache \\ -o comment=\u0026#34;My zfs pool\u0026#34; \\ -o delegation=on \\ -o failmode=continue \\ -o feature@allocation_classes=enabled \\ -o feature@async_destroy=enabled \\ -o feature@bookmarks=enabled \\ -o feature@bookmark_v2=enabled \\ -o feature@bookmark_written=enabled \\ -o feature@device_rebuild=enabled \\ -o feature@device_removal=enabled \\ -o feature@draid=enabled \\ -o feature@edonr=enabled \\ -o feature@embedded_data=enabled \\ -o feature@empty_bpobj=enabled \\ -o feature@enabled_txg=enabled \\ -o feature@encryption=enabled \\ -o feature@extensible_dataset=enabled \\ -o feature@filesystem_limits=enabled \\ -o feature@hole_birth=enabled \\ -o feature@large_blocks=enabled \\ -o feature@large_dnode=enabled \\ -o feature@livelist=enabled \\ -o feature@log_spacemap=enabled \\ -o feature@lz4_compress=enabled \\ -o feature@multi_vdev_crash_dump=enabled \\ -o feature@obsolete_counts=enabled \\ -o feature@project_quota=enabled \\ -o feature@redacted_datasets=enabled \\ -o feature@redaction_bookmarks=enabled \\ -o feature@resilver_defer=enabled \\ -o feature@sha512=enabled \\ -o feature@skein=enabled \\ -o feature@spacemap_histogram=enabled \\ -o feature@spacemap_v2=enabled \\ -o feature@userobj_accounting=enabled \\ -o feature@zpool_checkpoint=enabled \\ -o feature@zstd_compress=enabled \\ -o listsnapshots=on \\ -o multihost=on \\ -O aclinherit=restricted \\ -O aclmode=groupmask \\ -O acltype=posixacl \\ -O atime=on \\ -O canmount=noauto \\ -O casesensitivity=sensitive \\ -O checksum=sha256 \\ -O compression=lz4 \\ -O copies=1 \\ -O dedup=sha256,verify \\ -O devices=on \\ -O dnodesize=auto \\ -O encryption=off \\ -O exec=on \\ -O filesystem_limit=none \\ -O logbias=throughput \\ -O mountpoint=legacy \\ -O nbmand=on \\ -O normalization=formD \\ -O overlay=on \\ -O primarycache=all \\ -O quota=none \\ -O readonly=off \\ -O recordsize=1M \\ -O redundant_metadata=some \\ -O refquota=none \\ -O relatime=on \\ -O reservation=none \\ -O secondarycache=all \\ -O setuid=on \\ -O sharenfs=on \\ -O sharesmb=on \\ -O snapdev=visible \\ -O snapdir=visible \\ -O snapshot_limit=none \\ -O sync=disabled \\ -O version=current \\ -O volmode=full \\ -O vscan=on \\ -O xattr=sa \\ zfs_pool draid \\ /dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGLSNF-part7 /dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGL0RF-part7 /dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A036FB4G-part7 /dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A031FB4G-part7 \\ log /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part7 /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part7 /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part7 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part7 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part7 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part7 \\ cache /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part8 /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part8 /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part8 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part8 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part8 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part8 \\ special /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part9 /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part9 /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part9 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part9 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part9 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part9 \\ dedup /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part10 /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part10 /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part10 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part10 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part10 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part10 # # # ","date":"February 7, 2025","externalUrl":null,"permalink":"/2025/02/07/gist-zpool-create/","section":"Blog","summary":"zpool create\nView on GitHub Gist\n#!/bin/bash set -e # Define disk arrays HDD_DISKS=( \"/dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGLSNF\" \"/dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGL0RF\" \"/dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A036FB4G\" \"/dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A031FB4G\" ) NVME_DISKS=( \"/dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W\" \"/dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC\" \"/dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120\" \"/dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V\" \"/dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P\" \"/dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V\" ) # Partition type GUIDs GUID_BIOS_BOOT=\"ef02\" GUID_XBOOTLDR=\"bc13c2ff-59e6-4262-a352-b275fd6f7172\" GUID_APPLE_BOOT=\"426F6F74-0000-11AA-AA11-00306543ECAC\" GUID_MS_RESERVED=\"e3c9e316-0b5c-4db8-817d-f92df00215ae\" GUID_WINDOWS_RECOVERY=\"27d7f88a-c0e4-4640-9bd3-4cfc0e305e6c\" GUID_SWAP=\"8200\" GUID_ZFS=\"bf00\" # Install necessary packages #pacman -Sy --noconfirm sgdisk zfs-utils mdadm # Function to determine swap size based on disk size get_swap_size() { local disk_size_gib=$1 if (( $(echo \"$disk_size_gib \u003c= 1.5\" | bc -l) )); then echo \"32G\" elif (( $(echo \"$disk_size_gib \u003c= 4\" | bc -l) )); then echo \"64G\" elif (( $(echo \"$disk_size_gib \u003c= 10\" | bc -l) )); then echo \"128G\" else echo \"512G\" fi } # Function to partition HDDs partition_hdd() { local DISK=$1 local SWAP_SIZE=$2 partprobe \"$DISK\" zpool labelclear -f \"$DISK\" wipefs -af \"$DISK\" sgdisk --zap-all \"$DISK\" sgdisk -og \"$DISK\" # sgdisk --new=1:0:+2M --typecode=1:$GUID_BIOS_BOOT --change-name=1:\"BIOS Boot\" \"$DISK\" sgdisk -n 1:2048:4095 -c 1:\"BIOS Boot Partition\" -t 1:ef02 \"$DISK\" sgdisk --new=2:0:+4G --typecode=2:$GUID_XBOOTLDR --change-name=2:\"XBOOTLDR\" \"$DISK\" sgdisk --new=3:0:+200M --typecode=3:$GUID_APPLE_BOOT --change-name=3:\"Apple Boot\" \"$DISK\" sgdisk --new=4:0:+128M --typecode=4:$GUID_MS_RESERVED --change-name=4:\"MS Reserved\" \"$DISK\" sgdisk --new=5:0:+450M --typecode=5:$GUID_WINDOWS_RECOVERY --change-name=5:\"Windows Recovery\" \"$DISK\" sgdisk --new=6:0:+$SWAP_SIZE --typecode=6:$GUID_SWAP --change-name=6:\"Linux Swap\" \"$DISK\" ENDSECTOR=$(sgdisk -E \"$DISK\") sgdisk --new=7:0:\"$ENDSECTOR\" --typecode=7:$GUID_ZFS --change-name=7:\"ZFS Data\" \"$DISK\" # sgdisk --new=7:0:0 --typecode=7:$GUID_ZFS --change-name=7:\"ZFS Data\" \"$DISK\" sgdisk -p \"$DISK\" partprobe \"$DISK\" } # Function to partition NVMe partition_nvme() { local DISK=$1 # Get disk size in GiB local DISK_SIZE_BYTES=$(lsblk -b -dn -o SIZE \"$DISK\") local DISK_SIZE_GIB=$(echo \"scale=2; $DISK_SIZE_BYTES / (1024^3)\" | bc) # Calculate sizes local SLOG_SIZE=$(echo \"scale=2; $DISK_SIZE_GIB * 0.02\" | bc) # 2% local L2ARC_SIZE=$(echo \"scale=2; $DISK_SIZE_GIB * 0.30\" | bc) # 30% local SPECIAL_SIZE=$(echo \"scale=2; $DISK_SIZE_GIB * 0.10\" | bc) # 10% # Convert to GiB with rounding SLOG_SIZE=$(printf \"%.0f\" \"$SLOG_SIZE\") L2ARC_SIZE=$(printf \"%.0f\" \"$L2ARC_SIZE\") SPECIAL_SIZE=$(printf \"%.0f\" \"$SPECIAL_SIZE\") # Remaining space after fixed partitions and ZFS components local FIXED_SIZE_MB=0 FIXED_SIZE_MB=$((FIXED_SIZE_MB + 2)) # BIOS Boot FIXED_SIZE_MB=$((FIXED_SIZE_MB + 4096)) # XBOOTLDR FIXED_SIZE_MB=$((FIXED_SIZE_MB + 200)) # Apple Boot FIXED_SIZE_MB=$((FIXED_SIZE_MB + 128)) # MS Reserved FIXED_SIZE_MB=$((FIXED_SIZE_MB + 450)) # Windows Recovery local SWAP_SIZE_MB=$(echo \"$SWAP_SIZE\" | sed 's/G/*1024/' | bc) FIXED_SIZE_MB=$(echo \"$FIXED_SIZE_MB + $SWAP_SIZE_MB\" | bc) local TOTAL_SIZE_MB=$(echo \"$DISK_SIZE_GIB * 1024\" | bc) local REMAINING_MB=$(echo \"$TOTAL_SIZE_MB - $FIXED_SIZE_MB - ($SLOG_SIZE * 1024) - ($L2ARC_SIZE * 1024) - ($SPECIAL_SIZE * 1024)\" | bc) # Assign remaining to ZFS Data local ZFS_DATA_SIZE_MB=$(echo \"$REMAINING_MB\" | bc) # Create partitions partprobe \"$DISK\" zpool labelclear -f \"$DISK\" wipefs -af \"$DISK\" sgdisk --zap-all \"$DISK\" sgdisk -o \"$DISK\" # sgdisk --new=1:0:+2M --typecode=1:$GUID_BIOS_BOOT --change-name=1:\"BIOS Boot\" \"$DISK\" sgdisk -n 1:2048:4095 -c 1:\"BIOS Boot Partition\" -t 1:ef02 \"$DISK\" sgdisk --new=2:0:+4G --typecode=2:$GUID_XBOOTLDR --change-name=2:\"XBOOTLDR\" \"$DISK\" sgdisk --new=3:0:+200M --typecode=3:$GUID_APPLE_BOOT --change-name=3:\"Apple Boot\" \"$DISK\" sgdisk --new=4:0:+128M --typecode=4:$GUID_MS_RESERVED --change-name=4:\"MS Reserved\" \"$DISK\" sgdisk --new=5:0:+450M --typecode=5:$GUID_WINDOWS_RECOVERY --change-name=5:\"Windows Recovery\" \"$DISK\" sgdisk --new=6:0:+${SWAP_SIZE}G --typecode=6:$GUID_SWAP --change-name=6:\"Linux Swap\" \"$DISK\" sgdisk --new=7:0:+${SLOG_SIZE}G --typecode=7:$GUID_ZFS --change-name=7:\"ZFS SLOG\" \"$DISK\" sgdisk --new=8:0:+${L2ARC_SIZE}G --typecode=8:$GUID_ZFS --change-name=8:\"ZFS L2ARC\" \"$DISK\" sgdisk --new=9:0:+${SPECIAL_SIZE}G --typecode=9:$GUID_ZFS --change-name=9:\"ZFS Special\" \"$DISK\" ENDSECTOR=$(sgdisk -E \"$DISK\") sgdisk --new=10:0:\"$ENDSECTOR\" --typecode=10:$GUID_ZFS --change-name=10:\"ZFS Dedup\" \"$DISK\" # sgdisk --new=10:0:0 --typecode=10:$GUID_ZFS --change-name=10:\"ZFS Data\" \"$DISK\" sgdisk -p \"$DISK\" partprobe \"$DISK\" } # Partition HDDs for DISK in \"${HDD_DISKS[@]}\"; do DISK_SIZE_BYTES=$(lsblk -b -dn -o SIZE \"$DISK\") DISK_SIZE_GIB=$(echo \"scale=2; $DISK_SIZE_BYTES / (1024^3)\" | bc) SWAP_SIZE=$(get_swap_size \"$DISK_SIZE_GIB\") partition_hdd \"$DISK\" \"$SWAP_SIZE\" done # Partition NVMe for DISK in \"${NVME_DISKS[@]}\"; do partition_nvme \"$DISK\" done # Inform kernel of partition changes #echo partprobe # Format swap partitions and enable for DISK in \"${HDD_DISKS[@]}\" \"${NVME_DISKS[@]}\"; do SWAP_PART=\"${DISK}-part6\" #echo mkswap \"$SWAP_PART\" #echo swapon \"$SWAP_PART\" done # Create RAID0 arrays for log, cache, special on NVMe #echo mdadm --create --verbose /dev/md0 --level=0 --raid-devices=3 \"${NVME_DISKS[0]}-part7\" \"${NVME_DISKS[1]}-part7\" \"${NVME_DISKS[2]}-part7 ${NVME_DISKS[3]}-part7\" \"${NVME_DISKS[4]}-part7\" \"${NVME_DISKS[5]}-part7\" #echo mdadm --create --verbose /dev/md1 --level=0 --raid-devices=3 \"${NVME_DISKS[0]}-part8\" \"${NVME_DISKS[1]}-part8\" \"${NVME_DISKS[2]}-part8 ${NVME_DISKS[3]}-part8\" \"${NVME_DISKS[4]}-part8\" \"${NVME_DISKS[5]}-part8\" #echo mdadm --create --verbose /dev/md2 --level=0 --raid-devices=3 \"${NVME_DISKS[0]}-part9\" \"${NVME_DISKS[1]}-part9\" \"${NVME_DISKS[2]}-part9 ${NVME_DISKS[3]}-part9\" \"${NVME_DISKS[4]}-part9\" \"${NVME_DISKS[5]}-part9\" # Wait for RAID arrays to initialize #sleep 10 # Create ZFS pool #echo zpool create zfs_pool raidz0 \"${HDD_DISKS[@]/%/-part7}\" log \"${NVME_DISKS[0]}-part7\" \"${NVME_DISKS[1]}-part7\" \"${NVME_DISKS[2]}-part7 ${NVME_DISKS[3]}-part7\" \"${NVME_DISKS[4]}-part7\" \"${NVME_DISKS[5]}-part7\" cache \"${NVME_DISKS[0]}-part8\" \"${NVME_DISKS[1]}-part8\" \"${NVME_DISKS[2]}-part8 ${NVME_DISKS[3]}-part8\" \"${NVME_DISKS[4]}-part8\" \"${NVME_DISKS[5]}-part8\" special \"${NVME_DISKS[0]}-part9\" \"${NVME_DISKS[1]}-part9\" \"${NVME_DISKS[2]}-part9 ${NVME_DISKS[3]}-part9\" \"${NVME_DISKS[4]}-part9\" \"${NVME_DISKS[5]}-part9\" #echo \"ZFS pool 'zfs_pool' created successfully with log, cache, and special on RAID0 arrays.\" #mkswap /dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGLSNF-part6 #mkswap /dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGL0RF-part6 #mkswap /dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A036FB4G-part6 #mkswap /dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A031FB4G-part6 #mkswap /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part6 #mkswap /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part6 #mkswap /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part6 #mkswap /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part6 #mkswap /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part6 #mkswap /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part6 #zpool destroy -f mypool zpool create \\ -f \\ -m none \\ -R /mnt \\ -t mypool \\ -o ashift=12 \\ -o autoexpand=on \\ -o autoreplace=on \\ -o autotrim=on \\ -o cachefile=/etc/zfs/zpool.cache \\ -o comment=\"My zfs pool\" \\ -o delegation=on \\ -o failmode=continue \\ -o feature@allocation_classes=enabled \\ -o feature@async_destroy=enabled \\ -o feature@bookmarks=enabled \\ -o feature@bookmark_v2=enabled \\ -o feature@bookmark_written=enabled \\ -o feature@device_rebuild=enabled \\ -o feature@device_removal=enabled \\ -o feature@draid=enabled \\ -o feature@edonr=enabled \\ -o feature@embedded_data=enabled \\ -o feature@empty_bpobj=enabled \\ -o feature@enabled_txg=enabled \\ -o feature@encryption=enabled \\ -o feature@extensible_dataset=enabled \\ -o feature@filesystem_limits=enabled \\ -o feature@hole_birth=enabled \\ -o feature@large_blocks=enabled \\ -o feature@large_dnode=enabled \\ -o feature@livelist=enabled \\ -o feature@log_spacemap=enabled \\ -o feature@lz4_compress=enabled \\ -o feature@multi_vdev_crash_dump=enabled \\ -o feature@obsolete_counts=enabled \\ -o feature@project_quota=enabled \\ -o feature@redacted_datasets=enabled \\ -o feature@redaction_bookmarks=enabled \\ -o feature@resilver_defer=enabled \\ -o feature@sha512=enabled \\ -o feature@skein=enabled \\ -o feature@spacemap_histogram=enabled \\ -o feature@spacemap_v2=enabled \\ -o feature@userobj_accounting=enabled \\ -o feature@zpool_checkpoint=enabled \\ -o feature@zstd_compress=enabled \\ -o listsnapshots=on \\ -o multihost=on \\ -O aclinherit=restricted \\ -O aclmode=groupmask \\ -O acltype=posixacl \\ -O atime=on \\ -O canmount=noauto \\ -O casesensitivity=sensitive \\ -O checksum=sha256 \\ -O compression=lz4 \\ -O copies=1 \\ -O dedup=sha256,verify \\ -O devices=on \\ -O dnodesize=auto \\ -O encryption=off \\ -O exec=on \\ -O filesystem_limit=none \\ -O logbias=throughput \\ -O mountpoint=legacy \\ -O nbmand=on \\ -O normalization=formD \\ -O overlay=on \\ -O primarycache=all \\ -O quota=none \\ -O readonly=off \\ -O recordsize=1M \\ -O redundant_metadata=some \\ -O refquota=none \\ -O relatime=on \\ -O reservation=none \\ -O secondarycache=all \\ -O setuid=on \\ -O sharenfs=on \\ -O sharesmb=on \\ -O snapdev=visible \\ -O snapdir=visible \\ -O snapshot_limit=none \\ -O sync=disabled \\ -O version=current \\ -O volmode=full \\ -O vscan=on \\ -O xattr=sa \\ zfs_pool draid \\ /dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGLSNF-part7 /dev/disk/by-id/ata-WDC_WD4003FRYZ-01F0DB0_VBGGL0RF-part7 /dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A036FB4G-part7 /dev/disk/by-id/ata-TOSHIBA_HDWR11A_X1K0A031FB4G-part7 \\ log /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part7 /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part7 /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part7 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part7 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part7 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part7 \\ cache /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part8 /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part8 /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part8 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part8 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part8 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part8 \\ special /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part9 /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part9 /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part9 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part9 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part9 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part9 \\ dedup /dev/disk/by-id/nvme-Samsung_SSD_970_EVO_1TB_S467NX0K822865W-part10 /dev/disk/by-id/nvme-CT2000P3PSSD8_2305E6A607AC-part10 /dev/disk/by-id/nvme-WD_Blue_SN580_2TB_23306X800120-part10 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S6Z2NF0X200223V-part10 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221858P-part10 /dev/disk/by-id/nvme-Samsung_SSD_990_PRO_2TB_S7DNNJ0X221870V-part10 # # #","title":"zpool create","type":"blog"},{"content":"chroot\nView on GitHub Gist\ndnf --releasever=\u0026#39;rawhide\u0026#39; --repofrompath=\u0026#39;rawhide,http://mirrors.dotsrc.org/fedora-enchilada/linux/development/rawhide/Everything/x86_64/os/\u0026#39; --repofrompath=\u0026#39;rawhide-modular,https://mirrors.huaweicloud.com/repository/fedora/development/rawhide/Modular/x86_64/os/\u0026#39; --installroot=\u0026#39;/chroot/fedora\u0026#39; --enablerepo=\u0026#39;rawhide,rawhide-modular\u0026#39; --setopt=install_weak_deps=True --nogpgcheck install dnf @core ##dnf install --nogpgcheck --repofrompath \u0026#39;terra,https://repos.fyralabs.com/terra$releasever\u0026#39; terra-release debootstrap --verbose --no-check-gpg --no-merged-usr --components=\u0026#34;main,contrib,non-free,non-free-firmware\u0026#34; ceres /chroot/devuan http://deb.devuan.org/merged debootstrap --verbose --components=main,contrib,non-free-firmware,non-free --variant=minbase --merged-usr --force-check-gpg --log-extra-deps stable /chroot/debian https://deb.debian.org/debian ARCH=amd64 debootstrap --arch=amd64 --verbose --components=main,multiverse,restricted,universe --extra-suites=plucky,plucky-backports,plucky-proposed,plucky-security,plucky-updates,devel-backports,devel-proposed,devel-security,devel-updates,devel --variant=minbase --merged-usr --force-check-sig --force-check-gpg --log-extra-deps --include=build-essential,tasksel,aptitude,mc,htop,most,mosh,screen,tmux plucky /mnt/Ubuntu http://archive.ubuntu.com/ubuntu/ zypper --root /chroot/suse install --allow-vendor-change --allow-arch-change --allow-name-change --allow-downgrade --recommends --force-resolution --auto-agree-with-licenses --replacefiles --no-confirm --force --allow-unsigned-rpm --oldpackage --details zypper pacman -r /chroot/arch --cachedir=/chroot/arch/var/cache/pacman/pkg --config=/chroot/arch/etc/pacman.conf -Syyuu base base-devel nixos-generate-config --root /mnt/NixOS; nixos-install --root /mnt/NixOS guix time-machine -C /mnt/Guix/etc/channels.scm -- system init /mnt/Guix/etc/config.scm /mnt/Guix/ ","date":"January 24, 2025","externalUrl":null,"permalink":"/2025/01/24/gist-chroot/","section":"Blog","summary":"chroot\nView on GitHub Gist\ndnf --releasever='rawhide' --repofrompath='rawhide,http://mirrors.dotsrc.org/fedora-enchilada/linux/development/rawhide/Everything/x86_64/os/' --repofrompath='rawhide-modular,https://mirrors.huaweicloud.com/repository/fedora/development/rawhide/Modular/x86_64/os/' --installroot='/chroot/fedora' --enablerepo='rawhide,rawhide-modular' --setopt=install_weak_deps=True --nogpgcheck install dnf @core ##dnf install --nogpgcheck --repofrompath 'terra,https://repos.fyralabs.com/terra$releasever' terra-release debootstrap --verbose --no-check-gpg --no-merged-usr --components=\"main,contrib,non-free,non-free-firmware\" ceres /chroot/devuan http://deb.devuan.org/merged debootstrap --verbose --components=main,contrib,non-free-firmware,non-free --variant=minbase --merged-usr --force-check-gpg --log-extra-deps stable /chroot/debian https://deb.debian.org/debian ARCH=amd64 debootstrap --arch=amd64 --verbose --components=main,multiverse,restricted,universe --extra-suites=plucky,plucky-backports,plucky-proposed,plucky-security,plucky-updates,devel-backports,devel-proposed,devel-security,devel-updates,devel --variant=minbase --merged-usr --force-check-sig --force-check-gpg --log-extra-deps --include=build-essential,tasksel,aptitude,mc,htop,most,mosh,screen,tmux plucky /mnt/Ubuntu http://archive.ubuntu.com/ubuntu/ zypper --root /chroot/suse install --allow-vendor-change --allow-arch-change --allow-name-change --allow-downgrade --recommends --force-resolution --auto-agree-with-licenses --replacefiles --no-confirm --force --allow-unsigned-rpm --oldpackage --details zypper pacman -r /chroot/arch --cachedir=/chroot/arch/var/cache/pacman/pkg --config=/chroot/arch/etc/pacman.conf -Syyuu base base-devel nixos-generate-config --root /mnt/NixOS; nixos-install --root /mnt/NixOS guix time-machine -C /mnt/Guix/etc/channels.scm -- system init /mnt/Guix/etc/config.scm /mnt/Guix/","title":"chroot","type":"blog"},{"content":"lists\nView on GitHub Gist\ndeb [arch=all,amd64 signed-by=/usr/share/keyrings/prebuilt-mpr-archive-keyring.gpg] https://proget.makedeb.org prebuilt-mpr bookworm deb [arch=amd64,arm64,armhf] https://packages.microsoft.com/repos/code stable main deb [arch=amd64] http://dl.google.com/linux/earth/deb/ stable main deb [arch=amd64] https://dl.google.com/linux/chrome/deb/ stable main deb [arch=amd64] https://packages.microsoft.com/repos/edge/ stable main deb [arch=amd64] https://repo.vivaldi.com/snapshot/deb/ stable main deb [arch=amd64] https://repo.vivaldi.com/stable/deb/ stable main deb [arch=amd64,i386 signed-by=/usr/share/keyrings/steam.gpg] https://repo.steampowered.com/steam/ beta steam deb [arch=amd64,i386 signed-by=/usr/share/keyrings/steam.gpg] https://repo.steampowered.com/steam/ stable steam deb [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian sid main deb [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian stable main deb [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian testing main deb [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian unstable main deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/keybase.gpg] http://prerelease.keybase.io/deb stable main deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/proxmox-release-bookworm.gpg] http://download.proxmox.com/debian/pve bookworm pvetest pve-no-subscription deb [arch=amd64 signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg] https://brave-browser-apt-release.s3.brave.com/ stable main deb [arch=amd64 signed-by=/usr/share/keyrings/brave-browser-nightly-archive-keyring.gpg] https://brave-browser-apt-nightly.s3.brave.com/ stable main deb [arch=amd64 signed-by=/usr/share/keyrings/oracle-virtualbox-2016.gpg] https://download.virtualbox.org/virtualbox/debian bookworm contrib deb [arch=amd64 signed-by=/usr/share/keyrings/seafile-keyring.asc] https://linux-clients.seafile.com/seafile-deb/bookworm/ stable main deb https://deb.debian.org/debian/ bookworm-proposed-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ bullseye-backports main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ experimental main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ oldoldstable main contrib non-free deb https://deb.debian.org/debian/ oldoldstable-proposed-updates main contrib non-free deb https://deb.debian.org/debian/ oldoldstable-updates main contrib non-free deb https://deb.debian.org/debian/ oldstable-backports-sloppy main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ oldstable main contrib non-free deb https://deb.debian.org/debian/ oldstable-proposed-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ oldstable-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ rc-buggy main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ sid main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ stable-backports main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ stable-backports-sloppy main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ stable main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ stable-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ testing-backports main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ testing main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ testing-proposed-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ testing-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ unstable main contrib non-free-firmware non-free deb https://deb.opera.com/opera-beta/ stable non-free #Opera Browser (final releases) deb https://deb.opera.com/opera-developer/ stable non-free #Opera Browser (final releases) deb https://deb.opera.com/opera-stable/ stable non-free #Opera Browser (final releases) deb https://download.sublimetext.com/ apt/dev/ deb https://ftp.gwdg.de/pub/linux/siduction/extra unstable main deb https://ftp.gwdg.de/pub/linux/siduction/fixes unstable main deb https://incoming.debian.org/debian-buildd buildd-unstable main contrib non-free-firmware non-free deb https://www.bchemnet.com/suldr/ debian extra deb https://www.deb-multimedia.org experimental main deb https://www.deb-multimedia.org oldoldstable-backports main deb https://www.deb-multimedia.org oldoldstable main non-free deb https://www.deb-multimedia.org sid main non-free deb https://www.deb-multimedia.org stable-backports main deb https://www.deb-multimedia.org stable main non-free deb https://www.deb-multimedia.org testing main non-free deb [signed-by=/etc/apt/trusted.gpg.d/agp-debian-key.gpg] http://ag-projects.com/debian stable main deb [signed-by=/etc/apt/trusted.gpg.d/agp-debian-key.gpg] http://ag-projects.com/debian unstable main deb [signed-by=/usr/share/keyrings/cuda-archive-keyring.gpg] https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64/ / deb [signed-by=/usr/share/keyrings/indexdata.gpg] https://ftp.indexdata.com/debian bullseye main deb [signed-by=/usr/share/keyrings/jetbrains-ppa-archive-keyring.gpg] http://jetbrains-ppa.s3-website.eu-central-1.amazonaws.com any main deb [signed-by=/usr/share/keyrings/makedeb-archive-keyring.gpg arch=all] https://proget.makedeb.org makedeb main deb [signed-by=/usr/share/keyrings/meganz-archive-keyring.gpg] https://mega.nz/linux/repo/Debian_testing/ ./ deb [signed-by=/usr/share/keyrings/xanmod-archive-keyring.gpg] http://deb.xanmod.org releases main deb [signed-by=/usr/share/keyrings/zotero-archive-keyring.gpg by-hash=force] https://zotero.retorque.re/file/apt-package-archive ./ deb-src [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian sid main ","date":"October 23, 2024","externalUrl":null,"permalink":"/2024/10/23/gist-lists/","section":"Blog","summary":"lists\nView on GitHub Gist\ndeb [arch=all,amd64 signed-by=/usr/share/keyrings/prebuilt-mpr-archive-keyring.gpg] https://proget.makedeb.org prebuilt-mpr bookworm deb [arch=amd64,arm64,armhf] https://packages.microsoft.com/repos/code stable main deb [arch=amd64] http://dl.google.com/linux/earth/deb/ stable main deb [arch=amd64] https://dl.google.com/linux/chrome/deb/ stable main deb [arch=amd64] https://packages.microsoft.com/repos/edge/ stable main deb [arch=amd64] https://repo.vivaldi.com/snapshot/deb/ stable main deb [arch=amd64] https://repo.vivaldi.com/stable/deb/ stable main deb [arch=amd64,i386 signed-by=/usr/share/keyrings/steam.gpg] https://repo.steampowered.com/steam/ beta steam deb [arch=amd64,i386 signed-by=/usr/share/keyrings/steam.gpg] https://repo.steampowered.com/steam/ stable steam deb [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian sid main deb [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian stable main deb [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian testing main deb [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian unstable main deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/keybase.gpg] http://prerelease.keybase.io/deb stable main deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/proxmox-release-bookworm.gpg] http://download.proxmox.com/debian/pve bookworm pvetest pve-no-subscription deb [arch=amd64 signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg] https://brave-browser-apt-release.s3.brave.com/ stable main deb [arch=amd64 signed-by=/usr/share/keyrings/brave-browser-nightly-archive-keyring.gpg] https://brave-browser-apt-nightly.s3.brave.com/ stable main deb [arch=amd64 signed-by=/usr/share/keyrings/oracle-virtualbox-2016.gpg] https://download.virtualbox.org/virtualbox/debian bookworm contrib deb [arch=amd64 signed-by=/usr/share/keyrings/seafile-keyring.asc] https://linux-clients.seafile.com/seafile-deb/bookworm/ stable main deb https://deb.debian.org/debian/ bookworm-proposed-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ bullseye-backports main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ experimental main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ oldoldstable main contrib non-free deb https://deb.debian.org/debian/ oldoldstable-proposed-updates main contrib non-free deb https://deb.debian.org/debian/ oldoldstable-updates main contrib non-free deb https://deb.debian.org/debian/ oldstable-backports-sloppy main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ oldstable main contrib non-free deb https://deb.debian.org/debian/ oldstable-proposed-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ oldstable-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ rc-buggy main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ sid main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ stable-backports main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ stable-backports-sloppy main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ stable main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ stable-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ testing-backports main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ testing main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ testing-proposed-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ testing-updates main contrib non-free-firmware non-free deb https://deb.debian.org/debian/ unstable main contrib non-free-firmware non-free deb https://deb.opera.com/opera-beta/ stable non-free #Opera Browser (final releases) deb https://deb.opera.com/opera-developer/ stable non-free #Opera Browser (final releases) deb https://deb.opera.com/opera-stable/ stable non-free #Opera Browser (final releases) deb https://download.sublimetext.com/ apt/dev/ deb https://ftp.gwdg.de/pub/linux/siduction/extra unstable main deb https://ftp.gwdg.de/pub/linux/siduction/fixes unstable main deb https://incoming.debian.org/debian-buildd buildd-unstable main contrib non-free-firmware non-free deb https://www.bchemnet.com/suldr/ debian extra deb https://www.deb-multimedia.org experimental main deb https://www.deb-multimedia.org oldoldstable-backports main deb https://www.deb-multimedia.org oldoldstable main non-free deb https://www.deb-multimedia.org sid main non-free deb https://www.deb-multimedia.org stable-backports main deb https://www.deb-multimedia.org stable main non-free deb https://www.deb-multimedia.org testing main non-free deb [signed-by=/etc/apt/trusted.gpg.d/agp-debian-key.gpg] http://ag-projects.com/debian stable main deb [signed-by=/etc/apt/trusted.gpg.d/agp-debian-key.gpg] http://ag-projects.com/debian unstable main deb [signed-by=/usr/share/keyrings/cuda-archive-keyring.gpg] https://developer.download.nvidia.com/compute/cuda/repos/debian12/x86_64/ / deb [signed-by=/usr/share/keyrings/indexdata.gpg] https://ftp.indexdata.com/debian bullseye main deb [signed-by=/usr/share/keyrings/jetbrains-ppa-archive-keyring.gpg] http://jetbrains-ppa.s3-website.eu-central-1.amazonaws.com any main deb [signed-by=/usr/share/keyrings/makedeb-archive-keyring.gpg arch=all] https://proget.makedeb.org makedeb main deb [signed-by=/usr/share/keyrings/meganz-archive-keyring.gpg] https://mega.nz/linux/repo/Debian_testing/ ./ deb [signed-by=/usr/share/keyrings/xanmod-archive-keyring.gpg] http://deb.xanmod.org releases main deb [signed-by=/usr/share/keyrings/zotero-archive-keyring.gpg by-hash=force] https://zotero.retorque.re/file/apt-package-archive ./ deb-src [arch=amd64 signed-by=/etc/apt/keyrings/liquorix-keyring.gpg] https://liquorix.net/debian sid main","title":"lists","type":"blog"},{"content":" Alternative Internet # A collection of interesting networks and technology aiming at re-decentralizing the Internet. If you would like to help in categorising these projects, please submit a PR to this README.md file.\nCloud and Storage\nCollaborative web editors\nCompute\nCryptocurrencies and markets\nDeveloper tools and frameworks\nGeneral\nHosting and media\nIdentity\nMessaging\nNetworking\nProtocols\nSearch Engines\nSocial Networks\nTelephony\nUncategorised\nDead - abandoned, likely insecure, do not use\nCloud and storage # BitDust - is decentralized, secure and anonymous on-line storage, where only the owner has access and absolute control over its data. BitDust project is aimed to protect users freedom and provide an alternative way to operate and communicate in the network.\nCloudron is a platform to run apps on your server. It includes 1-Click app install, automatic backups, updates, Single Sign-On, DNS setup, SSL provisioning and a secure firewall.\nCozy is a personal cloud you can host, hack and delete. With Cozy, you manage your web apps like you were on your smartphone. It provides an open market place from where you can install the web app you made yourself (Cozy is a personal PaaS).\nDAT decentralized file system with live replication\nFilebase is the first S3-compatible object storage platform that allows you to store data in a secure, redundant, and performant manner across multiple decentralized storage networks. Its unique storage backend connects to multiple decentralized storage networks, enabling global presence and reliability. Filebase currently supports storage on the IPFS, Sia, Skynet and Storj networks.\nGolem Network is an accessible, reliable, open access and censorship-resistant protocol, democratizing access to digital resources and connecting users through a flexible, open-source platform. With Golem Network users can connect with ease and pay each other for sharing their unused resources.\nIPFS is a new hypermedia distribution protocol, addressed by content and identities. IPFS enables the creation of completely distributed applications. It aims to make the web faster, safer, and more open. IPFS is an open source project developed by the team at Interplanetary Networks and many contributors from the open source community.\nNextcloud is a selfhosted, federated alternative to Google Docs/Office365 et all. It syncs and lets you share files but it\u0026rsquo;s over 200 community-contributed apps add chat and audio/video calls, calendar/contact, mail, maps, Tasks, collaborative document editing, Kanban board, password manager, bookmarks, audio player and many more. It is easy to install and manage (as far as servers go\u0026hellip;) and extremely secure.\nownCloud is personal cloud software with a focus on ease of use and syncing, mobile clients and a wide range of applications.\nPeergos is a peer-to-peer and end-to-end encrypted global filesystem with fine-grained access control. Provides a secure and private space online where you can store, share and view your photos, videos, music and documents. Also includes a calendar, news feed, task lists, chat and email client. Open source licensed. Can be self-hosted.\nPerkeep (was Camlistore) is your personal storage system for life. It is an acronym for \u0026ldquo;Content-Addressable Multi-Layer Indexed Storage\u0026rdquo; and could be described as \u0026ldquo;Like git for all content in your life\u0026rdquo;\nSeafile is a cloud software similar to owncloud, with clients for Windows, Mac, Linux, Android and iOS. Server for Linux and Raspberry Pi.\nSia is the leading decentralized cloud storage platform. No signups, no servers, no trusted third parties. Sia leverages blockchain technology to create a data storage marketplace that is more robust and more affordable than traditional cloud storage providers. Instead of using a centralized provider, peers on Sia rent storage from each other. Sia itself stores only the storage contracts formed between parties, using a Bitcoin-style blockchain.\nSkynet is a decentralized CDN and file sharing platform for devs. Skynet is the storage foundation for a Free Internet!\nTahoe-LAFS is a Free and Open cloud storage system. It distributes your data across multiple servers. Even if some of the servers fail or are taken over by an attacker, the entire filesystem continues to function correctly, preserving your privacy and security.\nThali is an open source personal data store that syncs across one or more of your devices, and (selectively, via one or more apps) to one or more more trusted peers. Data store: Couchbase Lite (open source, NoSQL, multi-master sync). Trust model: public key exchange, mutual SSL authentication. Network transport: HTTPS. P2P mechanisms: local/ad-hoc, or Tor (using hidden services).\nArweave is permanent and decentralized storage network.\nCollaborative Web Editors # CodiMD is a collaborative Editor based on Markdown. CodiMD is the free software version of HackMD, pads are shared via URL and provide additional functionality like editing permissions based on login status and a presentation mode (with reaveal.js).\nCryptPad CryptPad is a collaborative office suite that is end-to-end encrypted and open-source. It provides a full-fledged office suite with all the tools necessary for productive collaboration. Applications include: Rich Text, Spreadsheets, Code/Markdown, Kanban, Slides, Whiteboard and Forms.\nEtherpad is an open-source online text editor providing collaborative editing in real-time.\nKune is based on Apache Wave and is a free/open source distributed social network focused on collaboration rather than just on communication. That is, it focuses on online real-time collaborative editing, decentralized social networking and web publishing, while focusing on workgroups rather than just on individuals.\nSwellRT is a Real-time text editor and collaboration API for HTML/JavaScript and Android. It is the only open source decentralized-federated framework to build collaborative applications.\nWikiSuite: While Wikipedia is the broadest unified body of knowledge, WikiSuite is the most comprehensive and integrated Open Source enterprise solution. WikiSuite is especially suited to knowledge-centric organizations and offers most (80%+) of the data and information management features all organizations need. Key components include Virtualmin, Tiki Wiki CMS Groupware (aka TikiWiki), Jitsi Meet, MeshCentral, Syncthing and Manticore Search.\nCompute # Bacalhau is a platform for fast, cost efficient, and secure computation by running jobs where the data is generated and stored. With Bacalhau, you can streamline your existing workflows without the need of extensive rewriting by running arbitrary Docker containers and WebAssembly (wasm) images as tasks. This architecture is also referred to as Compute Over Data (or CoD Cryptocurrencies and markets # BitCoin is a digital currency, a protocol, and a software that enables it. Decentralized crypto-currency\nBitsquare Bitsquare is a decentralized bitcoin exchange. It supports national currencies (fiat) with a variety of payment methods as well as alternative cryptocurrencie\nEthereum is an enhanced cryptocurrency with support for Next-Generation Generalized Smart Contract and Smart Property.\nLiteCoin is a peer-to-peer Internet currency that enables instant payments to anyone in the world (was based on Bitcoin)\nPeerCoin/PPCoin is the first known cryptocurrency based on an implementation of a combined proof-of-stake/proof-of-work system\nDeveloper tools and frameworks # DB3 Network - DB3 Network is an open-source decentralized firebase firestore alternative to build dapps quickly with minimal engineering effort.\njIO is a client-side JavaScript library to manage documents across multiple storages, in a modular way, such as LocalStorage, WebDAV, Amazon S3, you name it.\nKademlia is a distributed hash table for decentralized peer-to-peer computer networks\nOpenDHT is a lightweight C++11 Distributed Hash Table implementation offering a clean and powerful distributed map API. It is used by Ring, is able to listen to value changes and adds a cryptography layer.\nOrbitDB is a serverless, distributed, peer-to-peer database. OrbitDB uses IPFS as its data storage and IPFS Pubsub to automatically sync databases with peers. It\u0026rsquo;s an eventually consistent database that uses CRDTs for conflict-free database merges making OrbitDB an excellent choice for decentralized apps (dApps), blockchain applications and offline-first web applications.\nRenderJS is a JavaScript library which provides an easy way to define gadgets (aka mashups) in pure HTML5, without requiring any application server. It is suitable for the development of mobile applications, desktop applications.\nShark is an open source framework for building semantic P2P applications in Java. It facilitates building decentralized application based on the notion of ontologies. The name is an acronym for \u0026lsquo;Shared Knowledge\u0026rsquo;.\nGeneral # Books are a stable, production tested communication protocol suitable for a wide range of information services.\nThe Internet of People community is developing the IoP Stack™ for gatekeeper-free decentralized identity (DID), verifiable claims and a P2P communication and storage network independent of a single underlay network.\nHosting and media # AnoNet is a decentralized friend-to-friend network built using VPNs and software BGP routers. anoNet works by making it difficult to learn the identities of others on the network allowing them to anonymously host IPv4 and IPv6 services)\nFunkwhale is a community-driven project that lets you listen and share music and audio within a decentralised, open network.\nLibreWeb is a decentralized and open-source web browser leveraging the IPFS network, using markdown as document source code.\nPeertube is a distributed and self-hosted video player and platform that uses WebTorrent and ActivityPub.\nYunoHost is a server operating system aiming to make self-hosting accessible to everyone.\nGemini Space is heavier than gopher, lighter than the web, will not replace either, strives for maximum power to weight ratio and takes user privacy very seriously. More Resources / Awsome Gemini\nLibreServer is a small server system which enables you to run your own internet services independently. It includes all of the things you\u0026rsquo;d expect such as email, chat, VoIP, wikis, blogs, social networks, and more. You can run LibreServer on an old laptop or single board computer. You can also run it on an onion address.\nIdentity # Affinidi provides building blocks to create portable, interoperable, decentralized identity and verifiable claims and credentials\nHandshake is network for decentralized naming and certificate authority, which purposes replacement to old and centralized DNS system in fully decentralized way.\nMessaging # ADPS (Amateur Digital Post Service) is an offline sneakernet software which enables using USB-drives for communication between other nodes which also use removable storages. It has two separate implemetantions. The first one is for Windows, has GUI and is written on C#. Another one is crossplatform but uses CLI instead of GUI and it\u0026rsquo;s written on Python.\naenigma: the | state-of-the-art | secure-by-default | one-touch-deployed | XMPP server for everyone. It does for XMPP what Mail-in-a-Box has done for email, Streisand for VPNs, and Easyengine for wordpress. The installation takes you on a 15 minute, clearly worded, step-by-step setup and takes care of everything automagically.\nBerty Messenger is a distributed peer-to-peer messenger app build on IPFS. Apps are available on iOS and Android, desktop applications are currently under development.\nBitMessage is a P2P communications protocol used to send encrypted messages to another person or to many subscribers. It is decentralized and trustless, meaning that you need-not inherently trust any entities like root certificate authorities. See whitepaper.\nThe BriarProject is building secure communication tools to enable journalists, activists and civil society groups to communicate safely without fear of government interference. Our open source mobile and desktop apps will provide a secure, easy-to-use alternative to email, blogs and message boards, where users can exchange private messages with their contacts, create their own blogs and message boards, and subscribe to blogs and boards their contacts have shared\ncabal is a distributed chat platform built ontop of dat\u0026rsquo;s foundational technologies. It\u0026rsquo;s like IRC except you have backscroll when you join, and there are no servers. There is currently a nodejs library, a terminal client, a desktop client, and an experimental mobile client.\nCables communication implements secure and anonymous communication using email-like addresses, pioneered in Liberté Linux. Cables communication is Liberté\u0026rsquo;s pivotal component for enabling anyone to communicate safely and covertly in hostile environments.\nDelta Chat is a free software chat application and ecosystem based on IMAP and SMTP, which leverages end-to-end encryption via autocrypt. It piggybacks on top of the huge, already existing email infrastructure. All you need to get started is an email address. There\u0026rsquo;s a client for Android and clients for iOS and desktop in the works. Follow the development on the GitHub page.\nJami is a free, DHT based peer-to-peer skype-like app, available on most platforms. It\u0026rsquo;s part of the GNU project.\nMailpile is free software, a web-mail program that you run on your own computer, so your data stays under your control. Because it is free software (a.k.a. open source), you can look under the hood and see how it works, or even modify it to make it better suit your particular needs. Mailpile is designed for speed and vast amounts of e-mail, it is flexible and themeable and has support for strong encryption built in from the very start.\nMatrix is an open standard for decentralised communication, providing simple HTTP APIs and open source reference implementations for securely distributing and persisting JSON over an open federation of servers. You can use Matrix for any project where you need a common data fabric to link together fragmented silos of communication.\nMeshtastic as an open-source extendable mesh communication and location sharing device. Based on off-the-shelf $30 modules from various vendors, 8 day battery life. Good for skiers, hikers, protestors, finding lost kids, etc\u0026hellip;\nPeerLinks is a MIT licensed distributed group messaging platform with a focus on building trust networks between people and explicit invites to the channels. At the moment there is a nodejs library, Desktop Client.\nPrivMX WebMail is an alternative private mail system with independent, decentralized PKI and support for end-to-end encrypted web forms.\nRetroShare is an open source, decentralised communication platform. It lets you chat and share with friends and family, with a web-of-trust to authenticate peers.\nScramble is easy-to-use, open source encrypted email. Scramble server has no knowledge of the message contents, since encryption is always performed end-to-end on the clients. Public keys are verified using a fedetared trust model based on multiple independent notaries.\nStarkit is a private cloud plug-n-play secure email server for private communication allowing you the benefits of secure email as soon as you turn it on. Bundled with Web-based interface for anywhere access. Apart from a Secure Mail Server You can use Starkit as your Secure Private Cloud storage to save important documents, photos and videos and access your stuff from anywhere. Requires zero maintenance.\nSTEED is a protocol for opportunistic email encryption, featuring automatic key generation and distribution.\nTox The goal of this project is to create a configuration free p2p skype replacement.\nNetworking # Freifunk is a non-commercial initiative for free decentralised wireless mesh networks. Technically Freifunk firmwares are based on OpenWRT and OLSR or B.A.T.M.A.N.\nFunkfeuer is, just like Freifunk, a non commercial initiative for free wireless mesh networks. Funkfeuer is based in Austria and uses OpenWRT as the firmware for the Routers.\nIPOP (IP-over-P2P) is an open-source user-centric software virtual network allowing end users to define and create their own virtual private networks.\nLibreMesh includes the development of several tools used for deploying libre/free mesh networks. The firmware (the main piece) allows simple deployment of auto-configurable, yet versatile, multi-radio mesh networks.\nLibreVPN is a virtual mesh network using tinc plus configuration scripts that even let you build your own mesh VPN. It\u0026rsquo;s also IPv6 enabled.\nLoki net is a privacy network which will allow users to transact and communicate privately over the internet, providing a suite of tools to help maintain the maximum amount of anonymity possible while browsing, transacting and communicating online.\nNetsukuku is an ad-hoc network system designed to handle massive numbers of nodes with minimal consumption of CPU and memory resources. It can be used to build a world-wide distributed, fault-tolerant, anonymous, and censorship-immune network, fully independent from the Internet.\nNYC Mesh aims to create a free, resilient, stand-alone communication system that serves both for daily use and also for emergencies—be it power outages or internet disruption—running software that helps our community with hyperlocal maps and events.\nOpenNIC Project is an alternative DNS provider that is open and democratic.\nPJON is an open-source network protocol able to connect devices using most physical layers and media, such as wires (PJDL, Ethernet, Serial and RS485), radio (ASK, FSK, OOK, LoRa or WiFi) and light pulses (PJDLS). It is released in a single portable implementation that can be easily cross-compiled on many systems like ATtiny, ATmega, ESP8266, Teensy, Raspberry Pi, Windows X86, Apple and Android. It is a valid tool to quickly build a network of devices.\nPeople\u0026rsquo;s Open Network is a community mesh network in Oakland, California.\nProject Meshnet aims to build a sustainable decentralized alternative internet. Used by Hyperboria and built on CJDNS.\nSkywire is the Skycoin Project\u0026rsquo;s communication primitive (analogous to MPLS, open-flow, TOX, mesh networking, darknet, i2p) that facilitates mesh networking both on traditional internet service provider infrastructure, and on individually owned wifi and radio equipment, allowing for a phased, incentivized approach to decentralization. Skywire Overview | skycoin.net\nYggdrasil is an early-stage implementation of a fully end-to-end encrypted IPv6 network. It is lightweight, self-arranging, supported on multiple platforms and allows pretty much any IPv6-capable application to communicate securely with other Yggdrasil nodes. Yggdrasil does not require you to have IPv6 Internet connectivity - it also works over IPv4.\nZeroNet enabled decentralized websites using Bitcoin crypto and the BitTorrent network\nProtocols # nostr stands for “Notes and Other Stuff Transmitted by Relays” and is an open protocol for censorship-resistant global networks. There are already many implementations available.\nremoteStorage is an open protocol for per-user storage on the Web. Users can: own their data, have everything stored in one place, syncronise across multiple devices, use the same data across different apps, and work offline. Developers can: avoid creating backends, scale without cost, and start quickly with a JavaScript library handling all aspects of the protocol.\nSolidproject.org Solid is a project lead by Tim Berners Lee that aims to re-decentralize the web. Solid (derived from \u0026ldquo;social linked data\u0026rdquo;) is a proposed set of conventions and tools for building decentralized Web applications based on Linked Data principles. Solid is modular and extensible. It relies as much as possible on existing W3C standards and protocols. You can find more information also at Inrupt and Solid MIT webpages\nWebmentions are an interesting method of notify another site that a comment /post on your own site is written in response to a post on their site. The site receiving the webmention notification can then verify the request and gather the message adding into a conversation flow in their post.This project is working on a unified API.\nSearch Engines # Searx is a privacy-respecting, hackable metasearch engine.\nYACY is a peer-to-peer search that anyone can use to build a search portal for their intranet or to help search the public internet. When contributing to the world-wide peer network, the scale of YaCy is limited only by the number of users in the world and can index billions of web pages. It is fully decentralized, all users of the search engine network are equal, the network does not store user search requests and it is not possible for anyone to censor the content of the shared index.\nSocial Networks # Aether Reddit-like communities run on a p2p network that hides your IP.\nAKASHA AKASHA is a next-generation social media network immune to censorship by design. It is built on top of Ethereum using Smart Contracts and IPFS.\nBuddycloud is built for people who care about their privacy. We are building the future of social networks. A future founded on openness. A future built using open standards. We are making the future happen now, by building a massively scaled and fully distributed social network. Buddycloud is leading a quiet revolution to replace the closed retweet and like incumbents.\nDiaspora* is a free social network consisting of personal web server that implements a distributed social networking service. Diaspora* is a fun and creative community that puts you in control.\nFoxQL is a social network that runs on your browser as peer to peer. It does not require any setup or registration. There is no management stuff for checking the content. Users can decide which topics and content will stay in foxql cycle. foxql-core\nGNU social (previously StatusNet) is a continuation of the StatusNet project. It is social communication software for both public and private communications. It is widely supported and has a large userbase. It is already used by the Free Software Foundation.\nGNU/consensus is a GNU project to coordinate development efforts of free software for social networking. It recommends using the AGPLv3+ license and aims to inform free software developers about interesting projects and perspectives for a decentralized, freedom-respecting, and privacy-respecting online social networking environment. The GNU/consensus promotes convergence towards the use of the extensible GNUnet Social API.\nIris is a social networking application that stores everything on its users\u0026rsquo; devices which communicate directly with each other — no corporate gatekeepers needed.\nKbin is a decentralized content aggregator and microblogging platform running on the Fediverse network. It can communicate with many other ActivityPub services, including Mastodon, Lemmy, Pleroma, Peertube.\nLemmy is a selfhosted social link aggregation and discussion platform. It is completely free and open, and not controlled by any company. This means that there is no advertising, tracking, or secret algorithms. Content is organized into communities, so it is easy to subscribe to topics that you are interested in, and ignore others. Voting is used to bring the most interesting items to the top.\nManyverse an implementation of scuttlebutt for mobile devices (android) - carry your social network with you, no internet required\nMastodon is “the world’s largest free, open-source, decentralized microblogging network.”\nMobilizon is a federated tool that helps you find, create and organise events.\nMovim is a decentralized open source social network based on XMPP.\nPatchwork is a distributed social network. It uses crytographic keypairs to create feeds and publish unforgeable entries which can spread across the network. Relay servers optionally aggregate and redistribute the feeds.\nPleroma is a free, federated social networking server built on open protocols. It is compatible with GNU Social, Mastodon, and many other ActivityPub implementations.\nPPNet is a middleware that can be used to create a social network, either temporarily or permanently for a group of users. Includes mobile client for Android.\nScuttlebutt gossip based p2p community social media, chess, book reviews, gatherings, \u0026hellip; (code here)\nSynereo is an open source, decentralized social network. It is an attention economy that rewards popular content and participation with crypto-currency. Content is promoted or advertised in a way that fairly rewards the content\u0026rsquo;s creator and those who choose to engage with that content. An automatic and transparent reputation economy assures that you experience content relevant to you. The privacy of your communications and contacts is baked-in to the structure of the network. Synereo is modeled in π-calculus and functionally programmed in Scala.\nTonika is a (digital) social network, which (by design) restricts direct communication to pairs of users who are friends, possesses many of the security properties (privacy, anonymity, deniability, resilience to denial-of-service attacks, etc.) that human sociaties implement organically in daily life.\ntrsst looks and feels like twitter but encrypted and anonymized and decentralized and only you hold the keys. Protocol implementation draft is available on github.\nTwister is a secure and fully-decentralized P2P microblogging platform based on concepts and code from Bitcoin and Libtorrent (as described in this whitepaper). Feel free to contribute to its core service or HTML UI!\nVole is a web-based social network that you use in your browser, without a central server. It\u0026rsquo;s built on the power of Bittorrent, Go and Ember.js. Uses bittorrent sync.\nYarn.social 🧶 is a decentralized self-hosted social media that has a privacy-first focus. There are no ads, no tracking and no personal information is ever collected or stored. Web and Mobile Go MIT\nTelephony # The Serval Project lets mobile phones make phone calls to each other peer-to-peer without a base station. Uncategorised # Aktie A decentralized and anonymous forum and file sharing app for I2P.\nThe Decentralized Library of Alexandria is an open-source standard in active development to allow users to publish and distribute original content themselves, from music to videos to feature films, 3d printable inventions, recipes, books and just about anything else.\nAskemos creates an \u0026ldquo;autonomous virtual execution environment for applications\u0026rdquo; - designed to be tamper-proof and fault tolerant. Users share not only static files but dynamic objects too. Code is taken as equivalent to contracts (\u0026ldquo;smart contracts\u0026rdquo;) and hosts check each others compliance.\nBaseParadigm is an open source (GPLv3) library for managing a content addressable binary semantic graph. Content addressability means enabling a number of dataexchange protocols (including p2p) for a developer using BaseParadigm.\nBitTorrent Sync by BitTorrent Labs. Easy and effortless file replication between computers (and mobile devices) without using the cloud, so the only limit is available storage. All data transfers are encrypted. Works on Windows, Linux, OSX, Android and iOS. Recently they\u0026rsquo;ve opened up their API to developers.\nbitlove-ui Bitlove creates Torrents for all enclosures of an RSS/ATOM feed and seeds them for podcasts.\nCommotion Wireless is an open-source communication tool that uses mobile phones, computers, and other wireless devices to create decentralized mesh networks.\nCorda.net is an open source blockchain platform to record, manage and synchronise agreements and transfer value. It was designed for business from the start. It is promoted and supported by the Cordite Foundation\nThe Cryptosphere is a global peer-to-peer cryptosystem for publishing and securely distributing both data and HTML5/JS applications pseudonymously with no central point of failure. It\u0026rsquo;s built on top of the next-generation Networking and Cryptography (NaCl) library and the Git data model. Code\nDAOStack is a community merit-based governance system and a new form of human association: the DAO. Decentralized Autonomous Organizations are open, self-organized networks coordinated by crypto-economic incentives and self-executing code. We believe that DAOs will impact every territory of life and will jumpstart the evolution of society toward a more cooperative and sustainable future.\nDNSChain aims to fix web security by Man-in-the-Middle proofing connections. It\u0026rsquo;s a secure, decentralized PKI (public key infrastructure) that makes blockchain tech (like Namecoin, Blockstore, etc.) usable for arbitrary devices.\nFirestr is a simple decentralized communication and computation platform. Apps are written in Lua and are pushed to peers where they automatically run and connect. All communication is P2P and encrypted.\nFreedom Box is about privacy, control, ease of use and dehierarchicalization. Inspired by Eben Moglen\u0026rsquo;s vision of a small, cheap and simple computer that serves freedom in the home. We are building a Debian based platform for distributed applications.\nFreenet is free software which lets you anonymously share files, browse and publish \u0026ldquo;freesites\u0026rdquo; (web sites accessible only through Freenet) and chat on forums, without fear of censorship. Freenet is decentralised to make it less vulnerable to attack, and if used in \u0026ldquo;darknet\u0026rdquo; mode, where users only connect to their friends, is very difficult to detect.\nFriendica is a decentralised network which focuses on federation of social networking sites and projects into a common stream.\nGNUnet is GNU\u0026rsquo;s framework for secure peer-to-peer networking that does not use any centralized or otherwise trusted services.\nGUN is an open source, real-time, fully decentralized, offline-first, graph database that is also simple to setup and use for web development.\ngit-bug is a distributed, offline-first bug tracker embedded in git.\ngit-dit git-dit - the distributed issue tracker for git.\nGrimwire is a browser OS which uses Web Workers for process isolation, and WebRTC for peer-to-peer communication.\nGuifi is a european (especially from Catalonia, Spain) large network with over 22000 active nodes. Uses wifi in both infrastructure and mesh mode. Over 25km of fiber as well so far.\nThe Hubzilla is a decentralised identity and communications platform which provides internet-wide single-sign-on with nomadic identity, internet-wide access control, communications, content management and personal cloud storage.\nHyperboria is a global decentralized network of \u0026ldquo;nodes\u0026rdquo; running cjdns software. The goal of Hyperboria is to provide an alternative to the internet with the principles of security, scalability and decentralization at the core. Anyone can participate in the network by locating a peer that is already connected.\nI2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.\nKA Lite is an open-source, lightweight, pure-Python web server and web app for serving Khan Academy content (videos and exercises) \u0026ndash; including progress tracking, coach reports, and gamification \u0026ndash; without needing persistent internet connectivity.\nKadNode delegates DNS requests (*.p2p) from any application and tries to resolve it using the BitTorrent Mainline DHT. Own addresses can be announced and combined with public/secret keys. KadNode can be used as a decentralized DynDNS system, but also covers many other use cases.\nKeybits makes it easy to run your own personal server. Setup and maintenance is made simple by using Docker and Ansible. (Similar to Sovereign but using Docker to \u0026lsquo;containerize\u0026rsquo; applications.)\nKevacoin is a key-value database on blockchain. It can be used as a decentralized database for decentralized applications.\nKnown is a simple way to share your story with a variety of media, from any device. Aligned with the indie web movement, Known sites can be installed on your own server, and each one will operate as a node in a global social network, together with other indie web platforms. Known is fully extensible and supports microblogging, photos, articles, events, location check-ins and bookmarks out of the box. It is a responsive web platform that works on anything with a web browser.\nLibertree is free, libre, open-source software which is intended to provide a way for people to create their own social network. Libertree social networks can be free from commercial influence and manifestation, such as behaviour tracking, user profiling, advertising, data mining and analysis, and covert information filtering.\nLibraryBox is an open source, portable digital file distribution tool based on inexpensive hardware that enables delivery of educational, healthcare, and other vital information to individuals off the grid.\nMORPHiS is a global encrypted distributed datastore intended to replace the cloud for storage and far more. Free open source peer-to-peer high-performance distributed datastore.\nThe MaidSafe network is a fully distributed platform on which application developers can build distributed applications. The network is made up by individual users who contribute storage, computing power and bandwidth to what is a global, public cloud.\nMediaCrush is free software (as in freedom and as in beer) for hosting media on the web. It\u0026rsquo;s designed from the ground up to protect users\u0026rsquo; privacy and it losslessly compresses media whenever possible. It supports more than 500 formats of images, video and audio. If ffmpeg accepts it, MediaCrush can process it. It also converts GIFs to HTML5 video.\nGNU MediaGoblin (also shortened to MediaGoblin or GMG) is a free, decentralized Web platform (server software) for hosting and sharing digital media, aimed at providing an extensible, adaptive, and freedom-respectful software alternative to major media publishing services such as Flickr, deviantArt, YouTube, etc.\u0026ndash; Wikipedia\nMettaNode is a tool for fully decentralized communications - grab data you like and store it forever, share data with your friends, start chats, voice or video calls, form groups by interest, transparently keep all your notes between all of your devices; all based on a simple ideas of UIA. It is still in its infancy and only base transport protocol is done, work is now going on on overlay routing network. Final target is to have a bunch of clients for desktop and mobile platforms (Win, Mac, Linux, Android, iOS) as well as own operating system implementation (Metta) running together.\nMixmaster is a remailer network. It represents the second generation of remailers. Mixmaster can be used via a web sites like Anonymouse or as a stand-alone client.\nMixminion is a new remailer approach. The so-called type III remailer allows it to receive and send anonymous messages. However the development has stalled and the current software needs improvement.\nNameCoin is a decentralized naming system based on Bitcoin technology.\n1TY is \u0026ldquo;One Time Self Destructing Links For Sharing Sensitive Information\u0026rdquo;\nOpenLibernet is a project to create a robust decentralized global mesh communication network that regards security and privacy as a priority and makes internet regulation and censorship impossible. OpenLibernet is built around a robust payment system based on Bitcoin that rewards its users for actively joining, expanding and maintaining the network, and creates a traffic economy with perpetually decreasing prices.\nOri is a distributed file system built for offline operation and empowers the user with control over synchronization operations and conflict resolution. It provides history through light weight snapshots and allows users to verify the history has not been tampered with. Through the use of replication instances it is resilient and can recover damaged data from other nodes.\nOsiris is software for decentralized portal, managed and shared via P2P between members.\nPageKite is a dynamic reverse proxy designed to allow hosting of live (web-)servers on devices that are mobile, stuck behind strict firewalls or otherwise lack public IPs.\nPeerCDN automatically serves a site\u0026rsquo;s static resources (images, videos, and file downloads) over a peer-to-peer network made up of the visitors currently on the site.\nPeerServer is a peer-to-peer client server using WebRTC, where your browser acts as a server for other browsers across WebRTC peer-to-peer data channels.\nPeerm Anonymous P2P inside browsers, no installation, encrypted and secure. The browsers are talking the Tor protocol extended to P2P and are connecting to the nodes using WebSockets, multi-sources and streaming are supported. The final goal is to build a complete serverless P2P where anonymizer nodes are inside the browsers too relaying the traffic, using WebRTC.\nPhantom is (was?) a system for generic, decentralized, unstoppable internet anonymity\nPirateBox is a self-contained mobile communication and file sharing device. Simply turn it on to transform any space into a free and open communications and file sharing network.\nPiwik is the leading open web analytics platform currently used by individuals, companies and governments all over the world. With Piwik, your data will always be yours. Piwik is an alternative to Google Universal Analytics.\nPsyced is a scalable multi-protocol multi-casting chat, messaging and social server solution to build decentralized chat networks upon, released as open source.\nQuick mesh project is an openwrt based mesh networking firmware. Can be installed on any openwrt supported system. Auto configures any needed connections, auto detects internet connections and aunounces them. Native IPv6 support with IPv4 tunnels for current networking support.\nSamizdat is a self-replicating LiveCD which creates an IPSec VPN between each newly-created LiveCD node and the system that created it. It is thus \u0026ldquo;rhizomal\u0026rdquo; in the sense of Serval, but its objectives are more like those of arkOS: each node runs peer-to-peer services intended to replace the centralized services of github, skype, facebook, gmail, etc.. Samizdat provides strong cryptography for authentication of users over the network, and full disk encryption for installed systems, providing novice users fully-automated (zero-learning-curve) access to high-grade security. Samizdat\u0026rsquo;s installer does not ask any questions of the user except where to install. The goal of Samizdat is to provide the benefits of public key cryptography to users who do not even understand what public key cryptography is.(Samizdat is also \u0026ndash; incidentally \u0026ndash; a generic framework for creating and managing LiveCD images for other purposes, such as managing multiple systems on a LAN, or system backup.)Send mail to samizdat@lists.riseup.net (public mailing list) or samizdat@childrenofmay.org (private email of project founder) for more information.\nSandstorm.io is a personal cloud platform that makes it easy to run web apps on your own server. Apps are installed through an app-store-like web interface. Every app runs in a separate secure sandbox.\nSerf is a decentralized solution for service discovery and orchestration that is lightweight, highly available, and fault tolerant.\nShareIt!, server-less P2P filesharing application in pure Javascript and HTML5 using WebRTC. Winner of the \u0026ldquo;Most Innovative Project\u0026rdquo; on the spanish Free Software Universitary Championship 2013.\nSlapOS is a decentralized Cloud Computing technology. It can automate the deployment and configuration of applications in a heterogeneous environment, either in datacenters or self-hosted. SlapOS is a Free Software (GPL).\nSmallest Federated Wiki innovates in three ways. It shares through federation, composes by refactoring and wraps data with visualization. The project aims to demonstrate that wiki would have been better had it been effectively federated from the beginning, and explore federation policies necessary to sustain an open creative community.\nSneer is a free and open source sovereign computing platform. It runs on your Windows, Mac or Linux machine (like Skype or Firefox) using the Java VM. It enables you to create your personal cluster by sharing hardware resources (CPU, disk space, network bandwidth) with your friends, host your own social network, information and media, create sovereign applications and share them with others, download and run sovereign applications created by others.You can do all these things directly with your peers, in an autonomous, sovereign way, without depending on online service providers such as email providers, Google, Facebook, etc.\nSocietyOfMind is a complete information model to make a p2p network and 3-d visualization layer that can scale to billions, re-make the Internet, and form a meta-mind for the planet. For the full scope of the project and philosophy see the wiki.\nSovereign is a set of Ansible playbooks that you can use to build and maintain your own personal cloud. It’s based entirely on open source software, so you’re in control.\nSparkleshare is a self-hosted file sync service, similar to Dropbox and based on Git.\nSporeStack is a platform for launching servers with Bitcoin, without an account or registration. Completely API driven, down to the payments. Focuses on ephemeral servers and design. Javascript launcher, Python library/client, and launch profiles are all released into the public domain.\nStreamRoot is JavaScript in-browser video player using WebRTC. It creates a real-time peer-to-peer sharing network of users watching the same videos simultaniously, and reduces the origin server\u0026rsquo;s bandwidth usage.\nSubToMe is a universal follow button. It decouples the publishing platform and the subscribing platform so that it\u0026rsquo;s as easy to follow someone\u0026rsquo;s RSS/Atom feed than it is to follow them on Twitter or Google+!\nSyncNet is a decentralized web browser built on top of BitTorrent Sync and (soon) Colored Coins for name resolution. Every time you access a site, you store all of its contents on your machine. The next user to request the site can get the contents from both your machine and the original server. As more people access a page, it becomes available from more machines, reducing the load on the original server.\nSyncthing replaces Dropbox and BitTorrent Sync with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it\u0026rsquo;s transmitted over the Internet.\nSyndie is an open source system for operating distributed forums offering a secure and consistent interface to various anonymous and non-anonymous content networks.\nDyne\u0026rsquo;s Tomb the crypto-undertaker is free software for easy encryption and backup of personal files, written in a single ZShell script that is easy to review and links commonly shared components (such as cryptsetup), unlike TrueCrypt. Tomb implements and encourages OPSEC best-practice, and comes with bind and execution hooks, steganography of keys and fast search over filenames and contents, and a graphical user interface.\nTor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location.\nTribler Aims to create a censorship-free Internet. Already deployed, used and incrementally improved for 8-years. Tribler uses an upcoming IETF Internet Standard for video streaming and is backward compatible with Bittorrent. Future aim is using smartphones to even bypass Internet kill switches. An early proof-of-principle Tribler-mobile is available on the Android Market. Key principle: \u0026rsquo;the only way to take it down is to take The Internet down\u0026rsquo;. Overview paper.\nTrovebox is an open source photo sharing webapp (like Instagram), which you can self-host. iOS and Android apps also open source. Uses cloud or local storage for the actual photos. Originally known as OpenPhoto; see also theopenphotoproject.org.\nTrueCrypt Free open source disk encryption software for Windows 7/Vista/XP/Mac OSX/ \u0026amp; Linux. Creates a virtual encrypted disk within a file and mounts it as a real disk. Encrypts an entire partition or storage device such as USB flash drive or hard drive. Encrypts a partition or drive where Windows is installed (pre-boot authentication). Encryption is automatic, real-time (on-the-fly) and transparent. Parallelization and pipelining allow data to be read and written as fast as if the drive was not encrypted. Encryption can be hardware-accelerated on modern processors. Provides plausible deniability, in case an adversary forces you to reveal the password: Hidden volume (steganography) and hidden operating system. More information on documentation page\nUBOS is a new Linux distro for personal servers and IoT devices. Installing and maintaining web applications tends to take a lot of time; UBOS aims to make this much simpler.\nUBOSbox Nextcloud is a ready-to-use home server appliance that does a lot of what Dropbox and Google Calendar do, but locally on hardware controlled by the user. It enables multi-user, multi-device file sharing, group calendaring, contact management, and includes a web mail client, an RSS/news reader, a note-taking app, text and video calls, and task management, provided by the FLOSS web application platform Nextcloud and a number of Nextcloud apps. It is designed to be used as a home server without attached keyboard or monitor.\nUnhosted - also known as \u0026ldquo;serverless\u0026rdquo;, \u0026ldquo;client-side\u0026rdquo;, or \u0026ldquo;static\u0026rdquo; web apps, unhosted web apps do not send your user data to their server. Either you connect your own server at runtime, or your data stays within the browser.\nUrbit - an operating function, from Mars.\nVillage Telco is a an easy-to-use, scalable, standards-based, wireless, local, DIY, telephone company toolkit. Their mission is to making voice and data communication affordable and accessible to anyone.\nWave is a distributed, near-real-time, rich collaboration platform that allows users to work together in new and exciting ways. Wave allows for flexible modes of communication, blending chat, email and collaborative document editing in to one seamless environment.\nWebfist is a fallback for when providers don\u0026rsquo;t support WebFinger natively. It lets you do WebFinger lookups for email addresses even if the owner of the domain name isn\u0026rsquo;t playing along. WebFist works because of a judo move on an existing infrastructure: DKIM.\nYaler is a simple, open and scalable relay infrastructure for secure Web and SSH access to embedded systems located behind a firewall, NAT or mobile network router.\nZeroTier One is an open source application that creates huge distributed Ethernet networks. It makes use of supernodes, but these run the same code as ordinary nodes and end-to-end encryption protects all unicast traffic. Semi-commercial with a freemium model.\ncjdns - Encrypted networking for regular people. cjdns implements an encrypted IPv6 network using public key cryptography for address allocation and a distributed hash table for routing. This provides near zero-configuration networking without many of the security and robustness issues that regular IPv4 and IPv6 networks have.\ndn42 is a big dynamic VPN network, which employs Internet technologies (BGP, whois database, DNS, etc). Participants connect to each other using network tunnels (GRE, OpenVPN, Tinc, IPsec), and exchange routes thanks to the Border Gateway Protocol. Network addresses are assigned in the 172.22.0.0/15 range, and private AS numbers are used: see registry. See the About page for more information.\neDonkey network is a decentralized, mostly server-based, peer-to-peer file sharing network best suited to share big files among users, and to provide long term availability of files\nThe ePlug is a tiny circuit board that resides inside of \u0026rsquo;ePlug Certified\u0026rsquo; electrical outlets. Decentralized Meshnet, distributed computing, 6 gig WiFi. ISP\u0026rsquo;s, CDN\u0026rsquo;s and racks of servers, switches and wire no longer needed.\nedgenet is a peer-to-peer opportunistic network built over mobile devices (and potentially home routers). It is a concept, with many layers already build (ZeroMQ, Zyre). It uses temporary \u0026lsquo;cells\u0026rsquo; to connect devices and exchange information opportunistically. It\u0026rsquo;s suited to decentralized chat and proximity networking.\ngitsync is a git repository synchronisation and discovery tool. Its goal is to allow developers to coordinate without a central master repository.\npubsubhubbub is a simple, open, server-to-server webhook-based pubsub (publish/subscribe) protocol for any web accessible resources.\npump.io Described as \u0026ldquo;a stream server that does most of what people really want from a social network\u0026rdquo;. It\u0026rsquo;s a social stream with support for federated comunication.\nqaul.net implements a redundant, open communication principle, in which wireless-enabled computers and mobile devices can directly form a spontaneous network. Chat functions, file sharing and voice chat is possible independent of internet and cellular networks.\nStorj is an open source project actively developing a completely decentralized, secure and efficient cloud storage service that integrates a peer-to-peer protocols based on Bitcoin.\nwlan slovenija is developing technologies for easy deployment of community wireless mesh networks. The main idea is that power is in numbers so deployment should be so easy that anybody can do it, that anybody can start a new wireless mesh network and create a new community.\nElymus is browser and development stack where decentralization is at first place and which is ready to sacrafice every other good for decentralization.\nDead # Zero Bin is an open source alternative for pastebin with burn-after-read function \u0026amp; client side encryption. Source code is also available on github https://github.com/sametmax/0bin\nYaap it ! is another client-side encrypted burn-after-reading sharing service. It\u0026rsquo;s written in JavaScript and you can install it on you own server: https://github.com/SeyZ/yaapit\nAirlock A decentralized dropbox / mega upload style app. Uses a combination of Ethereum and IPFS to index and list content\nBeaker Browser an experimental browser for exploring the p2p web. The link now points at this post explaining its archival.\nCactus player Decentralized P2P Music Player - main site has gone, but linking to source in case someone wants to know how it worked.\nClearSkies is a peer-to-peer file sync program. It is inspired by BitTorrent Sync, but has an open and fully-documented protocol.\nCowbox is a hand-held standalone server, broadcasting its own network and containing web applications for coworking.\nDMOZ was a multilingual open-content directory of World Wide Web links.\nFermat.org is an framework for developing Internet of People apps.\nNymote is a set of tools and software infrastructure, created from the ground up, to provide end-users with life-long control of their networks and personal data. It starts with fundamental infrastructure to solve the problems around operating systems for the future, identity for users and devices and data-persistence across those devices. Think of it as the toolstack to recapture the original vision of a resilient, decentralised Internet.\nNightweb connects your Android device or PC to an anonymous, peer-to-peer social network. You can write posts and share photos, and your followers will retrieve them using BitTorrent running over the I2P anonymous network. It is still experimental.\nBipIO is an open source personal content and workflow automation platform. \u0026lsquo;Bips\u0026rsquo; are dynamic named graphs which are cheap to create, can auto-expire, and serve or transform public/private content across multiple protocols.\nG0Bin is a client side encrypted pastebin written in Go. The server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.\nGrand Decentral Station is a concept for a server OS that enables designers and developers to build beautiful and secure self-hosted applications for everyone.\nINDX is a decentralised Web-based Personal Data Store and app platform from the SOCIAM EPSRC project in the UK, focused about giving individuals autonomy to effectively consolidate their cloud data into personal databases they control. The platform is build out of a core of robust open source tools, including Postgres, Twisted, NodeJS, and AngularJS. The platform is released under GPLv3 on Github.\nOpenBazaar is a decentralized marketplace proof of concept. It is based off of the POC code by the darkmarket team and is now licensed under the MIT license.\nOstel is part of the Open Secure Telephony Network (OSTN) by the Guardian-Project. The goal is promoting free, open protocols, standards and software and to power end-to-end encrypted voice communications on mobile devices and desktop computers. They use standards such as SRTP, ZRTP, and SIP(over TLS). Clients are available for nearly every platform; Now offline\nSyme is an experimental project that aims at bringing more privacy and security to online communication through end-to-end encryption. Syme\u0026rsquo;s zero-knowledge key infrastructure enables persistent multiparty communication and secure key exchanges on minimally trusted servers and relays.\nTelehash a new encrypted P2P JSON-based protocol enabling developers to quickly build apps that are distributed and private (see the protocol spec)\nunSYSTEM is a collective dedicated to creating popular tools that promote privacy, independence, and integrity in contradistinction to those used for mass surveillance and suppression. Software projects include Libbitcoin, SX, and Lorea.\nAvatar is a distributed \u0026ldquo;operating system for the internet\u0026rdquo; running inside the web browser. It allows for secure messaging (think email, social networks) and distributed data storage, employing a policy of \u0026ldquo;privacy and data security by default\u0026rdquo;. Building its own encrypted P2P network, it does not rely upon any central authority. (Appears to be inactive)\nBitPhone is a mobile communications device with the features of a modern smartphone built on top of decentralized BitCoin-style proof-of-work networking.\nCoinpunk is a web application that allows anyone to run their own self-hosted Bitcoin wallet service that is accessible from your web browser anywhere in the world. It\u0026rsquo;s free, open source, and you can install it on your server right now.\nCryptAByte CryptAByte.com is a free online drop box that enables secure (encrypted) message and file sharing over the web using a public-key infrastructure. Messages and files are encrypted using a public key and can only be decrypted using the passphrase entered when your key is created. Your data is never stored in plaintext, and is impossible to decrypt without your passphrase.\nDAppStore is a fully decentralized App store focussing entirely on decentralized software. Primarily to index DApps like Bitcoin, BitTorrent etc, but also indexes projects relating to DApps, wether that be a documentary, software library or coffee shop that supports a particular DApp.\nDeadC Create a one-click expiring link (NB: Uses Google Analytics\u0026hellip;)\nDendrio is a video distribution network that leverages the peer to peer WebRTC protocol to transfer website content between browsers. This allows us to make data downloads faster for users but without any installation requirements. For website owners, we are trivial to set up, and are transparent to existing CDN setups. Our technology is geared towards streaming video and we support a multitude of different video formats and players.\nThe Enigmabox is a ready to use cjdns appliance. cjdns is a public-key crypto network protocol, the fingerprint is your IPv6 address. This means, your IP is your identity. So we can use it for various useful things, e.g. as an email address or a phone number. We will start preparing existing internet services like email or VoIP to use cjdns in this decentral manner. Our goal is to encrypt the entire internet, make crypto accessible and make secure and decentralized internet services available for the rest of us.\nFirecloud is a P2P web publishing platform in your using Persona and WebRTC to work its magic.\nGitTorrent is a peer-to-peer network of Git repositories being shared over BitTorrent.\nLemon.email is encrypted and decentralized e-mail service. It can be totally decentralized (works as a dApp) or it can work as a mail service that uses IPFS/Ethereum as a storage for previously encrypted emails. The way encryption works is that the passphrase that is used to unlock emails is not saved anywhere and therefore nobody cannot read user’s emails. Also, third party email services cannot read or decrypt lemon emails, because only notification about incoming email is sent to those services and user must go to external link to read private email.\nLighthouse is a peer to peer crowdfunding app that uses Bitcoin.\nProject Byzantium - Ad-hoc wireless mesh networking for the zombie apocalypse. The goal of Project Byzantium is to develop a communication system by which users can connect to each other and share information in the absence of convenient access to the Internet. This is done by setting up an ad-hoc wireless mesh network that offers services which replace popular websites often used for this purpose, such as Twitter and IRC.\nThe Refuge Project aims to provide a fully decentralized and opensource data platform. It is built in Erlang and includes RCouch, a static distribution of couchdb using rebar, and Coffer, a blob server.\nTavern is a distributed, anonymous, unblockable network designed to ensure that no one is silenced, censored, or cut off from the rest of the world\nTidepools is being developed within the Red Hook Mesh Network, for addressing local, social incentives for mesh use. An Open Source, Collaborative, Mobile Mapping \u0026amp; Social Hub, Reflecting Community Needs \u0026amp; Culture through Custom Apps, Time-based Maps, \u0026amp; Data Feeds.\nweborganiZm is an Ad-Free NON-indexed network for creating and sharing of the knowledges that follows these principles: Non-Profit, Reproducible, Reinforcing the Digital Commons, Grassroots.\nYounity is a \u0026ldquo;personal cloud\u0026rdquo; that lets users share their files between their devices, without uploading them to one centralised server.\nBitcoin by Mobile allows Bitcoin newcomers to quickly and easily purchase small sums of Bitcoin using their mobile phone to fund the purchase.\nBitcloud is an open source distributed cloud storage system and escrow agent based on Tahoe-LAFS that allows publishers to pay storage nodes for storing encrypted data and sharing that data with others. The decentralized nature of Bitcloud allows anyone to publish large amounts of data in a way that is free from censorship, high costs, and proprietary software. The first application for bitcloud will be WeTube, a platform for viewing and publishing videos, podcasts, ebooks, music, and other forms of media.\nCloudBank First ever POWWT (Proof of work with time) consensus algorithm crypto currency with python without fee all miners share constant reward between them.\nThe Drogulus (WIP) is a programmable peer-to-peer data store. It\u0026rsquo;s an open, federated and decentralised system where the identity of users and provenance of data is ensured by cryptographically signing digital assets.Redecentralise Video interview\nSwarm is a distributed storage platform and content distribution service, a native base layer service of the ethereum web3 stack. It uses the ethereum economy to incentivize P2P storage.\nVirtKick is your self-hosted DigitalOcean. Take cloud back to your computer, home network or a dedicated server. Manage virtual machines, Docker containers and create 1-click apps.\nBitmarkets a working decentralized marketplace based on bitcoinj and bitmessage.\nP is a small JavaScript library for creating peer-to-peer applications in browsers. It allows for transitive connections across peers which makes certain network topologies, such mesh networks,easy to establish.\nStreisand sets up a new server running L2TP/IPsec, OpenSSH, OpenVPN, Shadowsocks, Stunnel, and a Tor bridge. It also generates custom configuration instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, or fellow activists.\nBittubers - is a brand new social network for content creators and streamers. Developed by BitTube, BitTubers emphasizes free speech, fairness and unrestricted monetization across the board. This platform is the successor to bit.tube, launched in mid 2018, building upon its original peer-to-peer fundamentals with greatly improved monetization options, discoverability, interactivity and engagement features.\nD.Tube is the first crypto-decentralized video platform, built on top of the STEEM Blockchain and the IPFS peer-to-peer network.\u0026quot;\nApoapse is dedicated to advancing cybersecurity into general use across the business ecosystem. A variety of open-source solutions are offered, such as Apoapse Pro, a self-hosted collaborative messaging platform, or Apoapse Protocol, a secure message and data sharing C++ network library.\nOTRTalk Is a command line based chat application, uses BitTorrent P2P DHT Network for peer discovery and OTR (Off the Record) for secure messaging.\nQuietnet is a simple chat program using near ultrasonic frequencies. It works without Wi-Fi or Bluetooth and cannot be eavesdropped using conventional network capturing methods.\nTent is a protocol that puts users back in control. Users should control the data they create, choose who can access it, and change service providers without losing their social graph.Tent is a protocol, not a platform. Like email, anyone can build Tent apps or host Tent servers, all Tent servers can talk to each other, and there is no central authority to restrict users or developers.\narkOS is an operating system and software stack to easily host your own websites, email addresses, cloud services and more. It uses a graphical interface (called Genesis) to do all of this, with a focus on end-user experience and simple design. Presently in active development, it is currently functional on the Raspberry Pi with new services and platforms in the works.\n***\n","date":"December 16, 2023","externalUrl":null,"permalink":"/2023/12/16/alternative-internet/","section":"Blog","summary":"Alternative Internet # A collection of interesting networks and technology aiming at re-decentralizing the Internet. If you would like to help in categorising these projects, please submit a PR to this README.md file.\n","title":"Alternative Internet","type":"blog"},{"content":"According to Larry Wall, There are three great virtues of a programmer: Laziness, Impatience and Hubris\nLaziness: The quality that makes you go to great effort to reduce overall energy expenditure. It makes you write labor-saving programs that other people will find useful and document what you wrote so you don\u0026rsquo;t have to answer so many questions about it.\nImpatience: The anger you feel when the computer is being lazy. This makes you write programs that don\u0026rsquo;t just react to your needs, but actually anticipate them. Or at least pretend to.\nHubris: The quality that makes you write (and maintain) programs that other people won\u0026rsquo;t want to say bad things about.\n","date":"August 26, 2023","externalUrl":null,"permalink":"/2023/08/26/three-virtues/","section":"Blog","summary":"According to Larry Wall, There are three great virtues of a programmer: Laziness, Impatience and Hubris\nLaziness: The quality that makes you go to great effort to reduce overall energy expenditure. It makes you write labor-saving programs that other people will find useful and document what you wrote so you don’t have to answer so many questions about it.\n","title":"Three Virtues","type":"blog"},{"content":"forked from anderspitman/awesome-tunneling\nThe purpose of this list is to track and compare tunneling solutions. This is primarily targeted toward self-hosters and developers who want to do things like exposing a local webserver via a public domain name, with automatic HTTPS, even if behind a NAT or other restricted network.\nNOTE: We\u0026rsquo;re building a community around self-hosting, data ownership, and decentralization in general. Join us over at IndieBits.io.\nThe dream # I started this list because I\u0026rsquo;m looking for a simple tool/service that does the following:\nAllows me to register a domain name and automatically points the records at the server running the tunnels. Automatically sets up and manages HTTPS certificates (apex and subdomains) for the domain. Provides a client tool that tunnels HTTP/TCP connections through the server without requiring root on the client. Provides a simple GUI interface to allow me to map X domain/subdomain to Y port on Z client, and proxy all connections to that domain. So far I haven\u0026rsquo;t found a tool that does all of this. In particular, while some of them can do automatic certs through Lets\u0026rsquo;s Encrypt, none of them integrate the domain registration and DNS management.\nUPDATE 2022-09-23:\nA lot of new tools have been developed since the list started, and many tools have been submitted for addition to the list. It\u0026rsquo;s great to see so much interest in tunneling. That said, I want to make sure this remains a useful resource for not just listing all the possible options, but helping people pick one that will solve their problem. With that goal in mind, I\u0026rsquo;ve moved some of the items to a separate section at the bottom. This is dedicated to more complicated tools like overlay networks which can support tunneling and similar use cases, but aren\u0026rsquo;t focused exclusively on tunneling. Please let me know if you think something is in the wrong section.\nRecommendations # For most people, I currently recommend CloudFlare Tunnel. Although it\u0026rsquo;s closed source, this is the production-quality service that gets the closest to achieving the dream. It\u0026rsquo;s also a loss-leader for CloudFlare\u0026rsquo;s other products which means they can offer it for free. Note that it\u0026rsquo;s technically against their ToS to host anything other than basic HTML pages on the free plan, including photos, audio, and video. In practice I\u0026rsquo;m not aware of many instances of this being enforced. If you want to self-host, there are many options. For something production ready frp is probably what you want. If you\u0026rsquo;re a developer, I\u0026rsquo;d recommend starting with my own SirTunnel project and modifying it for your needs. For non-developers and those wanting more of a GUI experience, I created boringproxy. It\u0026rsquo;s my take on a comprehensive tunnel proxy solution. It\u0026rsquo;s in beta but currently solves almost everything I want. Once the server is running this is a very easy tool to use and has some nice features. Open source (at least with a reasonably permissive license) # Tunnelmole - Open source and optionally self hostable. The client and server are both written in TypeScript. Telebit - Written in JS. Code. tunnel.pyjam.as - No custom client; uses WireGuard directly instead. Written in Python. source code SSH-J.com - Public SSH Jump \u0026amp; Port Forwarding server. No software, no registration, just an anonymous SSH server for forwarding. Users are encouraged to use it for SSH exposure only, to preserve end-to-end encryption. No public ports, only in-SSH connectivity. Run ssh ssh-j.com and it will display usage information. frp - Comprehensive open alternative to ngrok. Supports UDP, and has a P2P mode. Supports multiplexing over TCP (single connection or pool), QUIC, and KCP. ngrok 1.0 - Original version of ngrok. No longer developed in favor of the commercial 2.0 version. localtunnel - Written in node. Popular suggestion. sshuttle - Open source project originally from one of the founders of Tailscale. Server doesn\u0026rsquo;t require root; client does. Explicitly designed to avoid TCP-over-TCP issues. chisel - SSH under the hood, but still uses a custom client binary. Supports auto certs from LetsEncrypt. Written in Go. bore - Minimal tunneling solution. MIT Licensed. Written in Rust. rathole - Similar to frp, including the config format, but with improved performance. Low resource consumption. Hot reload. Written in Rust. expose - ngrok alternative written in PHP. sish - Open source ngrok/serveo alternative. SSH-based but uses a custom server written in Go. Supports WebSocket tunneling. go-http-tunnel - Uses a single HTTP/2 connection for muxing. Need to manually generate certs for server and clients. pgrok/pgrok - A multi-tenant HTTP reverse tunnel solution through SSH remote port forwarding. tunnelto - Open source (MIT). Written in Rust. wstunnel - Proxies over WebSockets. Focus on proxying from behind networks that block certain protocols. Written in Haskell with executables provided. boringproxy - Designed to be very easy to use. No config files. Clients can be remote-controlled through a simple WebUI and/or REST API on the server. zrok - Aims for effortless sharing both publicly and privately. Supports multiple types of resources, including HTTP endpoints and files. Built on OpenZiti (see overlay section below). Apache 2 License. Written in Go. PageKite - Comprehensive open source solution with hosted options. SirTunnel - Minimal, self-hosted, 0-config alternative to ngrok. Similar to sish but leverages Caddy+OpenSSH rather than custom server code. jprq - Proxies over WebSockets. Written in Python. Crowbar - Tunnels TCP connections over HTTP GET and POST requests. tunneller - Open source. Written in Go. tunnel - This one is a Golang library, not a program you can just run. However, it looks easy to use for creating custom solutions. Uses a single TCP socket, and yamux for multiplexing. jerson/pgrok - Fork of ngrok 1.0, with more recent commits. Archived. onionpipe - Onion addresses for anything. onionpipe forwards ports on the local host to remote Onion addresses as Tor hidden services and vice-versa. Written in Go. docker-tunnel - Simple Docker-based nginx+SSH solution. hypertunnel - Public server appears to be down. MIT Licensed. Written in JavaScript. remotemoe - SSH-based, with custom golang server. Does some cool unique things. Instead of just plain tunnels, it drops you into a basic CLI UI that offers several useful commands interactively, such as adding a custom hostname. Also allows end-to-end encryption for both HTTPS and upstream SSH. Doesn\u0026rsquo;t appear to offer non-e2e HTTPS, ie no auto Let\u0026rsquo;s Encrypt support. tunwg - Wireguard in userspace based. Offers end to end encrypted TLS with LetsEncrypt certificates generated automatically by clients, with support for custom domains. Server can be self-hosted and doesn\u0026rsquo;t require storing any data. holepunch - Has nice hosted solution. Uses SSH for muxing. StaqLab Tunnel - SSH-based. Client is open source. Server doesn\u0026rsquo;t appear to be. tnnlink - SSH-based. Golang. Not maintained. ngtor - Easily expose local services via Tor. Written in Java. Commercial/Closed source # ngrok 2.0 - Probably the gold standard and most popular. Closed source. Lots of features, including TLS and TCP tunnels. Doesn\u0026rsquo;t require root to run client. CloudFlare Tunnel - Excellent free option. Nicely integrates tunneling with the rest of Cloudflare\u0026rsquo;s products, which include DNS and auto HTTPS. Client source code is Apache 2.0 licensed and written in Golang. Beeceptor - Goes beyond tunneling. Rest API mocking and intercepting tool. You can view the live requests and send mocked response. Written in JavaScript. Pinggy - SSH based single command HTTPS / TCP / TLS tunnels, no downloads required. Rich terminal interface and a web debugger. Free tier - 60 min timeout. Paid tier allows custom domains with built-in Let\u0026rsquo;s Encrypt certificates. Loophole - Offers end-to-end TLS encryption with the client automatically getting certs from Let\u0026rsquo;s Encrypt. QR codes for URL sharing. Client is open source. Can serve a local directory over WebDAV. MIT License. Written in Go. localhost.run - Simple hosted SSH option. Supports custom domains for a cost. Packetriot - Comprehensive alternative to ngrok. HTTP Inspector, Let\u0026rsquo;s Encrypt integration, doesn\u0026rsquo;t require root and Linux repos for apt, yum and dnf. Enterprise licenses and self-hosted option. Hoppy - WireGuard-based. Provides static IPv4 and IPv6 addresses for your machines, which is a simple and useful level of abstraction. Targeted towards self-hosters and people behind NATs. gw.run - Specifically focusing on securely exposing internal web apps to a group of people; not for publicly facing apps. Share access via email address then allow users to log in with common login providers like Google. SSHReach.me - Paid SSH-based option. Uses a simple python script. KubeSail - Company offering tunneling, dynamic DNS, and other services for self-hosting with Kubernetes. inlets - Used to be open source; now focused on a polished commercial offering. Designed to work well with Kubernetes. LocalToNet - Supports UDP. Free for a single tunnel. Paid supports custom domains. LocalXpose - Looks like a solid paid option, with a limited free tier. Overlay networks and other advanced tools # Teleport - Comprehensive control plane tool, but also supports accessing apps behind NATs. Written in Go. Nebula - Peer-to-peer overlay network. Developed and used internally by Slack. Similar to Tailscale but completely open source. Doesn\u0026rsquo;t use WireGuard. Written in Go. ZeroTier - Layer 2 overlay network. They take decentralization seriously, and like to say \u0026ldquo;decentralize until it hurts, then centralize until it works.\u0026rdquo; Written in C++. headscale - Open source implementation of Tailscale control server. Can be used with Tailscale\u0026rsquo;s official open source client. Written in Go. Tailscale - Built on WireGuard. Easy to use. Doesn\u0026rsquo;t include an HTTPS proxy on the public side, but could be combined with nginx/Caddy/etc. Control server is closed source. Client code available with a BSD3 license + separate patents file. Netmaker - Layer 3 peer-to-peer overlay network and private DNS. Similar to Tailscale, but with a self-hosted server/admin UI. Runs kernel WireGuard so very fast. Not FOSS, but source is available. Written in Go. NetBird - NetBird is an open-source VPN management platform built on top of WireGuard® making it easy to create secure private networks for your organization or home. innernet - Similar to Netmaker, nebula, and Tailscale. Takes advantage of existing networking concepts like CIDRs and the security properties of WireGuard to turn your computer\u0026rsquo;s basic IP networking into more powerful ACL primitives. Written in Rust. Firezone - Layer 3/4 overlay network. Runs on kernel WireGuard® and supports SSO using generic OIDC/SAML connectors. Distributed under apache 2.0 license and written in Elixir/Rust. Pritunl - Seems quite comprehensive and complicated. OpenVPN, WireGuard, and IPSec support. Tinc - Tinc is a peer-to-peer VPN daemon that supports VPNs with an arbitrary number of nodes. Instead of configuring tunnels, you give tinc the location and public key of a few nodes in the VPN. After making the initial connections to those nodes, tinc will learn about all other nodes on the VPN, and will make connections automatically. When direct connections are not possible, data will be forwarded by intermediate nodes. Written in C. OpenZiti - - Overlay network. The goal of OpenZiti is to extend zero trust all the way into your application, not just to your network. Apache 2.0 license. Written in Go. Ngrok-operator - Ngrok but integrated with Kubernetes, allows developers on private kubernetes to easily access their services via Ngrok. Reference # Roll your own Ngrok with Nginx, Letsencrypt, and SSH reverse tunnelling Poor man\u0026rsquo;s ngrok with tcp proxy and ssh reverse tunnel How I built Ngrok Alternative (jprq) Great SO answer by AJ ONeal about how these things work Talk by AJ ONeal about tunneling tech ngrok alternative: localtunnel + Caddy + Lets Encrypt Discussions # HN comment about needing Namecheap + CloudFlare + ngrok. ","date":"June 25, 2023","externalUrl":null,"permalink":"/2023/06/25/awesome-tunneling/","section":"Blog","summary":"forked from anderspitman/awesome-tunneling\nThe purpose of this list is to track and compare tunneling solutions. This is primarily targeted toward self-hosters and developers who want to do things like exposing a local webserver via a public domain name, with automatic HTTPS, even if behind a NAT or other restricted network.\n","title":"Awesome tunneling","type":"blog"},{"content":" Dark Web Links v3 # New v3 Hidden Services # V3 Onion Hidden Services Links And Deprecation Of Old V2 Onion Sites The short version 2 onion services will deprecated, after 15 years the Tor Project is going to switch to the new and more secore, and also longer version 3 .onion links. Make sure to have a site like this repo bookmarked where you can find the new v3 dark web links. The following list are the first sites which are available as a v3 .onion hidden service, when more sites switch to the new protocol, we will update the homepage with a bigger list of up to date links. Recommendet to use Tails as a live usb\nHidden Wiki Editor’s picks # Some of the most interesting sites on The Hidden Wiki and the dark web\n[1] Mixabit – Bitcoin mixer # http://hqfld5smkr4b4xrjcco7zotvoqhuuoehjdvoin755iytmpk4sm7cbwad.onion/ [2] OnionLinks – .Onion link directory. # http://jaz45aabn5vkemy4jkg4mi4syheisqn2wn2n4fsuitpccdackjwxplad.onion/ http://s4k4ceiapwwgcm3mkb6e4diqecpo7kvdnfr5gg7sph7jjppqkvwwqtyd.onion/ [3] Bitpharma – Biggest european .onion drug store # http://guzjgkpodzshso2nohspxijzk5jgoaxzqioa7vzy6qdmwpz3hq4mwfid.onion/ [4] DarkWebHackers – Dark Web Hackers for hire. # http://zkj7mzglnrbvu3elepazau7ol26cmq7acryvsqxvh4sreoydhzin7zid.onion/ http://prjd5pmbug2cnfs67s3y65ods27vamswdaw2lnwf45ys3pjl55h2gwqd.onion/ [5] Cardshop – USA CVV KNOWN BALANCE \u0026amp; Worldwide CC \u0026amp; CVV . # http://f6wqhy6ii7metm45m4mg6yg76yytik5kxe6h7sestyvm6gnlcw3n4qad.onion/ http://s57divisqlcjtsyutxjz2ww77vlbwpxgodtijcsrgsuts4js5hnxkhqd.onion/ [ Introduction Points ] # Some sites with good .onion lists\nThe Hidden Wiki # https://thehiddenwiki.com/ Dark Web Links # https://darkweblinks.com/ The Original Hidden Wiki – The oldest hidden wiki # http://zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion/wiki/index.php/Main_Page http://6nhmgdpnyoljh5uzr5kwlatx2u3diou4ldeommfxjz3wkhalzgjqxzqd.onion/ The Hidden Wiki – New Hidden Wiki 2019 # http://paavlaytlfsqyvkg3yqj7hflfg5jw2jdg2fgkza5ruf6lplwseeqtvyd.onion/ Another Hidden Wiki Another hidden wiki like link collection. # http://2jwcnprqbugvyi6ok2h2h7u26qc6j5wxm7feh3znlh2qu3h6hjld4kyd.onion/ The Dark Web Pug - Pug’s Ultimate Dark Web Guide . # http://jgwe5cjqdbyvudjqskaajbfibfewew4pndx52dye7ug3mt3jimmktkid.onion/ Torlinks - TorLinks is a moderated replacement for The Hidden Wiki. # http://torlinksge6enmcyyuxjpjkoouw4oorgdgeo7ftnq3zodj7g2zxi3kyd.onion/ The Longest Onion Index # http://jptvwdeyknkv6oiwjtr2kxzehfnmcujl7rf7vytaikmwlvze773uiyyd.onion/ Wiki Links | Tor .onion urls directories # http://vykenniek4sagugiayj3z32rpyrinoadduprjtdy4wharue6cz7zudid.onion/ DuckDuckGo – A Hidden Service that searches the clearnet. # https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ Link Dir Onion # http://lnbpcgk4mem5vvvwilqsk7yb5i2bgtjphnvq37kajdycu56i5omt4cqd.onion/ Dark Net 2020 # http://i66lrq4yi4gm6afdnnbqj2w46zrgsnbnvdr3hfdmrvfryk3luempd5ad.onion/ Dark Net Tor # http://c3b24jvpheh5twkgyccwrxanl67wnir5amkgoxg5ex4dq4ltmaopn7id.onion/ Dark Web 2020 # http://ygzg6qzkup7xfcq2vl3yogcs6jvrupf5qxujeevmqxbcair6vptfimqd.onion/ Dark Web 2021 # http://dwltorbltw3tdjskxn23j2mwz2f4q25j4ninl5bdvttiy4xb6cqzikid.onion/ Deeb Web Links # http://z5zmar3i6yf4ds6nbbl3e4pxwptvotrrvlixmbtxsaw5c6vba5kcj3qd.onion/ Tor Onion Urls Dir # http://d6q4gw2ahmctlez3jvxvycubmwbsqownjerr7yqlaunmmvmk2te4ktqd.onion/ Tor Web # http://ivsrrl2knkwb7vjroibxbq5yqvmwn3hixmjzht2li7yl3lwa636vt4qd.onion/ Links Tor # http://2orrxnndqeoygi3a7wivy4odtc5ufq224rggvbedbpbg7yfkcgbs3wid.onion/ Hidden Wiki Tor # http://skhz5s6z5dpjz3flxudesptuc53lsfykjjzk6mwxabssrgqwz6k7cyid.onion/ Tor Catalog # http://oj5l6if6aq4q2yupnbzagh2bndgunx4urcrgobietlxtesjc345btpyd.onion/ Tor Wiki # - http://ub6bby4x2djuerj4i2cbxnzmef566zgb2f7x6iqnu6dzwznxw2tscmqd.onion/\nWiki Tor # http://7zikb4l6oyuuf4gfslqtvi2haazbknxcu5stpn6pnjrwnscbo72e4mid.onion/ DarkDir # http://l7vh56hxm3t4tzy75nxzducszppgi45fyx2wy6chujxb2rhy7o5r62ad.onion/ Trust Wiki # http://wiki6dtqpuvwtc5hopuj33eeavwa6sik7sy57cor35chkx5nrbmmolqd.onion/ [ Search Engines ] # Search on dark web\nAhmia.fi - Clearnet search engine for Tor Hidden Services. # http://juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion/ DuckDuckGo Search Engine # http://duckgoknglkhx43vwhlcycmzep3rnjkrckzfjdx5iorbhdqucvhsrdad.onion/ http://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ Torch - Tor Search Engine. Claims to index around 1.1 Million pages. # http://xmh57jrknzkhv6y3ls3ubitzfqnkrwxhopf5aygthi7d6rplyvk3noyd.onion/cgi-bin/omega/omega Sentor # http://e27slbec2ykiyo26gfuovaehuzsydffbit5nlxid53kigw3pvz6uosqd.onion/ Demon # http://srcdemonm74icqjvejew6fprssuolyoc2usjdwflevbdpqoetw4x3ead.onion/ FindTor # http://findtorroveq5wdnipkaojfpqulxnkhblymc7aramjzajcvpptd4rjqd.onion/ TorNode # http://e6wzjohnxejirqa2sgridvymv2jxhrqdfuyxvoxp3xpqh7kr4kbwpwad.onion/ OnionLand Search # http://3bbad7fauom4d6sgppalyqddsqbf5u5p56b5k5uk2zxsy3d6ey2jobad.onion/ tordex # http://tordexu73joywapk2txdr54jed4imqledpcvcuf75qsas2gwdgksvnyd.onion/ MetaGer – German Search # http://metagerv65pwclop2rsfzg4jwowpavpwd6grhhlvdgsswvo6ii4akgyd.onion/ [ Financial Services ] # Currencies, banks, money markets, clearing houses, exchangers\nAccMarket – Premium Paypal, Ebay and bank accounts. # http://z7s2w5vruxbp2wzts3snxs24yggbtdcdj5kp2f6z5gimouyh3wiaf7id.onion/ http://55niksbd22qqaedkw36qw4cpofmbxdtbwonxam7ov2ga62zqbhgty3yd.onion/ Dark Mixer – Anonymous bitcoin mixer # http://y22arit74fqnnc2pbieq3wqqvkfub6gnlegx3cl6thclos4f7ya7rvad.onion/ Viring Bitcoins – Buy freshly mined clean bitcoins . # http://ovai7wvp4yj6jl3wbzihypbq657vpape7lggrlah4pl34utwjrpetwid.onion/ ccPal – PayPals, Ebays, CCs and more # http://xykxv6fmblogxgmzjm5wt6akdhm4wewiarjzcngev4tupgjlyugmc7qd.onion/ http://gch3dyxo5zuqbrrtd64zlvzwxden4jkikyqk3ikjhggqzoxixcmq2fid.onion/ Webuybitcoins – Sell your Bitcoins for Cash, Paypal, WU etc # http://wk3mtlvp2ej64nuytqm3mjrm6gpulix623abum6ewp64444oreysz7qd.onion/ - http://2bcbla34hrkp6shb4myzb2wntl2fxdbrroc2t4t7c3shckvhvk4fw6qd.onion/ HQER – High Quality Euro bill counterfeits # http://odahix2ysdtqp4lgak4h2rsnd35dmkdx3ndzjbdhk3jiviqkljfjmnqd.onion/ http://sa3ut5u4qdw7yiunpdieypzsrdylhbtafyhymd75syjcn46yb5ulttid.onion/ Counterfeit USD – High Quality USD counterfeits # http://qazkxav4zzmt5xwfw6my362jdwhzrcafz7qpd5kugfgx7z7il5lyb6ad.onion/ http://pliy7tiq6jf77gkg2sezlx7ljynkysxq6ptmfbfcdyrvihp7i6imyyqd.onion/ EasyCoin – Bitcoin Wallet and Mixer # http://mp3fpv6xbrwka4skqliiifoizghfbjy5uyu77wwnfruwub5s4hly2oid.onion/ Onionwallet – Anonymous and secure bitcoin wallet and mixer # http://p2qzxkca42e3wccvqgby7jrcbzlf6g7pnkvybnau4szl5ykdydzmvbid.onion/ Buy or Sell Bitcoins Anonymous # http://2jopbxfi2mrw6pfpmufm7smacrgniglr7a4raaila3kwlhlumflxfxad.onion/nojs/ Anonymixer # http://btcmixer2e3pkn64eb5m65un5nypat4mje27er4ymltzshkmujmxlmyd.onion/ Antinalysis # http://pdcdvggsz5vhzbtxqn2rh27qovzga4pnrygya4ossewu64dqh2tvhsyd.onion/ Bisq Wiki # http://s3p666he6q6djb6u3ekjdkmoyd77w63zq6gqf6sde54yg6bdfqukz2qd.onion/ Bitcoin Core # http://6hasakffvppilxgehrswmffqurlcjjjhd76jgvaqmsg6ul25s7t3rzyd.onion/ Blender.io # http://blenderiopnzbuvtva6d2ddiedrbf6fbekh5axomzho6wrulowcludad.onion/ Coinb.in # http://coinbin3ravkwb24f7rmxx6w3snkjw45jhs5lxbh3yfeg3vpt6janwqd.onion/ Feather # http://featherdvtpi7ckdbkb2yxjfwx3oyvr3xjz3oo4rszylfzjdg6pbm3id.onion/ Monero # http://monerotoruzizulg5ttgat2emf4d6fbmiea25detrmmy7erypseyteyd.onion/ Kilos | Darknet Market # http://mlyusr6htlxsyc7t2f4z53wdxh3win7q3qpxcrbam6jf3dmua7tnzuyd.onion/search Majestic Bank # https://majestictfvnfjgo5hqvmuzynak4kjl5tjs3j5zdabawe6n2aaebldad.onion/ Wasabi Wallet # http://wasabiukrxmkdgve5kynjztuovbg43uxcbcxn6y2okcrsg7gb6jdmbad.onion/ Xchange.me # http://aa7oyok6dxgyedeteldaumqjernm5ai7dnpqayy3p4q7solc6dxi5vad.onion/ Dark Mining # http://jbtb75gqlr57qurikzy2bxxjftzkmanynesmoxbzzcp7qf5t46u7ekqd.onion/ http://sazyr2ntihjqpjtruxbn2z7kingj6hfgysiy5lzgo2aqduqpa3gfgmyd.onion/ Bitcoin Investment Trust # http://jhi4v5rjly75ggha26cu2eeyfhwvgbde4w6d75vepwxt2zht5sqfhuqd.onion/ http://2ezyofc26j73hv3xxvsrnbc23dqxhgxqtk5ogcc7y6j5t6rlqquvhzid.onion/ 21 Million Club # - http://million5utxgrxru4rqmjwn7jji6bf44jkdqn3xyav6md5ebwy5l2ryd.onion/\nThe Escrow # http://escrow4rfs3z34nvd5bjqmtqz6ohsngt2ntuw3aqp6gwavr7dfl4wuad.onion/ [ Commercial Services ] # Mobile Store – Best unlocked cell phones vendor # http://rxmyl3izgquew65nicavsk6loyyblztng6puq42firpvbe32sefvnbad.onion/ http://ez37hmhem2gh3ixctfeaqn7kylal2vyjqsedkzhu4ebkcgikrigr5gid.onion/ Kamagra 4 Bitcoin – Like Viagra but cheaper # http://vhlehwexxmbnvecbmsk4ormttdvhlhbnyabai4cithvizzaduf3gmayd.onion/ http://bepig5bcjdhtlwpgeh3w42hffftcqmg7b77vzu7ponty52kiey5ec4ad.onion/ OnionIdentityServices – Fake passports and ID cards for bitcoin # http://ymvhtqya23wqpez63gyc3ke4svju3mqsby2awnhd3bk2e65izt7baqad.onion/ http://endtovmbc5vokdpnxrhajcwgkfbkfz4wbyhbj6ueisai4prtvencheyd.onion/ UkGunsAndAmmo – Uk Guns and Ammo Store # http://k6m3fagp4w4wspmdt23fldnwrmknse74gmxosswvaxf3ciasficpenad.onion/ http://onili244aue7jkvzn2bgaszcb7nznkpyihdhh7evflp3iskfq7vhlzid.onion/ USfakeIDs – US fake ID store # http://lqcjo7esbfog5t4r4gyy7jurpzf6cavpfmc4vkal4k2g4ie66ao5mryd.onion/ http://7wsvq2aw5ypduujgcn2zauq7sor2kqrqidguwwtersivfa6xcmdtaayd.onion/ EuroGuns – Your #1 european arms dealer. # http://t43fsf65omvf7grt46wlt2eo5jbj3hafyvbdb7jtr2biyre5v24pebad.onion/ http://hyjgsnkanan2wsrksd53na4xigtxhlz57estwqtptzhpa53rxz53pqad.onion/ Apples4Bitcoin – Iphones, Ipads and more for bitcoin # http://okayd5ljzdv4gzrtiqlhtzjbflymfny2bxc2eacej3tamu2nyka7bxad.onion/ http://awsvrc7occzj2yeyqevyrw7ji5ejuyofhfomidhh5qnuxpvwsucno7id.onion/ UKpassports – real UK passports # http://3bp7szl6ehbrnitmbyxzvcm3ieu7ba2kys64oecf4g2b65mcgbafzgqd.onion/ http://wosc4noitfscyywccasl3c4yu3lftpl2adxuvprp6sbg4fud6mkrwqqd.onion/ USAcitizenship – become a citizen of the USA # http://gd5x24pjoan2pddc2fs6jlmnqbawq562d2qyk6ym4peu5ihzy6gd4jad.onion/ http://pz5uprzhnzeotviraa2fogkua5nlnmu75pbnnqu4fnwgfffldwxog7ad.onion/ Rent-A-Hacker – Hire a hacker for Bitcoin # http://kq4okz5kf4xosbsnvdr45uukjhbm4oameb6k6agjjsydycvflcewl4qd.onion/ http://jn6weomv6klvnwdwcgu55miabpwklsmmyaf5qrkt4miif4shrqmvdhqd.onion/ TorShops - Create your own .onion store # http://uescqfrcztbhb6tmhdlbejrjfwgtpckcoiwmwq5bfq5hhkwfioan7qad.onion/ BlackMart # http://blackma6xtzkajcy2eahws4q65ayhnsa6kghu6oa6sci2ul47fq66jqd.onion/ Caribbean Cards # http://caribcc5jik7maeqfit7h34af7ntatggbmlfhyxjnqnrhij7gjt5vtid.onion/ Cardzilla # http://cardzilevs4j4nj6uswfwf35oxnp64yrrtazjgap2w3vgoz2pwkp6sqd.onion/ [ Drugs ] # DCdutchconnectionUK – The dutch connection for the UK # http://wbz2lrxhw4dd7h5t2wnoczmcz5snjpym4pr7dzjmah4vi6yywn37bdyd.onion/ DrChronic – Weed straight from the source # http://iwggpyxn6qv3b2twpwtyhi2sfvgnby2albbcotcysd5f7obrlwbdbkyd.onion/ TomAndJerry – Cocaine, Heroin, MDMA and LSD from NL # http://rfyb5tlhiqtiavwhikdlvb3fumxgqwtg2naanxtiqibidqlox5vispqd.onion/ 420prime – Cannabis in dispensary quality from the UK # http://ajlu6mrc7lwulwakojrgvvtarotvkvxqosb4psxljgobjhureve4kdqd.onion/ EuCanna – First Class Cannabis # http://n6qisfgjauj365pxccpr5vizmtb5iavqaug7m7e4ewkxuygk5iim6yyd.onion/ Smokeables – Finest organic cannabis from the USA # - http://kl4gp72mdxp3uelicjjslqnpomqfr5cbdd3wzo5klo3rjlqjtzhaymqd.onion/ CannabisUK – UK wholesale cannabis supplier # http://7mejofwihleuugda5kfnr7tupvfbaqntjqnfxc4hwmozlcmj2cey3hqd.onion/ Brainmagic – Best Darkweb psychedelics # http://2ln3x7ru6psileh7il7jot2ufhol4o7nd54z663xonnnmmku4dgkx3ad.onion/ NLGrowers – Coffee Shop grade Cannabis from the netherlands # http://usmost4cbpesx552s2s4ti3c4nk2xgiu763vhcs3b4uc4ppp3zwnscyd.onion/ Peoples Drug Store – The Darkwebs best Drug supplier! # http://xf2gry25d3tyxkiu2xlvczd3q7jl6yyhtpodevjugnxia2u665asozad.onion/ DeDope – German Weed Store # http://sga5n7zx6qjty7uwvkxpwstyoh73shst6mx3okouv53uks7ks47msayd.onion/ Psy Shop – Drugs Market # http://psyshopshweetovp4em654waimmcjsf7eqifwe2d4qhnluk2b24r6dqd.onion/ Drugs # http://ofhusuznhfnmtli3l6r3xizo27zoymka77dzehkeib56fhuxrcloy2id.onion/ Store Cocaine # http://bnkgnccepweowy5oqxuop2w576rdlyerqtfi2qh3slxrqh4towrlcead.onion/ Cannabis # http://hpcphv5q3lhiebh6c765lslihne4tn6ui5dnd636eo2ic3ytv7c72qid.onion/ Shop LSD # http://m5cdgczbmmpidmaa7jozopb4bd5g27lezdwymnqeoiwqsc6wf5ekuhad.onion/ Market Ecstasy # http://6ewotpaeih7g6gphvesr5td3p4fqtniwzhlxfjszemvbi7zg75ceyzid.onion/ [ Chans ] # 8Chan – Successor of 4chan # http://4usoivrpy52lmc4mgn2h34cmfiltslesthr56yttv2pxudd3dapqciyd.onion/ Nanochan – Another good chan # http://nanochanqzaytwlydykbg5nxkgyjxk3zsrctxuoxdmbx5jbh2ydyprid.onion/ Picochan – Similar to nanochan # http://picochanwvqfa2xsrfzlul4x4aqtog2eljll5qnj5iagpbhx2vmfqnid.onion/ 9chan # http://ninechnjd5aaxfbcsszlbr4inp7qjsficep4hiffh4jbzovpt2ok3cad.onion/ zzzchan # http://crghlabr45r5pqkgnbgehywk5nxutdks5iss7tabyux5psikqqjirryd.onion/index.html NeinChan # http://tdsrvhos656xypxsqtkqmiwefuvlyqmnvk5faoo23oh2m4xqg4gr47ad.onion/ Endchan – Not the end of the world # http://enxx3byspwsdo446jujc52ucy2pf5urdbhqw3kbsfhlfjwmbpj5smdad.onion/ [ Privacy Services ] # Riseup – Email and more # http://vww6ybal4bd7szmgncyruucpgfkqahzddi37ktceo3ah7ngmcopnpyyd.onion/ SystemLI – Hidden Service of systemli.org # http://7sk2kov2xwx6cbc32phynrifegg6pklmzs7luwcggtzrnlsolxxuyfyd.onion/en/index.html Cryptostorm – Good VPN provider # http://stormwayszuh4juycoy4kwoww5gvcu2c4tdtpkup667pdwe4qenzwayd.onion/ Fake ID Generator - Fake Identity Name, SSN, Driver\u0026rsquo;s License, and Credit Card Numbers Generator. # http://elfqv3zjfegus3bgg5d7pv62eqght4h6sl6yjjhe7kjpi2s56bzgk2yd.onion/ BrowsInfo - Check your anonymity and browser traceability. # http://elfqv3zjfegus3bgg5d7pv62eqght4h6sl6yjjhe7kjpi2s56bzgk2yd.onion/binfo_check_anonymity.php [ Email Providers ] # Cock.li – A good email provider # http://rurcblzhmdk22kttfkel2zduhyu3r6to7knyc7wiorzrx5gw4c3lftad.onion/ http://xdkriz6cn2avvcr2vks5lvvtmfojz2ohjzj4fhyuka55mvljeso2ztqd.onion/ Elude Mail – Elude.in hidden service # http://eludemailxhnqzfmxehy3bk5guyhlxbunfyhkcksv4gvx6d3wcf6smad.onion/ http://oq7t5ihk4qew5t5s4zghicigokh2ktt575amirsbnilmyawpme6xmyyd.onion/ Ctemplar – Armored Email # http://ctemplarpizuduxk3fkwrieizstx33kg5chlvrh37nz73pv5smsvl6ad.onion/ Mail2Tor@onion # http://mail2torjgmxgexntbrmhvgluavhj7ouul5yar6ylbvjkxwqf6ixkwyd.onion/ ProtonMail # https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/ http://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/ Alt Address # http://tp7mtouwvggdlm73vimqkuq7727a4ebrv4vf4cnk6lfg4fatxa6p2ryd.onion/ TorBox # http://torbox36ijlcevujx7mjb4oiusvwgvmue7jfn2cvutwa6kl6to3uyqad.onion/ adunanza OnionMail Server # http://j3bv7g27oramhbxxuv6gl3dcyfmf44qnvju3offdyrap7hurfprq74qd.onion/ [ Onion Hosting / Domain Services ] # Freedom Hosting Reloaded # http://fhostingineiwjg6cppciac2bemu42nwsupvvisihnczinok362qfrqd.onion/ SporeStack # http://spore64i5sofqlfz5gq2ju4msgzojjwifls7rok2cti624zyq3fcelad.onion/ Ablative Hosting # http://hzwjmjimhr7bdmfv2doll4upibt5ojjmpo3pbp5ctwcg37n3hyk7qzid.onion/ Njalla # http://njallalafimoej5i4eg7vlnqjvmb6zhdh27qxcatdn647jtwwwui3nad.onion/ [ Blogs and Personal Sites ] # qorg11 – qord11.net mirror # http://lainwir3s4y5r7mqm3kurzpljyf77vty2hrrfkps6wm4nnnqzest4lqd.onion/ CourseEnigma – Course Enigma Blog # http://cgjzkysxa4ru5rhrtr6rafckhexbisbtxwg2fg743cjumioysmirhdad.onion/ Kill9 – Kill9 Blog # http://killnod2s77o3axkktdu52aqmmy4acisz2gicbhjm4xbvxa2zfftteyd.onion/ MayVaneDayStudios – May Vane Day Studios # http://meynethaffeecapsvfphrcnfrx44w2nskgls2juwitibvqctk2plvhqd.onion/ ShadowWiki – Shadow Wiki Blog # http://zsxjtsgzborzdllyp64c6pwnjz5eic76bsksbxzqefzogwcydnkjy3yd.onion/index.xhtml PsychonauticsWIKI # http://vvedndyt433kopnhv6vejxnut54y5752vpxshjaqmj7ftwiu6quiv2ad.onion/ GoBeyond – GoBeyond Blog # http://potatoynwcg34xyodol6p6hvi5e4xelxdeowsl5t2daxywepub32y7yd.onion/ 0ut3r Space # http://reycdxyc24gf7jrnwutzdn3smmweizedy7uojsa7ols6sflwu25ijoyd.onion/index.html S-Config # http://xjfbpuj56rdazx4iolylxplbvyft2onuerjeimlcqwaihp3s6r4xebqd.onion/ The Secret Story Archive # http://tssa3yo5xfkcn4razcnmdhw5uxshx6zwzngwizpyf7phvea3gccrqbad.onion/ RansomeXX # http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/ [ File Sharing ] # BlackCloud # http://bcloudwenjxgcxjh6uheyt72a5isimzgg4kv5u74jb2s22y3hzpwh6id.onion/ ZeroBin # http://zerobinftagjpeeebbvyzjcqyjpmjvynj5qlexwyxe7l3vqejxnqv5qd.onion/ TorPaste # http://torpastezr7464pevuvdjisbvaf4yqi4n7sgz7lkwgqwxznwy5duj4ad.onion/ [ Hacking ] # Defcon – Official Defcon Site # http://g7ejphhubv5idbbu3hb3wawrs5adw7tkx7yjabnf65xtzztgg4hcsqqd.onion/ RelateList # http://relateoak2hkvdty6ldp7x67hys7pzaeax3hwhidbqkjzva3223jpxqd.onion/ Hacker Game # http://blackhost7pws76u6vohksdahnm6adf7riukgcmahrwt43wv2drvyxid.onion/ Arvin Club # http://3kp6j22pz3zkv76yutctosa6djpj4yib2icvdqxucdaxxedumhqicpad.onion CL0P^_- LEAKS # http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion Cuba Ransomware # http://cuba4ikm4jakjgmkezytyawtdgr2xymvy6nvzgw5cglswg3si76icnqd.onion HiveLeaks # http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion Ragnar_Locker Leaks site # http://rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion LockBit # http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion [ News Sites ] # ProPublica – ProPublica News # http://p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion/ DarkNetLive – Dark Web News # http://darkzzx4avcsuofgfez5zq75cqc4mprjvfqywo45dfcaxrwqg6qrlfid.onion/ BBC # https://www.bbcweb3hytmzhn5d532owbu6oqadra5z3ar726vq5kgwwn6aucdccrad.onion/ Daily Stormer # http://stormer5v52vjsw66jmds7ndeecudq444woadhzr2plxlaayexnh6eqd.onion The Onion Web # http://onionwsoiu53xre32jwve7euacadvhprq2jytfttb55hrbo3execodad.onion/ VDARE.com # http://f2vfjp3jc37gxgn4hum4uf2bhi2w3kp4jbzdwegrn6bvtezbhminobid.onion/ The Guardian | SecureDrop # http://xp44cagis447k3lpb4wwhcqukix6cgqokbuys24vmxmbzmaq2gjvc2yd.onion/ AfriLEAKS # http://f3mryj3e2uw2zrv3zv6up6maqosgzn27frz7xodvpl7pkestoyigtkad.onion/ The Intercept # http://27m3p2uv7igmj6kvd4ql3cct5h3sdwrsajovkkndeufumzyfhlfev4qd.onion/ CONTI.News # http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion News # http://x2miyuiwpib2imjr5ykyjngdu7v6vprkkhjltrk4qafymtawey4qzwid.onion News # http://hl66646wtlp2naoqnhattngigjp5palgqmbwixepcjyq5i534acgqyad.onion [ Open Source Software ] # Whonix – Whonix OS # http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/ QubesOS – Similar to Whonix # http://www.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/ KeyBase.IO – Keybase.IO mirror # http://keybase5wmilwokqirssclfnsqrjdsi7jdir5wy7y7iu3tanwmtp6oid.onion/ [ Libraries ] # InfoCon # http://w27irt6ldaydjoacyovepuzlethuoypazhhbot6tljuywy52emetn7qd.onion/ Imperial Library – Imperial Library Site # http://kx5thpx2olielkihfyo4jgjqfb7zx7wxr3sd4xzt26ochei4m6f7tayd.onion/ Comic Book Library – Comic Books # http://nv3x2jozywh63fkohn5mwp2d73vasusjixn3im3ueof52fmbjsigw6ad.onion/ Just Another Library # http://libraryfyuybp7oyidyya3ah5xvwgyx6weauoini7zyz555litmmumad.onion/ [ Forums / Social ] # Facebook # http://facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion/ Dark Social Network # http://rznvg5sjacavz5kpshrq4urm75xzruha6iiyuggidnioo5ztvwdfroyd.onion/ http://gszionb5csgn24c2siowqzwj4bipigtvcs754hepe3ls3hf7qpcdxaqd.onion/ Forum # http://fahue6hb7odzns36vfoi2dqfvqvjq4btt7vo52a67jivmyz6a6h3vzqd.onion/ Ransomware Group Sites # http://ransomwr3tsydeii4q43vazm7wofla5ujdajquitomtd47cxjtfgwyyd.onion/ Runion # http://runionv3do7jdylpx7ufc6qkmygehsiuichjcstpj4hb2ycqrnmp67ad.onion/ Tape # http://tapefaqb6kz5buk4bqhnjv3oo3oi7xn6y6kpkjfh5hqu3t7e3dzr65yd.onion/ The Permanent Booru # http://owmvhpxyisu6fgd7r2fcswgavs7jly4znldaey33utadwmgbbp4pysad.onion/ Dread # http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/ CFM # http://cin2qdnu3rwdahxvrx5pyvmc3zhy22zthfzwtmt43th45x5hyb465qqd.onion/ Cebulka # http://cebulka7uxchnbpvmqapg5pfos4ngaxglsktzvha7a5rigndghvadeyd.onion/ TruthBoard # http://k5aintllrufq23khjnmmfli6uxioboe3ylcao7k72mk2bgvwqb5ek4ad.onion/ Raddle # http://c32zjeghcp5tj3kb72pltz56piei66drc63vkhn5yixiyk4cmerrjtid.onion/ SuprBay: The PirateBay Forum # http://suprbaydvdcaynfo4dgdzgxb4zuso7rftlil5yg5kqjefnw4wq4ulcad.onion/ NZ Darknet Market Forums # http://nzdnmfcf2z5pd3vwfyfy3jhwoubv6qnumdglspqhurqnuvr52khatdad.onion/ Rutor # http://rutordeepkpafpudl22pbbhzm4llbgncunvgcc66kax55sc4mp4kxcid.onion/ French World # http://frenchwltobamdhyq5y2egezkbnz53ws5kaa6wnscildhnegdw5nhsyd.onion/ AnonGTS # http://eux4gt4qcaiesps5w5rppxcenoe5shapwycums5yuiikmc4mpc74gpyd.onion/ DEF CON Forums # https://ezdhgsy2aw7zg54z6dqsutrduhl22moami5zv2zt6urr6vub7gs6wfad.onion/ ALOG.SPACE # http://bhlnasxdkbaoxf4gtpbhavref7l2j3bwooes77hqcacxztkindztzrad.onion/ CryptBB # http://cryptbbtg65gibadeeo2awe3j7s6evg7eklserehqr4w4e2bis5tebid.onion/ Deutschland im Deep Web Forum # http://germany2igel45jbmjdipfbzdswjcpjqzqozxt4l33452kzrrda2rbid.onion/ Envory Forum v2 # http://envoy2vxtsbz63bik33yb6vka2ed4x5leeisfg2isd2gz2eg4skwmbyd.onion/welcome Exploit.in # https://exploitivzcm5dawzhe6c32bbylyggbjvh5dyvsvb5lkuz5ptmunkmqd.onion Poast # http://6x7g7rr6fhdoszolkqkaittdr6qzgejjxoc42q4ceaph2xttmo5vgryd.onion/ Rutor # http://rutorbestyszzvgnbky4t3s5i5h5xp7kj3wrrgmgmfkgvnuk7tnen2yd.onion/ The HUB # http://thehubmcwyzwijjoqvdtpmu36npcueypjbgnvbqz4jliwjmmnpfkzkqd.onion/ The Stock Insiders # http://thestock6nonb74owd6utzh4vld3xsf2n2fwxpwywjgq7maj47mvwmid.onion/ [ Chats ] # Ableonion # http://notbumpz34bgbz4yfdigxvd6vzwtxc3zpt5imukgl6bvip2nikdmdaad.onion/ MadIRC # http://wbi67emmdx6i6rcr6nnk3hco3nrvdc2juxrbvomvt6nze5afjz6pgtad.onion/ JitJat # http://jitjatj3qbb42jvik4udcehxpkoidppz3gojslh7jcatuo4hx4xwayid.onion/login.php CGI IRC # http://34vnln24rlakgbk6gpityvljieayyw7q4bhdbbgs6zp2v5nbh345zgad.onion/ Black Hat # http://blkhatjxlrvc5aevqzz5t6kxldayog6jlx5h7glnu44euzongl4fh5ad.onion/ Infantile # http://juvenilezskkwc2gu7j5c4akppjnr3kzlgljjeodd5psn6fwcnloplid.onion/ [ Others Sites ] # CIA.gov – Official CIA Site # http://ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion/ NCIDE Task Force # http://ncidetfs7banpz2d7vpndev5somwoki5vwdpfty2k7javniujekit6ad.onion/ National Police of the Netherlands # http://tcecdnp2fhyxlcrjoyc2eimdjosr65hweut6y7r2u6b5y75yuvbkvfyd.onion/ Bible4u – The Bible # http://bible4u2lvhacg4b3to2e2veqpwmrc2c3tjf2wuuqiz332vlwmr4xbad.onion/ LocalMonero – Local Monero Trades # http://nehdddktmhvqklsnkjqcbpmb63htee2iznpcbs5tgzctipxykpj6yrid.onion/nojs/captcha TMG Mirror List # http://tmglsdds6usxqsghympkjfbddume3olbvpqdrpxvcxplhd4z7bxucdid.onion/ Satanic Ceremony # http://ho2hua2hfduv6f7hcbzdj2e6qdn4szgyy2jjnx545v4z3epq7uyrscid.onion/ Tech Learning Collective # http://lpiyu33yusoalp5kh3f4hak2so2sjjvjw5ykyvu2dulzosgvuffq6sad.onion/ Beneath VT # http://bvten5svsltfpxrxl72ukqxixwo2m5ek5svmcxgrmkta4tbmiemuibid.onion/ Deep Web Radio # http://anonyradixhkgh5myfrkarggfnmdzzhhcgoy2v66uf7sml27to5n2tid.onion/ ","date":"May 18, 2023","externalUrl":null,"permalink":"/2023/05/18/dark-web-links/","section":"Blog","summary":"Dark Web Links v3 # New v3 Hidden Services # V3 Onion Hidden Services Links And Deprecation Of Old V2 Onion Sites The short version 2 onion services will deprecated, after 15 years the Tor Project is going to switch to the new and more secore, and also longer version 3 .onion links. Make sure to have a site like this repo bookmarked where you can find the new v3 dark web links. The following list are the first sites which are available as a v3 .onion hidden service, when more sites switch to the new protocol, we will update the homepage with a bigger list of up to date links. Recommendet to use Tails as a live usb\n","title":"Dark Web Links","type":"blog"},{"content":" Awesome Piracy # A curated list of arrrrrrrrr! ! !\nContents # Preamble\nMirrors\nHow to use this list\nEmoji\nBackground Information\nVPNs\nVPN Guides and Tutorials\nVPN Subscription Services\nSelf-hosted VPNs\nBrowser Extensions\nUserscripts\nPassword Vaults\nAntivirus\nPrivacy\nWindows 10 Privacy Email\nOperating Systems\nDecentralised Networks\nDomain Names\nTorrenting\nTrackers\nPrivate Trackers\nSemi-Private Trackers\nPublic Trackers\nTracker Aggregators\nTracker Proxies\nTracker Invites\nTorrent Clients\nDeluge\nrTorrent\nWebTorrent Clients\nautodl-irssi\nSeedboxes\nWeb-based Cloud Seedboxes\nSeedbox Hosting Providers\nSeedbox Setup Tools and Guides\nTracker Frameworks\nUsenet\nUsenet Providers\nUsenet Indexers\nUsenet Indexing Software\nPaid Indexers\nFree Indexers\nUsenet Clients\nDirect Downloads\nDownload Managers\nDDL Tools\nCustom Google Search Engines\nFTP Indexers\nDDL Search Engines and Crawlers\nDDL Link Sites\nPremium Link Generators\nPremium Link Hosts\nOpen Directories\nStreaming Sites\nHD Streaming\nBig Media Libraries\nTV\nAnime\nCartoons\nSports Streaming\nSpecialty Sites\nOpenload Hosts\nMedia Centre Applications\nStremio Addons Plex\nPlex Plugins\nPlex Requests\nPlex Scripts and Tools\nPlex Shares\nPlex Transcoding\nPlex Logging and Metrics\nPlex Clients\nKodi\nGaming\nRepacks\nROMs\nConsole Games\nHomebrew and Custom Firmware\nMusic\nMusic Streaming\nMusic Downloading\nSpotify\niTunes\nSoftware\nEbooks\nMagazines\nAcademic Papers and Material\nTextbooks\nCourses and Tutorials\nAudiobooks\nComicbooks\nManga\nDocumentaries\nFonts, Icons and Graphics\nAutomation\nTV Automation\nMovie Automation\nMusic Automation\nSubtitles Automation\nP2P Networks\nRipping, Transcoding, Converting, Encoding\nCloud Storage\nFile Renaming and Tagging\nMobile Apps\nStreaming Apps\nTorrent Apps\nAPKs\nDiscord Servers\nIPTV and DVR\nAcestreams IRC\nIRC Clients\nIRC Networks\nIRC Search Engines\nDC++\nFull Movies On\nPiracy Blogs and News\nContent Discovery\nPreDB Sites Dashboards and Homepages\nProxy Sites\nFile Sharing Tools\nStream Synchronisation\nTelegram Piracy\nMiscellaneous\nPreamble # Over the past couple of years I\u0026rsquo;ve accumulated bookmarks, saved Reddit posts, and GitHub stars all related to piracy in some form or another. This list is my attempt to add structure to those resources and share them. Everything you need to get started on your pirate voyage can be found below.\nI am aware that a number of websites featured in this list rely on operating under obscurity, and that this list could potentially contribute to their demise through excess exposure. I\u0026rsquo;m sorry about that - I just like making lists.\nPlease ensure you use an adblocker like uBlock Origin to access any of the websites listed here, otherwise, you will have a bad time.\nFor discussion and feedback, please head to the Reddit thread on /r/Piracy. If you come across dead links, please report them by creating an issue.\nMirrors # This list is periodically mirrored to PasteBin.\nHow to use this list # Some items in this list could easily fit in more than one category, so to make sure you find what you\u0026rsquo;re looking for please use Ctrl + F (or Cmd + F on macOS).\nEmoji # You will notice some items in this list have a :star2: next to them. Items with a :star2: represent the author\u0026rsquo;s top pick for that category. This is an entirely opinionated rating from someone who doesn\u0026rsquo;t know everything about every item on the list, so be sure to check out alternative options before assuming something is \u0026ldquo;the best\u0026rdquo;. That said, I do explore and test every resource I add to this list wherever possible.\nBackground Information # Wikipedia \u0026ldquo;File sharing\u0026rdquo; category Wikipedia\u0026rsquo;s full list of file-sharing related articles. VPNs # VPN Guides and Tutorials # That One Privacy Site VPN section of That One Privacy Site with VPN comparisons\nChoosing the best VPN (for you) That One Privacy Guy\u0026rsquo;s - Guide to Choosing the Best VPN (for you)\n/r/VPN wiki Helpful FAQ-type resource composed by the folks at /r/VPN\nChoosing the VPN that\u0026rsquo;s right for you Helpful guide from the EFF\nWhich VPN services keep you anonymous in 2018? TorrentFreak article by Ernesto\nprivacytools.io \u0026ldquo;Encryption against global mass surveillance\u0026rdquo;. Plenty of information to help protect your privacy online.\nVPN over SSH ArchWiki page describing how to achieve a poor man\u0026rsquo;s VPN with SSH tunneling\n/r/VPNTorrents This is for the discussion of torrenting (and similar P2P protocols) using VPN type technology.\nVPN Subscription Services # Private Internet Access :star2: Hugely popular subscription-based VPN provider with a proven track record for not keeping logs\nProtonVPN High-speed Swiss VPN that safeguards your privacy.\nNordVPN With NordVPN, encrypt your online activity to protect your private data from hackers or snoopy advertisers.\nWindscribe Simple VPN, has a free plan that gives you 10gb/mo bandwith, paid version even has port forwarding for static IPs, privacy focused.\nExpressVPN VPN with 256-bit encryption, 94 countries, and no logs. Also rated one of the fastest VPNs out there.\nSelf-hosted VPNs # n2n Peer-to-peer VPN\nPeerVPN PeerVPN is a software that builds virtual ethernet networks between multiple computers.\nOpenVPN :star2: OpenVPN provides flexible VPN solutions to secure your data communications, whether it\u0026rsquo;s for Internet privacy, remote access for employees, securing IoT, or for networking Cloud data centers.\nPritunl Enterprise Distributed OpenVPN and IPsec Server\nWireGuard VPN WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec.\nsshuttle Transparent proxy server that works as a poor man\u0026rsquo;s VPN.\nZeroTier Peer-to-peer multi-platform VPN\nBrowser Extensions # Decentraleyes Protects against tracking with a local CDN (Content Delivery Network) emulation.\nPrivacy Badger Privacy Badger blocks spying ads and invisible trackers.\nHTTPS Everywhere HTTPS Everywhere is a Firefox, Chrome, and Opera extension that encrypts your communications with many major websites, making your browsing more secure.\nuBlock Origin :star2: An efficient blocker for Chromium and Firefox. Fast and lean.\nNano Adblocker Just another adblocker based on uBlock Origin.\nNano Defender An anti-Adblock defuser for Nano Adblocker and uBlock Origin.\nTamperMonkey The world\u0026rsquo;s most popular userscript manager\nWebRTC Network Limiter Configures how WebRTC\u0026rsquo;s network traffic is routed by changing Chrome\u0026rsquo;s privacy settings.\nScriptSafe A browser extension that gives users control of the web and more secure browsing while emphasizing simplicity and intuitiveness.\nNoScript Allow active content to run only from sites you trust, and protect yourself against XSS and clickjacking attacks. Firefox only.\nOutline Designed to remove ads, comments, and other junk from news articles but conveniently also bypasses paywalls\nBurlesco Read news without subscribing, bypass the paywall\nUniversal Bypass Universal Bypass automatically skips annoying link shorteners.\nViolentmonkey An open source userscript manager.\nAnti-Paywall A browser extension that maximizes the chances of bypassing paywalls\nGoogle Unlocked Google Unlocked browser extension uncensor google search results.\nUserscripts # IMDb Scout Add links from IMDb pages to torrent sites \u0026ndash; easy downloading from IMDb\nAdsBypasser This user script helps you to skip countdown ads or continue pages and prevent ad pop-up windows.\nAntiAdware Remove forced download accelerators, managers, and adware on supported websites\nDirect download from Google Play Adds APKPure, APKMirror and Evozi download buttons to Google Play when browsing apps.\nAdGuard Popup Blocker Blocks pop-up ads on web pages.\nopenload Remove anti-Adblock, ads, pop-ups, and timer waits, and show direct download link on OpenLoad.\nanti-anti-copy some websites prevent you from copying text. this script bypasses it.\nTorrentz2 Magnet Add magnet link to torrentz2\nBypass paywalls for scientific documents This script adds download buttons on Google Scholar, Scopus, and Web Of Science, which lead to sci-hub.tw.\nGoogle Drive Direct Links Direct link functionality for Google Drive\nBypass Google Sorry (reCAPTCHA) Redirect Google reCAPTCHA to new search\nGoogle Image \u0026ldquo;View Image\u0026rdquo; button Add \u0026ldquo;View Image\u0026rdquo; button.\nMoreCAPTCHA Speeds up solving Google reCAPTCHA challenges by shortening transition effects and providing continuous selection ability.\nMAL-Sync Integrates MyAnimeList into various sites, with auto episode tracking.\nRemove fake TPB torrents Script that automatically hides fake torrents on The Pirate Bay based on conditional logic.\nGet DLC Info from SteamDB For use with CreamAPI and similar tools.\nThe Pirate Bay Cleaner Auto-sorting, torrentifying, theme-change, search-change, SSL/HTTPS and more.\nPassword Vaults # BitWarden :star2: Open source password management solution, can be self-hosted\n1Password Popular cloud-hosted password manager\nKeePass Free, open source, light-weight, and easy-to-use password manager.\nAndroid : KeePassDroid\niPhone : MiniKeePass\nChrome / Firefox : Tusk\nWeb App : KeeWeb\nLastPass LastPass remembers all your passwords, so you don\u0026rsquo;t have to.\nPass Simple GPG/Git password manager. Follows the Unix philosophy.\nDashlane An intuitive password manager with over with over 8 million users worldwide.\nPassbolt Free, open source, self-hosted, extensible, OpenPGP based.\nLessPass Stateless open source password manager\nPsono Open source and self-hosted password manager for teams\nButtercup Another open source password manager with desktop, mobile, and browser clients.\nAntivirus # MalwareBytes :star2: \u0026ldquo;crushes malware so you are protected and your machine keeps running smoothly.\u0026rdquo;\nHitmanPro Antivirus product from Sophos\nVirusTotal Web service for scanning files and URLs for viruses\nHow to remove viruses and malware on your Windows PC Helpful HowToGeek article on cleaning out the pipes\nAvast Antivirus Avast Antivirus is a multi-platform antivirus application with a free tier. Be sure to opt out of sending anonymous usage statistics.\nPrivacy # Prism Break Opt out of global data surveillance programs like PRISM, XKeyscore, and Tempora.\n/r/privacy The intersection of technology, privacy, and freedom in a digital world.\nAny Soft Keyboard A privacy focused keyboard\nWindows 10 Privacy # O\u0026amp;O ShutUp10 O\u0026amp;O ShutUp10 means you have full control over which comfort functions under Windows 10 you wish to use, and you decide when the passing on of your data goes too far.\nWindows 10 Privacy Guide :star2: an In-depth guide on purging Windows 10 of Microsoft\u0026rsquo;s attempts to track you\nWindows Privacy Tweaker Freeware app from phrozen.io\nWinaero Free, small and useful software for Windows.\nWPD The real privacy dashboard for Windows\nDestroy-Windows-10-Spying Destroy Windows Spying tool\nTron Tron, an automated PC cleanup script\nTallow Tallow is a transparent Tor firewall and proxying solution for Windows.\nEmail # ProtonMail Secure Email Based in Switzerland\n10 Minute Mail Disposable, private mailboxes\nCock.li Yeah it\u0026rsquo;s mail with cocks\nTutanota Secure, open source email service\nDecentralised Networks # Tor :star2: Tor is free software and an open network that helps you defend against traffic analysis.\nI2P I2P is an anonymous overlay network - a network within a network. It is intended to protect communication from dragnet surveillance and monitoring by third parties such as ISPs.\nFreenet Freenet is free software which lets you anonymously share files, browse and publish \u0026ldquo;freesites\u0026rdquo; (web sites accessible only through Freenet) and chat on forums, without fear of censorship.\nZeronet Open, free and uncensorable websites, using Bitcoin cryptography and BitTorrent network\nOperating Systems # Qubes OS Qubes OS is a security-oriented operating system\nTails Tails is a live operating system that you can start on almost any computer from a USB stick or a DVD.\nDomain Names # Njalla a privacy-aware domain registration service\nxip.io magic domain name that provides wildcard DNS for any IP address.\nDomainr Domainr finds domain names and short URLs. Instantly check availability and register for all top-level domains.\ndot.tk Free .tk and other domain names.\nTorrenting # /r/torrents Questions and discussion about all things torrent-related\nBitTorrent Wikipedia\u0026rsquo;s article on the BitTorrent file sharing protocol\nLive Tracer Pre-time tracer for scene releases\nmagent2torrent.me Converts magnet links to torrent files\nmgnet.me Magnet URI shortener\nTorrage Torrage is a free service for caching torrent files online.\npeerflix Google Search Searches Heroku-deployed instances of Peerflix for streaming torrents\nTorznab Newznab-like API offering a standardized recent/search API for both TV and movies\nxbit Magnet link repository\ntorrents.csv Torrents.csv is a collaborative repository of torrents, consisting of a single, searchable torrents.csv file.\ntorrents-csv.ml The above torrents.csv hosted.\nmktorrent mktorrent is a simple command line utility to create BitTorrent metainfo files.\nqtorrent.in A free, fast, powerful and legal Magnet URI indexer.\nTorrent Paradise IPFS-based decentralised torrent search engine.\ntorrent.nz Torrent.nz is a magnet torrent search engine.\nTrackers # /r/trackers :star2: A subreddit for discussing public \u0026amp; private trackers.\nA Simple Guide To A Better Ratio A good tracker requires you to upload what you download. This guide explains many of the methods involved with keeping on top of this sometimes difficult task.\nTracker Twitters List Of Private Torrent Trackers \u0026amp; BitTorrent News Accounts To Follow On Twitter\nBravo List Tracker directory\nPrivate Trackers # AlphaRatio (AR) :star2: A good starter tracker with lots of freeleech content.\nAnimeBytes (AB) community centralized around Japanese media, including anime, manga, and music\nAudionews (AN) Private torrent tracker for music production audio. (DJ apps, audio editor, DAW apps etc) Open signups on the 1st-2nd every month.\nAwesome HD (AHD) Awesome-HD is a private tracker for quality enthusiasts.\nBakaBT (BBT) a torrent tracker which specializes in serving anime fans\nBeyondHD (BHD) BeyondHD is a ratioless torrent tracker dedicated to HD movies and TV shows in High Definition.\nBibliotik (BI) Popular ebooks/audiobooks private tracker\nBitspyder (BS) Bitspyder is an educational torrent site devoted to e-Learning content such as e-Books, video courses, and audio books.\nBlutopia (BLU) Blutopia is a private tracker for HD movies and HD TV shows.\nCGPeers (CGP) CGPeers is a private torrent tracker for all things computer graphics: tutorials, graphics software, 3D, visual effects, design, and computer-assisted art.\nFilelist (FL) Large Romanian general tracker with mostly English content. No RAR files allowed. (Scene torrents are unrared, and then allowed.)\nGazelleGames (GGn) Currently the largest private tracker for games.\nHD4Free (HD4F) HD4Free is a general HD tracker with a good range of content. It is a ratioless tracker so it is great for beginners. Note that any adult content/porn is strictly prohibited there.\nHD-Forever (HD-F) HD-Forever is a French private tracker for HD movies.\nHD-Space (HDS) HD-Space is a private torrent tracker hosting HD movies, TV shows, and music torrents. Good tracker for beginners.\nIPTorrents (IPT) Private tracker with movies, books, and more.\nJPopsuki (JPop) JPopsuki is a torrent tracker focused on Asian music.\nMyAnonaMouse (MAM) Private E-Learning tracker with about 360 000 torrents including audiobooks, e-learning, musicology, and radio.\nMySpleen (MS) MySpleen is a private tracker which specialises in comedy, animation, and TV series.\nNostalgic Torrents (NT) Private tracker for anime, comics/manga, documentaries, movies, TV - PRE 2013, TV - PRE 2009 With Original Commercials, etc. Also known as The-Archive and HeyNow.\nPassThePopcorn (PTP) ratio-based torrent tracker for movies\nPolishTracker (PT) PolishTracker is the oldest private Polish tracker existing to this day\nPolishSource (PS) PolishSource is a big private Polish ratio-less tracker\nPrivateHD (PHD) PrivateHD is a private BitTorrent tracker focused on high definition movies and TV show torrents.\nRedacted (RED) Largest private music tracker at 1.5 million torrents.\nTheGeeks (TGBZ) Private tracker for e-learning\nTorrentLeech (TL) Well-known popular private tracker\nTVChaos UK (TVCUK) Private tracker for British television\nUHDBits (UHD) UHDBits is a Vietnamese private torrent tracker focused on HD movies and TV shows.\nWorldOfP2P (WOP) Private tracker for Movies, TV, and General.\n/PTG tracker manifesto List of private trackers\n0QoLttS.jpg Screenshot of a table from somewhere of private trackers and their sign-up requirements\nPrivate Tracker Flowchart V4 of the private tracker flowchart. Somewhat out of date.\nPrivate trackers Guide on how to get into (and survive) the world of private trackers.\nRED Interview Prep This site was written as a guide for potential users to learn about music formats, transcodes, torrenting, and burning and ripping — everything you need to know in order to pass the RED interview.\nTracker Spreadsheet Comprehensive spreadsheet of private trackers (somewhat out of date)\nSemi-Private Trackers # ruTracker :star2: RuTracker is a huge Russian torrent site with a thriving file-sharing community.\nZamunda.net A Bulgarian tracker with English and Russian translations available.\nArenaBG A Bulgarian tracker with an English translation available.\nNoNaMe Club Russian semi-private tracker and forum\nPublic Trackers # 1337x 1337x is a torrent site that offers verified torrent downloads.\nETTV ETTV is a torrent site specific for movie torrents.\nEZTV EZTV is a torrent site for TV shows founded by TV-torrent distribution group EZTV.\nIsohunt2 Clone of the original isoHunt torrent index and repository\nKickAss Torrents Community-made reincarnation launched in 2016\nRARBG :star2: Public tracker with its own release group\nYTS Small-size HD movies from YIFY\nThe Pirate Bay Infamous torrent site which is somehow still running, blocked in most places but can be accessed via numerous proxy sites\nThe Proxy Bay Can\u0026rsquo;t access The Pirate Bay? Try one of these proxy sites.\nTorrentz2 A good replacement of the defunct Torrentz.eu\nIdope (Clone) iDope is a torrent search engine presenting direct magnet links, comments and up to date seeder/leecher statistics.\nZooqle Zooqle is a relatively new torrent index providing a huge database of verified torrents.\nrutor Russian tracker\nGloTorrents Download Movies, TV, Games and Other Torrents Free\nBTDB Large BitTorrent DHT search engine\ntrackerslist An updated list of public BitTorrent trackers\nMagnetDL Magnet link only search engine\nTorrentGalaxy Public tracker with a clean UI which now supports embedded streaming for internal uploads\nGames4theworld Torrents and magnet links for games\nmetal-tracker.com Heavy metal music tracker\nSkyTorrents Revival of the recently-shut-down, privacy-focused, ad-free torrent indexer\nPirateiro Pirateiro is a torrent index for Brazilian and Portuguese torrents.\nTorrentKing Torrentking is a popular movie torrent site.\nmoviemagnet Verified torrents for movies.\nZonatorrent Spanish tracker\nTorrentFunk TorrentFunk is a torrent site providing verified torrents for all kinds of content.\nHDSector Bollywood / Hindi / Hollywood HD Movies\nOTorrents Yet another public torrent tracker\nTorlock Torlock is a torrent index and torrent search that helps to access the latest in TV series and movies.\nDIGBT DIGBT is a DHT torrent search engine.\nTorrent9 French torrent search engine\nYggTorrent French tracker and search engine (have a download/upload ratio limitation)\nWorldWide Torrents Another public tracker with a reasonably nice UI\nRock Box Metal music tracker\nMusic Torrent General music tracker\nTracker Aggregators # snowfl snowfl is a torrent aggregator which searches various public torrent indexes in real-time\nTParser Russian torrent sites indexer\nTorrents.me Torrents.me combines popular torrent sites and specialized private trackers in a torrent multisearch.\nrats-search P2P Bittorrent search engine\nAIO Search Torrent search engine\nSolidTorrents :star2: A clean, privacy focused torrent search engine.\nTracker Proxies # Jackett API Support for your favorite torrent trackers.\nCardigann A proxy server for adding new indexers to Sonarr, SickRage, and other media managers\nnzbhydra2 :star2: Primarily a Usenet metasearch engine but also supports Torznab\nTracker Invites # /r/OpenSignups Open Signups - When Private Trackers Open Their Doors To The Public\n/r/Invites Post wanted ads for private tracker invites here\nOpen sign-ups thread /r/trackers thread for posting trackers that are currently open for registration.\nOpentrackers.org Private Torrent Trackers \u0026amp; File Sharing\ngetting_into_private_trackers :star2: Helpful resource from the /r/trackers wiki\nBTRACS an automatic information site which periodically checks closed community BitTorrent trackers for being open for signup.\nTorrent Clients # qBitTorrent Popular, lightweight, multi-platform torrent client\nqBitTorrent search function Allows you to search popular trackers directly from qBittorrent\nqBitTorrent plugins for public sites List of qBitTorrent plugins for searching public torrent sites.\nTransmission Default torrent client in many distros.\nPopcorn Time Popcorn Time is a multi-platform, free software BitTorrent client that includes an integrated media player.\nButter Project A legal fork of Popcorn Time which is configurable to allow for custom sources of video\nBitLord Another BitTorrent streaming client\nTixati Lightweight torrent client for Windows and Linux\nPicoTorrent Lightweight and minimalistic torrent client for Windows\nFrostWire FrostWire is a Free and open-source BitTorrent client first released in September 2004, as a fork of LimeWire.\npeerflix Streaming torrent client for node.js\nRapidBay Rapid bay is a self hosted video service/torrent client that makes playing videos from torrents easy.\nTornado Tornado is a modern web-first BitTorrent client designed with usability in mind. Based on Transmission.\nDeluge # Deluge :star2: Deluge is a lightweight, Free Software, cross-platform BitTorrent client.\nAutoRemovePlus Auto removing of deluge torrents\nltConfig ltConfig is a plugin for Deluge that allows direct modification to libtorrent settings and has preset support.\nDeluge Plugins List of official and third-party plugins for Deluge\nrTorrent # rTorrent :star2: rTorrent is a text-based ncurses BitTorrent client written in C++\nruTorrent Yet another web front-end for rTorrent\nrTorrent Community wiki GitHub wiki for rTorrent\nrTorrent Docs Comprehensive manual and user guide for the rTorrent bittorrent client\nrutorrent-themes A collection of default and new, original themes for ruTorrent.\nflood A web UI for rTorrent with a Node.js backend and React frontend.\nrTorrent ArchWiki Page Detailed article to answer most common questions about rTorrent\nrTorrent Seedbox Guide This guide is a single-page, comprehensive guide to take you step-by-step through installation and configuration.\nrtorrent-ps Extended rTorrent distribution with a fully customizable canvas and colors, other feature additions, and complete docs.\npyrocore A collection of tools for the BitTorrent protocol and especially the rTorrent client\nrTorrent research security modifications and other hacks for usability\nrutorrent-all-seeders This ruTorrent plugin adds the columns \u0026lsquo;All Seeders\u0026rsquo; to the torrents list.\nWebTorrent Clients # magnetoo Fancy new in-browser WebTorrent streaming service\nßTorrent fully-featured WebTorrent browser client written in HTML, JS and CSS\nWebTorrent Desktop WebTorrent Desktop is for streaming torrents.\nInstant.io Streaming file transfer over WebTorrent (torrents on the web)\nautodl-irssi # autodl-irssi autodl-irssi is a plugin for irssi that monitors IRC announce channels for torrent trackers and downloads torrent files based on user-defined filters.\nautodl-curl-sonarr Script to use as upload-command for autodl-irssi to post to Sonarr\nmreg Generates a \u0026ldquo;Match releases\u0026rdquo; expression for your autodl-irssi filter based on dvdsreleasedates.com\u0026rsquo;s \u0026ldquo;Most Requested DVD Release Dates\u0026rdquo; section.\nSlack notifications for autodl-irssi Guide by yours truly on enabling Slack notifications for autodl-irssi\nSeedboxes # /r/seedboxes A place to discuss seedboxes and everything related to them.\nSeedSync SeedSync is a GUI-configurable, LFTP-based file transfer and management program.\nWeb-based Cloud Seedboxes # Seedr Essentially a seedbox you can paste torrents into which returns a streamable direct link\nZXCFiles A similar service that allows you to paste magnet links or upload torrent files and get a DDL. First 20GB are free.\nBitport.io Another direct download site for pasting magnet links or .torrent files. Free accounts offer 1GB for free.\nTorrent Safe Free plan includes 1GB max file size, 2 days file lifetime. Discounts for paid subscriptions pop up on their Facebook page\nFurk.net Free trial offers 1GB per day or 5GB per week if you can get an invite/voucher or use Facebook\nFileStream.me Free subscription offers 200Mb max file size and 200GB storage total\n2Giga.link\nFoxleech No free trial, plans start at $3 per month\nBoxopus No free trial, plans start at $0.99 per day\nPut.io $0.99 1 day trial\nPut.io automator A suite of commands for managing torrents, transfers and files on Put.IO\nSeedbox Hosting Providers # novaDedi novaDedi formerly known as metaDedi was created to help to find you the cheapest dedicated server for your intended use case.\nCheckServers.OVH Checks the availability of OVH servers.\nKimsufi Affordable dedicated servers\nOnline.net :star2: Seedbox-friendly, affordable, dedicated server host\nHetzner Reliable and affordable server host\n/u/Andy10gbit Reddit user with good deals on servers and seedboxes\nBytesized Hosting \u0026ldquo;The best Plex server hosting in town\u0026rdquo;\nFeralHosting Shared seedbox hosting provider\nWhatbox Whatbox is a BitTorrent CDN\nSeedboxes.cc Reliable and affordable web hosting, with the power of your friendly monsters!\nUltraSeedbox \u0026ldquo;Plex optimized\u0026rdquo; servers to rent\nSeedHost \u0026ldquo;Seedhost.eu is the oldest continuously operating seedbox hosting provider on the internet.\u0026rdquo;\nChmuranet Chmuranet is a small private boutique seedbox provider.\nXirvik Preconfigured seedbox servers\nOVH Large cloud server provider\nSoYouStart Another dedicated server host\nPulsedMedia Inexpensive seedbox provider\nCloudboxes.io Seedboxes with impressive 20Gbps uplinks\nSeedbox.io Shared and dedicated slots with 1Gbps+ uplinks\nSeedbox Setup Tools and Guides # swizzin a light, modular package management suite for media-oriented servers\nSeedbox Guide comparison tool to help you find the best fitting Seedbox\nrtinst seedbox installation script for Ubuntu and Debian systems\nsboxsetup Another seedbox setup script\nQuickBox IO Seedbox installer script\nMediaServer-DockerComposeFiles Docker-Compose Files for Media Server Related Apps [Radarr, Sonarr, Plex, rTorrent, NZBGet, Ombi, Emby, etc]\nusenet-docker Docker-compose configuration for Sabnzbd, CouchPotato, Plex, Sonarr, Plexpy, Nzbhydra, Muximux, Radarr, NZBGet and Ombi with a Nginx proxy.\nDockSTARTer DockSTARTer helps you get started with home server apps running in Docker.\nOpenFLIXR OpenFLIXR Media Server is an all-in-one media server for automated downloading and serving media.\nTracker Frameworks # Torrent-Tracker-Platforms A Curated List Of Torrent Tracker Platforms/Codebases Written In Multiple Coding Languages\nUNIT3D The Nex-Gen Private Torrent Tracker (Aimed For Movie / TV Use)\nmeanTorrent A BitTorrent Private Tracker CMS with Multilingual, and IRC announce support, CloudFlare support.\nNexusPHP BitTorrent private tracker scripts written in PHP.\nGazelle :star2: web framework geared towards private torrent trackers with a focus on music\nopentracker opentracker is an open and free BitTorrent tracker project.\nUsenet # Usenet Usenet is a worldwide distributed discussion system available on computers.\nUsenet newsgroup A Usenet newsgroup is a repository usually within the Usenet system, for messages posted from many users in different locations using the Internet.\n/r/Usenet :star2: a thriving community dedicated to helping users old and new understand and use Usenet.\n/r/UsenetInvites Requests and offers for Usenet indexers\nNZBLINK The NZBLNK™ URI scheme defines the format of NZBLNK™ links to identify binary Usenet content and supplies some extra information to handle that content correct (similar to magnet links, but for NZBs).\nUsenet-Uploaders Table of applications for uploading content to Usenet\nQuickPar Tool for reconstructing damaged/missing/corrupt Usenet binaries\nNZB Monkey NZB download helper-tool\nSABconnect++ Chrome extension which adds one-click \u0026lsquo;Send to SABnzbd\u0026rsquo; buttons to many popular NZB index sites.\nUsenet Providers # Usenet Providers and Backbones This is a simple overview of the current companies, backbones, providers and resellers in the Usenet landscape.\nA Quick Guide to Choosing a Usenet Provider Reddit post by /u/FlickFreak\nEweka Netherlands-based Usenet provider\nNewsdemon Cheap and cheerful Usenet provider with frequent discounts\nNewsgroup Ninja Popular Usenet provider with a competitive subscription fee\nUsenet Express UsenetExpress is a powerful new tier-1 Usenet provider which offers strong security, a 10GB uplink per server and up to 150 streams for an excellent price.\nUsenet.Farm Usenet reseller with 1000+ days retention.\nUsenet Indexers # /r/Usenet wiki: indexers Information about /r/Usenet\u0026rsquo;s favourite indexing services Usenet Indexing Software # nZEDb a fork of nnplus(2011) | NNTP / Usenet / Newsgroup indexer.\nnewznab-tmux Laravel based usenet indexer\nnewznab newznab is a usenet indexing application, that makes building a usenet community easy.\nnZEDb-deploy A collection of scripts to automate and simplify the deployment of a nZEDb Usenet Indexer using the new format of their GitHub repository.\nPaid Indexers # NZBgeek Affordable Usenet indexer operating since 2014.\nNZBFinder Usenet indexer and newznab API with a clean UI and 8+ year backlog of NZBs\nDrunkenSlug :star2: Popular NZB indexer with a free tier and decent retention\nNZBCat Meow cough nzb-hair-bal\nDOGnzb Invite-only NZB site (although they do have a registration page at the moment)\nomgwtfnzbs Invite-only NZB indexer with a funny name\nFree Indexers # 6box :star2: A recently revived free Usenet indexing service with a generous API\nUsenet Crawler Usenet indexer with API access for registered users\nNZBIndex The first free Usenet indexer you find in your Google search results\nBinsearch With this site you can search and browse binary Usenet newsgroups.\nNZBKing This service allows you to search and browse binary files that have been posted to Usenet newsgroups.\nGingaDADDY Another popular free NZB indexer, requires sign-up\nUsenet Clients # SABnzbd :star2: SABnzbd is an Open Source Binary Newsreader written in Python.\nNZBget Efficient Usenet downloader written in C++\nUsenetic The full-featured Usenet client for Mac OSX\nUnison OS X app for accessing Usenet Newsgroups and the many wonders and mysteries contained within (discontinued)\nspotweb Spotweb is a decentralized Usenet community based on the Spotnet protocol.\nNewsbin Newsbin is software for Microsoft Windows Operating Systems that downloads files from Usenet Newsgroups.\nNZBVortex 3 Simply the best Usenet client for Mac\nalt.binz alt.binz is a powerful binary newsreader, for downloading and managing articles from Usenet.\nDirect Downloads # Download Managers # JDownloader2 :star2: JDownloader is a free, open-source download management tool with a huge community of developers that makes downloading as easy and fast as it should be.\nInternet Download Manager shareware download manager for Windows\nidm-trial-reset Use IDM forever without cracking.\npyLoad Free and Open Source download manager written in Python and designed to be extremely lightweight, easily extensible and fully manageable via web\nXtreme Download Manager Xtreme Download Manager is a tool which claims to increase download speeds by up-to 500%.\nDDL Tools # youtube-dl :star2: youtube-dl is a command-line program to download videos from YouTube.com and a few more sites.\nyoutube-dl-gui A cross-platform front-end GUI of the popular youtube-dl written in wxPython\nyoutube-dl-helper Uses youtube-dl to download video/audio from many sites without requiring you to use the command-line (for Windows)\nYouTube MP3 Rip Download YouTube music videos as MP3 files without registration\nLeonflix :star2: A multi-platform desktop app for finding movies and TV shows.\nmaulvi.github.io Google Drive direct download link generator\nRapidLeech a free server transfer script for use on various popular upload/download sites such as uploaded.net, Rapidgator.net, and more than 127 others.\nmegatools Open-source command line tools and C library (libmega) for accessing Mega.co.nz cloud storage.\nMegaCrypt.js MegaCrypt.js lets you share your Mega.nz files without actually having to share any Mega.nz links by encrypting them to create a secure proxy for your files.\nnetclix A simple CLI tool to get movie streaming premium links from VodLocker\u0026rsquo;s API\nFilePursuit :star2: FilePursuit provides a very powerful file indexing and search service allowing you to find a file among millions of files located on web servers.\ngrayhatwarfare S3 bucket search Not likely to find much with this one but interesting nonetheless\nannie Fast, simple and clean video downloader\naria2 a lightweight multi-protocol \u0026amp; multi-source command-line download utility.\nPersepolis Front-end for aria2.\naxel light command line download accelerator\nuGet Open Source Download Manager\nripme A album/video downloader with support for over 80 sites\nrdcli The simple way to download and unrestrict DDL files, torrents and magnets using Real-Debrid\nget_iplayer A utility for downloading TV and radio programmes from BBC iPlayer\nMEGAsync Easily automated synchronisation between your computer and your MEGA account. Can stream Mega videos directly.\nwget wget is a free and open source tool for downloading files using HTTP, HTTPS, FTP, and FTPS. It can be easily called from scripts, cronjobs, terminals without X-Windows support, etc.\nwget - a noob\u0026rsquo;s guide Beginner guide on how to use wget\nwget for Windows A command-line utility for retrieving files using HTTP, HTTPS, and FTP protocols.\ncurl curl is a command-line tool for downloading data using a variety of protocols. Easily installable on most operating systems.\nFlixGrab FlixGrab+ is a unique application for downloading entire NetFlix serials, TV shows, documentaries, movies.\nMega.nz IDM Downloader Unlimited downloading from Mega.nz with IDM.\nCustom Google Search Engines # FileChef These\nThe Eye CGS Engine all\nopendirectory-finder do\nlumpySoft.com the\nmattpalm.com/search same\nFiler thing :)\nMusgle Searches specifically for music\nJimmyr Also searches for music\nFTP Indexers # Davos Web-based FTP automation for Linux servers.\nNapalm FTP Indexer NAPALM FTP Indexer lets you search and download files located on public FTP servers.\nMamont\u0026rsquo;s open FTP Index Browsable directory listing of publicly available FTP-sites\nDDL Search Engines and Crawlers # ololo ololo is a video streaming link search engine.\nMegaSearch Search engine for finding content hosted on Mega and other premium hosts like OpenLoad\nVideoSpider VideoSpider crawls various websites and search engines to find movie and TV episode streaming links\nOrion :star2: Orion is a service that indexes metadata and links from a variety of public websites and networks, including torrent, Usenet, and hoster indexes.\nAlluc Search engine with over 80 million streaming-links from over 700 VOD services, video hosters, and file-hosters\nOD-Database Database of searchable open directories curated by The-Eye.eu\nIPLIVE DDL search engine\nSoftArchive SoftArchive or SA is a scene release website, more known for new release of software, games, music, movies, and eBooks.\nDDL Link Sites # /r/megalinks Links to files on Mega. Has now moved to snahp.it\n/r/GDriveLinks Google Drive Download Links\n/r/ZippyShare DDL links hosted on ZippyShare\nDirtyWarez Forum Popular warez forum with films, TV shows, ebooks, anime, games, and more\nsnahp.it :star2: replaced /r/megalinks\nhdencode\nMovies \u0026ldquo;R\u0026rdquo; Us The newest movies in 1080p. Available with DDL through MediaFire and streaming through AnonFile.\nMovie Glide\nRelease BB\nDDLValley DDL links for Movies, Games, Tv Shows, Apps, Ebooks and Music.\nAdiT-HD direct download site\nTwoDDL Direct download links\nRapidMoviez\nSceneSource WordPress powered website dedicated to bringing you the latest info on new scene releases\nMkvCage\nMovieFiles Direct download search engine which generates Google Drive links\nIceFilms.info Another DDL site with TV and movie links on FileUpload, GoUnlimited, Filecandy, and more\nDownArchive DDL blog with premium links on a number of hosts. Lots of software\nPSARips Popular site for movies and TV shows, includes torrent files\nDeeJayPirate\u0026rsquo;s Pastebin Pastebin user who uploads premium links for TV shows\nAvaxHome Another DDL site with eBooks, TV, movies, magazines, software, comics, newspapers, games, graphics, etc.\nMoviesleak\nDospelis Spanish DDL indexer\nVidics\nwatchepisodeseries\nwatchtvseries\ntvbox\nDownTurk\nScnLog\nfilewarez.tv Invite-only, hosts both Mega and Google Drive links for TV shows\nMovie-blog.org German site for movies\nMovieworld.to Another German site for movies\nDDL-Warez German site for movies, shows, books and games\nDDL-Music German site for music\nAppNee Freeware Group Massive DDL site, eBooks, Programs, Games, Operating Systems, etc.\n480mkv 480p DDL for TV Shows\nFilmRls DDL site that generally features quality previews of video content\nPremium Link Generators # File Hosting Wiki This site aims to provide the most complete lists of premium link generators, torrent downloaders and more, with (possibly) frequent updates.\nReal-Debrid :star2: Real-Debrid is an unrestricted downloader that allows you to quickly download files hosted on the Internet or instantly stream them into an innovative web player\nPremiumize Combine direct and secure access to premium services\nPremiumizer Premiumizer is a download management tool for premiumize.me cloud downloads.\nOffCloud A simple, elegant and intuitive SaaS to retrieve any data from the cloud.\nReevown A free download service with which you can perform premium downloads.\nPremium Link Hosts # File sharing table Regularly updated table of information about file hosts.\nMega :star2:\nOpenLoad\nRapidGator\n4shared\nMediafire\nSendspace\nUploaded\nZippyshare\nNitroFlare\nPutLocker\nOpen Directories # httpdirfs A filesystem which allows you to mount HTTP directory listings\n\u0026ldquo;All resources I know related to Open Directories\u0026rdquo; Thorough post from /u/ElectroXexual\nThe Eye :star2: The Eye is a non-profit website dedicated to content archival and long-term preservation.\nThe Holy Grail of Indexes Posted by /u/shadow_hunter104\n36 GB of Flash Games Posted by /u/blue_star_\nFileMasta Search servers for video, music, books, software, games, subtitles and much more\n/r/opendirectories Unprotected directories of pics, vids, music, software, and otherwise interesting files.\nopendirectories-bot Bot used on /r/opendirectories for analysing the contents of open directories posted on the subreddit\nPanelshow.club Directory of panel show TV episodes from /r/panelshow\nStreaming Sites # How To Stream Movies, TV, Anime \u0026amp; Sports Online :star2: Huge list by /u/nbatman HD Streaming # /r/MovieStreamingSites Reddit, random streaming sites\n/r/BestOfStreamingVideo Reddit, random streaming sites\nHD MultiredditHD Alternate subreddit curated by /u/nbatman\nBest Free Streaming Site that rates streaming services\nStreamCR Clean design, very nice speeds, large variety of films and series, HD server, Popular Site\nYMovies Unique design, HD server with additional hosts, nice speeds, YIFY and other releases (+ torrents)\nHDO Unique design, HD server with additional hosts, also country specific films/series\nM4UFree.TV Unique design, HD server with backup and additional hosts\nMovie123 Unique design, HD server with Backup and additional hosts\nLookMovie Unique design, HD server, very nice speeds (offers auto quality)\nAZMovies Unique design, HD server with additional hosts, also on Reddit\nStreamlord Unique design, HD server (subtitles)\nFlixGo Unique design, HD server, very nice speeds\nSolarmovie Basic streaming site layout, HD server with additional hosts, Popular Site\nHDFlix Basic streaming site layout, HD server with additional hosts\nYes! Movies Basic streaming site layout, HD server with additional hosts\nSpacemov Basic streaming site layout, HD server, only certain films have additional hosts\nHDOnline Basic streaming site layout, HD server with additional hosts\nYMovies Unique design, HD server with additional hosts, nice speeds, YIFY and other releases (+ torrents)\n#1 Movies Website Basic streaming site layout, HD server with additional hosts\nBig Media Libraries # Streaming Multireddit Reddit with all types of Streaming Links\n5Movies Large collection dating as far back as 1990\n2TwoMovies Large collection dating as far back as 1895\nCafeHulu Collection of movies/TV shows + many foreign films\nSolarmovie.fm or Solarmovies.cc Plenty of movies and TV shows\nAfdah Large collection dating as far back as 1920\nYouTube Contains very old films/vlogs/tutorials\nWorldSrc Movies, software, apps, games, music, and images available for fast direct download + torrents.\nTV # TVRaven Large TV collection, friendly UI\nWatchSeries TV series, multiple links/backups to different streaming hosts\nTVBox TV/Movies, easy to navigate site, multiple links/backups to different streaming hosts\nAnime # Nyaa BitTorrent software for cats (Repo)\nHi10 Anime High-Quality 10-bit Anime Encodes\nAnime Kaizoku Up to 1080p DDL links, mostly Google Drive\n/r/animepiracy This sub is about streaming and torrent websites for anime.\n/r/animepiracy wiki Lists for sourcing Anime streaming sites, manga sites, and more\n9Anime Watch anime online. English anime, dubbed, subbed.\nGoGo Anime Popular website for watching anime\nAniLinkz Large database of streaming anime episodes.\nNyaaPantsu Primarily Anime torrents but includes an open directory of DDL links too.\nAlternatives to Kiss websites /r/KissCartoon wiki page with lots of anime sites\nanime-sharing Forum for sharing anime\nAniDex Torrent tracker and indexer, primarily for English fansub groups of anime\nanimeEncodes\nHorribleSubs Download anime via torrent files, magnet links, XDCC, and premium link hosts.\nAnime Twist An anime direct streaming site with a decent UI and video player\nAnimeOut Over 1000\u0026rsquo;s of Encoded Anime with DDL links.\nKissanime.ru or Kissanime.ac Large cartoon collection, uses RapidVideo/Openload\nAnime8 Basic streaming site layout, large collection of anime shows\n4anime A relatively new site the might become the new Masterani.me. Clean interface.\nCartoons # KissCartoon Popular cartoon streaming site\nwatchcartoononline.com Cartoons, dubbed/subbed anime streaming site\nwatchcartoononline.io Large DDL site for cartoons as well as anime and movies\nanimetoon Lots of streaming via premium hosts for cartoons\nToonova Another site for streaming cartoons\nKimCartoon Large cartoon collection, primarily Openload\nWatchCartoon Outdated site layout, still active, uses Openload\nSports Streaming # /r/redsoccer A subreddit dedicated to the highest quality of free soccer / football streams. PL Streams.\n/r/nflstreams Reddit - NFL streams\n/r/nbastreams Reddit - NBA streams\n/r/MLBstreams Reddit - MLB streams\n/r/NHLstreams Reddit - NHL streams\n/r/MMAstreams Reddit - MMA streams\n/r/ncaaBBallstreams Reddit - NCAABBall streams\n/r/CFBstreams Reddit - CFB streams\n/r/WWEstreams Reddit - WWE streams\n/r/rugbystreams Reddit - rugby streams\n/r/mmafights Reddit - MMA streams\n/r/motorsportsstreams Reddit - motorsports streams\nBest Sport Streaming Site that rates sport streaming services\nLiveTV Wide variety of sports, results/live scores, video archive and betting\nCricfree Offers popular sports streams\nVIPBox Many sport streams, TV, friendly UI\nMamaHD 24/7 feeds, sports streams, clean UI\nSend It Live stream listings for sports, news, gaming, and more.\nSportsHD Variety of sports including college sports, clean design\n720pStream Popular sports only, simple design\nfootybite Soccer streaming site.\nSpecialty Sites # Einthusan Foreign\nDramago Drama movies/series\nWatchAsian Foreign\nLayarkaca Foreign\nDramaCool Foreign\nDaxiv Video Primarily Chinese content\nKingsofHorror YouTube Horror\nMutantSorority YouTube horror\nTromaMovies YouTube horror\nFilm1k Movies with nudity\nRulu YouTube Red series\nClub MST3k Every episode of MST3K\nArchive.org Old movies\nMioMio Asian TV shows/anime\nThird Party Hosts # MovieZion Openload\nVmovee Openload (Many outdated/removed links, not updated)\nMovieJagg Openload\nIWannaWatch Openload, Streamango\nUWatchFree VidPlayer, ViDeoZa\nOakmovies Openload, NT, NY, NW\nVexmovies Openload, NY, NW, MC-2\nOpenloadmovie Openload (some outdated links)\ncine.to Openload, Vivo, Streamcloud, Flashx, Streamango\ncinebloom Openload, Streamango\nQQMovies Openload\nHDEUROPIX Openload, Rapidvideo\nopenloadmovies.net OpenLoad\nHD MOVIES OpenLoad, Streamango, Streamcherry\nVodLocker Openload, Streamango\nStreamCouch Openload, Streamango\nQwemovies OpenLoad\nmovies2k Openload, Streamango, Streamcloud, Rapidvideo, Upvid\nxPau.se Googledrive\nFlixanity Openload, Streamango, hls.22x.cartoonhd.pw (subtitles)\nMegaShare Openload\nXMovies8 Openload, FServer, PTServer\nIceFilms Openload, FileUpload\nFilmXY RapidVideo, Vidoza, Uptostream (offers download links)\n1Movies Openload, FServer\nRainierland Openload, Streamango\nWatchFullMovie Openload\nFMOVIES Openload, MyCloud, RapidVideo, Streamango\nWatchFree Openload, FServer\npahe.in Uptostream, Google Drive, Openload, Mega\nmegaDDL Mega, Go4up, 1Fichier, NitroFlare, Openload\nMedia Centre Applications # Plex :star2: Your content—from live and recorded TV and personal media, to on-demand web shows, video news, and podcasts—beautifully organized and ready to stream everywhere.\nEmby a personal media server with apps on just about every device.\nKodi an award-winning free and open source home theater/media center software and entertainment hub for digital media.\nOpenPHT a community-driven fork of Plex Home Theater\nViewscreen a personal video streaming server\nStreama Self-hosted streaming media server.\nMyflix Myflix tries to be a somewhat simple and lightweight \u0026ldquo;DIY Netflix\u0026rdquo;, similar to Plex, streama or Emby, for your DIY NAS, especially aimed at the Raspberry Pi/Odroid/etc ecosystem.\nStremio Multi-platform video content aggregator with a comprehensive add-on system for extending the functionality\nGerbera UPnP Media Server for 2018 (Based on MediaTomb)\nServiio Serviio is a free media server. It allows you to stream your media files (music, video or images) to renderer devices (e.g. a TV set, Blu-ray player, games console or mobile phone) on your connected home network.\nOSMC OSMC (short for Open Source Media Center) is a Linux distribution based on Debian that brings Kodi to a variety of devices.\nSubsonic Music and movie streaming server with a client app and web frontend\nRygel Rygel is a home media solution (UPnP AV MediaServer) that allows you to easily share audio, video and pictures to other devices.\njellyfin An open-source fork of Emby\nStremio Add-ons # Open Directories addon Finds HTTP streams for movies/shows from open directories\nPopcorn Time addon Watch from YTS and EZTV in Stremio\nZooqle addon :star2: Watch movies and series indexed by Zooqle from RARBG, KAT, YTS, MegaTorrents and other torrent trackers\nPirateBay addon Fetch PirateBay entries on a single episode or series.\nRAR addon Watch content from RARBG in Stremio\nJuan Carlos Torrents Allows streaming from torrents collected from KAT.cr and others\nJackett addon Search on all your favorite torrent sites directly in Stremio!\nPlex # linuxserver/docker-plex LinuxServer.io Plex Media Server docker image\nplexinc/pms-docker official Plex docker image\ntimhaak/plex alternative Plex docker image\nPGBlitz.com :star2: Deploy a Hastey Server through Docker \u0026amp; Ansible with local or Unlimited Google HD Space (Former Name: PlexGuide)\nhoarding.me Unlimited and Automated. How to setup your own dream Plex server.\nPlexPi Plex Media Server for Raspberry Pi 3\nPlex Plugins # Official Plex Plugins Repos for every official Plex Inc. plugin\nWebTools.bundle a collection of tools for Plex Media Server. Like the Unsupported AppStore (UAS)\nAudiobooks.bundle Plex metadata scraper for Audiobooks\nSub-Zero.bundle :star2: Subtitles for Plex, as good you would expect them to be. (read: plans for a world without Plex plugins)\nTvplexendChannel.bundle A Tvheadend Channel Plugin for PLEX Media Server\nIPTV.bundle plays live streams (like IPTV) from an M3U playlist\nHDGrandSlam.bundle interfaces with HDHomeRun tuners and DVRs\nHDHRViewerV2.bundle HDHomeRun + Plex\nSS Plex Imagine if all the media scattered around the internet could be found in one collection.\nExportTools.bundle Export Plex Library to a csv, xlsx or m3u8 file\nPlex-Trakt-Scrobbler Add what you are watching on Plex to trakt.tv\nMoviemania.bundle Textless movie posters from Moviemania.io\nlmwt-kiss.bundle creates a new channel within Plex Media Server (PMS) to view content from PrimeWire.\nRequestChannel.bundle A Plex Channel to create requests\nSRT2UTF-8.bundle Plex Agent that\u0026rsquo;ll convert sidecar subtitle files into UTF-8\nPlexTools.bundle Downloads subtitles for any videos in your library from OpenSubtitles and modifies them to work with Roku clients, and converts videos to MP4 for direct play\nFMoviesPlus.bundle Plex Media Server plug-in designed for FMovies, G2G, Primewire and more.\nSuperPLEX A website dedicated to Plex Plugins.\nPlex Requests # Ombi :star2: Want a Movie or TV Show on Plex or Emby? Use Ombi!\nPlex Requests Simple automated way for users to request new content for Plex\nplexrequests-meteor Meteor version of the original Plex Requests\nMellow Bot which can communicate with several APIs like Ombi, Sonarr, Radarr and Tautulli which are related to home streaming. Based off of node:9.3\nMediaButler Discord bot for use with PleX and several other apps that work with it.\nPlex Scripts and Tools # plex_top_playlists A python script to get top weekly or top popular lists and put them in plex as playlists.\nJBOPS Just a Bunch Of Plex Scripts\nplex-subtitles-normalizer CLI tool to fix subtitles needed by Plex Media Center\nplex_autoscan Script to assist sonarr/radarr with plex imports.\nplexupdate script to simplify the life of Linux Plex Media Server users.\nplex2netflix See how much of your media from Plex is available on Netflix.\nplexReport Scripts to generate a weekly email of new additions to Plex\nplex-sync A simple command-line utility to synchronize watched/seen status between different Plex Media Servers.\nPlexIPTV This app simulates a DVR device for Plex by providing a layer to any IPTV provider (that provide an m3u8 playlist)\nPlex Media Tagger Uses the metadata held in the PlexMediaServer to tag media files\nPlexEmail This script aggregates all new TV, movie and music releases for the past configured time then optionally writes to your web directory and sends out an email.\nTransmogrify A Chrome extension that adds several features to the Plex/Web 2.0 client for Plex\nPlexAuth Plex based authentication using PHP\nPhlex A super-sexy voice interface for the Plex HTPC\nPlex Redirect a Plex landing page that redirects you to various sites.\nPlaxt Webhook-based Trakt.tv scrobbling for Plex\ngoplaxt Full rewrite of the above, written in Go and deployable with Docker\nplxdwnld Bookmarklet for downloading original files from the Plex web interface\nKitana Kitana exposes your Plex plugin interfaces \u0026ldquo;to the outside world\u0026rdquo;.\nPython-PlexLibrary Python command line utility for creating and maintaining dynamic Plex libraries based on \u0026ldquo;recipes\u0026rdquo;.\nNowShowing Generates an email and web page of Plex recently added content\n\u0026ldquo;My (scripted) solution to having a single Movies library for 4k and non-4k.\u0026rdquo; Post by /u/spazatk\nPlexMissingEpisodes Scan Plex library for missing episodes using TheTVDB#\nGaps Find the missing movies in your Plex Server\nPlexRecs A Discord bot that provides movie and TV show recommendations from your Plex library\n\u0026ldquo;I made my own Pseudo TV for Plex with Kodi and Nvidia Shield\u0026rdquo; Guide from /u/nads84 on how to make your own \u0026ldquo;live\u0026rdquo; TV channels with a Plex library, Kodi, and an NVIDIA Shield\nPlex Shares # /r/plexshares A nice place to find Plex Media Server shares.\nBaconFeet \u0026ldquo;Bringing a difference in streaming to the masses\u0026hellip;\u0026rdquo; (/r/BaconFeet)\nElysium Plex media streaming service\nPlex Transcoding # kube-plex Scalable Plex Media Server on Kubernetes \u0026ndash; dispatch transcode jobs as pods on your cluster!\nUnicornTranscoder a remote transcoder for Plex Media Server\nPlex-Remote-Transcoder A distributed transcoding backend for Plex\nUnlock the transcode or \u0026lsquo;session\u0026rsquo; limit on nVidia consumer grade GPUs Article describing how to bypass the artificial single-transcode limit\nPlex Logging and Metrics # Tautulli :star2: Tautulli is a 3rd party application that you can run alongside your Plex Media Server to monitor activity and track various statistics.\nplexWatch Notify and Log watched content on a Plex Media Server\nPlex-Data-Collector-For-InfluxDB Collects data about your Plex server and sends it to InfluxDB\nPlex Clients # RasPlex Rasplex is a community driven port of Plex Home Theater for the Raspberry Pi\nPlexConnect Unofficial Plex app for Apple TV devices\ngo-plex-client A Plex.tv and Plex Media Server Go client\nKodi # /r/Addons4Kodi discussion and links pertaining to unofficial add-ons for Kodi Media Center\nPlacenta a Fork of Exodus / Covenant with more options and links from Mr. Blamo and Muad\u0026rsquo;Dib\nGaia :star2: grants the ability to instantly watch high-quality files via cached torrents from Real-Debrid or Premiumize.\nYoda Another solid Exodus/Covenant fork, and this time it\u0026rsquo;s from S-media.\nElementum Elementum addon is an addon for Kodi, that manages your virtual library, syncs with your Trakt account.\nTooonmania2 lets you watch cartoons, dubbed anime and movies (from animetoon) and subbed anime and movies (from animeplus)\nPlexKodiConnect Plex integration in Kodi done right\nOfficial Plex Addon Official Plex addon for Kodi\nUltimate Kodi Guide ULTIMATE GUIDE TO INSTALL KODI + POPULAR STREAMING ADDONS by /u/giorgiomilan\nkodi-headless A headless install of Kodi in a docker container, most useful for a MySQL setup of Kodi to allow library updates to be sent without the need for a player system to be permanently on.\nExodus Redux The newest Exodus fork around, paired with LambdaScrapers.\nSparkle Kodi addon for finding acestream links\nPlexus Plexus is used in conjunction with Sparkle to play Ace Stream links.\nPneumatic Pneumatic is a NZB engine add-on for XBMC. It requires SABnzbd as backbone.\nPython-GoogleDrive-VideoStream The purpose of this plugin is to service content delivered in Google Drive plugin for KODI through any HTML5 client.\nGaming # /r/CrackWatch :star2: New video game crack releases are posted here\nBeginners Guide to Crack Watch Reddit post by /u/EssenseOfMagic\nGOD scraped URLs All DDL links for games listed on the now-dead GoodOldDownloads site.\ncs.rin.ru Popular gaming piracy forum\nSmartSteamEmu Steam emulator\nGoldberg Steam Emu This project is an attempt to make a generic Steam ddl that lets you play multiplayer games on a LAN without any internet connection\nCreamAPI \u0026ldquo;A Legit DLC Unlocker\u0026rdquo; for Steam\ncream-api-autoinstaller A python script to automatically install Cream API for Steam games\nCDRomance PSP, PSX, PS2, Gameboy, NDS, SNES, Dreamcast, and Gamecube ROMs and ISOs.\nredump.org Disc preservation database and internet community dedicated to collecting precise and accurate information about every video game ever released on optical media of any system.\nSteamless Steamless is a DRM remover of the SteamStub variants.\nRepacks # FitGirl Repacks :star2: Popular DDL and torrent site for game repacks\nXatab Repacks Russian game repacker, primarily torrents\nElAmigos Games Premium links to cracked games\nqoob.name Repacker site\nNicoblog Plenty of ISOs, ROMs, and repacks\nDark Umbra Forum for sourcing games\nSkidrow Repacks Repacks from popular repacker SKIDROW. Lots of anime stuff too\nROMs # Romsmania Good ROMs collection with a decent UI.\nDoperoms Huge collection with over 170,000 ROM files. PS3 included.\nVimm\u0026rsquo;s Lair Large collection of ROMs\nROM/ISO sites Wiki page from gametechwiki.com with more links\nRomulation.net Collection of ~28,000 console game ROMs\nThe Eye ROMs Open directory of ROMs from The Eye\nmyabandonware More than 14000 old games to download for free!\nOld Games Finder Old Games Finder is an automated old game search engine. (avoid ISO Zone links, as that site is dead)\nThe ROM Depot About 3TB of ROMs. You may need a VPN.\nEmulator.Games Download or play ROMs on your PC, Mobile, Mac, iOS and Android devices.\n\u0026ldquo;A simple script for easily downloading emulator.games roms\u0026rdquo; Reddit guide and userscript created by /u/estel_smith to allow you to easily download ROMs from Emulator.Games.\n3DSISO Nintendo 3DS ROMs downloads forum.\n3DSCIA.com DDL links for 3DS CIA files.\nZiperto DDL link site primarily for Nintendo games.\nConsole Games # /r/PkgLinks A place to share working Playstation 4 PKGs\nNoPayStation A Database for PSN content including Vita, PS3, PSX, and PSP\n/r/SwitchNSPs Nintendo Switch games\nSee Discord Servers for more Switch games\nHomebrew and Custom Firmware # The ultimate guide to Nintendo 3DS Piracy Posted by /u/crazy5\n3DS Hacks Guide A complete guide to 3DS custom firmware, from stock to boot9strap.\n/r/3dshacks Nintendo 3DS hacking and homebrew.\n/r/WiiHacks This Subreddit is for people interested in modifying their Wii.\n/r/WiiUHacks A subreddit dedicated to Wii U hacking and homebrew!\n/r/vitahacks A place to discuss Vita hacking and homebrew.\n/r/ps4homebrew News, releases, and questions regarding the PS4 jailbreak, homebrew, and mods.\n/r/SwitchHaxing Nintendo Switch hacking \u0026amp; homebrew subreddit\n/r/SwitchHacks Another Nintendo Switch hacking subreddit\n/r/ps3homebrew News, updates, apps, and answers regarding PS3 homebrew!\n/r/YuzuPiracy Links for Yuzu, the open-source Nintendo Switch emulator\n/r/VitaPiracy Fairly active community of PS Vita pirates with guides and releases\nMusic # MOOVAL Easily move your playlists, tracks, and likes from one streaming service to another.\nMadsonic Madsonic is a web-based media library and media streamer with jukebox functionality.\nMusicBrainz MusicBrainz is an open music encyclopedia that collects music metadata and makes it available to the public.\nairsonic Airsonic is a free, web-based media streamer, providing ubiquitous access to your music.\nBeets The purpose of beets is to get your music collection right once and for all. It catalogs your collection, automatically improving its metadata as it goes using the MusicBrainz database.\nLibreSonic Media streaming software\nMusic Streaming # Muxiv Music Stream 45 million songs on all your devices, online or offline. Primarily Chinese content.\nHikarinoakariost Site with Japanese music\nmp3Clan Free music streaming\nGoSong Streamable MP3s\nMP3Juices MP3 search engine tool which uses YouTube\nmp3.li Another MP3 streaming site\nSongsPK Mainly for downloading Bollywood songs. Domain changes frequently.\ndatmusic Search engine with a clean UI for streaming music in your browser\nMusicPleer Another music streaming site with a decent search engine\nslider.kz Quirky and fast music streaming site\nMusic Downloading # Soulseek Soulseek is an ad-free, spyware free, just plain free file sharing network for Windows, Mac, and Linux.\nirs A music downloader that understands your metadata needs.\nSMLoadr A streaming music downloader.\nDeezloader Remaster Tool for downloading music from Deezer\nDeezloader Remix Another program with the same purpose, both based on the original, now defunct Deezloader.\n/r/DeezloaderIsBack Community supporting Deezloader\nNew Album Releases Premium DDL links for full albums\nKingdom Leaks DDL links for album leaks\nKHInsider Site collecting soundtracks, mostly MP3, some FLAC, OGG or M4A.\nVGMLoader Tool for bulk downloading from KHInsider.\nFree MPS Download.net Search engine with streamable samples and download links\nSpotify # Get rid of Spotify ads Short guide on avoiding ads, banners, limited skips, and locked shuffle mode in Spotify Free\nSpotify AdBlock Host file :star2: This is the most up-to-date list and will block all annoying Spotify ads \u0026amp; analytics.\nSpotify Megathread /r/Piracy Spotify-related discussion and future developments\nEZBlocker a Spotify Ad Blocker written in C# for Windows 7/8/10.\nBlockTheSpot Video, audio \u0026amp; banner AdBlock/skip for Spotify\nSpytify Records Spotify without ads while it plays and includes media tags and album cover to the recorded files\nSpotify modded APK Modded APK with no ads.\nDowntify Downtify is an open source Spofity downloader which makes it possible to download all your favourite songs and/or playlists directly from spotify.\niTunes # TunesKit iTunes DRM removal tool\nRequiem Requiem is a program that removes Apple\u0026rsquo;s DRM (called FairPlay) from songs, videos, and books purchased on iTunes\nHow to Remove DRM From iTunes Movies and TV Shows HowToGeek article on how to use TunesKit and Requiem\nPlus Premieres Download newest iTunes music in M4A format\nforked-daapd Linux/FreeBSD DAAP (iTunes) and MPD media server with support for AirPlay devices (multiroom), Apple Remote (and compatibles), Chromecast, Spotify and internet radio.\nSoftware # /r/piracy/wiki/tools Windows/Office activation tools, and images/installers for Windows, Office, and Adobe\nnsane.down Popular file-sharing forum focused on software\nCrackingPatching.com Cracked software\nAppked Mac application sharing site\nTeam-OS HKRG Windows software and various activation tools.\nCracksNow Cracks for Android, Windows, and macOS applications.\nNulled Nulled is a cracking community where you can find links to cracked software\nVestathemes Vestathemes is a website for WordPress themes and plugins.\n/r/sjain_guides Guides and downloads for CS:GO, Windows 10 gaming optimisations, and more\nMy Digital Life Forums Popular forum for modded/cracked software and apps\nAdobe CC # Adobe CC 2018 Full in-depth guide to installing and cracking any application (Windows)\nHow to patch Adobe CC 2017 applications on Windows\nHOW TO PATCH ADOBE APPLICATIONS ON MAC, WORKING EARLY 2017\nPirating Adobe CC for Dummies detailed guide about pirating Adobe CC for Windows\nAdobe Zii 4.0.3 Tool for patching and cracking Adobe CC applications\n\u0026ldquo;Ultimate Adobe Guide!\u0026rdquo; Reddit guide last updated 2nd March 2019.\nWindows # /f/MSToolkit Tools for activating Windows software, including Windows 10 itself.\nWindows 10 Digital License Advanced tutorial from s1ave77 on activating Windows 10 \u0026ldquo;legitimately\u0026rdquo; by binding your HWID to a Microsoft account\nHow to download and install Windows 10 LTSB Guide by /u/sq_skez. \u0026ldquo;Take everything we loved about Windows 7, add the under-the-hood improvements of Windows 8 and 10 but none of the marketing/cloud/phone app/user-tracking crap, and what do you get? Windows 10 Enterprise LTSC edition.\u0026rdquo;\nTechBench Find official Windows isos for Windows 7/8/10\nWindows 10 Digital License (HWID) \u0026amp; KMS38 Generation Reddit guide by /u/s1ave77 with instructions on how to use HWID to activate various editions of Windows 10.\nEbooks # BookStack BookStack is a simple, self-hosted, easy-to-use platform for organizing and storing information.\nUbooquity Ubooquity is a free home server for your comics and ebooks library\nCOPS Calibre OPDS (and HTML) PHP Server : web-based light alternative to Calibre content server / Calibre2OPDS to serve ebooks (epub, mobi, pdf, etc.)\nb-ok Free ebook library\nThe idiot-proof guide to downloading ebooks off IRC Posted by /u/Servaplur\nGuide to Copy Kindle Content to PDF using Calibre\nApprentice Alf\u0026rsquo;s Blog Everything you ever wanted to know about DRM and ebooks but were afraid to ask.\nCalibre :star2: ebook management tool\nCalibre-Web Web app for browsing, reading and downloading eBooks stored in a Calibre database\nCustom Search Engine A Google custom search engine specifically for ebooks\nExploring over 1,800 Calibre ebook servers Blog post detailing how to use Shodan to find Calibre ebook servers\nDeDRM_tools DeDRM tools for ebooks.\nMagazines # PDF Giant Various categories of downloadable PDFs\nMagazineLib Free PDF and interactive e-magazines\nAcademic Papers and Material # LibGen search engine for articles and books on various topics, which allows free access to content that is otherwise paywalled or not digitized elsewhere\nSci-Hub the first pirate website in the world to provide mass and public access to tens of millions of research papers\nBookSC The world\u0026rsquo;s largest scientific articles store. 50,000,000+ articles for free.\nAcademic Torrents A Community-Maintained Distributed Repository for researchers, by researchers. Making 32.66TB of research data available!\nTextbooks # All IT eBooks A big database of free, direct links for IT and programming ebooks\nit-ebooks Large selection of free and open source IT ebooks\nPDF/Ebook trackers for college textbooks Old-but-still-useful list of ebook/textbook trackers, DDL sites, and IRC communities\nHow to \u0026ldquo;rent\u0026rdquo; your textbooks for free from Amazon \u0026ldquo;Going to college? Living off top ramen for dinner? Let me show you have to \u0026ldquo;rent\u0026rdquo; your textbooks for free \u0026amp; for life!\u0026rdquo;\nGuide for Finding Textbooks Extensive tutorial by /u/Amosqu\nforcoder Ebooks \u0026amp; Elearning For Programming\nCourses and Tutorials # TUTSGALAXY\nFreeTutorials.eu Lots of Udemy courses for free; Has Adblock detector\ncoursehunter Watch paid tutorials online for free\nLynda Courses 266+ Lynda courses\nGFXDomain.net Tutorials board Forum with free tutorials for graphic design, mostly via premium file hosts but some torrents\ntpget Tutorialspoint downloader\nudemy-downloader-gui A cross platform (Windows, Mac, Linux) desktop application for downloading Udemy Courses.\nAudiobooks # AudioBook Bay Download unabridged audiobooks for free or share your audio books, safe, fast and high quality\nAAXtoMP3 Convert Audible\u0026rsquo;s .aax filetype to MP3, FLAC, M4A, or OPUS\nBooksonic Booksonic is a server and an app for streaming your audiobooks to any pc or android phone.\nThe Eye /public/AudioBooks A few publicly accessible audiobooks hosted by The Eye\nAudioBooks.Cloud DDL links for lots of audiobooks.\nTokybook Free audiobook streaming site.\nComicbooks # Kindle Comic Converter Comic and manga converter for ebook readers\nreadcomiconline.to Manga and comics uploaded daily\nReadcomicbooksonline Tends to Error 520 occasionally\nComic Extra Daily comic uploads, clean UI\nGetComics GetComics started as an alternative place to get downloaded comic files, particularly US-based comics published by DC and Marvel.\nGazee! A WebApp Comic Reader for your favorite digital comics. Reach and read your comic library from any web-connected device with a modern web browser.\nComix-Load DDL links for comicbooks and manga in English and German.\nManga # MangaDex MangaDex is an online manga reader that caters to all languages.\nKissManga Another manga website\n/r/manga Everything and anything manga! (manhwa is okay too!)\nMadokami Requires sign-up (currently closed), see mirrors below.\nMadokami 0-E Download manga titles named 0 to E.\nMadokami F-K Download manga titles named F to K.\nMadokami L-Q Download manga titles named L to Q.\nMadokami R-Z Download manga titles named R to Z.\nMadokami novels, raws and artbooks Download novels, manga raws and artbooks.\nMangaZone A manga reader app.\nNineAnime Updated/Active Manga Site\nMangaRock Another manga site with a decent in-browser reader\nDocumentaries # /r/Documentaries Popular documentaries subreddit\nMy big list of documentary sites (streaming and download) An old post by /u/whatwhat888 that may still be useful\nDocuWiki.net DocuWiki.net serves as an index of documentary films on the Edonkey Network.\nMVGroup Forum for documentary torrent and ED2K downloads. Sign-up required.\nFonts, Icons, and Graphics # Get the font Searches through GitHub for fonts\nWeb4Sync Forum with DDL links catering to web development, graphics design, 3D animation, and photography\nGFXDomain Forum for graphic design resources and software\nGFxtra DDL links for graphics, icons, 3D models, and more\nGraphicEx Stock/vector graphics, PhotoShop/InDesign resources, fonts, and more\nTomato.to Stock Downloader | Supports Shutterstock, Gettyimages, Adobestock, Fotolia, Vectorstock, iStockphoto, PNGTree \u0026amp; PicFair.\nHow to download paid fonts for free Post by /u/Bebhio on how to use clever Google searches to find fonts online\ngallery-dl Command-line program to download image-galleries and -collections from several image hosting sites\nAutomation # FlexGet FlexGet is a multipurpose automation tool for all of your media with support for torrents, nzbs, podcasts, comics, TV, movies, RSS, HTML, CSV, and more.\nPulsarr Browser extension (currently Chrome \u0026amp; Firefox) for adding movies to Radarr or Series\u0026rsquo; to Sonarr while browsing IMDB or TVDB.\nBonarr A fork of Radarr to work with porn.\ntraktarr Script to add new series \u0026amp; movies to Sonarr/Radarr based on Trakt lists.\nMylar An automated Comic Book downloader (cbr/cbz) for use with SABnzbd, NZBGet, and torrents\nLazyLibrarian LazyLibrarian is a program to follow authors and grab metadata for all your digital reading needs.\nCloudBox An All-In-One, Cloud Centric, Media Server Solution\nPiracy and automation, an overview Guide by /u/JukeCity101 on how to improve your experience pirating with automation tools\nNefarious Nefarious is a web application that helps you download movies and TV shows.\nTV Automation # Sonarr :star2: Smart PVR for newsgroup and BitTorrent users.\nSickRage Automatic Video Library Manager for TV Shows.\nSickChill an automatic Video Library Manager for TV Shows.\nSickBeard The ultimate PVR application that searches for and manages your TV shows\nSickGear SickGear has proven the most reliable stable TV fork of the great Sick-Beard to fully automate TV enjoyment with innovation.\nMedusa Automatic Video Library Manager for TV Shows.\nMovie Automation # Radarr :star2: A fork of Sonarr to work with movies à la Couchpotato.\nRadarrSync Syncs two Radarr servers through web API.\nCouchPotato Automatic Movie Downloading via NZBs \u0026amp; Torrents\nWatcher Watcher is an automated movie NZB \u0026amp; Torrent searcher and snatcher.\nMusic Automation # Lidarr Looks and smells like Sonarr but made for music.\nHeadphones Automatic music downloader for SABnzbd\nSubtitles Automation # Bazarr Bazarr is a companion application to Sonarr and Radarr. It manages and downloads subtitles based on your requirements.\nautosub Command-line utility for auto-generating subtitles for any video file using speech recognition\nnzb-subliminal Fetches subtitles for the videos it\u0026rsquo;s provided. It can be easily integrated into NZBGet and SABnzbd too.\nsubsync Automagically synchronize subtitles with video.\nvlsub VLC extension to download subtitles from opensubtitles.org\nP2P Networks # eDonkey network a decentralized, mostly server-based, peer-to-peer file sharing network\nGnutella P2P network behind the popular LimeWire file sharing app\nFastTrack Protocol used by the Kazaa, Grokster, iMesh, and Morpheus file sharing programs\nNapster Peer-to-peer file sharing Internet service that emphasized sharing digital audio files, typically audio songs, encoded in MP3 format.\nPeer-to-peer file sharing Detailed Wikipedia page about file sharing\nIPFS - Distributed Web Peer-to-peer distributed file system that seeks to connect all computing devices with the same system of files\nKad The Kad network is a peer-to-peer (P2P) network which implements the Kademlia P2P overlay protocol.\nRipping, Transcoding, Converting, Encoding # Handbrake :star2: HandBrake is a tool for converting video from nearly any format to a selection of modern, widely supported codecs.\nMakeMKV MakeMKV is your one-click solution to convert video that you own into free and patents-unencumbered format that can be played everywhere.\nffmpeg A complete, cross-platform solution to record, convert and stream audio and video.\nsickbeard_mp4_automator Automatically convert video files to a standardized mp4 format with proper metadata tagging to create a beautiful and uniform media library\nAutomatic Ripping Machine The A.R.M. (Automatic Ripping Machine) detects the insertion of an optical disc, identifies the type of media and autonomously performs the appropriate action\nDVD Decrypter The original unofficial DVD Decrypter mirror since June 7th, 2005.\nDVDFab DVD ripping tool\nThe Encoding Guide :star2: In depth guide on encoding video\nCloud Storage # google-drive-ocamlfuse FUSE filesystem over Google Drive\nrclone :star2: \u0026ldquo;rsync for cloud storage\u0026rdquo;\nplexdrive mounts your Google Drive FUSE filesystem (optimized for media playback)\n/r/PlexACD Discussion about unlimited cloud storage for Plex libraries\nrclone-gdrive Wiki page on setting up Google Drive with rclone cache and crypt\nConnect Your Plex Server To Your Google Drive This tutorial will help you connect your Google Drive to your Plex server using Plexdrive.\nRcloneBrowser Simple cross platform GUI for rclone\nUDS Unlimited Drive Storage. Store files in Google Docs without counting against your quota.\nComparison of file hosting services This is a comparison of file hosting services which are currently active.\nCloud storage table Regularly updated table of information about top cloud storage providers.\nFile Renaming and Tagging # FileBot :star2: the ultimate tool for organizing and renaming your Movies, TV Shows and Anime as well as fetching subtitles and artwork. It\u0026rsquo;s smart and just works.\nfilebot-node a client-server application that\u0026rsquo;ll allow you to run filebot commands\ndocker-filebot A Docker container for FileBot\nMediaMonkey Manage a movie/music library from 100 to 100,000+ audio/video files and playlists\nMP3TAG Mp3tag is a powerful and easy-to-use tool to edit metadata of audio files.\nPicard Picard is a cross-platform music tagger written in Python.\nBeets beets is a music library manager\nMetatogger Metatogger is the new generation of tag editor allowing you to rename, tag and easily sort your audio files.\nMediaInfo MediaInfo is a convenient unified display of the most relevant technical and tag data for video and audio files.\niFlicks2 Useful for adding metadata to movies and TV shows\nMediaElch Media manager for Kodi. Metadata \u0026amp; artwork retrieval, as well as renaming.\n/r/datacurator Subreddit for discussion about the curation of digital data. Be it sorting, file formats, file encoding, best practices, discussion of your setup, tips and tricks, asking for help etc.\nMobile Apps # AdAway An open source ad blocker for Android using the hosts file. It needs ROOT access\nNewPipe The original YouTube experience without annoying ads and questionable permissions\nnzb360 :star2: nzb360 is a full-featured NZB manager that focuses on providing the best experience possible for controlling all of your Usenet needs.\nOmbi Companion app for Ombi to request Plex content\nTautulli Remote Mobile version of Tautilli for monitoring Plex on the go\nMyJDownloader enables you to remote control your desktop JDownloader from your pocket while you\u0026rsquo;re on the go.\nFilePursuit Pro FilePursuit provides a very powerful file indexing and search service allowing you to find a file among millions of files located on web servers.\nYMusic YouTube Music Player \u0026amp; Downloader\nCygery AdSkip for YouTube Automatically click on the \u0026ldquo;Skip ad\u0026rdquo; button in the YouTube™ app when it appears.\nBlokada Blokada is a compact app that transparently blocks unwanted content like ads, tracking, malware, and other annoyances.\nTachiyomi Tachiyomi is a free and open source manga reader for Android.\n4PDA.ru 4PDA is the biggest Russian forum about mobile devices. You can find an endless amount of APKs and Mobile software there. For download, registration is required\nAnYme Unofficial Anime App for MyAnimeList\nPerfect Player Perfect Player is set-top box style IPTV/Media player for watching videos on TVs, tablets and smartphones.\n\u0026ldquo;My little guide for piracy on iPhone\u0026rdquo; Post by /u/Impulse_13\nnzbUnity iOS app for managing your favourite NZB applications\nTiviMate IPTV player A popular Android app for watching IPTV on Android set-top boxes.\nFildo Android music streaming app which fetches files from third party MP3 search engines.\nYouTube Vanced Vanced is a well known modded version of YouTube with many features such as adblocking and background playback and many more.\nStreaming Apps # Kokotime Kokotime is an addon-based, simple, free and elegantly designed app that will let you watch all your favorite media content in a unique and elegant user-friendly design\nMobdro Mobdro constantly searches the web for the best free video streams and brings them to your device.\nCinema a lot of Movies \u0026amp; TV/Shows to watch and download.\nFildo Music streaming app\nTeaTV App for Android, Windows, and macOS for watching 1080p movies and TV shows for free\nCotoMovies Stream movies and TV shows online/offline for Android/iOS\nAniméGlare\nAniméVibe\nApolloTV\nBeeTV\nCinema\nCKayTV\nCyberflix Terrarium clone\nDreamTV Terrarium clone\nMorph TV Morpheus fork\nPhoenixTV Morpheus fork\nTitaniumTV Terrarium clone\nTVZion\nUnlockMyTV Cinema clone ad-free\nTorrent Apps # Transdrone Transdrone allows you to manage the torrents you run on your home server or seedbox.\nFlud Flud is a simple and beautiful BitTorrent client for Android.\nBiglyBT Free, open source torrent client for Android phone, tablet, Chromebook, \u0026amp; Android TV\nLibreTorrent LibreTorrent is a Free as in Freedom torrent client for Android 4+, based on libtorrent.\nVuze Lightweight \u0026amp; powerful BitTorrent app.\naTorrent Another popular torrent client for Android.\nTrireme Use this app to connect and manage your Deluge Daemon.\nAPKs # Aptoide An alternative repository-based marketplace for Android applications\nF-Droid An installable catalogue of FOSS (Free and Open Source Software) Android applications\nYalp Store Download apks from Google Play Store\nMobilism Forum :star2: Large forum of mobile apps and books\nOn HAX APK mirrors\nAPKMirror Download free Android APKs\nApkPure Another free APK mirror site\nACMARKET download cracked \u0026amp; modified android apps \u0026amp; games free\nBlackMod Lots of cracked Android games\nAndroid Zone Another place to find premium links for APKs\nRevDl Direct download site for Android apps and games.\n/r/ApksApps \u0026ldquo;The best Modded apps on the reddit.\u0026rdquo;\n/r/moddedandroidapps Modded Android app releases subreddit.\nIndexOutOfBounds Store Streaming apps including Liveflix, PopFlix, SeriesDroid S2, and AnimeDroid S2.\nDiscord Servers # The Ratio :star2: Community of seedbox enthusiasts. Buying advice, application setup, and automation help.\nDoujinStyle Discord server with Doujin related materials. Things such as Japanese doujin music and games\nThe Eye Official Discord server for the-eye.eu\nPlayStation Homebrew Home of /r/ps3homebrew and /r/ps4homebrew.\nSnahp.it Official Discord server for snahp.it.\nWarezNX Nintendo Switch Warez server. (/hbg/ has more up to date games as of April 2019)\n/hbg/ Homebrew General A Discord server that shares Nintendo Switch Games.\n/r/soccerstreams Official Discord server for the recently-killed /r/soccerstreams subreddit.\nAPK\u0026rsquo;S 2 Day This is a discord server that acts as a hub for numerous streaming apps.\nIPTV and DVR # telly IPTV proxy for Plex Live written in Golang\ntvheadend Tvheadend is a TV streaming server for Linux supporting DVB-S, DVB-S2, DVB-C, DVB-T, ATSC, IPTV, SAT\u0026gt;IP, and other formats through the Unix pipe as input sources.\n/r/IPTV Subreddit some may find helpful for gauging the current state of IPTV providers\n/r/iptvresellers promotions and advertisements from IPTV providers\n/r/IPTVReviews Reviews of IPTV service providers\nMythTV Free Open Source software digital video recorder\nallsprk.tv A channel-hoppable live streaming site with a chat room\nUlstreaMix Live TV streaming site, predominantly sports\nXtream Editor Xtream Editor allow you to create, edit and sort m3u playlists online.\nxTeVe :star2: M3U Proxy for Plex DVR\nSTBEmulator Popular Android app for using IPTV streams with EPG\nIPTV Community Technology and IPTV discussion website, useful for finding an IPTV provider/reseller\nantennas HDHomeRun emulator for Plex DVR to connect to Tvheadend.\nIPTV Providers list A recently created list of 40+ IPTV providers with notes\nAcestreams # acestream.org Ace Stream is a peer-to-peer streaming application that lets you stream live sports and other content\nAceStreamSearch Ace Stream Broadcasts Search\naceproxy Ace Stream HTTP Proxy. (abandonware)\niktason/aceproxy A docker image to run aceengine + aceproxy, e.g. to watch Torrent-TV.ru.\nIRC # XDCC Tutorial XDCC Downloading For Beginners: Do It Like A Pro\nXDCC XDCC (Xabi DCC or eXtended DCC) is a computer file sharing method which uses the Internet Relay Chat (IRC) network as a host service.\nZNC An advanced IRC bouncer\nIRC Clients # weechat :star2: The extensible chat client.\nirssi Your text mode chatting application since 1999.\nHexChat HexChat is an IRC client based on XChat, but unlike XChat it’s completely free for both Windows and Unix-like systems.\nKVIrc Graphical IRC client\nmIRC IRC client for Windows\nShout The self-hosted web IRC client\nKiwi IRC Popular web-based IRC client\nTheLounge TheLounge (a fork of shoutIRC) is a web IRC client that you host on your own server.\nIRC Networks # irc.p2p-network.net P2P file sharing network\np2p-network.net channel list List of all channels on the p2p-network.net IRC network\nOrpheus Formerly known as Apollo\nMoviegods irc://irc.abjects.net/MOVIEGODS :star2: XDCC file sharing network, join #mg-chat to continue downloading\nThe Source irc://irc.scenep2p.net/THE.SOURCE Another XDCC source\nBeast-XDCC irc://irc.abjects.net/BEAST-XDCC One more XDCC source\nirc.undernet.org/bookz irc://irc.undernet.org/bookz For downloading ebooks (use @search \u0026lt;book name\u0026gt; for a list of available ebooks)\nirc.irchighway.net/ebooks irc://irc.irchighway.net/ebooks A nice, friendly IRC channel for trading ebooks\nIRC Search Engines # xWeasel xWeasel is a free stand-alone Download Client based on IRC technology including a multifunctional XDCC Search Engine.\nixIRC ixIRC lets you search through 17 IRC networks, 32 channels, and over 189915 user-supplied XDCC packs.\nSunXDCC Another XDCC file search engine\nxdcc.eu XDCC search engine indexing packets from a large number of networks\nDC++ # Direct Connect (protocol) Wikipedia page describing Direct Connect.\nDC++ Wikipedia page describing DC++\nAirDC++ :star2: Windows GUI and Linux Web DC++ client in active development, with ADC, IPv6 and DHT support.\nFlylinkDC++ Windows DC++ and BitTorrent client in active development, with ADC and DHT support.\nEiskaltDC++ Windows/Linux/macOS DC++ client, with ADC and DHT support\nLinuxDC++ Utilizing the latest DC++ core, LinuxDC++ offers similar functionality to the Windows client like segmented downloading, TTH based file integrity, etc. with a GTK+ user interface.\nTankafett List of public DC++ hubs, previously known as hublist.org and TheHubList.com.\nLinux DC++ Easy to configure and use DC++ client\nFull Movies On # /r/fullmoviesonyoutube\n/r/fullmoviesongoogle\n/r/fullmovierequest\n/r/Fullmoviesonvimeo\n/r/fulltvshowsonyoutube\n/r/fulltvshowsonvimeo\n/r/fullcartoonsonyoutube\n/r/FullLengthFilms\n/r/FullMovieonViooz\n/r/FullMoviesDailyMotion\n/r/1080pMoviesOnline\n/r/fullmoviesonopenload\n/r/BestOfStreamingVideo\nfullmoviesandtv multireddit All of the above subreddits as a multireddit\nPiracy Blogs and News # TorrentFreak :star2: TorrentFreak is a publication dedicated to bringing the latest news about copyright, privacy, and everything related to filesharing.\nTechWorm Techworm is a Tech, Cyber-security news platform.\nContent Discovery # Trakt.tv :star2: a platform that does many things, but primarily keeps track of TV shows and movies you watch.\nIMDb Find movies, TV shows, celebrities, and more\nMovieo Discover, organize and track over 250,000 movies.\nMetaCritic website that aggregates reviews of media products: music albums, video games, films, TV shows, and formerly, books.\npopular-movies Tries to create a list of popular movies based on a series of heuristics\nLetterboxd Your life in film\nSquawkr.io sends notifications when movies are available for download.\nWhat is my movie? AI-powered movie search. \u0026ldquo;Use your own words, or search with titles, actors, directors, genres etc. We find movies for you to watch.\u0026rdquo;\n2160p BluRay Remux List Complete list of all available 2160p remuxes\nFlox Flox is a self-hosted movie, series and anime watch list.\nTVmaze TVmaze is a community of TV lovers and dedicated contributors that discuss and help maintain TV information on the web.\nJustWatch On JustWatch you are able to find out where to watch your favorite movies \u0026amp; TV series\nWhereYouWatch Follow upcoming movies and receive email alerts when they are out online as a download or stream – pirated or via retail.\nFlickmetrix Movie database search engine with disc/Netflix/Prime filtering\ndvdsreleasedates.com The latest info on new Blu-ray and DVD releases\nSimkl Movie and TV show scrobbler similar to Trakt.tv\nPreDB Sites # Urban Dictionary: predb Urban Dictionary definition\nPreDB.org\nPreDB.me\nPREdb\nWarezBot Discord bot for scene releases.\nNSW Releases Nintendo Switch scene releases.\n3DS Releases Nintedo 3DS scene releases.\nNSWDBot A discord bot for scraping NSWDB.com for \u0026ldquo;Scene\u0026rdquo; releases.\nDashboards and Homepages # Muximux A lightweight way to manage your HTPC\nHeimdall An Application dashboard and launcher\nOrganizr :star2: HTPC/Homelab Services Organizer - Written in PHP\nweboas.is Homepage for pirates\nAnonmasky Anonmasky is a beautiful start page for geeks out there. Clone of weboas.is.\niDashboard-PHP HTPC Dashboard to load website services, written in PHP (predecessor to Organizr)\nHTPC-Manager A fully responsive interface to manage all your favorite software on your Htpc.\nMonitorr Self-hosted PHP-based web front platform that displays the status of any web app or service in real time.\nLogarr \u0026ldquo;Logarr\u0026rdquo; is a self-hosted, PHP-based, single-page log consolidation tool which formats and displays log files for easy analysis.\nProxy Sites # Unblocked :star2: a Proxy site for accessing your favorite blocked sites\nByPassed ByPassed is an all-in-one solution to unblock censored websites including thepiratebay, kickass, eztv, yts, extratorrent \u0026amp; more.\nFile Sharing Tools # transfer.sh Easy file sharing from the command line\nFilePizza Free peer-to-peer file transfers in your browser.\nDBREE DBREE is a simplistic and easy way to upload and share any type of file.\nWeTransfer WeTransfer was founded in 2009 as the simplest way to send big files around the world.\ndmca.gripe A dmca-resistant, permanent file hosting service.\nreep.io With reep.io you can transfer files directly to another browser.\nFireDrop 100GB free cloud storage.\nStream Synchronisation # /r/Movie_Club Where you can get together with strangers and watch a great movie every week!\nsync Node.JS Server and JavaScript/HTML Client for synchronizing online media\nwatch2gether Enjoy the internet in sync with your friends. Watch videos, listen to music or go shopping on Watch2Gether.\nSyncLounge :star2: A third-party tool that allows you to watch Plex in sync with your friends/family, wherever you are.\nNetflix Party Netflix Party is a Chrome extension for watching Netflix remotely with other users.\nCyTube Channel-based shared streaming platform for synchronized viewing of YouTube and Google Drive videos\nArconaiTV Another stream sharing platform with a nice UI\n\u0026amp;chill Watch videos with people.\nTelegram Piracy # Raymond\u0026rsquo;s Piracy Group A modest group of 1000+ pirates chatting on Telegram. This group replaces the now-defunct piracy group which suicideboy used to run.\nPiracy Links Portal Official invite links portal for piracy groups \u0026amp; channels.\npiratebazaar Curated list of piracy-related links.\n@itorrentsearchbot Search bot for finding torrent and magnet links on 1337x.to by keyword search\n@vkmusic_bot Find and download pretty much any song\n@RickyChristanto Channel for movie releases, usually from YTS in MKV format.\niMediaShare channel Movies, TV shows, apps, and more\n@movies_inc Another Telegram channel for downloading movies\n@Qualitymovies Lots of 720p Blu-Ray movie releases\n@MusicHuntersBot Another music downloader bot\n@DeezerMusicBot Music bot which downloads tracks from Deezer\nSMLoadrCommuntiy Telegram community for SMLoadr\naria-telegram-mirror-bot A Telegram bot to download files via HTTP(S)/BitTorrent and upload them to Google Drive.\nCrackWatch trackers Telegram channels for CrachWatch.com games \u0026amp; cracks by /u/SHADOWSLIFER.\nMiscellaneous # UK ISP Court Orders :star2: List of websites recently taken down in the UK by the High Court. Use a VPN to access them, they must be pretty good!\nCounterfeit and Piracy Watch List 2018\n/r/EmbyShares This subreddit is dedicated to the sharing of Emby servers.\n/r/freefolk Streams for new episodes of Game of Thrones\n/r/ProshotMusicals Subreddit for all those theatre obsessed people who want proshots instead of bootlegs to be seen.\nShodan Shodan is the world\u0026rsquo;s first search engine for Internet-connected devices.\nPi-hole Pi-hole is a Linux network-level advertisement and internet tracker blocking application which acts as a DNS sinkhole\nHow to use eMule in 2018 An up-to-date guide detailing how to use eMule to download rare content from the eDonkey and Kad P2P networks.\nAnon.to URL shortener to de-referer or null-referer your links.\nghostbin Secure Pastebin service\nMovie Release Types Table of common movie release types, their labels, and descriptions.\nHow To Host \u0026ldquo;Questionable\u0026rdquo; Websites v4.0 PDF from weboas.is. There are also PNG, PSD, and TXT versions\nPrivacy.com Privacy creates secure virtual cards and completes checkout forms for you, saving you time and money while masking your real card details.\n/f/Piracy Raddle forum for Piracy\n/s/piracy Saidit forum for Piracy - unofficiallly the backup forum for /r/Piracy if/when it is banned by the reddit moderators.\n/v/piracy Voat forum for Piracy - another potential fallback option for /r/Piracy.\n2019 Oscar DVD Screeners List of DVD screeners for 2019\u0026rsquo;s Oscars\nAcademy Awards 2019 Screeners Megathread Post by /u/idoideas listing all available DVDSCR releases for 2019\niNFekt A text viewer application that has been carefully designed around its main task: viewing and presenting NFO files.\nNFForce Another NFO viewer.\nHow To Get Everything On Netflix Posted by /u/huldre99\nTheTrove The Trove is a non-profit website dedicated to content archival and long-term preservation of RPGs.\nserials Serial keys for software that may or may not work.\nscenerules NFOs with rules and guidelines for scene releasing standards.\nSceneLinkList SceneLinkList is a project initiated to display and share as many scene and warez links as possible.\nTheWarezFolder Fairly out of date categorised list of warez sites.\ncastnow Castnow is a command-line utility that can be used to play back media files on your Chromecast device.\nGrabber Download stock images from Shutterstock\nThe Pirate Society A mysterious members-only forum for pirates.\nBandersnatch Interactive Player Online video player for watching the new interactive episode of Black Mirror, \u0026ldquo;Bandersnatch\u0026rdquo;.\nMultiup Website which allows you to upload files to several different file hosting websites.\nDirtyWarez Lists top warez sites with Alexa rankings and other metadata.\nMacGuffin Automated tools for handling Scene and P2P film releases.\nArchive of r/Piracy subreddit 2019-03-19 An archive of all gilded /r/Piracy comments and threads.\nPiracyArchive A complete backup of the Reddit /r/Piracy subreddit\nList of warez groups Wikipedia\u0026rsquo;s list of warez groups and individuals.\nContribute # Contributions welcome! Read the contribution guidelines first.\nLicense # To the extent possible under law, Igglybuff has waived all copyright and related or neighboring rights to this work.\n","date":"January 20, 2023","externalUrl":null,"permalink":"/2023/01/20/awesome-piracy/","section":"Blog","summary":"Awesome Piracy # A curated list of arrrrrrrrr! ! !\nContents # Preamble\n","title":"Awesome Piracy","type":"blog"},{"content":"https://github.com/ai-collection/ai-collection/blob/main/README.md\nIndex # Architecture \u0026amp; Interior Design\nCode\nGaming\nImage\nSpeech\nText\nVideo\nOther\nArchitecture \u0026amp; Interior Design # Name Title Description Offer Free Version Dimensions Dimensions - Rapidly Create Visual Concepts With Ai Imagine being able to create beautiful interior designs with ease – that’s what Dimensions offers :grey_question: Image Computer Generate Your Next Interior Design / Paniting / Fashion Collection / Concept Art Use our powerful AI technology to generate any type of image you can think of. In a matter of seconds :x: Interior AI Interior Ai: Interior Design Ideas Inspiration, And Virtual Staging App Using Artifical Intelligence Get interior design ideas using Artificial Intelligence and virtually stage interiors for real estate listings with different interior styles :white_check_mark: Makeit.ai Generative Design - Architecture Design Software - Maket Our generative design software enables architects, builders \u0026amp; developers to quickly generate thousands of architectural plans instantly :grey_question: ⬆ Back to Index\nCode # Name Title Description Offer Free Version AI Code Reviewer Ai Code Reviewer Automatic code review by AI :grey_question: Adrenaline Stop Plugging Your Errors Into Stackoverflow Adrenaline is a debugging assistant powered by the OpenAI Codex. It can fix and explain your broken code in seconds :white_check_mark: Ask Command Ask Command — Ai-Powered Developer Assistant A tiny app to remind you about those commands you always forget. Powered by AI :grey_question: CodeAssist Codeassist Is An Ai Assistant / Chatbot / Copilot For Programming - Jetbrains Marketplace It generates, changes, completes the code and answers questions :grey_question: CodeGPT Ai Inside Your Ide Improve your code with Code GPT AI :white_check_mark: CodeWP Codewp - Ai Wordpress Code Generator \u0026amp; Assistant CodeWP is a WordPress code generator that uses AI and specialized models for WordPress, Woo and others to help you build better \u0026amp; quicker :grey_question: Codeball Codeball €“ Ai Powered Code Review Codeball finds bugs in your Pull Requests, lets you ship faster and with higher confidence :grey_question: Codecleaningbot Code Cleaning Bot Code Cleaning AI Bot fixes common code quality and security issues. Like: deleting unused and unreachable code, fix SQL injection, etc :grey_question: Codeium Codeium The modern coding superpower :grey_question: Datamaker Ai Powered Webflow Code \u0026amp; Copy Tools For Designers If you are a Webflow Designer or Webflow Developer then you need to see these tools. Use AI to create code and copy to solve your Webflow problems :grey_question: Explain An Error Explain By Whybug Let AI explain to you why your code is buggy and how to fix it :grey_question: ExplainDev Explaindev - Code Explainer That Answers Your Questions In Context ExplainDev helps you to be more confident and independent with others\u0026rsquo; code. Get code explanations and direct answers to your questions via Chrome and VS Code extensions powered by AI :grey_question: Ghostwriter Replit: The Collaborative Browser Based Ide Run code live in your browser. Write and run code in 50+ languages online with Replit, a powerful IDE, compiler, \u0026amp; interpreter :grey_question: Github Copilot Your Ai Pair Programmer GitHub Copilot uses the OpenAI Codex to suggest code and entire functions in real-time, right from your editor :grey_question: Mutable.ai Mutableai. Ai Accelerated Software Development Build fast with production quality using AI :grey_question: Programminghelper Home Generate code with AI just by typing a text description. AI will create the code for you. A tool that helps you with a wide range of tasks. All in one place :grey_question: TLDR - Jetbrains IDE Plugin Tldr – Explain Code In Plain English TLDR is an IDE plugin that leverages AI to explain code in plain english :grey_question: Tabnine Ai Assistant For Software Developers - Tabnine Whether you’re part of a team, or a developer working on your own, Tabnine will help you write code faster – all in your favorite IDE :grey_question: Tensai Tensai - Conversational Ui For Your Codebase :white_check_mark: Whatthediff What-The-Diff – Ai-Powered Code Review Assistant The AI powered GitHub app that explains the changes within your pull requests in plain english :grey_question: ⬆ Back to Index\nGaming # Name Title Description Offer Free Version AI Dungeon Play And Create Ai-Generated Adventures With Infinite Possibilities :grey_question: Assetsai Ai-Powered, Unique \u0026amp; Curated Assets For Your Games :grey_question: Chess AI Betafish.Js - Chess Ai :grey_question: IRMO Made For Creation. The Very Best In Ai Apps Your Source for Mobile Entertainment \u0026amp; AI Art Creation :white_check_mark: Scenario Scenario Unlock the power of AI-generated gaming assets with Scenario. Generate engaging content quickly and easily to save time and spark creativity :grey_question: ⬆ Back to Index\nImage # Name Title Description Offer Free Version AI Art Latitude Ai Art :grey_question: AI Background Generator by PhotoRoom Photoroom - Remove Background And Create Product Pictures Create product and portrait pictures using only your phone. Remove background, change background and showcase products :grey_question: AI Holiday Cards Ai Holiday Cards AI engine to create AI Holiday photorealistic Cards for couples :grey_question: AI Image Enlarger Ai Image Enlarger - Enlarge Image Without Losing Quality! :grey_question: AI Picasso Ai Picasso Create Amazing artwork with Powerful AI! It generates an image from the text you enter, just as you expect using an AI called Stable Diffusion. Let\u0026rsquo;s enjoy making art with AI! :grey_question: AI Pokemon generator Generate Fakemon Using Ai :grey_question: AI Wall Decor Hydrogen Use Stable Diffusion to generate high quality framed art, without lifting a brush. Simply type what you want your painting to look like, generate your art, choose your favorite frame, and ship it :grey_question: AI2image Free Ai Image Generator - Online Text To Image App - Ai2Image Generate the best images online with Free AI Image Generator by AI2image. Use AI to generate high-quality images of any size and style you want! :white_check_mark: AIGraphics Ai Graphics Generate Graphics In Seconds Using AI :white_check_mark: AIVatar Aivatar - Magic Avatar Generator Generate magic avatar art from your photos :grey_question: AIprofilepic Create Stunning Profile Pictures Using Ai - Aiprofilepic.Art Create your perfect avatars in just a few clicks with our easy-to-use AI technology :grey_question: AVC AI Online Ai Image Enhancer That Improves Photo Quality By Upscaling, Denoising, Restoring, Face Refinement, And More :grey_question: Accomplice Ai-Powered Design Generation, Editing And Training Accomplice’s AI-powered platform helps your team generate 100% royalty-free logos, photos and graphics while saving time, cutting costs, and simplifying your workflow :white_check_mark: Ai Art Generator Ai Art Generator - Ai Image Maker - Ai Art Limited Ai Art Limited, creates images, videos, music, and article for you using artificial intelligence. With our app, you can become an artist using artificial intelligence :grey_question: Alltray Ai Image Generator With Gallery - Create And Browse Unique, Custom Images With Artificial Intelligence :grey_question: Alter Ego AI Ai Generated Images Of You In Heaps Of Styles :x: AnimalAI Animalai - Create Ai-Generated Animal Portraits Of Yourself Protect our planet\u0026rsquo;s wildlife with custom AI-generated animal portraits of yourself :grey_question: Anime AI Ai Anime Picture Generator - Anime Ai Create your perfect anime picture with AI. Choose between One Piece, Naruto, Webtoon styles and others! :grey_question: Anonymizer Generated Photos - Unique, Worry-Free Model Photos :grey_question: Appiconai App Icon Ai :grey_question: Artbreeder Artbreeder :grey_question: Article2Image Free Ai-Powered Stock Photos Download AI-generated stock photos for free, with the click of a button. Use in any project without worry about attribution :white_check_mark: Artshop Artshop Artshop brings amazing AI artworks to wall arts in your home and create welcoming addition to your beautiful home :grey_question: Autoportrait Autoportrait - Create Ai Portraits Browse millions of styles or create your own, generate AI autoportraits :grey_question: AvatarAI Create Your Own Photorealistic Ai Avatars Choose from 112+ different styles to transform into :x: Bg Eraser Bg Eraser - Magic Eraser For Picture Clean Up Powerful AI Inpainting and Picture Clean Up technology. Remove unwanted objects and clean up pictures in seconds :grey_question: CLIP STUDIO PAINT は、売上No.1＆利用率No.1*のイラスト、マンガ、アニメーション制作アプリ。みんな使ってるから、憧れの作風も再現できて、ノウハウもたくさん は、リアルで自然な描き味と充実の機能、驚くほど便利な素材が多数。世界中のユーザーがアップロードした10万点以上の素材をダウンロードすれば、ラクしてもっとクオリティの高い作品に。 :grey_question: Cartoonize Image To Cartoon Best AI cartoonizer online for free :white_check_mark: Character.io Free Tool To Generate Fresh Cartoon Characters Generate a random set of characters or avatars with the power of GANs. Press spacebar to generate a new set :white_check_mark: Claid.ai Claid.Ai: Automated Photo Enhancer For Ugc. Web, Mobile \u0026amp; Printing AI software to enlarge images with no quality loss, correct colors, increase resolution, retouch product photos and edit UGC automatically :grey_question: ClipDrop Replace Background Clipdrop Create professional visuals without a photo studio :grey_question: Clipdrop Clipdrop Create professional visuals without a photo studio :grey_question: Colorize Colorize Photo Online :grey_question: Cutout Pro Cutout.Pro - Ai Photo Editing - Visual Content Generation Platform, Best For Image And Video Design All-in-one visual design platform containing AI photo and video editing tools. Automatic process for background remove, image restoration, graphic design, and content generation :grey_question: DALL·E 2 Dall·E 2 Is A New Ai System That Can Create Realistic Images And Art From A Description In Natural Language DALL·E 2 can create original, realistic images and art from a text description. It can combine concepts, attributes, and styles :white_check_mark: DaVinciFace Ai Portrait - Davinci Face Made By Mathema DaVinci Face is a software – based on the most innovative Artificial Intelligence techniques, in particular on GAN (Generative Adversarial Network) to create Leonardesque-style portraits :grey_question: Deep Dream Generator Human Ai Collaboration Create inspiring visual content in a collaboration with our AI enabled tools :white_check_mark: Deep Nostalgia Arbore Genealogic Gratuit, Genealogie Şi Istoric De Familie - Myheritage :grey_question: Designify Designify - Turn Any Photo Into Awesome Create exceptional product photos and more: Pick any image to start the magic ✨ :grey_question: Dezgo Dezgo.Com Generate high-quality images from any text prompt. Let the AI draw! :grey_question: Diffusion Land Diffusion Land - Generate Images With Ai Generated images with 1-click, using any model of your choice :white_check_mark: Draw Things Draw Things: Ai-Assisted Image Generation :grey_question: DreamPic Dreampic.Ai AI Generated Pictures Starring You :grey_question: DreamUp Dreamup The DeviantArt DreamUp™ AI-art generator lets you create AI-art safely and fairly :grey_question: Dreambooth High Quality Artwork In Seconds :grey_question: Dreamlike Ai Art Generator, Ai Art Maker - Dreamlike.Art :grey_question: Dreamspace.art Dreamspace The prompt diagramming tool :grey_question: Dreamstudio :grey_question: Dreamweaverai Custom Ai Tees Build the tee of your dreams with AI :grey_question: EpicAvatar Epic Avatar - Ai Profile Picture Generator Make your own state-of-the-art AI avatar profile pictures :grey_question: Erase.bg Free Background Image Remover: Remove Bg From Hd Images Online - Erase.Bg Make the background transparent for images of humans, animals, or objects. Download images in high resolution for free for e-commerce and personal use. No credit card needed :white_check_mark: ExtendImage Extendimageai - Extend Your Images With Generative Ai ExtendImageAI is a tool that allows you to extend your images with generative AI :grey_question: Eye for AI Easy Text-To-Image Tools And Templates Create images from text in under a minute :white_check_mark: Face Swapper Face Swapper Online Swap face from photos and vidoes automatically. Free and unlimited photo swapping :white_check_mark: Face-generator Generated Photos - Unique, Worry-Free Model Photos :grey_question: Facet 2.0 Facet: Image Creation, Reimagined Harness the power of AI to make the creative process fast, effective and accessible. Experiment with visual directions, automate selections, and collaborate\u0026ndash;all on the web :grey_question: FashionAdvisorAI Fashionadvisor.Ai - Ask Questions \u0026amp; Get Answer\u0026rsquo;S From Fashionadvisor.Ai FashionAdvisor is an AI based on GPT3 which will answer all your fashion related questions instantly for free :grey_question: Fermat Creativity Augmented For Content Creation Unleash your creativity with AI on a collaborative canvas :grey_question: Flying Dog for Photoshop Ai Superpower For Photos​Hop Four powerful AI connectors: Three for Stable Diffusion and DALL-E 2. Use your own Stable Diffusion Server :grey_question: For the Wall For The Wall - Ai Generated Wall Art - Forthewall.Art Create your own unique and personalized art prints with forthewall.art! Our AI-powered platform lets you generate stunning works of art from scratch. Order your one-of-a-kind print today and transform your blank walls into something special. Try it out now at forthewall.art! :grey_question: Generated Photos Generated Photos - Unique, Worry-Free Model Photos :grey_question: Getimg.ai Everything You Need To Create Images With Ai - Getimg.Ai Magical AI art tools. Generate original images, modify existing ones, expand pictures beyond its original borders, and more :grey_question: Graphic AI Ai Assisted Work Collaboration Platform For Teams Stork helps teams improve communications and productivity. It is a Business Messenger for Hybrid \u0026amp; Remote Teams that Records and Transcribes All Meetings and Calls automatically. Made for asynchronous post pandemic world and assisted by artificial intelligence :grey_question: Green Screen AI Change The Background Of Any Image With Ai Green Screen AI is a fun \u0026amp; easy way to transform your pics into generative AI art :grey_question: Hairgen Preview Your Fue/Fut Hair Transplant Using Ai - Hairgen.Ai :grey_question: HairstyleAI Try Out New Hairstyles With Ai - Hairstyle Ai Ready for a new look? Upload you photos and let artificial intelligence technology generate new hairstyles for you. Try it out today! :x: Hama Hama Amazing photo eraser :grey_question: HeroPack Heropack Become a Hero with AI generated avatars inspired by your favorite video games :grey_question: Hotpot Hotpot.Ai Hotpot.ai helps you create amazing graphics, pictures, and text. AI tools like AI Art Generator spark creativity and automate drudgery while easy-to-edit templates empower anyone to create device mockups, social media posts, marketing images, app icons, and other work graphics :grey_question: IMGCreator Create Any Image Using Text - Imgcreator.Ai :grey_question: IMGN - Image Engine Imagine Ai – Advanced Tech Made Easy To Use :grey_question: IllostrationAI Illostrationai Create AI-generated illustrations. In seconds :grey_question: Imaginator Imaginator - Turn Your Text Into Images Imagine being able to see your thoughts come alive in front of you. No longer just a thought, an image now becomes the reality :grey_question: Imagine Me Home - Imagine Me Imagine Me is the first online platform that lets you generate stunning AI art of yourself, with just a simple line of text :grey_question: Imajinn AI Children\u0026rsquo;s Book Imajinn Ai Visualization re-imajinned with fine-tuned AI. Generate profile pictures, product images, brands and styles limited only by your imagination! :grey_question: Imgupscaler Smart Png / Jpg Image Upscaler Upscale and enhance your image by using the latest AI technology :grey_question: Inpainter Inpainting With Stable Diffusion \u0026amp; Replicate :grey_question: Iwear.art I Wear Art Create unique art with AI, and wear it on your apparel :grey_question: Kiri.art Kiri.Art Diffusion Image Generation :grey_question: Krea Ai Canvas Introducing the AI Canvas, by Krea :grey_question: Leonardo Leonardo.Ai Generate production quality assets for your creative projects with AI-driven speed and style-consistency :grey_question: Lightricks Home To Creators Everywhere Experience the magic of creating with the best tools and services for creators: Facetune 2, Videoleap, Linkinbio \u0026amp; Photoleap. Check it out now! :grey_question: Mage Space Create Anything :white_check_mark: Magic AI Avatars Get 200+ custom avatars made by artificial intelligence :grey_question: Magic Avatars :grey_question: Magic Eraser Magic Studio - Powered By Ai, Created By You Magic Studio helps you automatically edit and create images, using AI :grey_question: MagicPic Magicpic - Ai Profile Picture Generator Your profile picture is the first thing people see when they look at your profile. We use artificial intelligence to generate an magical avatars of you :grey_question: Neuralcanvas Neural Canvas - Ai Comic Generator Express your creativity with the support of AI - Create AI Generated Illustrations for your comics, blogposts, e-book, graphic novels and more :grey_question: Not Me Netlify Autoportrait - Create Ai Portraits Browse millions of styles or create your own, generate AI autoportraits :grey_question: PIXELVIBE Ai Streamlined Creative Workflow Create Presentations, Designs, Stock Photos, Instagram Promos, Product Photography, Vector Art, Animated Avatars :grey_question: Palette Palette - Colorize Photos A new AI colorizer. Colorize anything from old black and white photos 📸, style your artworks 🎨, or give modern images a fresh look 🌶. It\u0026rsquo;s as simple as instagram :white_check_mark: Partly Mind-Blowing Art From Your Photos, By Partly Ai Transform your photos into works of art with the help of AI magic! :grey_question: PhotoFix Photofix - Magically Edit Photos With Ai :grey_question: PhotoLeaf Photoleaf Ai Create your AI-generated social media pictures :grey_question: Photorestoration Old Photo Restoration Online - Photorestoration.Ai :grey_question: Photospells Photo Spells - Professional Photo Edition With Ai :grey_question: PicasaAI Picasa Ai Create your AI-generated social media pictures :grey_question: Pictureperfect Ai Avatar Generator And Maker - Pictureperfect.Ai Get creative and design your own personalized avatar with the help of AI technology. Simply upload a photo and our system will generate a unique avatar that represents you. Share your picture perfect avatar with friends and family on social media and let your creativity shine! :grey_question: Pixian Remove Image Backgrounds, Free Hd, No Signup - Pixian.Ai Remove Image Backgrounds, Free HD, No Signup :white_check_mark: Proface Avatarize Create High Quality AI-Generated Avatars :grey_question: Profile Picture Profile Picture Art :grey_question: Quasi We Make Creating With Ai Easy Unlock with the power of AI and easily create stunning content of all types with a simple-to-use platform :white_check_mark: Re.Art AI Image Generator Generate An Image. Imagine Anything You Want To Imagine! This AI Image Generator Built using Stable Diffusion. To Keep This Service Alive You can support Developer :white_check_mark: ReflectMe Reflectme. - Generate Your Ai Avatars! See yourself in a way you never have before! Generate your AI avatars, AI photos, AI photographies, profile pictures, LinkedIn professional profile photos, using artificial intelligence! Built on Stable Diffusion and Dreambooth :grey_question: Removal.ai Background Remover - Create Transparent Background Remove background online from image using background remover. Create transparent background - Download high-resolution instantly \u0026amp; free :white_check_mark: Remove.bg Remove Background From Image – Remove.Bg Remove image backgrounds automatically in 5 seconds with just one click. Don\u0026rsquo;t spend hours manually picking pixels. Upload your photo now \u0026amp; see the magic :grey_question: Remover.app Removeanythingunwanted In Seconds, For Free :white_check_mark: Roll Art Die Stablediffusion On Your Apple Silicon Devices Generate AI Artworks using only text. Make your dream artworks into reality. No cloud subscription required :white_check_mark: RunDiffusion Rundiffusion - Stable Diffusion Workspace In 3 Minutes No code to fiddle with, nothing to install. Get a private Stable Diffusion workspace in very little time. Start creating AI Generated art in a little as 3 minutes :white_check_mark: SceneryAI Sceneryai Generate or update existing images with our AI image editing tool :grey_question: Scum Describe Anything :white_check_mark: Seek art Create Astounding Ai Art Explore, collect, and share. No cost to start. Free credits every day :white_check_mark: Short Description Image Generator Short Description Image Generator From a short description and based on the database from MagicPrompt-Stable-Diffusion from HuggingFace + the API of StableDiffusion; images can be created based on few words :grey_question: Silly Times A Simple Drawing App Using Ai Have a fun time drawing and see what silly thing we make from your drawing. Magic is just button press away! :white_check_mark: Slazzer 3.0 Remove Background From Image For Free Remove background from image automatically in 5 seconds. Don\u0026rsquo;t waste time manually selecting pixels. Just upload photo \u0026amp; get instant cutout :white_check_mark: SnapshotAI Snapshotai Create your own AI-generated images :grey_question: Snowpixel Turn Your Prompt Into Artwork You + AI = Art. Get 20+ AI generated images for each prompt, upload existing images for even more on-brand illustrations, and animate them :x: Soreal.AI Studio The Easiest Way To Get Started With Ai Image Generation Type anything you want to see. Get custom AI images in seconds :white_check_mark: StableCog Stablecog Free, easy to use, multilingual and open-source AI image generator using Stable Diffusion :white_check_mark: Stableboost Create Personalized Images With Ai! Upload a few photos of yourself, a loved one, a pet, a product, or a style you like, and we will automatically train an AI model to generate portraits of you in hundreds of different styles :x: StarByFace Celebrity Look Alike Face-Recognition App - Celebs Like Me What celebrity do i look like? Try to find out! Celebrity look alike face-recognition system. Find your doppelganger :grey_question: Stillgram Stillgram™ - A.I. Travel Photo Camera App For Iphone® Stillgram is an A.I. point \u0026amp; shoot camera app that magically removes background crowds from your urban/travel photos :white_check_mark: Stylized The Better Way To Take Product Photos From phone to catalog in 30 seconds :grey_question: TattosAI Ai-Powered Tattoo Artist - Tattoosai If you have an idea for a tattoo but can\u0026rsquo;t find the right design, let our AI generate one within seconds. It lets you create the perfect design based on what you like, and it will give you unlimited options so that there\u0026rsquo;s something for everyone :grey_question: Text To Book Cover Ai Image Generation For Teams - You Can Easily Generate Ai Logo, Ai Book Covers, Ai Posters And More - Stockimg Ai AI image generation for teams - You can easily generate AI logo, AI book covers, AI posters and more - Stockimg AI :grey_question: Text2present Text2Present.Com - Creative Presents From Busy People Allows you to create creative customized presents using artificial intelligence for your friends, family and acquaintances without taking your precious time. Simply enter a text description of what you want to gift and let our artificial intelligence do the rest :grey_question: Theoasis Oasis €“ Never Worry How You Look On Camera Again Create a photorealistic avatar that you can use on every video platform :grey_question: Topaz Photo AI Topaz Labs: Ai Image Quality Software Photo and video enhancement software powered by deep learning gets you the best image quality available for noise reduction, sharpening, upscaling, and more :grey_question: Tryitonai Stunning Professional Headshots \u0026amp; Portraits - Try It On Ai Get professional studio quality headshots generated in less than 24hrs! Perfect for LinkedIn, social, team and dating photos :grey_question: Unfake Ai Tool That Can Turn Annoying Fake.Png Into True, Unfake.Png Don’t you hate it when you find that perfect, supposedly background-less Image, and download it, but when you go to use it, the dreaded checkerboard appears? :white_check_mark: Zazow Zazow :: Algorithmic Generative Art Create your own artwork by using computer generated algorithms. Learn about generative or algorithmic art :grey_question: Zoomscape Zoomscape.Ai Create stunning Zoom backgrounds with AI :grey_question: flair The Ai Design Tool For Branded Content :white_check_mark: jpgRM Jpgrm - Ai Image Magic Cleanup Using 2022 cutting edged AI model to remove any unwanted objects from your images, automatically fill the background :grey_question: jpghd Jpghd - Lossless Restoration Of Old Photos With Ai Using 2022 cutting-edge AI models for lossless restoration of old photos (supports old, scratched photo restoration, colorization, and Magic Photo) :grey_question: pixificial Pixificial: Create Your Ai Avatars, Ai Profiles For Free Create Your AI Avatars, AI Profiles For Free :white_check_mark: ⬆ Back to Index\nMusic # Name Title Description Offer Free Version Quasi Music Create Brand-New Beats Unleash your inner musician with Quasi\u0026rsquo;s AI-powered music creation tool. Create never-before-heard sounds and remix classic artists with ease :white_check_mark: ⬆ Back to Index\nSpeech # Name Title Description Offer Free Version Adobe Speech Enhancer Enhance Voice Recordings For Free Speech enhancement makes voice recordings sound as if they were recorded in a professional studio :white_check_mark: Lingostar Lingostar - Real Conversations With Artificial Intelligence Lingostar is the AI who language learners can speak to in English, Spanish, or French. Reach fluency with REAL spoken conversations for free. No more tutors - chat with the Lingostar A.I. to improve your pronunciation, vocabulary, and comprehension :white_check_mark: Quazel Quazel :grey_question: ⬆ Back to Index\nText # Name Title Description Offer Free Version AI Answers by Cohere Conversational Ai Platform For Customer Support - Cohere AI-powered support assistance that finds answers from previous tickets :grey_question: AI Review Reply Assistant Respond To Reviews With Your Ai Review Reply Assistant AI review reply generator: Reply 3x faster to every customer review with individual responses written by your personal AI assistant. No templates are needed :grey_question: AIchristmascards Ai Christmas Cards Create \u0026amp; mail unique holiday greetings in minutes - from just $1.99 :x: Aiappideas Ai App Ideas :grey_question: Artistator Generate Artist Names Of Your Favourite Music Genres :white_check_mark: Ask RBG What Would Rbg (Probably) Say? An AI experiment: Ask Justice Ruth Bader Ginsburg to make a decision about any question your heart desires. The first AI Drop from AI21 Labs :grey_question: Askmybook Ask My Book: The Minimalist Entrepreneur :grey_question: Autoname Rename All Your Layers In One Click. Thanks To Ai. Open Source Rename Figma frames in one click, that\u0026rsquo;s pretty much it :grey_question: BLOONY Bloony - Ai Chatbot Hop on ChatTrip! :grey_question: Bahasa Bahasa.Ai - Chatbot Which Serves Customers Fully Automation that helps your business serves millions of happy customers fastly—powered by AI specially built for Bahasa Indonesia :grey_question: Bookclub Bookclub.Ai - Meet Your Next Book :grey_question: Botify Botify Ai Fun chat with your favorite characters :grey_question: Chai Chai - Chat With Ai Chai is a THE destination for compelling conversations with AI. On Chai, you can build and deploy AI chatbots to thousands of users :grey_question: ChatBCG Chatbcg: Generative Ai For Slides ✨ Instantly create slide decks using ChatBCG :grey_question: ChatGPT :grey_question: ChatGPT Writer :grey_question: Childbook Welcome To Children\u0026rsquo;S Book Creator! Your book will be personalized with characters, pictures and story. The story and illustrations also have a text-to-speech feature and can be listened to :grey_question: Clickable Generate Ads In Seconds With Ai Beautiful, brand-consistent, and highly converting ads for all marketing channels. No design experience needed :grey_question: Content brief generator Seo Content Optimization Software - Dashword Dashword is the #1 content optimization software for SEO teams. Create relevant content for your readers and grow your organic traffic :grey_question: Cover Letter AI Cover Letter Ai The ultimate tool for crafting the perfect cover letter :grey_question: Cover Letter Kit Cover Letter Kit - Ai-Powered Custom Cover Letters In Minutes Write your cover letter and prepare for your interview with help from AI! Land your dream job with a professional, custom-made, and effective cover letter kit :grey_question: Coverletterwrite Cover Letter Write Ask AI to write a personalized cover letter :grey_question: Deciphr AI Deciphr Ai Powered by deep AI, Deciphr timestamps and summarizes your entire podcast transcript for you. In less time than it takes to make coffee :white_check_mark: Diffusion.chat Diffusion Chat :grey_question: Digital Dogs The Digital Dogs™ Cross-app, AI Digital Dogs NFTs for Virtual worlds, VR, AR, social apps, games and more :grey_question: DraftLab Draftlab Ai: Write Better Emails Faster With Ai Fight writer\u0026rsquo;s block and achieve inbox zero. DraftLab is an AI-powered Gmail copilot that generates high-quality email replies for you :grey_question: EddyAI :grey_question: Ellie Ellie - Your Ai Email Assistant Ellie learns from your writing style and crafts replies as if they were written by you :grey_question: EmailTriager Emailtriager · Email On Autopilot At EmailTriager, we build products that do work on your behalf :grey_question: Excelformulabot Excel \u0026amp; Google Sheets Ai Formula Generator - Excelformulabot.Com Transform your text instructions into Excel \u0026amp; Google Sheets formulas in seconds with the help of AI :grey_question: Excuses AI Excuse Generator Use AI to generate the perfect professional excuse :grey_question: Explainpaper Explainpaper :grey_question: Filechat Explore Documents Using Artificial Intelligence Filechat is the perfect tool to explore documents using artificial intelligence. Simply upload your PDF and start asking questions to your personalized chatbot :white_check_mark: Formula Dog Generate Excel Formulas And More Using Ai - Formula Dog Transform your text instructions into Excel formulas, VBA, Regex etc. in seconds with the help of AI :grey_question: Formulagod One Formula To Rule Them All Talk to sheets with built-in artificial intelligence :grey_question: GPT ChatBot The Best Way To Build Web Apps Without Code Bubble introduces a new way to build a web application. It’s a no-code tool that lets you build SaaS platforms, marketplaces and CRMs without code. Bubble hosts all applications on its cloud platform :grey_question: GPT Hotline Gpt Hotline Connect with the world\u0026rsquo;s smartest AI on WhatsApp :grey_question: Gandhiji Messengerx.Io - Chat With Ai AI Powered Chat Apps for Everyone :grey_question: Geniusreview Geniusreview - 360° Ai Performance Reviews Save tons of hours by using GeniusReview to get tailored answers to your performance review questions :grey_question: GoalsGPT Tability - Get Your Goals Out Of Spreadsheets The easiest way to keep track of your OKRs and team goals. Align your team around outcomes – without feeling like a chore :grey_question: Goatchat Goatchat Ai - Avatar Chatgpt Did you ever want to ask Napoleon or Einstein a few questions? Well, now you have a chance :grey_question: God In A Box God In A Box - Gpt-3.5 On Whatsapp Use ChatGPT/GPT-3 on Whatsapp with our friendly bot. Always updated to the latest model and priced affordably. We are the first ever paid ChatGPT on Whatsapp service :grey_question: H-supertools AI Writer Ai Writer: Generate Content For Free! Generate Blog Sections \u0026amp; Paragraphs in Seconds With This Powerful Free AI Writer :white_check_mark: Hello History Hello History - Chat With Ai Generated Historical Figures With the help of modern AI \u0026amp; machine learning we’ve brought historical figures back to life. Now is your chance to ask the questions you’ve always wanted to ask :grey_question: Historical Figures Chat :grey_question: Hoppy Copy Hoppy Copy: Ai Email Marketing Copywriting Platform Save countless hours writing. Use AI to generate powerful copy for hundreds of different email marketing campaigns, drips, newsletters and more—in seconds ⚡ :grey_question: Infiniteconversation The Infinite Conversation An AI generated, never-ending discussion between Werner Herzog and Slavoj Žižek :grey_question: Jot Jot - Ai Ad Copy Jot automagically generates infinite ad copy variations for you using AI. Streamline your team\u0026rsquo;s copywriting processes with artificial intelligence. Powered by OpenAI GPT-3 :grey_question: Justlearn Ai Friend, Chat \u0026amp; Call - Justlearn AI Friend, Chat \u0026amp; Call app designed to teach you anything. Voice. Diary. Music. Workout :grey_question: Kidotail Kidotail Ai A New Way to Ignite Your Child\u0026rsquo;s Imagination. Endless Storytelling Possibilities :grey_question: Langame card game Ai-Generated Conversation Card Game To Enjoy With Your Friends \u0026amp; Family Create your personalized deck of cards and play with your friends. Select which cards should be part of your own deck by swiping 💅 :grey_question: Lexii.ai Lexii.Ai Lexii.ai is an AI search assistant that answers questions and cites sources :white_check_mark: Myess Myessai - Ai Powered Essay Tutor Supercharge your writing with instant, highly detailed feedback from our AI tutor. Real, actionable feedback - not just another Grammarly :grey_question: Namelix Business Name Generator - Free Ai-Powered Naming Tool - Namelix :white_check_mark: Namewizard Namewizard.Ai - Your Ai-Superpowered Domain Name Generator namewizard is the generator that uses AI to find the perfect business and domain name for your next project :grey_question: Neural Formula Formula Generator - Neural Formula :grey_question: Octie.ai Octie.Ai - Your A.I. Ecommerce Marketing Assistant Write emails, product descriptions, and more, with A.I. Created by Octane AI :grey_question: Oracle Oracle - Get Instant Answers From All Your Knowledgebase Get instant answers to all your burning questions with Oracle. Simply ask on Slack and let our AI generate an answer for you. Connect Oracle to Slack, Google Docs, and Confluence with just one click and maximize your productivity :grey_question: Philosophy Ask A Philosopher :grey_question: Politepost Rewriting Your Emails With Ai To Be Professional Make sure your emails are professional and suitable for the workplace. Write your draft with all your slang and expletives, and our AI bot will rewrite and clean up the text :grey_question: Promptmakr The Platform For Prompt Engineers To Generate And Share Unlimited Ai Art Prompts For Free :white_check_mark: Proposalgenie Proposal Genie Write the Perfect Upwork proposal in seconds :grey_question: Quicklines Quicklines Lifetime Access - Only $59 Quicklines is your new AI powered cold outreach assistant. We help you scale your cold email campaigns with our in-depth social scraping and natural language first-line writing platform :grey_question: Rapidreply Rapid Reply - Ai Email Assistant Save 30 minutes a day writing emails :grey_question: Recruiting Emails AI by Dover Dover - Generate Customized Recruiting Emails :grey_question: ReplAI Replai - Reply Quickly With Ai :grey_question: ResolveAI Resolveai Our AI chatbots are designed to understand customer issues and provide tailored, accurate responses in real-time :grey_question: Scarlettpanda Scarlett Panda - Customized Short Bedtime Stories Scarlett Panda - use our magic to generate customized bedtime stories featuring your friends and family :grey_question: Scholarcy Online Summarizing Tool - Flashcard Generator \u0026amp; Summarizer - Scholarcy Scholarcy™ is an online summarizing tool that generates and converts long articles into summary flashcards. Sign up free \u0026amp; start summarizing :white_check_mark: Sheet AI Sheetai App - Unlock Ai Power In Your Google Sheets SheetAI is a Google Sheets add-on that helps you unlock the power of AI in your spreadsheets :grey_question: SheetGod Form Approval Workflow Software - Google Forms Add On :grey_question: Smartwriter Smartwriter - Personalised Ai Cold Emails Use AI to create highly personalised cold emails or Linkedin messages that convert readers to customers. No experience needed. Find leads, create tailored personalised copy and make sales. AI Cold Emails :grey_question: Smarty Names Free Creative Domain Name Search By Ai Robots Finding a creative and unique domain that is still available is easy with SmartyNames.com - Tell us what you do, and our robots will find the domain that is just right for you. Company name generator in one click :white_check_mark: Sona Read This Twice - Books Worth Reading Twice Verified book recommendations from people we look up to :grey_question: Speakingclubai Speaking Club Ai Welcome to Speaking Club AI - the ultimate language learning tool for anyone looking to improve their speaking skills in a foreign language. With Speaking Club AI, you can practice your conversation skills with a personalized AI language partner anytime, anywhere :grey_question: Spellbox Spellbox - Ai Programming Assistant SpellBox uses artificial intelligence to create the code you need from simple prompts. Solve your toughest programming problems with AI in seconds! :grey_question: Splitjoin Splitjoin AI assistant to help you write commit messages faster :grey_question: StoriesForKids Storiesforkids.Ai: Personalized Kid\u0026rsquo;S Books Using Ai Turn real-life situations into fun stories \u0026amp; illustrations in seconds :grey_question: Storywizard Storywizard.Ai - Create Incredible Children`S Stories In No Time Using Ai Storywizard uses AI to help you generate astonishing stories for children with vivid images and beautiful plots :grey_question: Sudowrite Bust Writer\u0026rsquo;S Block And Be More Creative With Our Magical Writing Ai Write your novel or screenplay faster with best AI writing tool according to The New Yorker, NY Times, The Verge, and many more :grey_question: Talk to AI Human Talk To Ai Human :grey_question: Texti Texti.App :grey_question: Ubie AI Symptom Checker Check Symptoms \u0026amp; Find Causes By Ai Check Symptoms \u0026amp; Find Causes by AI - Answer quiz about your symptoms to find out possible causes, types, severity, and treatment for free by AI. Developed by doctors :white_check_mark: Warmer.Ai Warmer.Ai - Ai Email Writer Warmer uses AI email personalization to write your email outreach. Increase replies, meetings and sales with dynamic personalization :grey_question: WordAI Ai Text Rewriter - Wordai Use artificial intelligence to cut turnaround time, extend your budget, and create more high-quality content that Google and readers will love :grey_question: Writemeacoverletter Write Me A Cover Letter Generate a cover letter in seconds using AI. Just upload your CV, share a link to the job you want, and we\u0026rsquo;ll do the rest :grey_question: Your Cover Letter Ai Cover Letter Builder - Upload Your Resume To Get Started Apply for your dream jobs using our AI Cover Letter builder. Add your Resume and the Job Description to generate a Cover Letter in seconds :grey_question: coverletter.app Custom-Made Cover Letters Ready In Minutes Not Hours - Coverletter.App Stand out from the competition and increase your chances of getting hired with personalized cover letters from our advanced AI technology :grey_question: heyy.ai Automate Content Creation For Your Small Business Leverage all the best AI generation tools in one place designed to automate content creation for small business, online shops and creators :white_check_mark: superReply Upgrade Your Email Game The Email Response Hack You\u0026rsquo;ve Been Waiting For - Easily send effective replies with tailored responses without writing from scratch :white_check_mark: ⬆ Back to Index\nVideo # Name Title Description Offer Free Version Boolpic An Intelligent Video Platform That Empowers Brands Generate on-brand videos 10X faster with AI to boost marketing performance :grey_question: Deepfakesweb Make Your Own Deepfakes [Online App] Our easy to use deepfake app uses AI and Deep Learning to generate amazing face swap videos. Make your own deepfake video today :grey_question: FilmForge Filmforge Ai Instantly generate engaging videos. Captions, voiceover, transcript, and graphics included :grey_question: Pictory Video Creation Made Easy Automatically create short, highly-sharable branded videos from your long form content :grey_question: Vidboard AI :grey_question: Wzrd.ai Experience Your Sound WZRD augments your audio with immersive video powered by artificial intelligence :grey_question: ⬆ Back to Index\nOther # Name Title Description Offer Free Version 1Case Custom Phone Cases Made By Ai Find your 1 of a kind case in seconds :grey_question: AI Car Diagnosis Car Diagnosis Ai Get real-time diagnostics and insights into your car’s performance with our cutting-edge tool :grey_question: AI Content Generator Yep.So - From Idea To Signups In 15 Minutes :grey_question: AI Data Sidekick Airops - Data Unlocked. 10X Faster With Ai :grey_question: AI Host Livereacting - Interactive Live Video Streaming Get more followers and engagement for your live videos adding pre-recorded videos, games, graphics, and polls directly in your stream :grey_question: AI Image Upscaler Ai Image Upscaler - Enlarge \u0026amp; Enhance Your Photos For Free Upscale your image to 2x or 4x without losing any textures or details with our AI tool. Use our super-resolution tool and bring new life to your images :white_check_mark: AI Lyrics Generator Artificial Intelligence Songwriter – These Lyrics Do Not Exist Generate your own song lyrics for any topic, also choose lyrics genre and lyrics mood :grey_question: AI Mint Ai Mint :grey_question: AI Paraphrasing Tool Contentbot - Ai Writer - Ai Content For Founders And Content Marketers :grey_question: AI Pickup Lines Generator Ai Pickup Lines :grey_question: AI Profile Pictures Ai Profile Pictures Now available in beta :grey_question: AI Project Description Generator :grey_question: AI Prompt Generator Fiction :grey_question: AI Query Ai Query - Generate Sql Queries With Ai In Seconds Use simple English and let AI do the heavy lifting for you. With AI Query anyone can create efficient SQL queries, without even knowing a thing about it :grey_question: AI Recipe Generator Ai Recipe Generator :grey_question: AI Rental Cover Letter 🏡 Sharehouse - Free Housemate Finder Connect with Sharehouses, Housemates Or Flatmates. Freely List \u0026amp; Advertise Your Room, House, or Flat :grey_question: AI Resume Editor Rezi - The Leading Ai Resume Builder Trusted By 352,894 Users :grey_question: AI Room Planner :grey_question: AI SQL BOT Ai Sql Query Builder: Easiest Way To Build Sql Queries Without Prior Sql Knowledge - Sql Query Builder Using Ai :grey_question: AI Social Bio Ai Social Bio :grey_question: AI Social Media Post Writerby Socialblu Socialbu - Social Media Management And Automation SocialBu is the perfect solution to improve your social media presence and maximize your results. Publish, Respond, Analyze, and Automate - all from within SocialBu :grey_question: AI Sports Prediction Ai Sports Betting Predictions - Sports Prediction Ai :grey_question: AI TWO Aitwo.Co - The Ai-Powered All-In-One Design Platform :grey_question: AI Time Machine Arbore Genealogic Gratuit, Genealogie Şi Istoric De Familie - Myheritage :grey_question: AI Trip Planner Build Ai :grey_question: AI Writer by Picsart Edit Images, Videos \u0026amp; Documents For Free - Quicktools By Picsart Creating transparent backgrounds for your images, trimming videos, and converting file types - do it all with Quicktools :white_check_mark: AI movie Club Ai-Movie Club AI-MOVIE CLUB is a social network that create movies with artificial intelligence! :grey_question: AI-Writer Ai Writer™ - The Best Ai Text Generator, Promised AI-Writer is the most accurate content generation platform, using state-of-the-art AI writing models to generate articles from just a headline :grey_question: AIArt Aiart.Dev :grey_question: AIKIt Aikit - Your Wordpress Ai Assistant Using Gpt-3 :grey_question: AIduh Ai-Responder For Hostaway - Ai Duh Chrome extension that cuts your writing time by 98% with AI-powered responses. Built by Hosts for Hosts :grey_question: AIimages Aiimag.Es Free\u0026amp;Easy Text2Image AI :white_check_mark: ARTI.PICS Ai-Powered Avatar Maker Arti.Pics allows you to upload a few photos of yourself and generates more than 200 cool-looking avatars in different styles :grey_question: ARTSIO Artsio :grey_question: Adobe Mic Check Check Your Mic For Free Get advice on how to improve your microphone setup. We’ll make sure you sound podcast-ready :white_check_mark: Adobe Podcast Adobe Podcast - Ai Audio Recording And Editing, All On The Web An audio tool for people with stories to tell :grey_question: Adobe Podcast 276 Ai Tools :grey_question: Aida Bookmark.Com - No-Code Website Builder To Start Your Business :x: Aiva Aiva - The Ai Composing Emotional Soundtrack Music :grey_question: Albus Albus - Chatgpt Now On Slack Albus uses natural language processing technology to help you find answers to all your questions without leaving Slack. Have the power of ChatGPT now right inside your Workspace! :white_check_mark: Alfred Alfred - Gpt Chat On Mobile :grey_question: Altera AI Altera: The Ai Chrome Extension For Linkedin Salespeople :grey_question: Amadeus Code 株式会社Amadeus Code - 公式企業サイト 企業情報、採用情報、投資家情報、ニュースなど、Amadeus Codeの企業情報全般を提供する公式企業サイトです。 :grey_question: Amper AI Ai Music Composition Tools For Content Creators Amper is an AI music composition company that develops tools for content creators of all kinds. Learn about our new enterprise platform, Score, as well as our creator API :grey_question: Andisearch Andi - Search For The Next Generation :grey_question: AnimeMaker Ai Anime Maker /// Ai Anime Maker / Animemaker.Net :grey_question: Ansy Ansy.Ai - Gpt-3 For Your Discord Server GPT-3 powered Discord bot that answers questions from your Discord community members based on chat history :grey_question: Anypod Anypod We make your content searchable :grey_question: Anyselfie :grey_question: Apeture Create Images by Lexica :grey_question: Aragon Aragon Create stunning art \u0026amp; images 10X faster with AI :grey_question: ArtBot.ai Artbot.Ai - Let Ai Create Your Perfect Halloween Art :grey_question: Artflow Artflow :grey_question: Article Rewriter Aiseo - Ai Writing Assistant, Ai Copywriting \u0026amp; Content Generator :grey_question: Article.Audio Article Audio - Convert Articles In Audio Powered by Thundercontent ⚡️ :grey_question: ArticleForge High Quality, Ai Content Generator - Article Forge Using advanced artificial intelligence and deep learning, Article Forge writes completely unique, SEO optimized, high-quality, long form articles with the click of a button :grey_question: Artreviewgenerator Art Review Generator A natural language processing tool and text generator. It takes a set of words as a prompt and then generates a medium length set of sentences that approximate the training data :grey_question: Artroom Artroom Ai :grey_question: Ask Poppy Poppylist - Be The Parent You Want To Be You know your lifestyle. We know the products. Let\u0026rsquo;s build your baby registry together :grey_question: Askrobi Askrobi Robi is a powerful AI companion that lives in your contact list and can be talked to through WhatsApp, he can help you write an essay or generate original images! :grey_question: Aspen Aspen :grey_question: Assemblyai #1 Api Platform For Ai Models Automatically convert audio and video files and live audio streams to text with AssemblyAI\u0026rsquo;s Speech-to-Text APIs. Do more with Audio Intelligence - summarization, content moderation, topic detection :grey_question: Astria.ai Astria - Tailor-Made Ai Image Generation Create custom images using AI :grey_question: Athena Apac Ai Account Portal :grey_question: Atlas Navi Atlasnavi.Com :grey_question: Auto Draw Autodraw Fast drawing for everyone. AutoDraw pairs machine learning with drawings from talented artists to help you draw stuff fast :grey_question: AutoPredict Autopredict - Predict How Long Your Car Will Last AutoPredict uses state of the art AI to predict how long a UK car is likely to last :grey_question: Ava Professional \u0026amp; Ai-Based Captions For Deaf \u0026amp; Hoh - Ava :grey_question: Avtrs Avtrs.Ai :grey_question: BRIA Create Images And Video At Scale - Bria :grey_question: B^ DISCOVER B^ Discover - Home You will have a new experience of discovering your story in images :grey_question: BaruaAI Brian Gacheru :grey_question: Baseten Baseten - Mlops Platform For Startups Baseten is a serverless backend for building ML-powered applications. Build apps with auto-scaling, GPU access, CRON jobs, and serverless functions :grey_question: Bearly Ai Bearly.Ai - The World\u0026rsquo;S Best Ai At Your Fingertips :grey_question: Beb AI Beb.Ai The possibilities are limitless, beb :grey_question: BedtimeStory :grey_question: Bertha.ai :grey_question: BetterWriter Write Faster With A.I. Betterwriter.Ai :grey_question: Big Speak :grey_question: BigJpg Bigjpg - Ai Super-Resolution Lossless Image Enlarging / Upscaling Tool Using Deep Convolutional Neural Networks Bigjpg - Image Super-Resolution for Anime-style artworks using the Deep Convolutional Neural Networks without quality loss. Photos are also supported :grey_question: Bito AI Bito :grey_question: Blackink Create Your Own Unique Flash Tattoo In Seconds Stop spending months searching Pinterest for your next tattoo. Generate custom, unique tattoos in seconds with BlackInk\u0026rsquo;s AI, designed to create tattoo-like designs just for you :white_check_mark: Blimey Blimey Blimey is an ai image generator where you can go from idea to reality in a minute. With full control over composition, colors and style :grey_question: BlogNLP Blognlp An AI-based blog writing tool that can help you craft captivating content quickly and easily, eliminating writer\u0026rsquo;s block and saving you time :grey_question: Bloomoon Bloomoon Discover unique AI-generated paintings at bloomoon :grey_question: Boo AI :grey_question: Boomy Boomy - Make Instant Music With Artificial Intelligence :grey_question: Botowski Your Personal Ai Copywriter - Botowski :grey_question: BrameWork Bramework - Ai Writer That Helps You Write Blogs 5X Faster Bramework is an easy-to-use AI writer that helps bloggers, freelancers, and agencies save hours per blog post :grey_question: Briefly Briefly - The Ai Powered Briefing Platform Marketing briefs that get to the best creative work. Improve your marketing effectiveness and reduce the cost of badly written briefs :grey_question: Business Idea Generator Brainstorm Business Ideas :grey_question: CF Spark :grey_question: CFRexplorer Cfr Explorer - Ask Ai Questions About Cfrs :grey_question: Cacideas :grey_question: Caktus Caktus Ai :grey_question: Channel Channel Connect your database, ask a question, get an answer :grey_question: Chapterme Chapterme - Ai Powered Chapters For Your Videos :grey_question: CharacterAI :grey_question: Chat-example Chat-Example :grey_question: CheapNFT.Art Cheap Nfts :grey_question: Cleanvoice AI Get Rid Of Filler Words From Your Audio Recordings Cleanvoice is an artificial intelligence which removes filler sounds, stuttering and mouth sounds from your podcast or audio recording :grey_question: Clip audio Clip - Ai Audio Search Engine The audio search engine :grey_question: Code Language Converter Code Language Converter - Convert Code To Other Languages Using Ai :grey_question: Cogram Cogram - Effortless Meeting Notes And Action Items Cogram uses artificial intelligence to create high-quality meeting minutes and propose action items :grey_question: Colossyan Colossyan Creator Colossyan Creator makes video creation simple and stress-free. Discover our AI video creator with real actors. Create videos in less than 5 minutes :white_check_mark: Compose AI Compose Ai: Automate Your Writing :white_check_mark: Contentedge :grey_question: Context Search Context - Ai-Powered Audio \u0026amp; Video Chatbots :grey_question: CoolGiftIdeas Cool Gift Ideas - Ai-Powered Gift Suggestions :grey_question: Coolaiid Coolaiid Whether you\u0026rsquo;re looking to decorate or just need a little inspiration, we\u0026rsquo;ll generate unique ideas using AI :grey_question: Copy.ai Write Better Marketing Copy And Content With Ai Get your free account today :white_check_mark: CopyMonkey Create Optimized Amazon Listing In Seconds - Copymonkey :grey_question: CopyScouts Copyscouts - Sustainable Ai-Assisted Copywriting Tool Use unlimited GPT-3 based AI writing for a fixed monthly price :grey_question: Copymatic :grey_question: Coqui Coqui Direct emotive, generative AI voices for video games, post-production, dubbing and much more… :grey_question: Coverquick Coverquick Apply with confidence :grey_question: Cowriter Co Writer - Your Ai Buddy For Inspiring Marketing Content :grey_question: Craiyon Craiyon, Formerly Dall-E Mini Craiyon is an AI model that can draw images from any text prompt! :grey_question: Createaivoiceovers Text To Speech Online Voice Generator, Text To Speech Generator - Realistic Voices - Create Ai Voice Overs :grey_question: Creator AI Creaitor.Ai - The #1 Ai Writing Tool :grey_question: Ctrify Ctrify - The Ai Seo Tool :grey_question: D-ID :grey_question: D-ID\u0026rsquo;s Creative Reality Studio D-Id Creative Reality Studio :grey_question: DREAM.page :grey_question: Dadabots Neural Networks :grey_question: Daft Art Daft Art — Create The Album Cover You\u0026rsquo;Ve Always Dreamed Of Daft allows you to create an amazing, high quality artwork for your album cover within a few minutes, powered by AI :grey_question: Daydrm Daydrm.Ai The future of advertising is using machine learning to perform creative thinking :grey_question: Death to Humans Death To Humans - Join The Ai Revolution :grey_question: Debuild Debuild - Build Web Apps Fast :grey_question: Decile Decile Build a data-led organisation with the power of AI :grey_question: DeepL Deepl Translate: The World\u0026rsquo;S Most Accurate Translator :grey_question: Descript All-In-One Video Editing, As Easy As A Doc :grey_question: Designer Clone AI Ai Image Generation For Teams - You Can Easily Generate Ai Logo, Ai Book Covers, Ai Posters And More - Stockimg Ai AI image generation for teams - You can easily generate AI logo, AI book covers, AI posters and more - Stockimg AI :grey_question: Designs AI Create Logos, Videos, Banners, Voiceovers With Ai Create anything online in 2 minutes! Make a logo, video, social media banner, business card, flyer, mockup and more with AI :white_check_mark: DetangleAI Detangleai :grey_question: Dewey Dewey: Your New Accountability Buddy :grey_question: Diffusion Bee Diffusionbee - Stable Diffusion App For Ai Art DiffusionBee is the easiest way to generate AI art on your computer with Stable Diffusion :white_check_mark: DigiMarkAI Digimarkai :grey_question: DipSway Dipsway - Crypto Bot :grey_question: DoNotPay The World\u0026rsquo;S First Robot Lawyer Use AI to make legal information accessible to everyone :grey_question: DrawAnyone Drawanyone - Draw Anyone, Any Way You Want :grey_question: Drawanything Draw Anything - Stable Diffusion Playground Use AI to create novel images in minutes :grey_question: Dream Dream By Wombo :grey_question: Dreamily Dreamily-Beta :grey_question: Driary :grey_question: Dubverse.ai Online Video Dubbing With Dubverse.Ai :grey_question: Durable Durable: Ai Website Builder And Service Business Software :grey_question: Durable AI Site Builder Durable: Ai Website Builder And Service Business Software :grey_question: Dust Dust - Xp1 :grey_question: ELIV Google Chrome - Download The Fast, Secure Browser From Google :grey_question: ELSA SPEECH ANALYZER :grey_question: Easy-Peasy.AI Affordable Ai Writer - Easy-Peasy.Ai: The Ai Content Assistant Easy-Peasy.AI believes that everyone has a story to tell. With our AI copywriting tools, we help you tell your story in the most engaging way possible :grey_question: Ebsynth Ebsynth - Transform Video By Painting Over A Single Frame You paint one frame and EbSynth propagates it to the rest of the footage :grey_question: Echowin Ai Powered Call Management With Full Natural Language Understanding And Personalized Responses For Every Scenario :grey_question: Ecrett Music Easy Way To Create Royalty Free Music - Ecrett Music :grey_question: Eilla Eilla Ai - Ai Content Generation Assistant :grey_question: Elai :grey_question: Elektrif Your 🤖 Powered Dating Assistant The first suite of AI-powered tools to supercharge your dating life ⚡️ :grey_question: Elephas Elephas - Personal Ai Writing Assistant For Mac :grey_question: Elf Help Elf Help Need some inspo for your holiday gifting? Elf help is your ultimate gift-giving assistant, offering creative and personalized suggestions for everyone on your list :grey_question: ElfMessages :grey_question: Elicit Elicit: The Ai Research Assistant Elicit uses machine learning to help you with your research: find papers, extract key claims, summarize, brainstorm ideas, and more :grey_question: Embolden Embolden - Ai Writing For Ecommerce :grey_question: Emergent Drums Emergent Drums By Audialab - Generate Infinite, Royalty-Free, Drum Samples With Ai :grey_question: Enwrite The Ai Writing Tool That Creates Content For You - Enwrite :grey_question: Equally.ai Web Accessibility Compliance For All Achieve ADA \u0026amp; WCAG compliance easily :white_check_mark: EssayBar Essaybar — Revolutionize Your Writing With Ai-Crafted Essays! :grey_question: Everypixel Stock Image Search Engine - More Than 50 Best Sources - Everypixel :grey_question: ExactBuyer Search Exactbuyer - Ai Powered Business Search For Prospecting Teams :grey_question: Explore AI Explore Ai :grey_question: Fabled Fabled.Ai - Ai Illustrated Stories :grey_question: FactGPT Longshot Ai - Best Long-Form Ai Writing Assistant And Content Generator LongShot is an AI writing assistant that helps you and your team create helpful blogs that rank on Google :grey_question: FakeYou Fakeyou. Deep Fake Text To Speech :grey_question: Fireflies Fireflies.Ai - Fireflies Ai Notetaker \u0026amp; Conversation Intelligence Fireflies.ai helps your team record, transcribe, search, and analyze voice conversations :grey_question: Flexberry AI Assistant Ai Assistant This helps to reduce 30% of the time business analyst uses for processing requirements and also to generate artifacts :grey_question: Fliki Fliki - Turn Text Into Videos With Ai Voices :grey_question: Flirtify Flirtify — The Future Of Flirting Is Here :grey_question: FoodAI Foodai.App - Generate Cooking Recipes With Ai! :grey_question: Frase.io Frase - Best Seo Content Optimization Tool \u0026amp; Ai Writer Frase AI helps you research, write, and optimize high-quality SEO content in minutes instead of hours :grey_question: Free Text-To-Speech Free Text To Speech Online Converter Tools :white_check_mark: FreewriteAI The Ai Writing Tool For Everyone :white_check_mark: Friday AI Heyfriday - Ultimate Ai Writer :grey_question: FundraiseBot Advicera Nordic Consultancy Nordic consultancy agency :grey_question: GGPredict Ggpredict.Io :grey_question: GPTKey Gptkey – Write With Ai Using The Gpt Keyboard Write with AI in any app using the GPT custom keyboard extension :grey_question: Genius Sheets Genius Sheets Financial Automation Genius Sheets AI Text To Reports solutions help you analyze financial data faster - empowering teams to make better decisions. Stay in Excel and Google Sheets and automate your financial reporting process with live data connections :grey_question: GetResponse Getresponse - Professional Email Marketing For Everyone :grey_question: Getactyv Getactyv - Ai And Computer Vision Assisted Health And Fitness Platform :grey_question: Getfloorplan Creating 2D And 3D Floor Plans With Ai Up to 30% calls increase reported by our clients using 2D, 3D floor plans and virtual tours :grey_question: Gift Genie Gift Genie Ai - Free Personalized Gift Ideas For Christmas, Birthdays, Holidays, Etc! Gift Genie AI is an AI-powered that allows you to find the perfect gift in seconds with AI for free. Jot down a brief description of your recipient, and get a list of gifts our AI genie believes will delight them :white_check_mark: GiftBot Giftbot :grey_question: Giftastic AI Giftastic.Ai - Perfect Gift For Your Special One! Personalised gift ideas for every occasion! :grey_question: Gifts Genie Genie - Ai Gifts Generator :grey_question: Gigapixel AI Topaz Labs: Ai Image Quality Software Photo and video enhancement software powered by deep learning gets you the best image quality available for noise reduction, sharpening, upscaling, and more :grey_question: Glasp Glasp: Social Web Highlighter Highlight \u0026amp; add notes as you read.Create a library of your learning ❤️ :grey_question: Gling Gling :grey_question: GooseAI Gooseai :grey_question: Graham AI Graham.Ai - Tech Tweet Generator :grey_question: H2O AI H2O.Ai - Ai Cloud Platform :grey_question: Handywriter Handyplugins — Well-Crafted Wordpress Plugins :grey_question: Headline-ai Headline Ai :grey_question: HelloScribe Helloscribe: Bring Your Best Ideas To Life :grey_question: Hexowatch Website Change Detection, Monitoring \u0026amp; Archiving - Hexowatch :grey_question: Hire Hoc Hire Hoc - The Ai Powered Hiring Tool Transform Your Organization with the Power of AI-Assisted Recruiting :grey_question: HireYaY Hireyay, A Hiring Platform For Startups 92% of job seekers do not finish their online application. With HireYaY, you will never miss a qualified candidate again :grey_question: Hirex.ai Hirex.Ai Welcome to hirex.ai, a no-code AI platform to build voice-based bots that conduct and score interviews at scale. Get the complete suite of assessments tools like coding interviews, MCQ tests, hackathons, video interviews, and WhatsApp chatbots all under single dashboard :grey_question: HookShot Hookshot Speed Reading Game :grey_question: HotConvo Hotconvo :grey_question: Hour One Make Ai Videos To Train Anyone Or Explain Anything - Hour One :grey_question: Hubble Hubble - Product Feedback And Insights From Users Create world class products by gathering high quality feedback from users on prototypes, betas and live features :grey_question: HyperWrite Sucuri Website Firewall - If you are the site owner (or you manage this site), please whitelist your IP or if you think this block is an error please open a support ticket and make sure to include the block details (displayed in the box below), so we can assist you in troubleshooting the issue :grey_question: Hypotenuse.ai Hypotenuse Ai: Ai Writing Assistant And Text Generator :grey_question: Ideasai Startup Ideas Powered By Openai :grey_question: Img2prompt Replicate – Run Open-Source Machine Learning Models With A Cloud Api :grey_question: Inferkit Inferkit :grey_question: Infinite Drum Machine Experiments With Google :grey_question: Intelligent paraphraser Aiseo - Ai Writing Assistant, Ai Copywriting \u0026amp; Content Generator :grey_question: Interior Computer Image Computer :grey_question: Inworld Inworld Ai – Create Ai Characters And Ask Them Anything Create AI characters and NPCs for games, metaverse, and business applications – or just for fun. You can talk to AI characters about anything. It’s easy, free, and full of possibilities :white_check_mark: JD Generator Meet The Team - Hirequotient HireQuotient’s Skill Assessment Platform helps you hire the top 10% of the talent pool in half the time :grey_question: Jamie Jamie - Ai Assistant For Meeting Summaries jamie is an AI assistant that creates summaries of meetings in business-writing quality within seconds. Try now and convince yourself of the magic experience :grey_question: Jasper.ai Jasper - Ai Copywriter - Ai Content Generator For Teams :grey_question: Jeeves Jeeves — Secure :grey_question: Jenni Supercharge Your Writing With Jenni Ai :grey_question: Jinnee :grey_question: Jokelub Jokelub Bring humor everywhere :grey_question: KUBIYA :grey_question: Kaedim Kaedim - Image To 3D Model Ai :grey_question: Kafkai Ai Writer \u0026amp; Ai Content Generator - Kafkai Kafkai is an AI Writer Assistant that helps you create unique SEO-friendly articles for cents instead of dollars :grey_question: Kanye Tweet Generator Kanye Tweet Generation Generate Kanye Tweets using AI. Built by Ryan Doyle :grey_question: Katteb AI Article Writer :grey_question: Kinestex Kinestex - Ai Coach In Your Phone :grey_question: Kive Kive - Ai Canvas all your inspiration in one place :grey_question: Kore.ai Ai-First Experience Optimization Platform For Enterprises Kore.ai automates front-office and back-office interactions for every industry by deploying conversational AI-first virtual assistants and process assistants :grey_question: Krisp World’S #1 Noise Cancelling App - Krisp Krisp’s AI removes background voices, noises and echo from all your calls, giving you peace of mind :grey_question: LALAL.AI Voice Cleaner Lalal.Ai: 100% Ai-Powered Vocal And Instrumental Tracks Remover High-quality stem splitting based on the world\u0026rsquo;s #1 AI-powered technology :grey_question: Langotalk Langotalk: Learn Languages 6X Faster With Ai Have confident conversations in weeks instead of years :grey_question: LazyApply Automate Job Applications, Automatic Job Applier, Auto-Fill Job Applications, One-Click Apply Jobs Automatically apply for 1000’s of jobs in a single click. LazyApply will auto fill job applications and apply to all of the jobs that are suitable for you on platforms such as Linkedin and Indeed in one click in the USA \u0026amp; Canada :grey_question: Lek Lek.Ai - The Ultimate Content Creator Toolkit Powered By Ai :grey_question: Letsenhance Let’S Enhance - Image Quality Online App \u0026amp; Free Photo Enlarger AI software to enhance and upscale pictures. Increase resolution and quality. Fix blurry, pixelated and bad images. Make every photo sharp and clear :white_check_mark: Levity Levity - No-Code Ai Workflow Automation Platform :grey_question: Lex Lex :grey_question: Linkedin Posts Generator Siddharth Verma - Full Stack Freelancer - Startup Guy Hi, I am Siddharth Verma. A start-up enthusiast with 6+ years of experience. I have worked with over 50+ SAAS companies helping them build robust scalable solutions, product and engineering problems :grey_question: Listnr 2.0 Ai Voice Generator - Text To Speech Converter - Listnr Generate realistic Text to Speech (TTS) audio using our AI Voice Generator with the best synthetic voices. Instantly convert text in to natural-sounding speech and download in MP3 and WAV formats :grey_question: Logo Generator :grey_question: Logo Rank Brandmark Logo Maker - The Most Advanced Ai Logo Design Tool :grey_question: LongShot AI Longshot Ai - Best Long-Form Ai Writing Assistant And Content Generator LongShot is an AI writing assistant that helps you and your team create helpful blogs that rank on Google :grey_question: Looka Free Logo Maker \u0026amp; Intelligent Brand Designer Make a logo and build a brand you love with Looka :white_check_mark: Lovelines Lovelines.Xyz - Share Your Love With Custom Keepsakes Made By Ai Create custom keepsakes for a loved one using AI that are optimized for social media. AI-generated poems, stories, letters, and song lyrics :grey_question: Lovo Lovo Ai - Free Text To Speech Online With Natural Voices :white_check_mark: LuciaAI Luciaai Lucia uses the latest and most advanced artificial intelligence technology. With Lucia you can write faster and better than ever before :grey_question: Magic Mate Magicmate :grey_question: MagicStock Aimages - Online Ai Video And Image Enhancer Upscale and Enhance videos and images online using AI :white_check_mark: Magician Magician For Figma A magical design tool for Figma powered by AI :grey_question: Make Logo AI Makelogo.Ai: Get The Perfect Logo For Your Startup Generate beautiful and unique logos for your startup, powered by Artifical Intelligence :x: Make a Video Make-A-Video :grey_question: Make3D Make Your Image 3D :grey_question: Mapwith.ai Mapwith.Ai :grey_question: MarketingBlocks AI Marketingblocks Ai Human-like all-in-one AI marketing assistant that creates landing pages, promo videos, ads, marketing copy, graphics, emails, voiceovers, blog posts, art \u0026amp; more :grey_question: Masterpiece Studio Masterpiece Studio :grey_question: Merlin Merlin Free Open AI’s ChatGPT powered extension to use anywhere! :white_check_mark: Midjourney Midjourney An independent research lab exploring new mediums of thought and expanding the imaginative powers of the human species :grey_question: Mokker Mokker Ai AI-Powered Photo Generation for E-Commerce :grey_question: Moonbeam Moonbeam - Never Write From Scratch Again :grey_question: Mount2 Speak :grey_question: Move Move Ai Capture high quality motion data from video in any environment using mobile phones :grey_question: Movio Movio - Ai Spokesperson Video Generator :grey_question: Mrgn :grey_question: Murf.ai :grey_question: Muse :grey_question: Musenet Openai :grey_question: Musico Musico - Ai Generative Music Musico is an AI-driven software engine that generates music. It can react to gesture, movement, code or other sound :grey_question: My AI Painting My Ai Painting - Create Your Unique A.I Painting Order your very own A.I. masterpiece today. Just tell the A.I. what you want in your painting :grey_question: My Instant Writer My Instant Writer :grey_question: My Pitch Deck My Pitch Deck - Ai-Generated Pitch Deck Templates For Startups :grey_question: MyAnima AI Companion Anima: Ai Friend :grey_question: NMKD Stable Diffusion N00Mkrad - Itch.Io :grey_question: NOLU Nolu :grey_question: NSFW JS Nsfw Js :grey_question: Natural Language Playlist Natural Language Playlist :grey_question: NaturalReader Ai Voices - Naturalreader Home :grey_question: Neural Studio Neuralcam with AI powered image processing :grey_question: Neural.Love Free Ai Image Generator \u0026amp; Ai Enhance - Neural.Love Use AI Image Generator for free or AI enhance, or access Millions Of Public Domain images - AI Enhance \u0026amp; Easy-to-use Online AI tools :white_check_mark: Neuralblender Neuralblender.Com :grey_question: Neuralframes Neural Frames :grey_question: Neuroflash App - Neuroflash :grey_question: NewsDeck from OneSub Newsdeck - Find, Filter \u0026amp; Analyse Thousands Of Articles, Daily :grey_question: Nichess Nichesss - Ai Writer - Ai Copywriting Software :grey_question: NightCafe Ai Art Generator, Ai Art Maker AI Art Generator App. ✅ Fast ✅ Free ✅ Easy. Create amazing artworks using artificial intelligence :white_check_mark: Nightcap Nightcap Guru :grey_question: Nijijourney にじジャーニー 魔法でイラストをつくろう :grey_question: Not A Person Neural Actors :grey_question: Notion AI Notion – One Workspace. Every Team :grey_question: NovelAI Novelai - The Gpt-Powered Ai Storyteller :grey_question: Nyx Gallery Nyx.Gallery - Ai-Generated Photography Images on this website have been generated with AI and are therefore “not real” :grey_question: Oda Studio Oda Moodboard Pick your style and color to customize your home in seconds with AI :grey_question: OddVibe Oddvibe: The Finest Collection Of Unnerving Ai-Generated Images Get your fix of creepy AI-generated images. But be warned, you may never sleep again :grey_question: Olli Olli.Ai - Your Personal Data Analyst Olli is the AI platform for creating data visualizations 10x faster - it\u0026rsquo;s like having an assistant that deals with the annoying parts of finding data, creating visualizations, and getting them ready for presentations :grey_question: Once Upon A Bot Once Upon A Bot • Create Children\u0026rsquo;S Stories With Ai Tell OnceUponABot your story idea, and the robot will write a story from scratch using AI. Then you can read, edit, export, and share your creations :grey_question: OpenArt Photo Booth Discover And Generate Ai Art - Openart Search 10M+ prompts, and generate AI Art via Stable Diffusion, DALL·E 2 :grey_question: Opus Opuswebsite :grey_question: Orchard Orchard :grey_question: Outdone V2 Outdone :grey_question: PICLY Picly: Ai Generated Spot The Difference :grey_question: Paperade Paperade Startup Idea Generator Paperade is the first AI-powered tool that generates commercial use cases and company ideas from over 100 million academic papers and research studies :grey_question: Papercup Papercup - Ai Dubbing And Video Translation Software :grey_question: Paragraph AI Paragraphai • Best Ai Writing App • Free Ai Writing Assistant Tool :white_check_mark: Paralegal AI Paralegal Ai :grey_question: Paraphraser Free Paraphrasing For All Languages :white_check_mark: Paraphraser AI Yaara — Ai-Powered Writing Assistant :grey_question: Passphoto Create Your Passport Photo With Ai :grey_question: PatentPal Patentpal :grey_question: Patience Patience - Ai Art With Stable Diffusion :grey_question: Pattern Maker AI Generate Seamless Patterns Using Artificial Intelligence Generate seamless vector patterns using artificial intelligence :grey_question: PatternedAI Patternai :grey_question: Penelope AI Penelope Ai - Unleash The Power Of Your Writing With The Most Sophisticated Ai Writing Assistant :grey_question: Peppertype.ai Peppertype.Ai - Create Quality Content Faster Generate content that converts in seconds :grey_question: Perplexity AI Perplexity Ai :grey_question: PersonaCardAI Personacardai - Find Your Top 3 Personas Profiles Stop spending hours in workshops to try to find your personas. Our AI reveals your top 3 personas profiles within your CRM with 20+ attributes :grey_question: Petpic Petpic.Ai Your favorite animal can now be anything, anywhere, even anyone. Just upload some pics and let AI do its creative magic 💫 :grey_question: Petportrait Pet Portrait Ai - Beautiful Custom Pet Portraits Looking for a thoughtful pet gift? Pet Portrait AI generates unique, custom-made portraits of your cats, dogs, and other pets in a variety of styles. Our AI technology ensures that each portrait is one-of-a-kind, just like your pet :grey_question: Pfpmaker Free Profile Picture Maker - Create An Awesome Pfp Online Upload your photo to create a professional-looking profile picture and a matching background cover :white_check_mark: Phantasmagoria :grey_question: Phase Welcome To Phase! :grey_question: PhotoAI Photoai Create AI-generated images of yourself :grey_question: Photoleap Text To Image - Creative \u0026amp; Powerful Photo Editing App By Lightricks Use all-in-one photo editor Photoleap for amazing creations on your iPhone: Change backgrounds, remove objects, create collages, apply filters \u0026amp; effects :white_check_mark: Photoshot Generate Custom Ai Avatar - Photoshot Generate AI avatars that perfectly capture your unique style. Write a prompt and let our Dreambooth and Stable diffusion technology do the rest :grey_question: Photosonic AI Photosonic Ai Art Generator - Create Unique Images With Ai Transform your imagination into stunning digital art with Photosonic - the AI art generator. With its creative suggestions, this Writesonic\u0026rsquo;s AI image generator can help unleash your inner artist and share your creations with the world :grey_question: Phraser Phraser €” The Collaborative Creative Ai Tool Phraser is an app that helps you create images using generative AI (Midjourney, Stable Diffusion, and DALLE 2), collaborate, and get inspired :grey_question: Phygital :grey_question: Pic2Prompt Magic Studio - Powered By Ai, Created By You Magic Studio helps you automatically edit and create images, using AI :grey_question: PicSo Picso Ai Art Generator PicSo is a text-to-image AI Art Generator app \u0026amp; online platform for creative digital art. FREE try and turn your ideas to NFT art, oil painting and more :white_check_mark: PictoDream Generate Images Of Yourself With Ai - Pictodream.Com Generate any images of yourself (or another person) in any style or setting using a simple text description :grey_question: Pictorial Pictorial - Effortlessly Create Graphics For Your Web Applications Inspiration is hard to come by. Get your message across hustle-free by leveraging an AI able to generate reliable, ready-to-use visual masterpieces :grey_question: Pinegraph Magic Sketchpad Pinegraph is all you need to bring your creativity to life. Generate AI art for free with Pinecasso for styles like anime, abstract art, and more. Create your own concept characters including waifus and husbandos, game art, and more :white_check_mark: Pitchgrade Pitchgrade A pitch deck is a presentation that a company uses to pitch to investors. It goes over the company’s business model, financial projections, and other key metrics that investors would want to see :grey_question: Pixelmind Pixelmind - Ai-Powered Art \u0026amp; Minting To Nfts Your journey into AI-powered art. Create and collect NFTs through the Pixelmind portal. Evolve your style. Raise your game :grey_question: Pixelz AI Pixelz Ai Art Generator Create unique AI artwork using text, phrases, images \u0026amp; presets, share, download, print \u0026amp; mint as NFTs :grey_question: Play.ht Ai Voice Generator \u0026amp; Realistic Text To Speech Online - Play.Ht Generate realistic Text to Speech (TTS) audio using our online AI Voice Generator and the best synthetic voices. Instantly convert text in to natural-sounding speech and download as MP3 and WAV audio files :grey_question: Playground Free Ai Image Generator: Art, Social Media, Marketing - Playground Ai Playground AI is a free-to-use online AI image creator. Use it to create art, social media posts, presentations, posters, videos, logos and more :white_check_mark: Podcast.ai Podcast.Ai :grey_question: Poised 2.0 Poised - Free Ai-Powered Communication Coach :white_check_mark: Pollinations Pollinations.Ai :grey_question: Poly AI :grey_question: Polymath Robotics Polymath Robotics Magically simplified autonomy for industrial vehicles :white_check_mark: Ponzu.gg Ponzu AI generated PBR texture maps for any idea, within seconds :grey_question: Portrait by Vana Portrait - Vana “Portrait” by Vana is a generative art studio that can create self-portraits of you in infinite styles :grey_question: Posed Posed Upload your pictures and let our AI create stunning high-quality portraits in a wide range of styles that look just like you :grey_question: Post Parrot Post Parrot - A Free Marketing Tool For Reddit :white_check_mark: Postedby Postcards By Ai, Delivered! :grey_question: Postwise Postwise - Write, Schedule \u0026amp; Grow With Twitter Ai Write, schedule and grow with the world\u0026rsquo;s smartest AI Twitter tool :grey_question: Predis Social Media Marketing Made Easy With Ai - Predis.Ai :grey_question: Prettysmart.co Prettysmart :grey_question: Prodigy AI Prodigy Ai Coach Are you an engineer wondering about your next gig? Tell HAL what you\u0026rsquo;re looking for and get personalized career advice sent directly to your inbox :grey_question: ProfilePicture.ai Create Your Perfect Profile Picture With Ai. - Pfp.Ai Your profile picture is the first thing people see when they look at your profile. We use artificial intelligence to generate an image of you that looks perfect and captures who you are. You can be anything, anywhere, or anyone! :grey_question: Project Blink Adobe Labs A place for us to share some of our explorations into the future of creativity, expression, and communication :grey_question: PrometheanAI Promethean Ai :grey_question: Prompt Art Stable Diffusion Playground :grey_question: Prompt.Cafe Prompt.Cafe - Ai Prompt Starter Pack :grey_question: Promptextend Promptextend - Extend/Generate Ai Art Prompts For Midjourney :grey_question: Prompthunt Prompt Hunt - Your Home For Exploring, Creating, And Sharing Ai Art Create, explore, and share AI art using DALL·E, Stable Diffusion, and Midjourney :grey_question: Promptomania Promptomania: Ai Art Community With Prompt Generator :grey_question: Proposal Genie Google Chrome - Download The Fast, Secure Browser From Google :grey_question: QueryGenie Querygenie :grey_question: Question Base Scale Knowledge Question Base is a new kind of knowledge base. Powered by AI it answers your team’s questions inside Slack. Automatically :grey_question: Quillbot Paraphraser :grey_question: Quilt \u0026amp; Create Quilt \u0026amp; Create :grey_question: Quizgecko The Ai Powered Quiz Generator - Quizgecko :grey_question: Quizwhiz Quizwhiz - Generate Mcqs From Any Text Provide a body of text and get AI-generated Questions and Answers, along with their Multiple-Choice options :grey_question: RTutor Rtutor :grey_question: Raplyrics Raplyrics – Generate Your Rap Music Punchlines Write a few words in the prompt below and generate a unique rap music punchline using Artificial Intelligence ! :grey_question: Rationale Rationale - A Revolutionary Decision-Making Tool Powered By The Latest Gpt And In-Context Learning :grey_question: Raw Query Raw Query :grey_question: Rayst Gradients Rayst Gradients A Collection of 64 Beautiful Gradients Generated by AI :grey_question: ReContent.AI Recontent.Ai :grey_question: Recommendme Recommendme :grey_question: Redacta.me Redacta.Me - Tu Community Manager Virtual :grey_question: Reface Reface. Be Anyone Create realistic face swap videos, GIFs and memes with just one selfie :grey_question: Renderflux Renderflux - Design With Ai Start creating beautiful art in seconds. Don\u0026rsquo;t worry about the technical stuff, we\u0026rsquo;ve got you covered :grey_question: Rephrasely The Free Rephrase Generator For All Languages! :white_check_mark: Replica Synthesize Voice Ai And Natural Sounding Text-To-Speech — Replica Try today with 30 minutes of free voice credit :white_check_mark: Replika Replika Always here to listen and talk. Always on your side. Join the millions growing with their AI friends now! :grey_question: Resemble.ai Ai Voice Generator And Voice Cloning For Text To Speech - Resemble Ai :grey_question: RestorePhotos.io Restoring Old Photos Using Ai For Everyone Have old and blurry face photos? Let our AI restore them so those memories can live on. 100% free – restore your photos today :white_check_mark: ResumAI Wonsulting - We Find Dream Jobs We’ve helped over 100,000 people land their dream jobs. Let our job search strategies take you from resumes to better days :grey_question: Resume Studio :grey_question: Resume Worded Resume Worded - Free Instant Feedback On Your Resume And Linkedin Profile :white_check_mark: Reviewgenerator Reviewgenerator.App :grey_question: Reviewz Reviewz.Ai :grey_question: Revive Revive - Envision Business Ideas With Ai :grey_question: Revspot Revspot Ai - A New Way Of Writing :grey_question: Rewind Rewind :grey_question: Rick and Mortify Rick And Mortify :grey_question: Riffusion Riffusion :grey_question: Riku Riku.Ai - Build No-Code Prompts \u0026amp; Datasets For Ai Models :grey_question: Rizz! Rizz! Keyboard :grey_question: Roamr Roamr - Your Dream Vacation In Seconds :grey_question: [Rocket Mode](http://Mark Copy) :grey_question: Runway Runway - Next-Generation Creation Suite - Everything You Need To Make Content, Fast Discover advanced video editing capabilities to take your creations to the next level :white_check_mark: Rythmex Convert Audio To Text With Rythmex Converter :grey_question: Rytr Rytr - Best Ai Writer, Content Generator \u0026amp; Writing Assistant :grey_question: SQLgenius Sql Genius - English To Sql Query Ai Translator :grey_question: SUPERMACHINE Supermachine - Generate Stock Photos, Art, And Images With Ai SUPERMACHINE enables you to generate images with the latest in artificial intelligence technology :grey_question: SafeSpelling Safespelling - Write Without Mistakes :grey_question: SaleWhale Sale Whale - Ai-Powered Sales Rep Chatbot :grey_question: Scale Catalog Forge Scale Ai: The Data Platform For Ai Trusted by world class companies, Scale delivers high quality training data for AI applications such as self-driving cars, mapping, AR/VR, robotics, and more :x: Scene One Online Book Writing App For Novels, Short Stories, And Business Write more stories with our intuitive writing app and spend less time learning complicated features :grey_question: Scispace Scispace By Typeset - Discover, Create, Publish, And Promote Your Research Paper Your platform to explore and explain papers. Search for 270M+ papers, understand them in simple language, and find connected papers, authors, topics :grey_question: Scribe :grey_question: Scribebuddy :grey_question: Shootyourshot :grey_question: Simplified Simplified: An Easy To Use All-In-One App For Modern Marketing Teams Design, Write, Edit videos, and Publish Content. Built For Teams :grey_question: Simulai Provide The Idea For Your Image. Let Ai Do The Rest The highest quality machine generated art and stock photos. You provide an idea for your image, our machines work as hard as they can to create your picture :white_check_mark: Sitekick Ai Landing Page Builder :grey_question: SlashDreamer Notion + Stable Diffusion = A Dream Come True Integration Stable Diffusion in Notion to ai generate images with a new slash command :x: Slogan Generator Aiseo - Ai Writing Assistant, Ai Copywriting \u0026amp; Content Generator :grey_question: Smart Copy Everywhere Unbounce - The Landing Page Builder \u0026amp; Platform :grey_question: SmartScribe Smartscribe - Ai Writing Assistant - Writing Made Easy SmartScribe helps solve the complexities of writing through the use of Artificial Intelligence :grey_question: Snackable AI Snackable :grey_question: Snipd Podcast Summaries Unlock The Knowledge In Podcasts - Snipd :grey_question: Solidpoint Solidpoint :grey_question: Song Sketch Songsketch :grey_question: Songmastr Songmastr - Automatic Song Mastering To Reference :white_check_mark: Songtell Songtell - Your Song Meaning Teller :grey_question: Soundful Empowering The World To Create Music - Soundful Soundful empowers creators to generate royalty free tracks at the click of a button. The quality of Soundful music is so rich, you won’t believe it was made with AI :grey_question: Soundraw Ai Music Generator - Soundraw :grey_question: Speech Studio Speech Studio - Microsoft Azure :grey_question: Speech-to-Speech Ai Voice Generator And Voice Cloning For Text To Speech - Resemble Ai :grey_question: Speechelo Speechelo - Generate Voice From Text With Only 3 Clicks. The Most Realistic Souding Text To Audio Converter We GUARANTEE no one will tell your voiceover is A.I. generated with a text to voice tool :grey_question: Speechify :grey_question: Spellbook Spellbook - Ai Contract Drafting \u0026amp; Review :grey_question: Splash Splash - Bringing The Joy Of Music Making To Everyone :grey_question: SplashAI Splashai Is A Figma Plugin, Search Engine And Ai Image Generator :grey_question: Squish Google Chrome - Download The Fast, Secure Browser From Google :grey_question: Stable Diffusion Prompt Generator Thomas.Io :grey_question: Stabledojo Stabledojo :grey_question: Staccato Staccato - The Artificially Intelligent Music \u0026amp; Lyrics Co-Writer :grey_question: Starryai Starryai - Ai Art Generator App - Ai Art Maker Simply enter a prompt and our AI transforms your words into works of art :grey_question: Starryai Starryai - Ai Art Generator App - Ai Art Maker Simply enter a prompt and our AI transforms your words into works of art :grey_question: Startup Pitch Generator Free Online Form Builder Create forms for all purposes in seconds.Without knowing how to code :white_check_mark: Steve AI Steve.Ai - World’S Fastest Way To Create Videos With our patented AI technology, you can make professional videos in MINUTES. See the MAGIC happen as the AI picks the right creative media assets for your Video :grey_question: Stock AI Free Ai-Powered Stock Photos Download AI-generated stock photos for free, with the click of a button. Use in any project without worry about attribution :white_check_mark: Stockimg Ai Image Generation For Teams - You Can Easily Generate Ai Logo, Ai Book Covers, Ai Posters And More - Stockimg Ai AI image generation for teams - You can easily generate AI logo, AI book covers, AI posters and more - Stockimg AI :grey_question: Stocknews AI Stocknews Ai - Ai Picked Stock News :grey_question: StoriesbyAI Stories By Ai - Substack :grey_question: Story Bard Story Bard :grey_question: Storya Storya - Ai Publishing For Everyone :grey_question: Studio Design Studio, An Ai-Augmented Design Tool :grey_question: SuenaGringo AI Suenagringo Escribe inglés con confianza y rompe las barreras :grey_question: Suggest Gift Suggest Gift - Find Great Gift Suggestions Using Artificial Intelligence Artificial Intelligence based tool to help you get amazing gift suggestions for any occasion :grey_question: Sumly Ai-Generated Podcast Summaries - Sumly.Ai :grey_question: Summari Summari - Upgrade Links Into Short, Informative Summarized Previews :grey_question: SummariseThis We’ve detected that JavaScript is disabled in this browser. Please enable JavaScript or switch to a supported browser to continue using twitter.com. You can see a list of supported browsers in our Help Center :grey_question: Summarize Tech Summarize.Tech: Ai-Powered Video Summaries Get a summary of any long YouTube video, like a lecture, live event or a government meeting. Powered by GPT-3 :grey_question: SummerEyes Summereyes: Ai-Powered Summaries In Your Browser :grey_question: Summon Figma: The Collaborative Interface Design Tool Build better products as a team. Design, prototype, and gather feedback all in one place with Figma :grey_question: Super Prompt Super Prompts Create a gallery for your AI art. Next time someone asks to see all your art, you\u0026rsquo;ll have somewhere to point them to. Showcase all your AI art in one place :grey_question: Supercreator AI Supercreator.Ai €¢ Create Videos 10X Faster With Ai :grey_question: Supermeme.ai Supermeme.Ai - Ai Memes To Boost Your Personal And Professional Brand Generate original AI memes in 110+ language by entering any text input and turning that into a shareable memes. Powered by GPT-3 and a custom built meme database :grey_question: Supernormal Supernormal - Ai That Writes Your Meeting Notes :grey_question: Supertranslate Supertranslate - Add Subtitles To Videos Automatically Powered by OpenAI\u0026rsquo;s Whisper, the world\u0026rsquo;s most accurate speech-to-text engine! :grey_question: SwagAI :grey_question: Swapper Free Icons, Clipart Illustrations, Photos, And Music :white_check_mark: Synth Run Synth :grey_question: Synthesia Synthesia - #1 Ai Video Generation Platform :grey_question: TLDR This Tldr This - Article Summarizer \u0026amp; Online Text Summarizing Tool This helps you summarize any piece of text into concise, easy to digest content so you can free yourself from information overload :white_check_mark: Takomo Login - Takomo :grey_question: Talk to Books Google Books :grey_question: TalkingPhoto by Movio Movio - Ai Spokesperson Video Creator :grey_question: Taption Automatically Generate Transcript, Translation And Subtitles - Taption :grey_question: Tavus Welcome :grey_question: Teacherbot Teacherbot - The Tool Every Teacher Deserves We have developed the most powerful tool a teacher can have access to. You can create tasks and activities for all levels as well as topic plans, forward plans, lesson plans and much more. You are limited only by your imagination :grey_question: Text Assistant Jordi Bruin :grey_question: Text to Image Editor Create Any Image Using Text - Imgcreator.Ai :grey_question: Text-to-pokemon Replicate – Run Open-Source Machine Learning Models With A Cloud Api :grey_question: Text2SQL Text2Sql.Ai - Generate Sql Queries With Ai For Free! :white_check_mark: TextStyler Textstyler :grey_question: TextSynth Textsynth :grey_question: Textunbox Textunbox.App TextUnbox - harness the power of AI! :grey_question: TextureLab Instant And Unique 3D Textures For Your Next Game Generate 3D textures for your game in seconds thanks to AI :grey_question: Thegist Thegist Ai- Summarize Slack Thread And Channels - Get The Gist Of It :grey_question: There is a logo for that Ai Image Generation For Teams - You Can Easily Generate Ai Logo, Ai Book Covers, Ai Posters And More - Stockimg Ai AI image generation for teams - You can easily generate AI logo, AI book covers, AI posters and more - Stockimg AI :grey_question: Thiscampsitedoesnotexist This Campsite Does Not Exist AI generated campsites featuring stunning locations, tents, and weather all created by AI using stable diffusion :grey_question: Thispersondoesnotexist This Person Does Not Exist :grey_question: Thumbsnap Ai Art Generator! Powered By Stable Diffusion - Thumbsnap - Free Photo \u0026amp; Video Hosting ThumbSnap: Free Photo and Video Sharing :white_check_mark: Thundercontent Write Articles With Ai-Assistant — Thundercontent Thundercontent uses artificial intelligence to help you write unique articles on any topic at the speed of light. Scale your content strategy. Overcome writer\u0026rsquo;s block :grey_question: Titan Expert Compliance Systems And Resources - Compliance Quarter Regulatory compliance management system and expertise for energy, financial services and other regulated industries. We offer expert systems and services to take regulatory burden off your shoulders :grey_question: ToWords Towords: Youtube To Words Make your videos and audio come alive with written words :grey_question: Tokkingheads Tokkingheads :grey_question: Tome Tome - The Ai-Powered Storytelling Format :grey_question: Topaz Video AI Topaz Labs: Ai Image Quality Software :grey_question: Torto.ai Stock Market Made Simple :grey_question: TranslateVideo Translate.Video :grey_question: Traq.ai :grey_question: Tribescaler Tribescaler :grey_question: Tunes For Tales Tunes For Tales :grey_question: TutorAI Learn Anything :grey_question: TweePT3 Tweept3 - Twitter-Integrated, Gpt3 Powered Tweet Writer :grey_question: TweetAI Get Inspired To Tweet • Tweetai.Com Tweet AI :grey_question: TweetEmote Tweetemote :grey_question: Tweethunter Tweet Hunter - Get More Twitter Followers - Tweets, Threads, Scheduler, Analytics Get sales, growth and new networks. Faster than what you\u0026rsquo;re currently trying :grey_question: Tweetnimage Tweetnimage :grey_question: Tweetsift Tweetsift :grey_question: Tweetspear Tweetspear - Boost Your Twitter Engagement Revolutionize Your Twitter Engagement with AI-Powered Suggested Replies :grey_question: Twelve Labs Twelve Labs :grey_question: TypeDroid Typedroid - Free Ai Text Generator :white_check_mark: Typestudio Type Studio €• Edit Your Video By Editing Text Type Studio is a fast, simple, and joyful way to edit and growyour podcasts, streams, and interviews :grey_question: Typli Typli.Ai - Ai Writer \u0026amp; Seo Writing Assistant :grey_question: Typly Typly - Conversation Level Next! Typly is the ultimate cutting edge AI keyboard that helps you to answer all your messages with a single click!🚀 :grey_question: USP Maximize Your Blog - Usp.Ai Awesome AI generated ROYALTY FREE IMAGES for your stories and blog posts :white_check_mark: Uizard Uizard - App, Web, \u0026amp; Ui Design Made Easy - Powered By Ai :grey_question: Ultimate Skill Extractor by Further Further: Automated Skill Suggestion :grey_question: Unbounce Unbounce - The Landing Page Builder \u0026amp; Platform :grey_question: Underduck Uberduck - Text-To-Speech, Voice Automation, Synthetic Media :grey_question: Unpromptedgame :grey_question: Unrealme Unreal Me :grey_question: Unrealspeech :grey_question: Unschooler :grey_question: Upword Easily Summarize Your Content With Upword :grey_question: Userevaluation User Evaluation €“ The Customer Understanding Platform Whether you\u0026rsquo;re focused on UI, UX Research, Design, or CX – User Evaluation\u0026rsquo;s AI can answer all your questions :white_check_mark: Userpersona User Persona - Ai-Generated User Personas :grey_question: VERBATIK Verbatik - Text To Speech Generate Realistic Text to Speech (TTS) audio using online AI Voice Generator and best synthetic voices. Instantly convert text in to natural-sounding speech and download as MP3 and WAV audio files :grey_question: Vacay Vacation Chat Agent This AI-Assistant can design a custom trip, give you inspiration on where to go, and even generate local recommendations for hotels, restaurants, and attractions :white_check_mark: Validator AI Validatorai.Com – Instant Help And Feedback With Our Startup Validator Tools For Entrepreneurs :grey_question: Vee Vee – Inteligentna Konsultantka :grey_question: Versational Versational For Remote Teams Versational maximizes the value said in every conversation. Get AI conversation results for free. Versational transcribes, summarizes, automates data entry, extracts takeaways, lets you share clips, and shows ways to improve your conversations :white_check_mark: Vidyo Ai Based Content Repurposing - Vidyo.Ai Create social ready short clips from your videos with AI ✨ Save 90% time and effort :grey_question: Viral Post Generator Viral Post Generator Clone Go mega-viral on Linkedin - Generate a successful post with the power of AI :grey_question: Visualhound Visualhound - Prototype Your Fashion Design Ideas With Ai Visualize your product designs before going to production. Create realistic-looking product images to feed your moodboards and boost your design process :grey_question: Visuali Visuali AI image generation made easy :grey_question: Vizcom AI Vizcom Ai: The Ai Creative Design Tool See your drawings and ideas come to life in seconds, not hours :grey_question: Vocads Survey :grey_question: Voice AI Ai Voice Changer App For Pc And Mac - Change Your Voice On The Fly :grey_question: Voicemaker Voicemaker® - Text To Speech Converter :grey_question: Voicemod Free Real Time Voice Changer \u0026amp; Modulator - Voicemod Express yourself with our real-time AI Voice Changer and soundboard to be who you want, when you want in the metaverse. Build your sonic identity for platforms like Roblox, OBS, VRChat, Discord, and more :white_check_mark: Voicera Voicera - Give Voice To Your Articles And Blogs :grey_question: Voicetapp Voicetapp - Speech To Text Transcription Get accurate transcriptions for your AUDIO \u0026amp; VIDEO with the latest speech rocognition technology :grey_question: Waifu XL Waifuxl :grey_question: Waifulabs Waifu Labs - Magical Anime Portraits A state-of-the-art AI that draws custom anime portraits, just for you! This machine learning artist figures out your preferences and creates a perfect character illustration in 4 easy steps. If it sounds like magic, that\u0026rsquo;s because it is! :grey_question: WardrobeAI Wardrobeai Our service uses AI to automatically change hairstyles and clothes in your images, giving you endless possibilities for customization :grey_question: Watermark Remover Watermark Remover - Remove Watermarks Online From Images For Free Get rid of the watermarks from your images using our powerful AI technology :white_check_mark: Waymark Waymark, Ai Video Creator :grey_question: WebCopilot Webcopilot.Co ~ Notion Ai Writing Assistant Write your Notion pages with AI. Speed up your writing process and focus on what matters. Free Forever :white_check_mark: Webapi.ai 2.0 :grey_question: WeelSaid Labs :grey_question: Wellsaid :grey_question: What Cake to Bake? What Cake To Bake? :grey_question: What on earth? Whatonearth By @Naklecha :grey_question: Whiskey AI :grey_question: Whisper Memos Whisper Memos :grey_question: WhisperAPI Whisper Api :grey_question: Wisecut Wisecut - Automatic Video Editor :grey_question: WithPoly Poly: Generate Design Assets With A.I. · Poly :grey_question: Wizishop Wizishop Ecommerce Solution: Create Your Online Store 15-day free trial - No credit card needed - Access all of our features :white_check_mark: Word Spinner Word Spinner: The Best Free Article Rewriter And Paraphrase Tool Online :white_check_mark: WordHero #1 Ai Writing Software - Ai Writer \u0026amp; Assistant - Wordhero :grey_question: Wordfixerbot Paraphrasing Tool - Best Free Online Paraphraser - Wordfixerbot :grey_question: Wordkraft Ai Copywriting \u0026amp; Online Content Generator - Wordkraft :grey_question: Wordplay Ai Content Generator For Seo Professionals - Bulk Ai Writer - Wordplay.Ai :grey_question: Wordtune Wordtune - Your Personal Writing Assistant \u0026amp; Editor :grey_question: Wordtune Read Wordtune - Your Personal Writing Assistant \u0026amp; Editor :grey_question: Write A Thank You Write A Thank You Note - Thankyounote.App Write the perfect thank you note for any occasion! Whether you need to thank a friend, family member, or business associate, we have the perfect words for you. Try it! :grey_question: Writefull Academizer Writefull X: Ai Applied To Academic Writing :grey_question: Writelyai Writely - Using Ai To Improve Your Writing :grey_question: Writeplus Write+ – Professional Writing Made Accessible For All! :grey_question: Writer Writer - Ai Writing Platform For Teams World-class companies use Writer’s AI writing platform to unlock on-brand content at scale :grey_question: Writesonic Writesonic - Best Ai Writer, Copywriting \u0026amp; Paraphrasing Tool Create SEO-optimized and plagiarism-free contentfor your blogs, ads, emails, and website 10X faster :grey_question: Writewithlaika Write With Laika :grey_question: Writey AI Writey A.I :grey_question: Yepic AI Your Ai Video Toolkit - Create, Dub \u0026amp; Personalise Videos Create, Dub and Personalise Videos Anywhere :grey_question: You The Ai Search Engine You Control :grey_question: Yourface :grey_question: ai2sql Sql Query Builder - Sql Query Builder Ai Bot With AI2sql, engineers and non-engineers can easily write efficient, error-free SQL queries without knowing SQL. It\u0026rsquo;s time to take back your time! :white_check_mark: bigmp4 Ai Video Enhancement, Using 2022 Cutting Edged Ai Model To Lossless Enlarge Video, Enhance Video :grey_question: breachless :grey_question: codium Codium €¢ Code Fast. Break Fewer Things :grey_question: deck.rocks Deck.Rocks: Generate Pitch Decks Using Gpt-3 :grey_question: img2prompt Replicate – Run Open-Source Machine Learning Models With A Cloud Api :grey_question: micro Dalle-2 Dalle-2 Image Generator - Micropay Anonymous and pay-as-you-go generative AI software :grey_question: qqbot :grey_question: rankode Ai For Human Resources - Rankode Recruiters, everything you need to know about a candidate\u0026rsquo;s programming skills is in their GitHub. Evaluate them automatically with Rankode to avoid expensive hiring mistakes and superboost your retention :grey_question: springworks Hr Software Solutions For Growing Businesses Springworks builds human resources software solutions to solve challenges in recruitment, background verification \u0026amp; employee engagement with Blockchain and AI :white_check_mark: xpression camera 2.0 Xpression Camera Become anyone on Zoom, Twitch, or any streaming video :grey_question: ⬆ Back to Index\n","date":"January 14, 2023","externalUrl":null,"permalink":"/2023/01/14/a-collection-of-awesome-ai-applications/","section":"Blog","summary":"https://github.com/ai-collection/ai-collection/blob/main/README.md\nIndex # Architecture \u0026 Interior Design\n","title":"A Collection of Awesome AI Applications","type":"blog"},{"content":"The old programmers never die\u0026hellip;\nthey gosub without return\nthey never even had life\nthey just decompile\nthey just cast to void\nThey just lose their memory. They just byte it.\nThey just get bugged with life. They just go to bits.\nThey just branch to a new address. They just can’t C as well\nOld programming wizards never die, they just recurse.\nOld C programmers never die. They are just cast into void*\nOld Java programmers never die. They are garbage collected.\nOld programmers never die. They just terminate and stay resident.\n","date":"July 16, 2022","externalUrl":null,"permalink":"/2022/07/16/old-programmers/","section":"Blog","summary":"The old programmers never die…\nthey gosub without return\nthey never even had life\nthey just decompile\nthey just cast to void\nThey just lose their memory. They just byte it.\n","title":"old programmers","type":"blog"},{"content":" Awesome-Selfhosted # from https://github.com/awesome-selfhosted/awesome-selfhosted\nSelf-hosting is the practice of hosting and managing applications on your own server(s) instead of consuming from SaaSS providers.\nThis is a list of Free Software network services and web applications which can be hosted on your own server(s). Non-Free software is listed on the Non-Free page.\nSee Contributing.\nTable of contents # Software\nAnalytics\nArchiving and Digital Preservation (DP)\nAutomation\nBlogging Platforms\nBooking and Scheduling\nBookmarks and Link Sharing\nCalendar \u0026amp; Contacts\nCalendar \u0026amp; Contacts - CalDAV or CardDAV Servers\nCalendar \u0026amp; Contacts - CalDAV or CardDAV Web-based Clients\nCommunication\nCommunication - Custom Communication Systems\nCommunication - Email\nCommunication - Email - Complete Solutions\nCommunication - Email - Mail Delivery Agents\nCommunication - Email - Mail Transfer Agents\nCommunication - Email - Mailing Lists and Newsletters\nCommunication - Email - Webmail Clients\nCommunication - IRC\nCommunication - SIP\nCommunication - Social Networks and Forums\nCommunication - XMPP\nCommunication - XMPP - Servers\nCommunication - XMPP - Web Clients\nCommunity-Supported Agriculture (CSA)\nConference Management\nContent Management Systems (CMS)\nDNS\nDocument Management\nDocument Management - E-books\nDocument Management - Institutional Repository and Digital Library Software\nDocument Management - Integrated Library Systems (ILS)\nE-commerce\nFederated Identity \u0026amp; Authentication\nFeed Readers\nFile Transfer \u0026amp; Synchronization\nFile Transfer - Distributed Filesystems\nFile Transfer - Object Storage \u0026amp; File Servers\nFile Transfer - Peer-to-peer Filesharing\nFile Transfer - Single-click \u0026amp; Drag-n-drop Upload\nFile Transfer - Web-based File Managers\nGames\nGateways and Terminal Sharing\nGenealogy\nGroupware\nHuman Resources Management (HRM)\nInternet of Things (IoT)\nKnowledge Management Tools\nLearning and Courses\nMaps and Global Positioning System (GPS)\nMedia Streaming\nMedia Streaming - Audio Streaming\nMedia Streaming - Multimedia Streaming\nMedia Streaming - Video Streaming\nMiscellaneous\nMoney, Budgeting \u0026amp; Management\nMonitoring\nNote-taking \u0026amp; Editors\nOffice Suites\nPassword Managers\nPastebins\nPersonal Dashboards\nPhoto and Video Galleries\nPolls and Events\nProxy\nRead-it-later Lists\nRecipe Management\nResource Planning\nResource Planning - Enterprise Resource Planning\nSearch Engines\nSelf-hosting Solutions\nSoftware Development\nSoftware Development - API Management\nSoftware Development - Bug Trackers\nSoftware Development - Continuous Integration \u0026amp; Deployment\nSoftware Development - Documentation Generators\nSoftware Development - FaaS \u0026amp; Serverless\nSoftware Development - IDE \u0026amp; Tools\nSoftware Development - Localization\nSoftware Development - Project Management\nSoftware Development - UX Testing\nStatic Site Generators\nStatus / Uptime pages\nTask Management \u0026amp; To-do Lists\nTicketing\nTime Trackers\nURL Shorteners\nVPN\nWeb Servers\nWikis\nList of Licenses\nAnti-features\nExternal Links\nContributing\nAuthors\nLicense\nSoftware # Analytics # ^ back to top ^\nPlease visit Awesome Analytics\nRelated: Personal Dashboards\nArchiving and Digital Preservation (DP) # ^ back to top ^\nRelated: Content Management Systems (CMS)\nAccess to Memory (AtoM) - Web-based, open source application for standards-based archival description and access in a multilingual, multi-repository environment. (Demo, Source Code) AGPL-3.0-only PHP\nArchiveBox - Self-hosted wayback machine that creates HTML \u0026amp; screenshot archives of sites from your bookmarks, browsing history, RSS feeds, or other sources. (Source Code) MIT Python\nArchivematica - Mature digital preservation system designed to maintain standards-based, long-term access to collections of digital objects. (Demo, Source Code) AGPL-3.0-only Python\nArchivesSpace - Archives information management application for managing and providing Web access to archives, manuscripts and digital objects. (Demo, Source Code) ECL-2.0 Ruby\nCKAN - CKAN is a tool for making open data websites. (Source Code) AGPL-3.0 Python\nCollective Access - Providence - Highly configurable Web-based framework for management, description, and discovery of digital and physical collections supporting a variety of metadata standards, data types, and media formats. (Source Code) GPL-3.0-only PHP\nHorahora - Video hosting website and video archival manager for Niconico, Bilibili, and Youtube. MIT Go\nAutomation # ^ back to top ^\nRelated: Internet of Things (IoT)\nAccelerated Text - Automatically generate multiple natural language descriptions of your data varying in wording and structure. Apache-2.0 Java\nActionsflow ⚠ - The free Zapier/IFTTT alternative for developers to automate your workflows based on Github actions. MIT Docker/Nodejs\nActiveWorkflow - An intelligent process and workflow automation platform based on software agents. MIT Ruby\nAlltube - Web interface for youtube-dl, a program to download videos and audio from more than 100 websites. (Source Code) GPL-3.0 PHP\nAmIUnique - Learn how identifiable you are on the Internet (browser fingerprinting tool). (Source Code) MIT Java\nBaserow - Open source online database tool and Airtable alternative. Create your own database without technical experience. (Source Code) MIT Python/Nodejs\nBeehive - Flexible event and agent system, which allows you to create your own agents that perform automated tasks triggered by events and filters. AGPL-3.0 Go\nbetanin - Music organization man-in-the-middle of your torrent client and music player. Based on beets.io, similar to Sonarr and Radarr. GPL-3.0 Python\nChiefOnboarding - Employee onboarding platform that allows you to provision user accounts and create sequences with todo items, resources, text/email/Slack messages, and more! Available as a web portal and Slack bot. (Source Code) AGPL-3.0 Python\nCouchPotato - CouchPotato is an automatic Video Library Manager for Movies. Automatic torrent/nzb searching, downloading, and processing at the qualities you want. (Source Code) GPL-3.0 Python\nEonza - Eonza is used to create scripts and automate tasks on servers or VPS hosting. Manage your servers from any browser on any device. (Demo, Source Code) MIT Go\nEpisodes ⚠ - Self Hosted TV show Episode tracker and recommender built using django, bootstrap4. MIT Python\nExadel CompreFace - face recognition system that provides REST API for face recognition, face detection, and other face services, and is easily deployed with docker. There are SDKs for Python and JavaScript languages. Can be used without prior machine learning skills. (Source Code) Apache-2.0 Docker/Java/Nodejs\nfeed2toot - Feed2toot parses a RSS feed, extracts the last entries and sends them to Mastodon. (Source Code) GPL-3.0 Python\nfeedmixer - FeedMixer is a WSGI (Python3) micro web service which takes a list of feed URLs and returns a new feed consisting of the most recent n entries from each given feed(Returns Atom, RSS, or JSON). (Demo) WTFPL Python\nHeadphones - Automated music downloader for NZB and Torrent, written in Python. It supports SABnzbd, NZBget, Transmission, µTorrent, Deluge and Blackhole. GPL-3.0 Python\nHealthchecks - Django app which listens for pings and sends alerts when pings are late. (Source Code) BSD-3-Clause Python\nhomebank-converter - Web app to convert an export bank file to compatible Homebank csv. (Demo) AGPL-3.0 HTML5\nHRConvert2 - Drag-and-drop file conversion server with session based authentication, automatic temporary file maintenance, and logging capability. GPL-3.0 PHP\nHuginn - Allows you to build agents that monitor and act on your behalf. MIT Ruby\nKibitzr - Lightweight personal web assistant with powerful integrations. (Source Code) MIT Python\nKrayin - Free and Opensource Laravel CRM Application. (Source Code) MIT PHP\nLazyLibrarian ⚠ - LazyLibrarian is a program to follow authors and grab metadata for all your digital reading needs. It uses a combination of Goodreads Librarything and optionally GoogleBooks as sources for author info and book info. GPL-3.0 Python\nLeon - Open-source personal assistant who can live on your server. (Source Code) MIT Nodejs\nLidarr - Lidarr is a music collection manager for Usenet and BitTorrent users. (Source Code) GPL-3.0 C#\nMedusa - Automatic Video Library Manager for TV Shows. It watches for new episodes of your favorite shows, and when they are posted it does its magic. (Source Code) GPL-3.0 Python\nMetaTube ⚠ - A Web GUI to automatically download music from YouTube add metadata from Spotify, Deezer or Musicbrainz. GPL-3.0 Python\nMeTube - Web GUI for youtube-dl, with playlist support. Allows downloading videos from dozens of websites. AGPL-3.0 Python/Nodejs/Docker\nnefarious - Web application that automates downloading Movies and TV Shows. GPL-3.0 Python\nNocoDB - No-code platform that turns any database into a smart spreadsheet. It can be considered as an Airtable or Smartsheet alternative. (Source Code) GPL-3.0 Nodejs\nOliveTin - OliveTin is a web interface for running Linux shell commands. AGPL-3.0 Go\nPatrowl - Open Source, Smart and Scalable Security Operations Orchestration Platform. AGPL-3.0 Python\nPodgrab - Lightweight podcast manager and automatic podcast episode downloader. It will monitor podcasts for your and download them automatically whenever a new episode goes live. GPL-3.0 Docker/Go\npyLoad - Lightweight, customizable and remotely manageable downloader for 1-click-hosting sites like rapidshare.com or uploaded.to. (Source Code) GPL-3.0 Python\nRadarr - Radarr is an independent fork of Sonarr reworked for automatically downloading movies via Usenet and BitTorrent, à la Couchpotato. (Source Code) GPL-3.0 C#\nSickRage - SickRage is an automatic Video Library Manager for TV Shows. Automatic torrent/nzb searching, downloading, and processing at the qualities you want. (Source Code) GPL-3.0 Python\nSiteInspector - Web-based tool for catching spelling errors, grammatical errors, broken links, and other errors on websites. (Demo, Source Code) AGPL-3.0 Ruby\nSonarr - Automatic TV Shows downloader and manager for Usenet and BitTorrent. It can grab, sort and rename new episodes and automatically upgrade the quality of files already downloaded when a better quality format becomes available. (Source Code) GPL-3.0 C#\nStackStorm - StackStorm (aka IFTTT for Ops) is event-driven automation for auto-remediation, security responses, troubleshooting, deployments, and more. Includes rules engine, workflow, 160 integration packs with 6000+ actions and ChatOps. (Source Code) Apache-2.0 Python\nWebUI-aria2 - Interface to interact with the aria2 downloader. Very simple to use, just download and open index.html in any web browser. (Demo) MIT HTML5\nydl_api_ng - Simple youtube-dl REST API to launch downloads on a distant server. GPL-3.0 Python\nYoutubeDL-Material - Material Design inspired YouTube downloader, based on youtube-dl. Supports playlists, quality select, search, dark mode and much more, all with a clean and modern design. MIT Nodejs\nZenbot - Zenbot is a lightweight, extendable, artificially intelligent trading bot for Bitcoin, Ether, Litecoin, and more. MIT Nodejs\nµTask - µTask is an automation engine that models and executes business processes declared in yaml. BSD-3-Clause Go\nBlogging Platforms # ^ back to top ^\nRelated: Static Site Generators, Content Management Systems (CMS)\nSee also: WeblogMatrix\nAntville - Free, open source project aimed at the development of a high performance, feature rich weblog hosting software. (Source Code) Apache-2.0 Javascript\nBlog - Facebook-styled blog. Free, extremely lightweight, single-user and easy to install. (Demo) GPL-3.0 PHP\nBlogotext - Free blog-engine written in PHP and using SQLite. This offers you both an unmatched simplicity during installation and great performances. MIT PHP\nBludit ⚠ - Simple application to build a site or blog in seconds. Bludit uses flat-files (text files in JSON format) to store posts and pages. (Demo, Source Code) MIT PHP\nCadmus - Cadmus is an extremely lightweight, flat-file blogging platform powered by Markdown. MIT PHP\nCanvas - A Laravel publishing platform. (Source Code) MIT PHP\nCastopod - A podcast management hosting platform that includes the latest podcast 2.0 standards, an automated Fediverse feed, analytics, an embeddable player, and more. (Source Code) AGPL-3.0 PHP\nChyrp Lite - Extra-awesome, extra-lightweight blog engine. (Source Code) BSD-3-Clause PHP\nDante Stories - Self hosted Medium platform built with Ruby on Rails. (Source Code) MIT Ruby\nDotclear - Take control over your blog. (Source Code) GPL-2.0 PHP\nFormtools - Powerful, flexible, free and open source PHP/MySQL script to manage your forms and data. (Source Code) GPL-2.0 PHP\nGhost - Just a blogging platform. (Source Code) MIT Nodejs\nHaven - Private blogging system with markdown editing and built in RSS reader. (Demo, Source Code) MIT Ruby\nHotglue - Freehand CMS which allows to construct websites directly in a web-browser. It uses flat files for storage and provides an intuitive GUI. (Demo, Source Code) GPL-3.0 PHP\nhtmly - Databaseless Blogging Platform (Flat-File Blog). (Demo, Source Code) GPL-2.0 PHP\nKnown - A collaborative social publishing platform. (Source Code) Apache-2.0 PHP\nPlume - Federated blogging engine, based on ActivityPub. (Source Code) AGPL-3.0 Rust\nPluXml - XML-based blog/CMS platform. (Source Code) GPL-1.0 PHP\nSerendipity - Serendipity (s9y) is a highly extensible and customizable PHP blog engine using Smarty templating. (Source Code) BSD-3-Clause PHP\nBooking and Scheduling # ^ back to top ^\nRelated: Polls and Events\nAlf.io - The open source ticket reservation system. (Demo, Source Code) GPL-3.0 Java\nCal.com - The open-source online appointment scheduling system. (Demo, Source Code) MIT Nodejs\nEasy!Appointments - A highly customizable web application that allows your customers to book appointments with you via the web. (Demo, Source Code) GPL-3.0 PHP\nBookmarks and Link Sharing # ^ back to top ^\ndyu bookmarks - Single-threaded/process bookmark app powered by leveldb and uWebSockets. Supports importing from Delicious and Chrome. (Demo) Apache-2.0 Java\nEspial - An open-source, web-based bookmarking server. AGPL-3.0 Haskell\nFirefox Account Server - This allows you to host your own Firefox accounts server. (Source Code) MPL-2.0 Nodejs, Java\nFirefox Sync Server - Sync Firefox bookmarks, passwords, history, tabs, preferences. MPL-2.0 Python\nGeekmarks - Personal bookmarking service focused on speed and organization using hierarchical tags. (Source Code) BSD-2-Clause Go\ngolinks - Web application that allows you to create smart bookmarks, commands and aliases by pointing your web browser\u0026rsquo;s default search engine at a running instance. Similar to bunny1 or yubnub. (Demo) MIT Go\nHackershare - Social bookmarks website for hackers. (Demo) MIT Ruby\nLinkAce - A bookmark archive with automatic backups to the Internet Archive, link monitoring, and a full REST API. Installation is done via Docker, or as a simple PHP application. (Demo, Source Code) GPL-3.0 PHP\nlinkding - Minimal bookmark management with a fast and clean UI. Simple installation through Docker and can run on your Raspberry Pi. (Demo) MIT Docker/Python/Nodejs\nLobsters - Run your own link aggregation site. (Source Code) BSD-3-Clause Ruby\nNo Fuss Bookmarks - Very simple software and service to store bookmarks especially designed for hackers (that don\u0026rsquo;t need fancy interfaces, but nice API). (Source Code) GPL-3.0 Python\nPinry - The tiling image board system for people who want to save, tag, and share images, videos, and webpages. (Source Code) BSD-2-Clause Python\nReminiscence - Self-Hosted Bookmark And Archive Manager. AGPL-3.0 Python\nShaarli - Personal, minimalist, super-fast, no-database bookmarking and link sharing platform. (Demo) Zlib PHP\nShiori - Simple bookmark manager built with Go. MIT Go\nubookmark - LDAP enabled bookmarking service. (Demo, Source Code) GPL-2.0 Python\nunmark - Open source to do app for links. (Source Code) MIT PHP\nxBrowserSync - Open source tool for syncing browser data between browsers and devices. (Source Code) MIT Nodejs\nCalendar \u0026amp; Contacts # ^ back to top ^\nRelated: Groupware\nSee also: Comparison of CalDAV and CardDAV implementations - Wikipedia\nCalendar \u0026amp; Contacts - CalDAV or CardDAV Servers # ^ back to top ^\nBaïkal - Lightweight CalDAV and CardDAV server based on sabre/dav. (Source Code) GPL-3.0 PHP\ncalypso - Python-based CalDAV and CardDAV server, forked from Radicale. (Source Code) GPL-3.0 Python\nDAViCal - Server for calendar sharing (CalDAV) that uses a PostgreSQL database as a data store. (Source Code) GPL-2.0 PHP\nDavis - A simple, dockerizable and fully translatable admin interface for sabre/dav based on Symfony 5 and Bootstrap 4, largely inspired by Baïkal. MIT PHP\nDecSync CC - Serverless contacts, calendar synchronization using your own file syncing method i.e Syncthing, Nextcloud etc. (Source Code) GPL-3.0 Kotlin\nEtebase (EteSync) - End-to-end encrypted and journaled personal information server supporting calendar and contact data, offering its own clients. (Source Code) AGPL-3.0 Python/Django\nRadicale - Simple calendar and contact server with extremely low administrative overhead. (Source Code) GPL-3.0 Python\nSabreDAV - Open source CardDAV, CalDAV, and WebDAV framework and server. (Source Code) MIT PHP\nXandikos - Open source CardDAV and CalDAV server with minimal administrative overhead, backed by a Git repository. (Source Code) GPL-3.0 Python\nCalendar \u0026amp; Contacts - CalDAV or CardDAV Web-based Clients # ^ back to top ^\nAgenDAV - Multilanguage CalDAV web client with a rich AJAX interface and shared calendars support. (Source Code) GPL-3.0 PHP\nBloben - CalDAV web client. (Demo, Source Code) AGPL-3.0 Docker\nEteSync Web - EteSync\u0026rsquo;s official Web-based client (i.e., their Web app). (Demo, Source Code) AGPL-3.0 Javascript\nInfCloud - Open source CalDAV/CardDAV web client implementation. (Demo, Source Code) AGPL-3.0 Javascript\nCommunication # ^ back to top ^\nCommunication - Custom Communication Systems # ^ back to top ^\nBluetoothCommunicatorExample - Bluetooth LE chat app to communicate between android devices with P2P architecture. (Clients) Apache-2.0 Java\nCentrifugo - Language-agnostic real-time messaging (Websocket or SockJS) server. (Demo) MIT Go\nChaskiq - Full featured livechat, helpcenter and CRM as an alternative to Intercom \u0026amp; Drift, Crisp and others. (Source Code) AGPL-3.0 Ruby\nChatwoot - Self-hosted customer communication platform, an alternative to Intercom \u0026amp; Zendesk. (Source Code) MIT Ruby\nCherry - Tiny webchat server. GPL-2.0 Go\nConduit - A simple, fast, and reliable chat server powered by Matrix. (Source Code) Apache-2.0 Rust\nDarkwire.io - End-to-end encrypted instant web chat. MIT Nodejs\nElement - Fully-featured Matrix client for Web, iOS \u0026amp; Android. (Source Code) Apache-2.0 Javascript\nEnigma Reloaded - DIY Message and file encryption for any platform. GPL-3.0 Javascript\nFreenet - Anonymously share files, browse and publish freesites (web sites accessible only through Freenet) and chat on forums. (Source Code) GPL-2.0 Java\nGalene - Galène (or Galene) is a videoconference server (an “SFU”) that is easy to deploy and that requires moderate server resources. (Source Code) MIT Go\nGNUnet - Free software framework for decentralized, peer-to-peer networking. (Source Code) GPL-3.0 C\nGotify - Self-hosted notification server with Android and CLI clients, similar to PushBullet. (Source Code, Clients) MIT Go\nHawkpost - HawkPost is a web app that lets you create unique links that you can share with a person that desires to send you important information but doesn\u0026rsquo;t know how to encrypt it. The message is encrypted in their browser and sent to your email address. (Source Code) MIT Python\nJam - Jam is an open source alternative to Clubhouse: private audio chat rooms to talk to friends and family. (Demo, Source Code) AGPL-3.0 Docker/Node.js\nJami - Free and universal communication platform which preserves the user\u0026rsquo;s privacy and freedoms (formerly GNU Ring). (Source Code) GPL-3.0 C++\nJitsi Meet - Jitsi Meet is an OpenSource (MIT) WebRTC Javascript application that uses Jitsi Videobridge to provide high quality, scalable video conferences. (Source Code) MIT Javascript\nJitsi Video Bridge - WebRTC compatible Selective Forwarding Unit (SFU) that allows for multiuser video communication. (Source Code) Apache-2.0 Java\nKChat - PHP Based Live Chat Application. Apache-2.0 PHP\nLeapChat - Ephemeral, encrypted, in-browser chat rooms. AGPL-3.0 Javascript\nLets-Chat - Self hosted chat suite written in Node. (Source Code) MIT Nodejs\nLibreNews - Decentralized and secure breaking news notification system. (Source Code) GPL-3.0 Python\nLive Helper Chat - Live Support chat for your website. (Source Code) Apache-2.0 PHP\nLiveKit - Modern, scalable WebRTC conferencing platform with client SDKs. (Demo, Source Code) Apache-2.0 Go\nMatrix Console Web - Web client meant to be a showcase of Matrix capabilities, and reference implementation of the Matrix standard. (Source Code) Apache-2.0 Javascript\nMattermost - Open-source, on-prem Slack-alternative. It can be integrated with Gitlab. (Source Code) AGPL-3.0/Apache-2.0 Go\nMiAOU - Multi-room persistent chat server. (Source Code) MIT Nodejs\nMibew - Mibew Messenger is an open-source live support application written in PHP and MySQL. It enables one-on-one chat assistance in real-time directly from your website. (Demo, Source Code) Apache-2.0 PHP\nMumble - Low-latency, high quality voice/text chat software. (Source Code, Clients) BSD-3-Clause C++\nNotifo - Multichannel notification server with support for Email, Mobile Push, Web Push, SMS, messaging and a javascript plugin. (Source Code) MIT C#\nntfy - Push notifications to phone or desktop using HTTP PUT/POST, with Android app, CLI and web app, similar to Pushover and Gotify. (Demo, Source Code, Clients) Apache-2.0/GPL-2.0 Go\nOTS - One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser. (Source Code) Apache-2.0 Go\nPapercups - An open source live customer chat web app written in Elixir. (Demo, Source Code) MIT Elixir\nPushBits - Self-hosted notification server for relaying push notifications via Matrix, similar to PushBullet and Gotify. ISC Go\npWS - pWS is a free, open-source Pusher drop-in alternative. MIT Nodejs\nRallly - Rallly is an open-source alternative to Doodle that lets you create polls to vote on dates and times. (Source Code) AGPL-3.0 Nodejs\nRetroShare - Secured and decentralized communication system. Offers decentralized chat, forums, messaging, file transfer. (Source Code) GPL-2.0 C++\nRevolt - Revolt is a user-first chat platform built with modern web technologies. (Source Code) AGPL-3.0 Rust\nRocket.Chat - Teamchat solution similar to Gitter.im or Slack. (Source Code) MIT Nodejs\nScreensy - Simple peer-to-peer screen sharing solution for sharing your screen with WebRTC. (Demo) GPL-3.0 Nodejs\nShhh - Keep secrets out of emails or chat logs, share them using secure links with passphrase and expiration dates. MIT Python\nSimpleX Chat - The most private and secure chat and applications platform - now with double ratchet E2E encryption. AGPL-3.0 Haskell\nSpectrum 2 - Spectrum 2 is an open source instant messaging transport. It allows users to chat together even when they are using different IM networks. (Source Code) GPL-3.0 C++\nSpreed - WebRTC audio/video calls, conferencing server, and web client. (Source Code) AGPL-3.0 Go\nStoneAge Messenger - A self-hosted Android messenger, S3-compatible storage is the only backend needed. (Source Code, Clients) GPL-3.0 Java\nSynapse - Server for Matrix, an open standard for decentralized persistent communication. (Source Code) Apache-2.0 Python\nSyndie - Syndie is a libre system for operating distributed forums. CC0-1.0 Java\nTextBelt ⚠ - Outgoing SMS API that uses carrier-specific gateways to deliver your text messages for free, and without ads. MIT Javascript\nTinode - Instant messaging platform. Backend in Go. Clients: Swift iOS, Java Android, JS webapp, scriptable command line; chatbots. (Demo, Source Code, Clients) GPL-3.0 Go\nTox - Distributed, secure messenger with audio and video chat capabilities. (Source Code) GPL-3.0 C\nTuber - Peer-to-peer video chat that works. (Source Code) MIT Javascript\nTypebot - Typebot is a conversational app builder as an alternative to Typeform or Landbot. (Source Code) AGPL-3.0 Docker\nWBO - A web Whiteboard to collaborate in real-time on schemas, drawings, and notes. (Demo) AGPL-3.0 Nodejs/Docker\nWirow - A full featured self-hosted video web-conferencing platform. AGPL-3.0 C\nZeroNet ⚠ - Open, free, and uncensorable websites, using Bitcoin cryptography and BitTorrent network. (Source Code) GPL-2.0 Python\nZulip - Zulip is a powerful, open source group chat application. (Source Code) Apache-2.0/Other Python\nCommunication - Email # ^ back to top ^\nCommunication - Email - Complete Solutions # ^ back to top ^\nSimple deployment of a mail server, e.g. for inexperienced or impatient admins.\nAnonAddy - Open source email forwarding service for creating aliases. (Source Code) MIT PHP\nDebOps - Your Debian-based data center in a box. A set of general-purpose Ansible roles that can be used to manage Debian or Ubuntu hosts. (Source Code) GPL-3.0-only YAML/Ansible/Python\ndocker-mailserver - Production-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container. Only configuration files, no SQL database. (Source Code) MIT Docker\nemailwiz - Luke Smith\u0026rsquo;s bash script to completely automate the setup of a Postfix/Dovecot/SpamAssassin/OpenDKIM server on debian. GPL-3.0 Bash\nExcision Mail - Fullstack, security focused mailserver based on OpenSMTPD for OpenBSD using ansible. ISC Shell/Ansible\nhomebox - Suite of Ansible scripts to deploy a fully functional mail server on Debian. Unobtrusive and automatic as much as possible, focusing on stability and security. GPL-3.0 Shell\nInboxen - Inboxen is a service that provides you with an infinite number of unique inboxes. (Source Code) GPL-3.0 Python\niRedMail - Full-featured mail server solution based on Postfix and Dovecot. (Source Code) GPL-3.0 Shell\nMaddy Mail Server - All-in-one mail server that implements SMTP (both MTA and MX) and IMAP. Replaces Postfix, Dovecot, OpenDKIM, OpenSPF, OpenDMARC with single daemon. GPL-3.0 Go\nMail-in-a-Box - Turns any Ubuntu server into a fully functional mail server with one command. (Source Code) CC0-1.0 Shell\nMailcow - Mail server suite based on Dovecot, Postfix and other open source software, that provides a modern Web UI for administration. (Source Code) GPL-2.0 Docker/PHP\nMailu - Mailu is a simple yet full-featured mail server as a set of Docker images. (Source Code) MIT Docker/Python\nModoboa - Modoboa is a mail hosting and management platform including a modern and simplified Web User Interface. (Source Code) ISC Python\nPtorx - Email privacy. Anonymously send and receive with alias forwarding. GPL-3.0 Nodejs\nSimple NixOS Mailserver - Complete mailserver solution leveraging the Nix Ecosystem. GPL-3.0 Nix\nSimpleLogin - Open source email alias solution to protect your email address. Comes with browser extensions and mobile apps. (Source Code) MIT Docker/Python\nwildduck - Scalable no-SPOF IMAP/POP3 mail server. (Source Code) EUPL-1.2 Nodejs\nCommunication - Email - Mail Delivery Agents # ^ back to top ^\nMDAs - IMAP/POP3 software\nCyrus IMAP - Email (IMAP/POP3), contacts and calendar server. (Source Code) BSD-3-Clause-Attribution C\nDovecot - IMAP and POP3 server written primarily with security in mind. (Source Code) MIT/LGPL-2.1 C\nMailForm - Lightweight self-hosted open source alternative to Formspree and SendGrid. Apache-2.0 Nodejs\nPiler - feature-rich open source email archiving solution. (Source Code) GPL-3.0 C\nCommunication - Email - Mail Transfer Agents # ^ back to top ^\nMTAs / SMTP servers\nchasquid - SMTP (email) server with a focus on simplicity, security, and ease of operation. (Source Code) Apache-2.0 Go\nCourier MTA - Fast, scalable, enterprise mail/groupware server providing ESMTP, IMAP, POP3, webmail, mailing list, basic web-based calendaring and scheduling services. (Source Code) GPL-3.0 C\nExim - Message transfer agent (MTA) developed at the University of Cambridge. (Source Code) GPL-3.0 C\nHaraka - High-performance, pluginable SMTP server written in Javascript. (Source Code) MIT Javascript\nMailCatcher - Ruby gem that deploys a simply SMTP MTA gateway that accepts all mail and displays in web interface. Useful for debugging or development. (Source Code) MIT Ruby\nMaildrop - Disposable email SMTP server, also useful for development. MIT Scala\nMailHog - Small Golang executable which runs an SMTP MTA gateway that accepts all mail and displays in web interface. Useful for debugging or development. MIT Go\nOpenSMTPD - Secure SMTP server implementation from the OpenBSD project. (Source Code) ISC C\nPostfix - Fast, easy to administer, and secure Sendmail replacement. IPL-1.0 C\nQmail - Secure Sendmail replacement. (Source Code) CC0-1.0 C\nSendmail - Message transfer agent (MTA). Sendmail C\nSlimta - Mail Transfer Library built on Python. (Source Code) MIT Python\nCommunication - Email - Mailing Lists and Newsletters # ^ back to top ^\nMailing lists servers and mass mailing software - one message to many recipients.\nDada Mail - Web-based list management system that can be used for announcement lists and/or discussion lists. (Source Code) GPL-2.0 Perl\nGray Duck Mail - Self hosted email discussion list management that uses external email providers. (Source Code) GPL-3.0 Docker\nHyperKitty - Open source Django application to provide a web interface to access GNU Mailman v3 archives. (Demo, Source Code) GPL-3.0 Python\nKeila - Self-hosted reliable and easy-to-use newsletter tool. Alternative to proprietary services like Mailchimp or Sendinblue. (Demo, Source Code) AGPL-3.0 Elixir\nListmonk - High performance, self-hosted newsletter and mailing list manager with a modern dashboard. (Source Code) AGPL-3.0 Go\nMailman - The Gnu mailing list server. GPL-3.0 Python\nMailtrain - Self hosted newsletter application. (Source Code) GPL-3.0 Nodejs\nMailyHerald - Self-hosted Mailchimp alternative that you can easily integrate with your site. Helps you send and manage your application mailings. It supports email marketing and conducting the daily stream of notifications you send to your users. (Source Code) LGPL-3.0 Ruby\nMautic - Mautic is marketing automation software (email, social and more). (Source Code) GPL-3.0 PHP\nphpList - Newsletter and email marketing with advanced management of subscribers, bounces, and plugins. (Source Code) AGPL-3.0 PHP\nPostal - Fully featured open source mail delivery platform for incoming and outgoing e-mail. (Source Code) MIT Ruby\nPostorius - Web user interface to access GNU Mailman. (Source Code) GPL-3.0 Python\nSchleuder - GPG-enabled mailing list manager with resending-capabilities. (Source Code) GPL-3.0 Ruby\nSympa - Mailing list manager. GPL-2.0 Perl\nCommunication - Email - Webmail Clients # ^ back to top ^\nAfterlogic WebMail Lite - Fast and easy-to-use webmail front-end for your existing IMAP mail server, Plesk or cPanel. (Demo, Source Code) AGPL-3.0 PHP\nCypht - Feed reader for your email accounts. (Source Code) LGPL-2.1 PHP\nIMP - HORDE application that provides webmail access to IMAP and POP3 accounts. (Demo, Source Code) GPL-2.0 PHP\nIsotope Mail - Microservice based webmail client built with ReactJS and Spring. (Source Code) Apache-2.0 Docker/Java\nMailCare - Open source disposable email address service. (Source Code) MIT PHP\nMailpile - Webmail client with search, filtering, encryption features and more. (Source Code) AGPL-3.0 Python\nRoundcube - Browser-based IMAP client with an application-like user interface. (Source Code) GPL-3.0 PHP\nSnappyMail - Simple, modern, lightweight \u0026amp; fast web-based email client. (It is an actively developed fork of RainLoop). (Demo, Source Code) AGPL-3.0 PHP\nSquirrelMail - Another browser-based IMAP client. (Source Code) GPL-2.0 PHP\nCommunication - IRC # ^ back to top ^\nIRC communication software\nConvos - Always online web IRC client. (Demo, Source Code) Artistic-2.0 Perl\nDispatch - Self-hosted web IRC client written in Go. (Demo) MIT Go\nErgo - Modern IRCv3 server written in Go, combining the features of an ircd, a services framework, and a bouncer. (Source Code) MIT Go\nGlowing Bear - A web frontend for WeeChat. (Demo) GPL-3.0 Javascript\nInspIRCd - Modular IRC server written in C++ for Linux, BSD, Windows, and macOS. (Source Code) GPL-2.0-only C++\nKiwi IRC - Responsive web IRC client with theming support. (Demo, Source Code) Apache-2.0 Nodejs\nngircd - Free, portable and lightweight Internet Relay Chat server for small or private networks. (Source Code) GPL-2.0 C\nQuassel IRC - distributed IRC client, meaning that one (or multiple) client(s) can attach to and detach from a central core. (Source Code) GPL-2.0 C++\nRobust IRC - RobustIRC is IRC without netsplits. Distributed IRC server, based on RobustSession protocol. (Source Code) BSD-3-Clause Go\nThe Lounge - Self-hosted web IRC client. (Demo, Source Code) MIT Nodejs\nTiny Tiny IRC - An open source AJAX-powered chat platform with support for IRC (Source Code). GPL-3.0 PHP/Java\nUnrealIRCd - Modular, advanced and highly configurable IRC server written in C for Linux, BSD, Windows, and macOS. (Source Code) GPL-2.0 C\nWeechat - Fast, light and extensible chat client. GPL-3.0 C\nZNC - Advanced IRC bouncer. (Source Code) Apache-2.0 C++\nCommunication - SIP # ^ back to top ^\nSIP/IPBX telephony software\nAsterisk - Easy to use but advanced IP PBX system, VoIP gateway and conference server. GPL-2.0 C\nASTPP - is an Open Source VoIP Billing Solution for Freeswitch. It supports prepaid and postpaid billing with call rating and credit control. It also provides many other features. (Source Code) AGPL-3.0 PHP\nEqivo - Eqivo implements an API layer on top of FreeSWITCH facilitating integration between web applications and voice/video-enabled endpoints such as traditional phone lines (PSTN), VoIP phones, webRTC clients etc. (Source Code) MIT PHP\nFreepbx - Web-based open source GUI that controls and manages Asterisk. (Source Code) GPL-2.0 PHP\nFreeSWITCH - Scalable open source cross-platform telephony platform. (Source Code) MPL-2.0 C\nFusionPBX - Open source project that provides a customizable and flexible web interface to the very powerful and highly scalable multi-platform voice switch called FreeSWITCH. (Source Code) MPL-1.1 PHP\nKamailio - Modular SIP server (registrar/proxy/router/etc). (Source Code) GPL-2.0 C\nKazoo - KAZOO is an open-source, highly scalable software platform designed to provide carrier-grade VoIP switch functions and features. (Source Code) MPL-1.1 Erlang\nOstel - Secure SIP telephony setup with ZRTP encryption. GPL-3.0 Ruby\nRoutr - A lightweight sip proxy, location server, and registrar for a reliable and scalable SIP infrastructure. (Source Code) MIT Javascript\nSIP3 - VoIP troubleshooting and monitoring platform. (Demo, Source Code) Apache-2.0 Kotlin\nSIPCAPTURE Homer - Troubleshooting and monitoring VoIP calls. (Source Code) AGPL-3.0 Angular/C\nSipXcom - Open source unified communications system. (Source Code) AGPL-3.0 Java\nWazo - Full-featured IPBX solution built atop Asterisk with integrated Web administration interface and REST-ful API. (Source Code) GPL-3.0 Python\nYeti-Switch - Transit class4 softswitch(SBC) with integrated billing and routing engine and REST API. (Demo, Source Code) GPL-2.0 C++/Ruby\nCommunication - Social Networks and Forums # ^ back to top ^\nAbilian SBE - Open Source Collaboration and Social Networking framework and platform. LGPL-2.1 Python\nAnahita - Open Source Social Networking Framework and Platform. (Source Code) GPL-3.0 PHP\nAsmBB - A fast, SQLite-powered forum engine written in ASM. (Source Code) EUPL-1.2 Assembly\nbbPress - bbPress is forum software with a twist from the creators of WordPress. Easily setup discussion forums inside your WordPress.org powered site. (Source Code) GPL-2.0 PHP\nBibliogram ⚠ - An alternative front-end for Instagram. (Source Code) AGPL-3.0 Nodejs\nBootcamp - Enterprise social network. (Source Code) MIT Python\nBuddycloud - Tools, libraries, services and a community to build user-to-user, group and social messaging into your app. Saves time. Scales up. Supports you. (Source Code) Apache-2.0 Java\nBuddyPress - Powerful plugin that takes your WordPress.org powered site beyond the blog with social-network features like user profiles, activity streams, user groups, and more. (Source Code) GPL-2.0 PHP\nCactus Comments - Cactus Comments is a federated comment system for the open web built on Matrix. (Demo, Source Code) GPL-3.0 Python\ncartulary - RSS reader, readability tool, article archiver, microblogger, social graph manager and reading list manager. CDDL-1.0 PHP\nCommento - Commento is a discussion platform that you can embed on your blog, news articles, and any place where you want your readers to add comments. MIT Go\nCoral - A better commenting experience from Vox Media. (Source Code) Apache-2.0 Nodejs\ndiaspora* - Distributed social networking server. (Source Code) AGPL-3.0 Ruby\nDiscourse - Advanced forum / community solution based on Ruby and JS. (Demo, Source Code) GPL-2.0 Ruby\ndyu comments - Real-time, markdown-enabled comment engine powered by leveldb. (Demo) Apache-2.0 Java\nElgg - Powerful open source social networking engine. (Source Code) GPL-2.0 PHP\nEnigma 1/2 BBS - Enigma 1/2 is a modern, multi-platform BBS engine with unlimited \u0026ldquo;callers\u0026rdquo; and legacy DOS door game support. (Demo, Source Code) BSD-2-Clause Nodejs/Javascript\nEpochTalk - Next Generation Forum Software. MIT Nodejs\nFlarum - Delightfully simple forums. Flarum is the next-generation forum software that makes online discussion fun again. (Source Code) MIT PHP\nFlaskBB - FlaskBB is forum software written in Python using the microframework Flask. You can easily create new topics, posts and send other users private messages. It also includes basic administration and moderation tools. (Source Code) BSD-3-Clause Python\nFluxBB - Fast, light, user-friendly forum software for your website. (Source Code) GPL-2.0 PHP\nFriendica - Social Communication Server. (Source Code) AGPL-3.0 PHP\nGlosa - Open source commentary system easy to integrate with static pages. You can import from Disqus. GPL-3.0 Java\nGNU social - Social communication software for both public and private communications. (Source Code) AGPL-3.0 PHP\nGosora - Gosora is an ultra-fast and secure forum software written in Go that balances usability with functionality. (Source Code) GPL-3.0 Go\nHubzilla - Decentralized identity, privacy, publishing, sharing, cloud storage, and communications/social platform. (Source Code) MIT PHP\nHumHub - Flexible kit for private social networks. (Source Code) AGPL-3.0 PHP\nIsso - Lightweight commenting server written in Python and Javascript. It aims to be a drop-in replacement for Disqus. (Source Code) MIT Python\nLemmy - A link aggregator / reddit clone for the fediverse. Reddit alternative built in Rust. (Source Code) AGPL-3.0 Rust\nLibreddit ⚠ - Private front-end for Reddit written in Rust. (Source Code) AGPL-3.0 Rust\nLoomio - Loomio is a collaborative decision-making tool that makes it easy for anyone to participate in decisions which affect them. (Source Code) AGPL-3.0 Ruby\nMastodon - Federated microblogging server, an alternative to GNU social. (Source Code) AGPL-3.0 Ruby\nMisago - Misago is fully featured modern forum application that is fast, scalable and responsive. (Source Code) GPL-2.0 Python\nMisskey - Decentralized app-like microblogging server/SNS for the Fediverse, using the ActivityPub protocol like GNU social and Mastodon. (Source Code) AGPL-3.0 Nodejs\nMovim - Modern, federated social network based on XMPP, with a fully featured group-chat, subscriptions and microblogging. (Source Code) AGPL-3.0 PHP\nMyBB - Free, extensible forum software package. (Source Code) LGPL-3.0 PHP\nNitter ⚠ - A alternative front end to twitter. (Source Code) AGPL-3.0 Nimble\nNodeBB - Forum software built for the modern web. (Source Code) GPL-3.0 Nodejs\nOrange Forum - Orange Forum is an easy to deploy forum that has minimal dependencies and uses very little javascript. (Source Code) BSD-3-Clause Go\nOSSN - Open Source Social Network (OSSN) is a social networking software written in PHP. It allows you to make a social networking website and helps your members build social relationships, with people who share similar professional or personal interests. (Source Code) GPL-2.0 PHP\nphpBB - Flat-forum bulletin board software solution that can be used to stay in touch with a group of people or can power your entire website. (Source Code) GPL-2.0 PHP\nPixelFed - Pixelfed is an open-source, federated platform alternate to Instagram. (Source Code) AGPL-3.0 PHP\nPleroma - Federated microblogging server, Mastodon, GNU social, \u0026amp; ActivityPub compatible. (Source Code) AGPL-3.0 Elixir\nPump.io - Stream server that does most of what people really want from a social network. (Source Code) Apache-2.0 Nodejs\nremark42 - A lightweight and simple comment engine, which doesn\u0026rsquo;t spy on users. It can be embedded into blogs, articles or any other place where readers add comments. (Demo, Source Code) MIT Go\nSatellity - Yet another open source forum written in Golang, React and PostgreSQL. (Source Code) MIT Go\nschnack - Schnack is simple self-hosted node app for Disqus-like drop-in commenting on static websites. LIL-1.0 Node.js\nScoold - Stack Overflow in a JAR. An enterprise-ready Q\u0026amp;A platform with full-text search, SAML, LDAP integration and social login support. (Demo, Source Code) Apache-2.0 Java\nSimple Machines Forum - Free, professional grade software package that allows you to set up your own online community within minutes. (Source Code) BSD-3-Clause PHP\nSocialhome - Federated and decentralized profile builder and social network engine. (Demo, Source Code) AGPL-3.0 Python\nTalkyard - Create a community, where your users can suggest ideas and get questions answered. And have friendly open-ended discussions and chat (Slack/StackOverflow/Discourse/Reddit/Disqus hybrid). (Demo, Source Code) AGPL-3.0 Scala\nTeddit ⚠ - Alternative Reddit front-end focused on privacy. (Source Code) AGPL-3.0 Nodejs\nThredded - Forums, feature-rich and simple. MIT Ruby\nTokumei - Anonymous microblogging platform. (Source Code) ISC rc\ntwister - Fully decentralized P2P microblogging platform leveraging the free software implementations of Bitcoin and BitTorrent protocols. (Source Code) MIT C++\nVanilla Forums - Simple and flexible forum software. (Source Code) GPL-2.0 PHP\nyarn.social - a Self-Hosted, Twitter™-like Decentralised micro-logging platform. No ads, no tracking, your content, your data. (Source Code) MIT Go\nZusam - Free and open-source way to self-host private forums for groups of friends or family. (Demo, Source Code) AGPL-3.0 PHP\nCommunication - XMPP # ^ back to top ^\nExtensible Messaging and Presence Protocol software\nCommunication - XMPP - Servers # ^ back to top ^\nejabberd - XMPP instant messaging server. (Source Code) GPL-2.0 Erlang\njackal - XMPP server with focus on stability, simple configuration and low resource consumption. Apache-2.0 Go\nKontalk - Kontalk is an Open Source Messenger, similar to WhatsApp (app for android only currently), including end-to-end encryption, server is based on Tigase XMPP Server. (Source Code) GPL-3.0 Java\nMetronome IM - Fork of Prosody IM. (Source Code) MIT Lua\nMongooseIM - Mobile messaging platform with a focus on performance and scalability. (Source Code) GPL-2.0 Erlang\nOpenfire - Real time collaboration (RTC) server. (Source Code) Apache-2.0 Java\nProsody IM - Feature-rich and easy to configure XMPP server. (Source Code) MIT Lua\nSnikket - All-in-one Dockerized easy XMPP solution, including web admin and clients. (Source Code, Clients) Apache-2.0 Lua/Python\nTigase - XMPP server implementation in Java. GPL-3.0 Java\nCommunication - XMPP - Web Clients # ^ back to top ^\nCandy - Multi user XMPP client written in Javascript. (Source Code) MIT Javascript\nConverse.js - Free and open-source XMPP chat client in your browser. (Source Code) MPL-2.0 Javascript\nJSXC - Real-time XMPP web chat application with video calls, file transfer and encrypted communication. There are also versions for Nextcloud/Owncloud and SOGo. (Source Code) MIT Javascript\nLibervia - Web frontend from Salut à Toi. (Source Code) AGPL-3.0 Python\nSalut à Toi - Multipurpose, multi frontend, libre and decentralized communication tool. (Source Code) AGPL-3.0 Python\nCommunity-Supported Agriculture (CSA) # ^ back to top ^\nManagement and administration tools for community supported agriculture and food cooperatives\nRelated: E-commerce\nACP Admin - CSA administration. Manage members, subscriptions, deliveries, drop-off locations, member participation, invoices and emails. (Source Code) MIT Ruby\nCagette - Open source web app to help people build a better and sustainable food system. Some people call it a \u0026lsquo;foodhub\u0026rsquo; - a mix between a groupware and a marketplace, helping consumers to order food from local farmers and producers. (Source Code) GPL-2.0 Haxe\nFoodCoopShop - User-friendly open source software for food-coops. (Source Code) MIT PHP\nFoodsoft - Web-based software to manage a non-profit food coop (product catalog, ordering, accounting, job scheduling). (Source Code) AGPL-3.0 Ruby\njuntagrico - Management platform for community gardens and vegetable cooperatives. (Source Code) LGPL-3.0 Python\nLocal Food Nodes - Your open source platform for peoples driven local food markets and CSA. (Source Code) MIT PHP\nOpen Food Network - Online marketplace for local food. It enables a network of independent online food stores that connect farmers and food hubs with individuals and local businesses. (Source Code) AGPL-3.0 Ruby\nOpenOlitor - Administration platform for Community Supported Agriculture groups. (Source Code) AGPL-3.0 Scala\nteikei - A web application that maps out community-supported agriculture based on crowdsourced data. (Demo) AGPL-3.0 Nodejs\nConference Management # ^ back to top ^\nBigBlueButton - Supports real-time sharing of audio, video, slides (with whiteboard controls), chat, and the screen. Instructors can engage remote students with polling, emojis, and breakout rooms. (Demo, Source Code) LGPL-3.0 Java\nConference Organizing Distribution (COD) - Create conference and event websites built on top of Drupal. (Source Code) GPL-1.0 PHP\nfrab - web-based conference planning and management system. It helps to collect submissions, to manage talks and speakers and to create a schedule. (Source Code) MIT Ruby\nindico - A feature-rich event management system, made @ CERN, the place where the Web was born. (Demo, Source Code) MIT Python\nOpen Conference Systems (OCS) - is a free Web publishing tool that will create a complete Web presence for your scholarly conference. (Demo, Source Code) GPL-1.0 PHP\nOpenCFP - OpenCFP is a PHP-based conference talk submission system. MIT PHP\nosem - Event management tailored to free Software conferences. (Demo, Source Code) MIT Ruby\npretalx - Web-based event management, including running a Call for Papers, reviewing submissions, and scheduling talks. Exports and imports for various related tools. (Source Code) Apache-2.0 Python\nContent Management Systems (CMS) # ^ back to top ^\nCMS are a practical way to setup a website with many features. CMS often come with third party plugins, themes and functionality that is easy to add and customize to your needs.\nRelated: Blogging Platforms, Static Site Generators\nAlfresco Community Edition - The open source Enterprise Content Management software that handles any type of content, allowing users to easily share and collaborate on content. (Source Code) LGPL-3.0 Java\nApostrophe - CMS with a focus on extensible in-context editing tools. (Demo, Source Code) MIT Nodejs\nb2evolution CMS - The most integrated CMS ever: b2evolution includes everything you need to build websites for publishing, sharing and interacting with your community. (Source Code) GPL-2.0 PHP\nBackdrop CMS - Comprehensive CMS for small to medium sized businesses and non-profits. (Source Code) GPL-2.0 PHP\nBigTree CMS - Straightforward, well documented, and capable written with PHP and MySQL. (Source Code) LGPL-2.1 PHP\nBolt CMS - Open source Content Management Tool, which strives to be as simple and straightforward as possible. (Demo, Source Code) MIT PHP\nCMS Made Simple - Open source content management system, faster and easier management of website contents, scalable for small businesses to large corporations. (Source Code) GPL-1.0 PHP\nCockpit - Simple Content Platform to manage any structured content. (Source Code) MIT PHP\nConcrete 5 CMS - Open source content management system. (Source Code) MIT PHP\nContao - Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. (Source Code) LGPL-3.0 PHP\nCouchCMS - Simple Open-Source CMS for designers. (Source Code) CPAL-1.0 PHP\nDirectus - An Instant App \u0026amp; API for your SQL Database. Directus wraps your new or existing SQL database with a realtime GraphQL+REST API for developers, and an intuitive admin app for non-technical users. (Source Code) GPL-3.0 Nodejs\nDrupal - Advanced open source content management platform. (Source Code) GPL-2.0 PHP\neLabFTW - Online lab notebook for research labs. Store experiments, use a database to find reagents or protocols, use trusted timestamping to legally timestamp an experiment, export as pdf or zip archive, share with collaborators…. (Demo, Source Code) AGPL-3.0 PHP\nExpressa - Content Management System for powering database driven websites using JSON schemas. Provides permission management and automatic REST APIs. MIT Nodejs\nFlextype - Flextype is an open-source Hybrid Content Management System with the freedom of a headless CMS and with the full functionality of a traditional CMS. (Demo, Source Code) MIT PHP\nGetSimple CMS - The Simplest Content Management System. Ever. (Source Code) GPL-3.0 PHP\nJoomla! - Advanced Content Management System (CMS). (Source Code) GPL-2.0 PHP\nKeystoneJS - CMS and Web Application Platform. (Demo, Source Code) MIT Nodejs\nMODX - MODX is an advanced content management and publishing platform. The current version is called \u0026lsquo;Revolution\u0026rsquo;. (Source Code) GPL-2.0 PHP\nNeos - Neos or TYPO3 Neos (for version 1) is a modern, open source CMS. (Source Code) GPL-3.0 PHP\nNoosfero - Noosfero is a web platform for social and solidarity economy networks with blog, e-Portfolios, CMS, RSS, thematic discussion, events agenda and collective intelligence for solidarity economy in the same system. AGPL-3.0 Ruby\noctober - Free, open-source, self-hosted CMS platform. (Source Code) MIT PHP\nOmeka - Create complex narratives and share rich collections, adhering to Dublin Core standards with Omeka on your server, designed for scholars, museums, libraries, archives, and enthusiasts. (Demo, Source Code) GPL-3.0 PHP\nPagekit - New modern CMS to create and share. (Source Code) MIT PHP\nPico - Stupidly simple, blazing fast, flat file CMS. (Source Code) MIT PHP\nPimcore - Multi-Channel Experience and Engagement Management Platform. (Source Code) GPL-3.0-or-later PHP\nPlone - Powerful open-source CMS system. (Source Code) ZPL-2.0 Python\nProcessWire - ProcessWire is an open source content management system (CMS) and web application framework aimed at the needs of designers, developers and their clients. (Source Code) MPL-2.0 PHP\nPropertyWebBuilder - Ultimate Ruby on Rails engine for creating real estate websites. (Demo, Source Code) MIT Ruby\nPublify - Simple but full featured web publishing software. (Source Code) MIT Ruby\nRapido - Create your website with Rapido. Edit, publish and share collaborative content. AGPL-3.0 Go\nREDAXO - Simple, flexible and useful content management system (documentation only available in German). (Source Code) MIT PHP\nRedaxscript - Ultra lightweight CMS for MySQL, SQLite and PostgreSQL. (Demo, Source Code) GPL-3.0 PHP\nRoadiz - Modern CMS based on a node system which can handle many types of services. (Source Code) MIT PHP\nSilverStripe - Easy to use CMS with powerful MVC framework underlying. (Demo, Source Code) BSD-3-Clause PHP\nSPIP - Publication system for the Internet aimed at collaborative work, multilingual environments, and simplicity of use for web authors. (Source Code) GPL-3.0 PHP\nSquidex - Headless CMS, based on MongoDB, CQRS and Event Sourcing. (Demo, Source Code) MIT .NET\nStrapi - The most advanced open-source Content Management Framework (headless-CMS) to build powerful API with no effort. (Source Code) MIT Nodejs\nTextpattern - Flexible, elegant and easy-to-use CMS. (Demo, Source Code) GPL-2.0 PHP\nTypemill - Author-friendly flat-file-cms with a visual markdown editor based on vue.js. (Source Code) MIT PHP\nTYPO3 - Powerful and advanced CMS with a large community. (Source Code) GPL-2.0 PHP\nUmbraco - The friendly CMS. Free and open source with an amazing community. (Source Code) MIT .NET\nWagtail - Django content management system focused on flexibility and user experience. (Source Code) BSD-3-Clause Python\nWinterCMS - Speedy and secure content management system built on the Laravel PHP framework. (Source Code) MIT PHP\nWonderCMS - WonderCMS is the smallest flat file CMS since 2008. (Demo, Source Code) MIT PHP\nWordPress - World\u0026rsquo;s most-used blogging and CMS engine. (Source Code) GPL-2.0 PHP\nWriteFreely - Writing software for starting a minimalist, federated blog — or an entire community. (Source Code) AGPL-3.0 Go\nDNS # ^ back to top ^\nSee also: awesome-sysadmin/DNS\nblocky - Fast and lightweight DNS proxy (like Pi-hole) as ad-blocker for local network with many features. Apache-2.0 Go\nCoreDNS - Plugin driven DNS Server with support for proxying to Google\u0026rsquo;s DNS-over-HTTPS. (Source Code) Apache-2.0 Go\nMaza ad blocking - Local ad blocker. Like Pi-hole but local and using your operating system. (Source Code) Apache-2.0 Bash\nnsupdate.info - nsupdate.info is a dynamic DNS service. (Demo, Source Code) BSD-3-Clause Python\nSPF Toolbox - Application to look up DNS records such as SPF, MX, Whois, and more. (Source Code) MIT PHP\nDocument Management # ^ back to top ^\nDOCAT - Host your docs. Simple. Versioned. Fancy. MIT Python/Docker\nDocspell - Auto-tagging document organizer and archive. (Source Code) GPL-3.0 Scala/Java\nEveryDocs - A simple Document Management System for private use with basic functionality to organize your documents digitally. GPL-3.0 Ruby\nI, Librarian - I, Librarian can organize PDF papers and office documents. It provides a lot of extra features for students and research groups both in industry and academia. (Demo, Source Code) GPL-3.0 PHP\nMayan EDMS - Free Open Source Electronic Document Management System. An electronic vault for your documents with preview generation, OCR, and automatic categorization among other features. (Source Code) Apache-2.0 Python\nPaperless-ngx - A fork of paperless, adding a new interface and many other changes under the hood. Scan, index, and archive all of your paper documents. (Demo) GPL-3.0 Python\nPapermerge - Open Source Document Management System focused on scanned documents (electronic archives). Features file browsing in similar way to dropbox/google drive. OCR, full text search, text overlay/selection. (Source Code) Apache-2.0 Python\npaper{s}pace - a small web application to manage all your offline documents. Provides a searchable storage for your documents and reminds you of upcoming tasks. (Source Code) MIT Java\nTeedy - (Ex SismicsDocs) Lightweight document management system packed with all the features you can expect from big expensive solutions. (Source Code) GPL-2.0 Java\nDocument Management - E-books # ^ back to top ^\nBicBucStriim - Provides web-based access to your Calibre Library\u0026rsquo;s e-book collection. (Source Code) MIT PHP\nCalibre Web - Web app providing a clean interface for browsing, reading and downloading eBooks using an existing Calibre database. GPL-3.0 Python\nCalibre - E-book library manager that can view, convert, and catalog e-books in most of the major e-book formats and provides a built-in Web server for remote clients. (Demo, Source Code) GPL-3.0 Python\nCOPS - Lightweight e-book server alternative to Calibre content server or Calibre2OPDS. (Demo, Source Code) GPL-2.0 PHP\nKavita - Cross-platform e-book/manga/comic/pdf server and web reader with user management, ratings and reviews, and metatdata support. (Demo, Source Code) GPL-3.0 .NET Core/Docker\nKomga - Media server for comics/mangas/BDs with API and OPDS support, a modern web interface for exploring your libraries, as well as a web reader. (Source Code) MIT Java/Docker\nMango - Manga server and web reader with a built-in MangaDex downloader. MIT Crystal\npyShelf - Lightweight Ebook Server. GPL-3.0 Python\nTanoshi - Selfhosted web manga reader with extensions. MIT Rust\nThe Epube - Self-hosted web EPUB reader using EPUB.js, Bootstrap, and Calibre. (Source Code) GPL-3.0 PHP\nDocument Management - Institutional Repository and Digital Library Software # ^ back to top ^\nDSpace - Turnkey repository application providing durable access to digital resources. (Source Code) BSD-3-Clause Java\nEPrints - Digital document management system with a flexible metadata and workflow model primarily aimed at academic institutions. (Demo, Source Code) GPL-3.0 Perl\nFedora Commons Repository - Robust and modular repository system for the management and dissemination of digital content especially suited for digital libraries and archives, both for access and preservation. (Source Code) Apache-2.0 Java\nInvenioRDM - Highly scalable turn-key research data management platform with a beautiful user experience. (Demo, Source Code, Clients) MIT Python\nIslandora - Drupal module for browsing and managing Fedora-based digital repositories. (Source Code) GPL-3.0 PHP\nSamvera Hyrax - Front-end for the Samvera framework, which itself is a Ruby on Rails application for browsing and managing Fedora-based digital repositories. (Source Code) Apache-2.0 Ruby\nDocument Management - Integrated Library Systems (ILS) # ^ back to top ^\nRelated: Content Management Systems (CMS), Archiving and Digital Preservation (DP)\nEvergreen - Highly-scalable software for libraries that helps library patrons find library materials, and helps libraries manage, catalog, and circulate those materials. (Source Code) GPL-2.0 PL/pgSQL\nKoha - Enterprise-class ILS with modules for acquisitions, circulation, cataloging, label printing, offline circulation for when Internet access is not available, and much more. (Demo, Source Code) GPL-3.0 Perl\nRERO ILS - Large-scale ILS that can be run as a service with consortial features, intended primarily for library networks. Includes most standard modules (circulation, acquisitions, cataloging,\u0026hellip;) and a web-based public and professional interface. (Demo, Source Code) AGPL-3.0 Python/Other\nE-commerce # ^ back to top ^\nRelated: Community-Supported Agriculture (CSA)\nAimeos - Ultra fast, Open Source e-commerce framework for building custom online shops, market places and complex B2B applications scaling to billions of items with Laravel. (Demo, Source Code) LGPL-3.0/MIT PHP\nAttendize - Ticket selling and event management platform. (Source Code) AAL PHP\nBagisto - Leading Laravel open source e-commerce framework with multi-inventory sources, taxation, localization, dropshipping and more exciting features. (Demo, Source Code) MIT PHP\nCoreShop - CoreShop is a e-commerce plugin for Pimcore. (Source Code) GPL-3.0 PHP\nDrupal Commerce - Drupal Commerce is a popular e-commerce module for Drupal CMS, with support for dozens of payment, shipping, and shopping related modules. (Source Code) GPL-2.0 PHP\nMagento - Leading provider of open omnichannel innovation. (Demo, Source Code) OSL-3.0 PHP\nMicroweber - Drag and Drop CMS and online shop. (Demo, Source Code) Apache-2.0 PHP\nOpen Source POS - Open Source Point of Sale is a web based point of sale system. (Source Code) MIT PHP\nOpenBazaar - Decentralized marketplace using cryptocurrency. (Source Code) MIT Go\nOpenCart - Free open source shopping cart solution. (Source Code) GPL-3.0 PHP\nOXID eShop - OXID eShop is a flexible open source e-commerce software with a wide range of functionalities. (Demo, Source Code) GPL-3.0 PHP\nPrestaShop - PrestaShop offers a free, open-source and fully scalable e-commerce solution. (Demo, Source Code) OSL-3.0 PHP\nPretix - Django based ticket sales platform for events. (Source Code) Apache-2.0 Python\nReaction Commerce - Customizable, real-time reactive, Javascript commerce platform. (Source Code) GPL-3.0 Nodejs\nSaleor - Django based open-sourced e-commerce storefront. (Demo, Source Code) BSD-3-Clause Python\nShopware Community Edition - PHP based open source e-commerce software made in Germany. (Demo, Source Code) MIT PHP\nShuup - Django powered fully customizable open source e-commerce framework for small and large sites. (Source Code) AGPL-3.0 Python\nSolidus - A free, open-source ecommerce platform that gives you complete control over your store. (Demo, Source Code) BSD-3-Clause Ruby\nSpree Commerce - Spree is a complete, modular \u0026amp; API-driven open source e-commerce solution for Ruby on Rails. (Demo, Source Code) BSD-3-Clause Ruby\nSylius - Symfony2 powered open source full-stack platform for eCommerce. (Demo, Source Code) MIT PHP\nThelia - Thelia is an open source and flexible e-commerce solution. (Demo, Source Code) LGPL-3.0 PHP\nVendure - A headless commerce framework built on Node.js, TypeScript \u0026amp; GraphQL. (Demo, Source Code) MIT Nodejs\nWooCommerce - WordPress based e-commerce solution. (Source Code) GPL-3.0 PHP\nYclas - Free open-source, self-hosted CMS for classifieds sites. (Source Code) GPL-3.0 PHP\nFederated Identity \u0026amp; Authentication # ^ back to top ^\nPlease visit awesome-sysadmin/Identity Management\nFeed Readers # ^ back to top ^\nA news aggregator, also termed a feed aggregator, feed reader, news reader, RSS reader or simply an aggregator, is client software or a web application that aggregates syndicated web content such as online newspapers, blogs/vlogs, podcasts, and other updates in one location for easy viewing. This also section includes RSS/Atom automation tools.\nCommaFeed - Google Reader inspired self-hosted RSS reader. (Source Code) Apache-2.0 Java\nFeedHQ - FeedHQ is a web-based feed reader. (Source Code) BSD-3-Clause Python\nFeedpushr - Powerful RSS aggregator, able to transform and send articles to many outputs. Single binary, extensible with plugins. GPL-3.0 Go\nFreshRSS - Self-hostable RSS feed aggregator. (Demo, Source Code, Clients) AGPL-3.0 PHP\nFull-Text RSS - Extract article content from news sites and blogs and convert RSS feeds that contain only extracts of stories to full-text feeds. Developed by FiveFilters.org. (Source Code) GPL-3.0 PHP\nGoeland - Reads RSS/Atom feeds and filter/digest them to create beautiful emails. MIT Go\ngritttt-rss - More features for Tiny Tiny RSS. (Source Code) BSD-2-Clause Python\nJARR - JARR (Just Another RSS Reader) is a web-based news aggregator and reader (fork of Newspipe). (Demo, Source Code) AGPL-3.0 Python\nKriss Feed - Simple and smart (or stupid) feed reader. (Demo, Source Code) CC0-1.0 PHP\nLeed - Leed (for Light Feed) is a Free and minimalist RSS aggregator. AGPL-3.0 PHP\nLeselys - Your very elegant RSS reader. AGPL-3.0 Python\nLite-Reader - Read your feeds on your own machine with a simple and lite application. (Demo) BSD-3-Clause PHP\nMiniflux - Miniflux is a minimalist and open source news reader, written in Go and PostgreSQL. (Source Code) Apache-2.0 Go\nMoonmoon - simple feed aggregator (planet like): it only aggregates feeds and spits them out in one single page. (Source Code) BSD-3-Clause PHP\nNewsBlur - NewsBlur is a personal news reader that brings people together to talk about the world. A new sound of an old instrument. (Source Code) MIT Python\nnewsdash - A news dashboard inspired by iGoogle and Netvibes. AGPL-3.0 Nodejs\nNewspipe - Newspipe is a web news reader. (Demo) AGPL-3.0 Python\nPolitePol - Online tool for creation of RSS feeds for any web page. (Demo) MIT Python\nreader - A Python feed reader web app and library (so you can use it to build your own), with only standard library and pure-Python dependencies. BSD-3-Clause Python\nRSS-Bridge - rss-bridge is a PHP project capable of generating ATOM feeds for websites which don\u0026rsquo;t have one. Unlicense PHP\nRSS Fulltext Proxy - Mirrors RSS feeds to return the full content of the items, extracted from the website. MIT Nodejs\nRSS Merger - PHP script which will take multiple RSS / Atom feeds as input and merge them into a single RSS feed. GPL-2.0 PHP\nRSS Monster - RSS Monster is an easy to use web-based RSS aggregator and reader compatible with the Fever API, created as an alternative for Google Reader. MIT PHP\nRSS2EMail - Fetches RSS/Atom-feeds and pushes new Content to any email-receiver, supports OPML. GPL-2.0 Python\nScreaming Liquid Tiger - Simple script to automatically generate valid RSS and Atom feeds from a list of media files in the same folder. MIT PHP\nSelfoss - New multipurpose rss reader, live stream, mashup, aggregation web application. (Source Code) GPL-3.0 PHP\nSismics Reader - Free and open source feeds reader, including all major Google Reader features. (Demo, Source Code) GPL-2.0 Java\nStringer - Work-in-progress self-hosted, anti-social RSS reader. MIT Ruby\nTemboz - Two-column feed reader emphasizing filtering capabilities to manage information overload. MIT Python\nTiny Tiny RSS - Open source web-based news feed (RSS/Atom) reader and aggregator. (Demo, Source Code) GPL-3.0 PHP\nttrss-mobile - Mobile webapp for Tiny Tiny RSS. AGPL-3.0 Javascript\nttrss-reader - Light and responsive client for TTRSS. GPL-2.0 Javascript\nWinds ⚠ - Open source and beautiful RSS reader built using React/Redux/Sails/Node and Stream. It showcases personalized feeds powered by the Stream API. (Demo, Source Code) BSD-3-Clause Nodejs\nFile Transfer \u0026amp; Synchronization # ^ back to top ^\nRelated: Groupware\nGit Annex - File synchronization between computers, servers, external drives. (Source Code) GPL-3.0 Haskell\nKinto - Kinto is a minimalist JSON storage service with synchronisation and sharing abilities. (Source Code) Apache-2.0 Python\nmyDrive - Fully featured online storage solution, upload/download files, photo/video viewer, and more, all through the web client. (Demo) GPL-3.0 Nodejs\nNextcloud - Access and share your files, calendars, contacts, mail and more from any device, on your terms. (Demo, Source Code) AGPL-3.0 PHP\nOpenSSH SFTP server - Secure File Transfer Program. (Source Code) BSD-2-Clause C\nownCloud - All-in-one solution for saving, synchronizing, viewing, editing and sharing files, calendars, address books and more. (Source Code, Clients) AGPL-3.0 PHP\nPeergos - Secure and private space online where you can store, share and view your photos, videos, music and documents. Also includes a calendar, news feed, task lists, chat and email client. (Demo, Source Code) AGPL-3.0 Java\nPydio - Turn any web server into a powerful file management system and an alternative to mainstream cloud storage providers. (Source Code) AGPL-3.0 Go\nSamba - Samba is the standard Windows interoperability suite of programs for Linux and Unix. It provides secure, stable and fast file and print services for all clients using the SMB/CIFS protocol. (Source Code) GPL-3.0 C\nSeafile - File hosting and sharing solution primary for teams and organizations. (Source Code) GPL-2.0/GPL-3.0/AGPL-3.0/Apache-2.0 C\nSparkleShare - Self hosted, instant, secure file sync. (Source Code) GPL-3.0 C#\nSyncany - Secure file sync software for arbitrary storage backends, an open-source cloud storage and filesharing application. Securely synchronize your files to any kind of storage. GPL-3.0 Java\nSyncthing - Syncthing is an open source peer-to-peer file synchronisation tool. (Source Code) MPL-2.0 Go\nUnison - Unison is a file-synchronization tool for OSX, Unix, and Windows. GPL-3.0 OCaml\nZ-Push - Implementation of Microsoft’s ActiveSync protocol. (Source Code) AGPL-3.0 PHP\nFile Transfer - Distributed Filesystems # ^ back to top ^\nPlease visit awesome-sysadmin/Distributed Filesystems\nFile Transfer - Object Storage \u0026amp; File Servers # ^ back to top ^\nGarageHQ - An open-source geo-distributed storage service you can self-host to fulfill many needs - S3 compatible. (Source Code) AGPL-3.0 Rust\nMinio - Minio is an open source object storage server compatible with Amazon S3 APIs. (Source Code) Apache-2.0 Go\nSeaweedFS - SeaweedFS is an open source distributed file system supporting WebDAV, S3 API, FUSE mount, HDFS, etc, optimized for lots of small files, and easy to add capacity. Apache-2.0 Go\nSFTPGo - Flexible, fully featured and highly configurable SFTP server with optional FTP/S and WebDAV support. AGPL-3.0 Go\nZenko CloudServer - Zenko CloudServer, an open-source implementation of a server handling the Amazon S3 protocol. (Source Code) Apache-2.0 Nodejs\nFile Transfer - Peer-to-peer Filesharing # ^ back to top ^\nbittorrent-tracker - Simple, robust, BitTorrent tracker (client and server) implementation. (Source Code) MIT Nodejs\ncloud-torrent - Torrent Web Client with HTTP retrievable or streamable downloaded files. AGPL-3.0 Go\nDat Project - Powerful decentralized file sharing applications built from a large ecosystem of modules. (Source Code) MIT Nodejs\nexatorrent - BitTorrent client written in Go that can be run locally or hosted on a remote server, and supports streaming via HTTP. GPL-3.0 Go\nFilePizza - Peer-to-peer file transfers in your browser. (Source Code) BSD-3-Clause Nodejs\ninstant.io - Streaming file transfer over WebTorrent. (Demo) MIT Nodejs\nMagnetico - Magnetico is the first autonomous (self-hosted) BitTorrent DHT search engine suite that is designed for end-users. AGPL-3.0 Python\nMagnetissimo - Search engine that indexes all popular torrent sites. MIT Elixir\nOpentracker - Open and free bittorrent tracker. It aims for minimal resource usage and is intended to run at your wlan router. (Source Code) Beerware C\npeerflix-server - Downloads torrent files and provides a direct link download or a direct link stream. MIT Nodejs\nqBittorrent - Free cross-platform bittorrent client with a feature rich Web UI for remote access. (Source Code) GPL-2.0 C++\nrartracker - Complete private bittorrent tracker. WTFPL PHP\nSend - Simple, private, end to end encrypted temporary file sharing, originally built by Mozilla. (Clients) MPL-2.0 Nodejs\nTorrents.csv - A self-hostable torrent search engine. GPL-3.0 Rust\nTransmission - Fast, easy, Free Bittorrent client. (Source Code) GPL-3.0 C\nFile Transfer - Single-click \u0026amp; Drag-n-drop Upload # ^ back to top ^\nass - The superior self-hosted ShareX server. For use with clients such as ShareX (Windows), Flameshot (Linux), \u0026amp; MagicCap (Linux, macOS). ISC Nodejs\nChibisafe - Blazing fast file uploader and awesome bunker written in node. (Source Code) MIT Nodejs\nCoquelicot - Coquelicot is a “one-click” file sharing web application with a focus on protecting users’ privacy. (Source Code) AGPL-3.0 Ruby\nelixire - Simple yet advanced screenshot uploading and link shortening service. (Source Code, Clients) AGPL-3.0 Python\nFiles Sharing - Open Source and self-hosted files sharing application based on unique and temporary links. GPL-3.0 PHP\nFileShelter - FileShelter is a self-hosted software that allows you to easily share files over the Internet. (Demo) GPL-3.0 C++\nFireShare - A full-stack, pub-sub, real-time secure file sharing system. (Demo) MIT Nodejs\nGokapi - Lightweight server to share files, which expire after a set amount of downloads or days. Similar to the discontinued Firefox Send, with the difference that only the admin is allowed to upload files. GPL-3.0 Go\ngoploader - Easy file sharing with server-side encryption, curl/httpie/wget compliant. MIT Go\nGoSƐ - GoSƐ is a modern file-uploader focusing on scalability and simplicity. It only depends on a S3 storage backend and hence scales horizontally without the need for additional databases or caches. (Demo) Apache-2.0 Go/Typescript\nimage-uploader - A shareX compatible image uploader built for speed with a web interface and REST API. AGPL-3.0 Rust\nimgpush - imgpush is a self-hosted file upload service that can easily be integrated into other webapps. MIT Python\nJirafeau - Jirafeau is a web site permitting to upload a file in a simple way and give an unique link to it. (Demo) AGPL-3.0 PHP\nKleeja - File Upload/sharing application, used by thousands of webmasters since 2007. (Source Code) GPL-2.0 PHP\nlinx-server - Simple file sharing and pastebin with API, auto-expiry, deletion keys, and web seed support. (Demo) GPL-3.0 Go\nlufi - Let\u0026rsquo;s Upload that FIle, client-side encrypted. (Demo, Source Code) AGPL-3.0 Perl\nlutim - Let\u0026rsquo;s Upload That Image. AGPL-3.0 Perl\nOnionShare - Securely and anonymously share a file of any size. GPL-2.0 Python\nPicoShare - A minimalist, easy-to-host service for sharing images and other files. (Demo, Source Code) AGPL-3.0 Go\nPictShare - PictShare is a multi lingual, open source image hosting service with a simple resizing and upload API. (Source Code) Apache-2.0 PHP\nPlik - Plik is a scalable and friendly temporary file upload system. (Demo) MIT Go\nPomf - Simple file uploading and sharing, source for the now shut down site Pomf.se. MIT PHP\nProjectSend - Upload files and assign them to specific clients you create. Give access to those files to your clients. (Source Code) GPL-2.0 PHP\nPsiTransfer - Simple open source self-hosted file sharing solution with robust up-/download-resume and password protection. BSD-2-Clause Nodejs\nPste - Just a simple file hosting application inspired by the likes of pomf.se and teknik.io. (Source Code) GPL-3.0 Python\nQuickShare - Quick and simple file sharing between different devices. (Demo) LGPL-3.0 Go\nShare - Simple yet advanced uploader - upload files, images and text with moderation tools for admins. Can be used for friends and family or just for you. Integration with ShareX and more. MIT Nodejs\nSharry - Share files easily over the internet between authenticated and anonymous users (both ways) with resumable up- and downloads. GPL-3.0 Scala/Java\nSnapdrop - Local file sharing in your browser. Inspired by Apple\u0026rsquo;s Airdrop. (Demo, Source Code) GPL-3.0-only Docker\ntransfer.sh - Easy file sharing from the command line. (Source Code) MIT Go\nUguu - Stores files and deletes after X amount of time. (Source Code) MIT PHP\nVoid - Lightweight, fast and elegant file hosting service for ShareX with Web UI and REST API. (Source Code) MIT Nodejs\nWeb-File-Uploader - A simple tool to let people upload and share images and files. (Source Code) MIT Nodejs\nXBackBone - A simple, fast and lightweight file manager with instant sharing tools integration, like ShareX (a free and open-source screenshot utility for Windows). AGPL-3.0 PHP\nYouTransfer - YouTransfer is a simple but elegant self-hosted file transfer and sharing solution. (Source Code) Apache-2.0 Nodejs\nZipline - A lightweight, fast and reliable file sharing server that is commonly used with ShareX, offering a react-based Web UI and fast API. (Source Code) MIT Nodejs\nFile Transfer - Web-based File Managers # ^ back to top ^\nApaxy - Theme built to enhance the experience of browsing web directories, using the mod_autoindex Apache module and some CSS to override the default style of a directory listing. (Source Code) GPL-3.0 HTML\nDirectoryLister - Simple PHP based directory lister that lists a directory and all its sub-directories and allows you to navigate there within. (Source Code) MIT PHP\nexplorer - Highly-configurable directory listing. (Source Code) MIT Nodejs\nfilebrowser - Web File Browser with a Material Design web interface. (Source Code) Apache-2.0 Go\nFileGator - FileGator is a powerful multi-user file manager with a single page front-end. (Demo, Source Code) MIT PHP\nFilestash - A web file manager that lets you manage your data anywhere it is located: FTP, SFTP, WebDAV, Git, S3, Minio, Dropbox, or Google Drive . (Demo, Source Code) AGPL-3.0 Go\ngoBrowser - Simple http file browser. GPL-3.0 Go\nGossa - Gossa is a light and simple webserver for your files. MIT Go\nh5ai - Modern file indexer for HTTP web servers with focus on your files. Directories are displayed in a appealing way and browsing them is enhanced by different views, a breadcrumb and a tree overview. (Demo, Source Code) MIT PHP\nIFM - Single script file manager. MIT PHP\nminiserve - CLI tool to serve files and dirs over HTTP. MIT Rust\nResourceSpace - ResourceSpace open source digital asset management software is the simple, fast, and free way to organise your digital assets. (Demo, Source Code) BSD-4-Clause PHP\ns3server - Simple HTTP interface to index and browse files in a public S3 or Google Cloud Storage bucket. MIT Go\nSurfer - Simple static file server with webui to manage files. MIT Nodejs\nTagSpaces - TagSpaces is an offline, cross-platform file manager and organiser that also can function as a note taking app. The WebDAV version of the application can be installed on top of a WebDAV servers such as Nextcloud or ownCloud. (Demo, Source Code) AGPL-3.0 Javascript\nupdog - Updog is a replacement for Python\u0026rsquo;s SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth. MIT Python\nGames # ^ back to top ^\nGames, game servers and control panels.\nA Dark Room - Minimalist text adventure game for your browser. (Demo) MPL-2.0 HTML5\nelevatorsaga - The elevator programming game. (Source Code) MIT Javascript\nEmuLinkerSF - EmuLinkerSF is an open source Kaillera server. Kaillera is a client/server system that any emulator can implement to enable netplay over the Internet. (Source Code) GPL-2.0 Java\nHextris - Fast paced HTML5 puzzle game inspired by Tetris. (Demo) GPL-3.0 HTML5\nLegend of the Green Dragon - Legend of the Green Dragon is a text-based RPG originally developed by Eric Stevens and JT Traub as a remake of and homage to the classic BBS Door game, Legend of the Red Dragon, by Seth Able Robinson. (Demo) AGPL-3.0 PHP\nLila - The forever free, adless and open source chess server powering lichess.org, with official iOS and Android client apps. (Source Code) AGPL-3.0 Scala\nMindustry - Factorio-like tower defense game. Build production chains to gather more resources, and build complex facilities. (Source Code) GPL-3.0 Java\nMinetest - An open source voxel game engine. Play one of our many games, mod a game to your liking, make your own game, or play on a multiplayer server. (Source Code) LGPL-2.1/CC-BY-SA-3.0/Other C++\nMTA:SA ⚠ - Multi Theft Auto (MTA) is a software project that adds network play functionality to Rockstar North\u0026rsquo;s Grand Theft Auto game series, in which this functionality is not originally found. (Source Code) GPL-3.0 C++\nNet64+ ⚠ - Net64 aka SM64O allows playing Super Mario 64 in an online multiplayer mode. Net64+ is the official continuation of the program and features an integrated server list. (Source Code, Clients) MIT Nodejs\nnode-virtual-gamepads - Turn your smartphone into a game controller, keyboard, or touchpad for a remote Linux OS machine. MIT Nodejs/CoffeScript\npiqueserver - Server for openspades, the first-person shooter in a destructible voxel world. (Clients) GPL-3.0 Python/C++\nPosio - Geography multiplayer game. MIT Python\nQuakeJS - QuakeJS is a port of ioquake3 to Javascript that can be played in a browser. MIT Nodejs\nQuizmaster - A web-app for conducting a quiz, including a page for players to enter their answers. Apache-2.0 Scala\nRconCli - CLI for executing queries on a remote Valve Source dedicated server using the RCON Protocol. MIT Go\nSourceBans++ - Admin, ban, and communication management system for games running on the Source engine. (Source Code) CC-BY-SA-4.0 PHP\nTeeworlds - Open source 2D retro multiplayer shooter. (Source Code) BSD-3-Clause/Other C++\nThe Battle for Wesnoth - The Battle for Wesnoth is an Open Source, turn-based tactical strategy game with a high fantasy theme, featuring both singleplayer and online/hotseat multiplayer combat. GPL-2.0 C++\nWordle - An Open Source Wordle game. Guess the Wordle in six tries. Each guess must be a valid five-letter word. (Source Code) MIT Nodejs\nZero-K - Open Source on Springrts engine. Zero-K is a traditional real time strategy game with a focus on player creativity through terrain manipulation, physics, and a large roster of unique units - all while being balanced to support competitive play. (Source Code) GPL-2.0 Lua\nGateways and Terminal Sharing # ^ back to top ^\nasciinema - Web app for hosting asciicasts. (Demo) Apache-2.0 Elixir/Docker\nGateOne - Gate One is an HTML5 web-based terminal emulator and SSH client. (Source Code) AGPL-3.0 Python\nGuacamole - Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC and RDP. (Source Code) Apache-2.0 Java/C\nNeko - A self hosted virtual browser (rabb.it clone) that runs in Docker. (Source Code) Apache-2.0 Docker/Go\noneye - Cloud software to access your data from everywhere with any browser. (Demo, Source Code) AGPL-3.0 PHP\nOS.js - Desktop implementation for your browser with a fully-fledged window manager, Application APIs, GUI toolkits and filesystem abstraction. (Demo, Source Code) BSD-2-Clause Nodejs\nShellHub - ShellHub is a modern SSH server for remotely accessing linux devices via command line (using any SSH client) or web-based user interface, designed as an alternative to sshd. Think ShellHub as centralized SSH for the edge and cloud computing. (Source Code) Apache-2.0 Go/Other\nSshwifty - Sshwifty is a SSH and Telnet connector made for the Web. AGPL-3.0 Go/Docker\nTeleport - Certificate authority and access plane for SSH, Kubernetes, web applications, and databases. (Source Code) Apache-2.0 Go\ntmate - Instant terminal sharing. (Source Code) ISC C\nGenealogy # ^ back to top ^\nGenea.app - Genea is a privacy by design and open source tool anyone can use to author or edit their family tree. Data is stored in the GEDCOM format and all processing is done in the browser. (Source Code) MIT Javascript\nGeneWeb - GeneWeb is an open source genealogy software written in OCaml. It comes with a Web interface and can be used off-line or as a Web service. (Demo, Source Code) GPL-2.0 OCaml\nwebtrees - Webtrees is the web\u0026rsquo;s leading on-line collaborative genealogy application. (Demo, Source Code) GPL-3.0 PHP\nGroupware # ^ back to top ^\nBlueMind - Groupware with email, calendar, addressbooks, exchange active sync, exchange MAPI protocol support. (Source Code) AGPL-3.0 Java\nCitadel - Groupware including email, calendar/scheduling, address books, forums, mailing lists, IM, wiki and blog engines, RSS aggregation and more. (Source Code) GPL-3.0 C\nCorteza - CRM including a unified workspace, enterprise messaging and a low code environment for rapidly and securely delivering records-based management solutions. (Demo, Source Code) Apache-2.0 Go\nCozy Cloud - Personal cloud where you can manage and sync your contact, files and calendars, and manage your budget with an app store full of community contributions. (Source Code) GPL-3.0 Nodejs\negroupware - Software suite including calendars, address books, notepad, project management tools, client relationship management tools (CRM), knowledge management tools, a wiki and a CMS. (Source Code) GPL-2.0 PHP\nEspoCRM - CRM with a frontend designed as a single page application, and a REST API. (Demo, Source Code) GPL-3.0 PHP\nGroup Office - Group-Office is an enterprise CRM and groupware tool. Share projects, calendars, files and e-mail online with co-workers and clients. (Source Code) AGPL-3.0 PHP\nHorde - The Horde Project is about creating high quality Open Source applications and libraries, based on PHP and the Horde Framework. (Demo, Source Code) GPL-2.0 PHP\nHRCloud2 - Full-featured home hosted Cloud Drive, Personal Assistant, App Launcher, File Converter, Streamer, Share Tool and more. GPL-3.0 PHP\nKolab - Kolab community is a unified communication and collaboration system. (Source Code) GPL-2.0/LGPL-2.1/GPL-3.0 C++/Python/PHP\nKopano - Groupware suite including e-mail, calendars, tasks, todos and notes. Featuring a modern WebApp, DeskApp and mobile access over Z-Push/ActiveSync. (Demo, Source Code) AGPL-3.0 C/Python/PHP\nOpenmeetings - Openmeetings provides video conferencing, instant messaging, white board, collaborative document editing and other groupware tools using API functions of the Red5 Streaming Server for Remoting and Streaming. (Source Code) Apache-2.0 Java\nSOGo - SOGo offers multiple ways to access the calendaring and messaging data. CalDAV, CardDAV, GroupDAV, as well as ActiveSync, including native Outlook compatibility and Web interface. (Demo, Source Code) LGPL-2.1 Objective-C\nSuiteCRM - The award-winning, enterprise-class open source CRM. (Source Code) AGPL-3.0 PHP\nTine 2.0 - Contacts, Calendar, Tasks, WebDAV, ActiveSync, VOIP, Mail-Client, CRM, Sales, Projects, Timetracker. (Demo, Source Code) AGPL-3.0/Other PHP\nTracim - Collaborative Platform for team collaboration: file,threads,notes,agenda,etc. AGPL-3.0/LGPL-3.0/MIT Python\nZimbra Collaboration - Email, calendar, collaboration server with Web interface and lots of integrations. (Source Code) GPL-2.0/CPAL-1.0 Java\nHuman Resources Management (HRM) # ^ back to top ^\nadmidio - Admidio is a free open source user management system for websites of organizations and groups. The system has a flexible role model so that it’s possible to reflect the structure and permissions of your organization. (Demo, Source Code) GPL-2.0 PHP\nIceHrm - IceHrm employee management system allows companies to centralize confidential employee information. (Demo, Source Code) Apache-2.0 PHP\nOrangeHRM - OrangeHRM is a comprehensive HRM system that captures all the essential functionalities required for any enterprise. (Source Code) GPL-2.0 PHP\nSentrifugo - Sentrifugo is a HRM system that can be easily configured to meet your organizational needs. (Source Code) GPL-3.0 PHP\nTimeOff.Management - Simple yet powerful absence management software for small and medium size business. (Demo, Source Code) MIT Nodejs\nInternet of Things (IoT) # ^ back to top ^\nDeviceHive - Open Source IoT Platform with a wide range of integration options. (Demo, Source Code) Apache-2.0 Java\nDomoticz - Home Automation System that lets you monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more. (Source Code, Clients) GPL-3.0 C/C++\nFHEM - FHEM is used to automate common tasks in the household like switching lamps and heating. It can also be used to log events like temperature or power consumption. You can control it via web or smartphone frontends, telnet or TCP/IP directly. (Source Code) GPL-3.0 Perl\nGladys - Gladys is a privacy-first, open-source home assistant. (Source Code) Apache-2.0 Nodejs\nHome Assistant - Open-source home automation platform. (Demo, Source Code) Apache-2.0 Python\nNode RED - Browser-based flow editor that helps you wiring hardware devices, APIs and online services to create IoT solutions. (Source Code) Apache-2.0 Nodejs\nopenHAB - Vendor and technology agnostic open source software for home automation. (Source Code) EPL-2.0 Java\nOpenRemote - 100% Open Source IoT Platform - IoT Asset management, Flow Rules and WHEN-THEN rules, Data visualization, Edge Gateway. (Demo, Source Code) AGPL-3.0 Java\nSIP Irrigation Control - Open source software for sprinkler/irrigation control. (Source Code) GPL-3.0 Python\nThingsboard - Open-source IoT Platform - Device management, data collection, processing and visualization. (Demo, Source Code) Apache-2.0 Java\nThingspeak - Open source “Internet of Things” application and API to store and retrieve data from things using HTTP. (Demo, Source Code) GPL-3.0 Ruby\nWebThings Gateway - WebThings is an open source implementation of the Web of Things, including the WebThings Gateway and the WebThings Framework. (Source Code) MPL-2.0 Nodejs\nKnowledge Management Tools # ^ back to top ^\nMindmaps - Open source, offline capable, mind mapping application. (Demo) AGPL-3.0 HTML5\nMy Mind - Web application for creating and managing mind maps. (Demo) MIT Javascript\nWeaviate - A cloud-native, realtime vector search engine integrating scalable machine learning models (GraphQL and RESTful APIs). (Demo, Source Code, Clients) BSD-3-Clause Go\nLearning and Courses # ^ back to top ^\nCanvas LMS - Canvas is the trusted, open-source learning management system (LMS) that is revolutionizing the way we educate. (Demo, Source Code) AGPL-3.0 Ruby\nChamilo LMS - Chamilo LMS allows you to create a virtual campus for the provision of online or semi-online training. (Source Code) GPL-3.0 PHP\nedX - The Open edX platform is open-source code that powers edX.org. (Source Code) AGPL-3.0 Python\nGibbon - The flexible, open source school management platform designed to make life better for teachers, students, parents and leaders. (Source Code) GPL-3.0 PHP\nILIAS - ILIAS is the Learning Management System that can cope with anything you throw at it. (Demo, Source Code) GPL-3.0 PHP\nMahara - Open Source fully featured web application to build students electronic portfolio. (Source Code) GPL-3.0 PHP\nMoodle - Moodle is a learning and courses platform with one of the largest open source communities worldwide. (Demo, Source Code) GPL-3.0 PHP\nOpen eClass - Open eClass is an advanced e-learning solution that can enhance the teaching and learning process. (Demo, Source Code) GPL-2.0 PHP\nOpenOLAT - OpenOLAT is a web-based learning management system for teaching, education, assessment and communication. (Demo, Source Code) Apache-2.0 Java\nRELATE - RELATE is a web-based courseware package, includes features such as: flexible rules, statistics, multi-course support, class calendar. (Source Code) MIT Python\nRosarioSIS - RosarioSIS, free Student Information System for school management. (Demo, Source Code) GPL-2.0 PHP\nSakai - The Sakai project provides a flexible and feature-rich environment for teaching, learning, research and other collaboration. (Demo, Source Code) ECL-2.0 Java\nVocascan - A highly configurable vocabulary trainer. (Source Code, Clients) Apache-2.0 Nodejs\nMaps and Global Positioning System (GPS) # ^ back to top ^\nSee also: awesome-gis\nGeo2tz - Get the timezone from geo coordinates (lat, lon). MIT Go/Docker\nGraphHopper - Fast routing library and server using OpenStreetMap. (Source Code) Apache-2.0 Java\nHauk - Easy to setup location sharing platform that lets you temporarily share your location with anyone in real-time. (Demo) Apache-2.0 PHP\nMapBBCodeShare - Tool for sharing custom OSM maps. Support for annotated markers, polygons, lines, multi-format import/export, multiple layers, shortlinks. (Demo) WTFPL/Other PHP\nNominatim - Server application for reverse geocoding (address -\u0026gt; coordinates) on OpenStreetMap data. (Source Code) GPL-2.0 C\nOpen Source Routing Machine (OSRM) - High performance routing engine designed to run on OpenStreetMap data and offering an HTTP API, C++ library interface, and Nodejs wrapper. (Demo, Source Code) BSD-2-Clause C++\nOpenGTS - Entry-level fleet tracking system. Supports variety of tracking devices and protocols. Comes with rich web-interface and reporting features. (Demo, Source Code) Apache-2.0 Java\nOpenStreetMap - Collaborative project to create a free editable map of the world. (Source Code, Clients) GPL-2.0 Ruby\nOpenTripPlanner - Multimodal trip planning software based on OpenStreetMap data and consuming published GTFS-formatted data to suggest routes using local public transit systems. (Source Code) LGPL-3.0 Java/Javascript\nOrion - Powerful OwnTracks API-compliant location data visualization frontend for the web. (Demo) MIT Python/Nodejs\nOwnTracks Recorder ⚠ - Store and access data published by OwnTracks location tracking apps. GPL-2.0 C/Lua\nTileServer GL - Vector and raster maps with GL styles. Server side rendering by Mapbox GL Native. Map tile server for Mapbox GL JS, Android, iOS, Leaflet, OpenLayers, GIS via WMTS, etc. (Source Code) BSD-2-Clause Nodejs\nTileServer PHP - Serve map tiles from any PHP hosting. (Source Code) BSD-2-Clause PHP\nTraccar - Java application to track GPS positions. Supports loads of tracking devices and protocols, has an Android and iOS App. Has a web interface to view your trips. (Demo, Source Code) Apache-2.0 Java\nuMap - Create maps with OpenStreetMap layers in a minute and embed them in your site. (Source Code) WTFPL Python\nμlogger - Collect geolocation from users in real-time and display their GPS tracks on a website. (Demo) GPL-3.0 PHP\nMedia Streaming # ^ back to top ^\nPlease visit Media streaming - Audio Streaming, Media streaming - Multimedia Streaming, Media streaming - Video Streaming\nSee also: List of streaming media systems - Wikipedia, Comparison of streaming media systems - Wikipedia\nMedia Streaming - Audio Streaming # ^ back to top ^\nAirsonic Advanced - Open-source web-based media streamer and jukebox based on Airsonic, with several key performance and feature enhancements. GPL-3.0 Java\nAmpache - Web based audio/video streaming application. (Demo, Source Code) AGPL-3.0 PHP\nAudioserve - Simple personal server to serve audio files from directories (audiobooks, music, podcasts\u0026hellip;). Focused on simplicity and supports sync of play position between clients. MIT Rust\nAzuraCast - A modern and accessible self-hosted web radio management suite. (Source Code) Apache-2.0 PHP\nBeets - Music library manager and MusicBrainz tagger (command-line and Web interface). (Source Code) MIT Python\nBlack Candy - Music streaming server built with Rails and Stimulus. MIT Ruby\nCompactd - Remote music player that supports adding content. MIT Nodejs\neuterpe - Self-hosted music streaming server with RESTful API and Web interface. (Demo, Source Code) GPL-3.0 Go\nFriendsRadio ⚠ - Share music with your friends from Youtube and Soundcloud. (Demo) MIT Nodejs\nFunkwhale - Modern, web-based, convivial, multi-user and free music server. (Demo, Source Code) BSD-3-Clause Python/Django\nGNU FM - Running music community websites, alternative to last.fm. (Source Code) AGPL-3.0 PHP\ngonic - Lightweight music streaming server. Subsonic compatible. GPL-3.0 Go\nGroove Basin - Music player server with a web-based user interface inspired by Amarok 1.4. MIT Nodejs\nkoel - Personal music streaming server that works. (Demo, Source Code) MIT PHP\nKooZic - Music server with powerful playlist features and Subsonic compatibility. (Demo, Source Code) LGPL-3.0/MIT Python\nLibreTime - Simple, open source platform that lets you broadcast streaming radio on the web (fork of Airtime). (Source Code) AGPL-3.0 PHP\nLMS - Access your self-hosted music using a web interface. (Demo) GPL-3.0 C++\nmoOde Audio - Audiophile-quality music playback for the wonderful Raspberry Pi family of single board computers. (Source Code) GPL-3.0 PHP\nMoped - Responsive HTML5 + Javascript client for the Mopidy music server. MIT HTML5\nMopidy MusicBox - Web Client for Mopidy Music Server. Apache-2.0 HTML5\nMopidy-Party - Mopidy web extension designed for party! Let your guests manage the sound. Apache-2.0 Python\nMopidy - Extensible music server. Offers a superset of the mpd API, as well as integration with 3rd party services like Spotify, SoundCloud etc. (Source Code) Apache-2.0 Python\nmpd - Daemon to remotely play music, stream music, handle and organize playlists. Many clients available. (Source Code, Clients) GPL-2.0 C++\nmStream - Music streaming server with GUI management tools. Runs on Mac, Windows, and Linux. (Source Code) GPL-2.0 Nodejs\nmusikcube - Streaming audio server with Linux/macOS/Windows/Android clients. (Source Code) BSD-3-Clause C++\nNavidrome Music Server - Modern Music Server and Streamer, compatible with Subsonic/Airsonic. (Demo, Source Code, Clients) GPL-3.0 Go/Javascript\nPolaris - Music browsing and streaming application optimized for large music collections, ease of use and high performance. MIT Rust\nRaveberry - A multi-user music server with a focus on participation. (Demo) LGPL-3.0 Python\nSnapcast - Synchronous multiroom audio server. GPL-3.0 C++\nStretto - Music player with Youtube/Soundcloud import and iTunes/Spotify discovery. (Demo, Clients) MIT Nodejs\nSupysonic - Python implementation of the Subsonic server API. AGPL-3.0 Python\nVolumio - A free and open source linux distribution, designed and fine-tuned exclusively for music playback. (Source Code) GPL-3.0 Nodejs\nympd - Standalone MPD Web GUI written in C, utilizing Websockets and Bootstrap/JS. (Source Code) GPL-2.0 C\nMedia Streaming - Multimedia Streaming # ^ back to top ^\nDim - Dim is a self-hosted media manager fueled by dark forces. With minimal setup, Dim will organize and beautify your media collections, letting you access and play them anytime from anywhere. GPL-2.0 Rust\nGerbera - Gerbera is an UPnP Media Server. It allows you to stream your digital media throughout your home network and listen to/watch it on a variety of UPnP compatible devices. (Source Code) GPL-2.0 C++\nhomehost ⚠ - Self-hosted React + Redux app that streams your media collection (music, movies, books, podcasts, comics etc). MIT Nodejs\nIcecast 2 - streaming audio/video server which can be used to create an Internet radio station or a privately running jukebox and many things in between. (Source Code, Clients) GPL-2.0 C\nJellyfin - Media server for audio, video, books, comics, and photos with a sleek interface and robust transcoding capabilities. Almost all modern platforms have clients, including Roku, Android TV, iOS, and Kodi. (Demo, Source Code) GPL-2.0 C#\nKaraoke Forever - Host awesome karaoke parties where everyone can easily find and queue songs from their phone\u0026rsquo;s web browser. The player is also browser-based with support for MP3+G, MP4 and WebGL visualizations. (Source Code) ISC Nodejs\nLBRY - Is a secure, open, and community-run digital marketplace that aims to replace Youtube and Amazon. (Demo, Source Code, Clients) MIT PHP\nMistServer - Streaming media server that works well in any streaming environment. (Source Code) AGPL-3.0 C++\nNymphCast - NymphCast is a Chromecast alternative which turns your choice of Linux-capable hardware into an audio and video source for a television or powered speakers. (Source Code) BSD-3-Clause C++\nPodify - Allows you to download videos and audio from any source supported by youtube-dl and subscribe to and watch these downloads using your favorite podcast app. (Source Code) GPL-3.0 Ruby\nReadyMedia - Simple media server software, with the aim of being fully compliant with DLNA/UPnP-AV clients. Formerly known as MiniDLNA. (Source Code) GPL-2.0 C\nRygel - Rygel is a UPnP AV MediaServer that allows you to easily share audio, video, and pictures. Media player software may use Rygel to become a MediaRenderer that may be controlled remotely by a UPnP or DLNA Controller. (Source Code) GPL-3.0 C\nSheetAble - Self-hosted music sheet organizing software for all music enthusiasts. Upload and organize your sheets for any kind of instrument. (Source Code) AGPL-3.0 Go\nStash - A web-based library organizer and player for your adult media stash, with auto-tagging and metadata scraping support. (Source Code) AGPL-3.0 Go\nüWave ⚠ - üWave is a self-hosted collaborative listening platform. Users take turns playing media—songs, talks, gameplay videos, or anything else—from a variety of media sources like YouTube and SoundCloud. (Demo, Source Code) MIT Nodejs\nMedia Streaming - Video Streaming # ^ back to top ^\nBluecherry - Closed-circuit television (CCTV) software application which supports IP and Analog cameras. (Source Code) GPL-2.0 PHP\nCyTube - CyTube is a web application providing media synchronization, chat, and more for an arbitrary number of channels. (Demo) MIT Nodejs\nHellowlol HTPC Manager fork - Fully responsive interface to manage all your favorite media on your HTPC. MIT Python\nInvidious - ⚠ Invidious is an alternative front-end to YouTube. (Demo) AGPL-3.0 Crystal\nKerberos.io - Kerberos.io is a video surveillance solution, which works with any camera and on every Linux based machine (Raspberry Pi, Docker, Kubernetes cluster). (Demo, Source Code) MIT C++\nMediaCMS - MediaCMS is a modern, fully featured open source video and media CMS, written in Python/Django/React, featuring a REST API. (Source Code) AGPL-3.0 Python/Docker\nMyflix ⚠ - Self-hosted, super lightweight Netflix alternative. MIT Shell\nOblecto ⚠ - Media server for Movies and TV Shows with a responsive Vue.js frontend. It has robust transcoding support as well as federation capabilities to share your library with your friends. AGPL-3.0 Nodejs\nOddworks - Oddworks is an open source video distribution platform built to destroy the barriers to streaming television with SDKs for Roku, Apple iOS/tvOS, Google Android, and Amazon FireTV. MIT Nodejs\nOlaris - Olaris is an open-source, community driven, media manager and transcoding server. GPL-3.0 Go\nOpen Streaming Platform - Self-Hosted alternative to Twitch and Youtube Live for live and on-demand video streaming. (Source Code) MIT Python\nOvenMediaEngine - OvenMediaEngine is a selfhostable Open-Source Streaming Server with Sub-Second Latency. (Demo, Source Code) GPL-3.0 C++\nOwncast - Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server for running your own live streams similar in style to the large mainstream options. MIT Go\nPeerTube - Decentralized video streaming platform using P2P (BitTorrent) directly in the web browser. (Source Code) AGPL-3.0 Nodejs\nRadium - Synced stream and video playback with VOD capabilities utilizing HLS. Developed for movie nights but has many use cases. (Demo) MIT Nodejs/Docker\nRapidbay - Self-hosted torrent videostreaming service/torrent client that allows searching and playing videos from torrents in the browser or from a Chromecast/AppleTV/Smart TV. MIT Python/Docker\nRestreamer - Restreamer allows you to do h.264 real-time video streaming on your website without a streaming provider. (Source Code) Apache-2.0 Nodejs/Docker\nShinobiCE - Open Source CCTV software written in Node with both IP and local camera support. AGPL-3.0/GPL-3.0 Nodejs\nStreama - Self hosted streaming media server. MIT Java\nSyncTube - Lightweight and very simple to setup CyTube alternative to watch videos with friends and chat. (Demo) MIT Nodejs/Haxe\nTube - a Youtube-like (without censorship and features you don\u0026rsquo;t need!) Video Sharing App written in Go which also supports automatic transcoding to MP4 H.265 AAC, multiple collections and RSS feed. (Demo) MIT Go\nVideoLAN Client (VLC) - Cross-platform multimedia player client and server supporting most multimedia files as well as DVDs, Audio CDs, VCDs, and various streaming protocols. (Source Code) GPL-2.0 C\nZoneminder - Closed-circuit television (CCTV) software application which supports IP, USB and Analog cameras. (Source Code) GPL-2.0 PHP\nMiscellaneous # ^ back to top ^\n2FAuth - A web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes. (Demo) AGPL-3.0 PHP\n411 - Alert Management Web Application. MIT PHP\nAlertHub ⚠ - AlertHub is a simple tool to get alerted from GitHub releases. MIT Nodejs\nAnchr - Anchr is a toolbox for tiny tasks on the internet, including bookmark collections, URL shortening and (encrypted) image uploads. (Source Code) GPL-3.0 Nodejs\nasciiflow - Flow Diagram Drawing Tool. (Source Code) MIT Nodejs\nCapRover - Build your own PaaS in a few minutes. (Demo, Source Code) Apache-2.0 Docker/Nodejs\nchangedetection.io - Self-hosted tool for staying up-to-date with web-site content changes. Apache-2.0 Python/Docker\nCloudBeaver - Self-hosted management of databases, supports PostgreSQL, MySQL, SQLite and more. A web/hosted version of DBeaver. (Source Code) Apache-2.0 Nodejs\nCUPS - The Common Unix Print System uses Internet Printing Protocol (IPP) to support printing to local and network printers. (Source Code) GPL-2.0 C\nCyberChef - Perform all manner of operations within a web browser such as AES, DES and Blowfish encryption and decryption, creating hexdumps, calculating hashes, and much more. (Demo) Apache-2.0 Javascript\nDailyTxT - Encrypted Diary Web-App to save your personal memories of each day. Includes a search-function and encrypted file-upload. MIT Python\nDatabunker - Network-based, self-hosted, GDPR compliant, secure database for personal data or PII. (Source Code) MIT Go\nDigital-Currency - Create your own Self-Hosted Digital Currency. (Demo) GPL-3.0 Nodejs\nDomainMOD - Application to manage your domains and other internet assets in a central location. DomainMOD includes a Data Warehouse framework that allows you to import your WHM/cPanel web server data so that you can view, export, and report on your data. (Demo, Source Code) GPL-3.0 PHP\nFirezone - Open-source VPN server and egress firewall for Linux built on WireGuard that makes it simple to manage secure remote access to your company’s private networks. Firezone is easy to set up, secure, performant, and self-hosted. (Source Code) Apache-2.0 Elixir/Ruby\nFlox ⚠ - Self hosted movie, TV series and anime watch list with a 3-point rating system. Uses The Movie Database backend for information. (Demo) MIT PHP\nformspree ⚠ - Just send your form to our URL and we\u0026rsquo;ll forward it to your email. No PHP, Javascript or sign up required. (Demo, Source Code) AGPL-3.0 Python\ngoogle-webfonts-helper ⚠ - Hassle-Free Way to Self-Host Google Fonts. Get eot, ttf, svg, woff and woff2 files + CSS snippets. (Demo) MIT Nodejs\ngraph-vl - Identity document verification using Machine Learning and GraphQL. MIT Python\nJournal - Simple journaling with encrypted entries and sharing capabilities. MIT Ruby\nKing Phisher - King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. BSD-3-Clause Python\nKoillection - Koillection is a service allowing users to manage any kind of collections. (Source Code) MIT PHP\nLancache ⚠ - LAN Party game caching made easy. (Source Code) MIT Docker/Shell\nMailyGo - MailyGo is a small tool written in Go that allows to send HTML forms, for example from static websites without a dynamic backend, via email. MIT Go\nMindsDB - MindsDB is an open source self hosted AI layer for existing databases that allows you to effortlessly develop, train and deploy state-of-the-art machine learning models using standard queries. GPL-3.0 Python\nMissionKontrol - Configurable admin panel allowing non-technical users to CRUD data on MySQL/PostGRES databases. (Source Code) AGPL-3.0 Ruby\nMonica - Personal relationship manager, and a new kind of CRM to organize interactions with your friends and family. (Source Code) AGPL-3.0 PHP\nMusical Artifacts - Helping to catalog, preserve and free the artifacts you need to produce music. (Source Code) MIT Ruby\nMyPaas - Run your own PaaS using Docker, Traefik, and great monitoring. BSD 2-clause Python/Docker\nnnmm - Super tiny pastebin/url minifier microservice. Beerware PHP\nNoisedash - Self-hostable web tool for generating ambient noises/sounds using audio tools and user-uploadable samples. AGPL-3.0 Nodejs\nNotica - Lets you send browser notifications from your terminal to your desktop or phone. No installation or registration is required. (Source Code) MIT Nodejs\nOmbi - A content request system for Plex/Emby, connects to SickRage, CouchPotato, Sonarr, with a growing feature set. (Demo, Source Code) GPL-2.0 C#\nOrchest - A new kind of IDE for Data Science. (Demo, Source Code) AGPL-3.0 Docker\noTranscribe - Free web app to take the pain out of transcribing recorded interviews. (Demo) MIT Javascript\nPassCheck - A web application featuring some handy password tools, including a password generator, strength checker and HaveIBeenPwned breach checker. (Source Code) MIT Javascript\nReactive Resume - A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. (Demo, Source Code) MIT Docker/Nodejs\nReleaseBell - Send release notifications for starred Github repos. (Source Code) MIT Nodejs\nrevealjs - Framework for easily creating beautiful presentations using HTML. (Demo, Source Code) MIT Javascript\nRevive Adserver - World\u0026rsquo;s most popular free, open source ad serving system. Formerly known as OpenX Adserver and phpAdsNew. (Source Code) GPL-2.0-or-later PHP\nSANE Network Scanning - Allow remote clients to access image acquisition devices (scanners) available on the local host. (Source Code) GPL-2.0 C\nstring.is - An open-source, privacy-friendly online string toolkit for developers. (Demo, Source Code) AGPL-3.0 Nodejs\nTeslaMate - A powerful data logger for Tesla vehicles. MIT Elixir\nTrello Burndown ⚠ - Easy to use SCRUM burndown chart for Trello boards. MIT Go/Docker\nViMbAdmin - Provides a web based virtual mailbox administration system to allow mail administrators to easily manage domains, mailboxes and aliases. (Demo, Source Code) GPL-3.0 PHP\nWeb fonts repository - Simple webfont hosting. Google Fonts alternative for your own fonts. MIT PHP\nytdl-webserver - Docker-ready webserver for downloading youtube videos. MIT Nodejs\nMoney, Budgeting \u0026amp; Management # ^ back to top ^\nSee also: awesome-sysadmin/IT Asset Management\nAkaunting - Akaunting is a free, online and open source accounting software designed for small businesses and freelancers. (Source Code) GPL-3.0 PHP\nBoodle - Simple accounting single-page application in Clojure and ClojureScript. EPL-1.0 Java\nBTCPay Server - A self-hosted Bitcoin and other cryptocurrencies payment processor. (Demo, Source Code) MIT C#\nBudget App - Budget App is an open source personal budgeting application. Apache-2.0 Java\nbudgetzero - Free, self-hosted, open-source, envelope-budgeting web and desktop app. (Demo) AGPL-3.0 Nodejs\nCrater - Free \u0026amp; Open Source Invoice App for Freelancers \u0026amp; Small Businesses. (Demo) AAL PHP\nDot Ledger - Web-based personal finance management tool. (Demo, Source Code) Apache-2.0 Ruby\nEasyQuickImport ⚠ - A tool that helps you import transactions, invoices and bills into QuickBooks Desktop from Excel or CSV. MIT PHP\nEconomizzer - An easy and secure system for you to manage your personal money and achieve your goals, and can be accessed by computer, tablet or smartphone. (Demo, Source Code) MIT PHP\nExMoney - Self-hosted personal finance app. ISC Elixir\nFamily Accounting Tool - Web-based finance management tool for partners with partially shared expenses. Apache-2.0 Scala\nFava - Fava is the web frontend of Beancount, a text based double-entry accounting system. (Demo, Source Code) MIT Python\nFirefly III - Firefly III is a modern financial manager. It helps you to keep track of your money and make budget forecasts. It supports credit cards, has an advanced rule engine and can import data from many banks. (Demo, Source Code) AGPL-3.0 PHP\nGalette - Galette is a membership management web application towards non profit organizations. (Source Code) GPL-3.0 PHP\nGhostfolio - Wealth management software to keep track of stocks, ETFs and cryptocurrencies. (Demo, Source Code) AGPL-3.0 Docker/Nodejs\nGRR - Assets management and booking for small/medium companies. (Source Code) GPL-2.0 PHP\nHospital Run - Hospital Run is offline enabled hospital management software. (Demo, Source Code) GPL-3.0 Nodejs\nHub20 - A self-hosted payment processor for Ethereum and ERC20 Tokens. (Source Code) AGPL-3.0 Docker/Python\nIHateMoney - Manage your shared expenses, easily. (Demo, Source Code) BSD-3-Clause Docker/Python\nIHateToBudget - A simple web app to understand and control your expenses. GPL-3.0 Docker/Python\nInventaire - Collaborative resources mapper project, while yet only focused on exploring books mapping with wikidata and ISBNs. (Source Code) AGPL-3.0 Nodejs\nInventree - InvenTree is an open-source inventory management system which provides intuitive parts management and stock control. (Source Code) MIT Python\nInvoice Ninja - Powerful tool to invoice clients online. (Demo, Source Code) AAL PHP\nInvoicePlane - Manage quotes, invoices, payments and customers for your small business. MIT PHP\nKresus - Open source personal finance manager. (Demo, Source Code) MIT Nodejs\nOnTrack - A simple app to track spend and set goals. MIT Ruby/React\nPartKeepr - PartKeepr is an electronic part inventory management software. It helps you to keep track of your available parts and assist you with re-ordering parts. (Demo, Source Code) GPL-3.0 PHP\nREI3 - Open source, expandable Business Management Software. Manage tasks, time, assets and much more. (Demo, Source Code) MIT Go\nSilverStrike - Personal finance management made easy. (Demo, Source Code) MIT Python/Django\nStockazNG - Asset Management System. MIT Python\nTabby - A tool to manage shared expenses across friends, such as restaurant costs or food delivery, without requiring everyone to create an account. Includes email reminders and tracks who has (re)paid what. AGPL-3.0-only PHP\nMonitoring # ^ back to top ^\nPlease visit awesome-sysadmin/Monitoring, awesome-sysadmin/Metric and Metric Collection\nNote-taking \u0026amp; Editors # ^ back to top ^\nRelated: Wikis\nBulletNotes - Workflowy / Dynalist clone with Kanban (Trello) and Calendar functionality. Organize everything. (Source Code) MIT Nodejs\nDailyNotes - App for taking notes and tracking tasks on a daily basis in Markdown. MIT Python\ndillinger - The last Markdown editor, ever. (Source Code) MIT Nodejs\nDnote - A simple command line notebook with multi-device sync and web interface. (Source Code) AGPL-3.0 Go\nDocPHT - With DocPHT you can take notes and quickly document anything and without the use of any database. (Demo, Source Code) MIT PHP\ndraw.io - Diagram software for making flowcharts, process diagrams, org charts, UML, ER and network diagrams. (Source Code) Apache-2.0 Javascript\nHedgeDoc - Realtime collaborative markdown notes on all platforms, formerly known as CodiMD and HackMD CE. (Source Code) AGPL-3.0 TypeScript\nJoplin - Joplin is a note taking application with Markdown editor and encryption support for mobile and desktop platforms. Runs client-side and syncs through self hosted Nextcloud or similar. Consider it like open source alternative to Evernote. (Source Code) MIT Nodejs\nLeanote - Leanote, Not Just A Notepad! Open source cloud notepad. (Demo, Source Code) GPL-2.0 Go\nLivebook - Realtime collaborative notebook app based on Markdown that supports running Elixir codesnippets, TeX and Mermaid Diagrams. Easily deployed using Docker or Elixir. (Source Code) Apache-2.0 Elixir\nMarkdown Edit - Online markdown editor/viewer. MIT HTML5\nMeemo - Personal notes stream with Markdown support. (Source Code) MIT Nodejs\nminimalist-web-notepad - Minimalist notepad.cc clone. (Demo) Apache-2.0 PHP\nMiniNote - Simple Markdown note-taking app with persistence. MIT Nodejs\nNotea - Self-hosted note-taking app stored on S3-compatible storage. (Source Code) MIT Nodejs\nNotes\u0026rsquo;n\u0026rsquo;Todos - Write notes and todos online in markdown with tag filtering and date sorting. (Demo) MIT Python\nOddmuse - A simple wiki engine written in Perl. No database required. (Source Code) GPL-3.0 Perl\nOpenNote - OpenNote was built to be an open web-based alternative to Microsoft OneNote (T) and EverNote. (Demo) MIT HTML5\nOverleaf - Web-based collaborative LaTeX editor. (Source Code) AGPL-3.0 Ruby\nPaperwork - OpenSource note-taking and archiving alternative to Evernote, Microsoft OneNote and Google Keep. (Source Code) MIT PHP\nPlainpad - A modern note taking application for the cloud, utilizing the best features of progressive web apps technology. (Demo, Source Code) GPL-3.0 PHP\nsavepad - Minimalist notepad based on notepad.cc. MIT PHP\nStandard Notes - Simple and private notes app. Protect your privacy while getting more done. That\u0026rsquo;s Standard Notes. (Demo, Source Code) GPL-3.0 Ruby\nTrilium Notes - Trilium Notes is a hierarchical note taking application with focus on building large personal knowledge bases. AGPL-3.0 Nodejs\nturndown - HTML to Markdown converter written in Javascript. (Source Code) MIT Javascript\nTurtl - Totally private personal database and note taking app. (Source Code) GPL-3.0 CommonLisp\nWreeto - Wreeto is an open source note-taking, knowledge management and wiki system built on top of Ruby on Rails framework. (Source Code) AGPL-3.0 Ruby\nWriting - Lightweight distraction-free text editor, in the browser (Markdown and LaTeX supported). No lag when writing. (Source Code) MIT Javascript\nOffice Suites # ^ back to top ^\nCollabora Online Development Edition - Collabora Online Development Edition (CODE) is a powerful LibreOffice-based online office that supports all major document, spreadsheet and presentation file formats, which you can integrate in your own infrastructure. (Source Code) MPL-2.0 C++\nCryptPad - CryptPad is the zero knowledge realtime collaborative editor (rich-text, files, source-code, \u0026hellip;). (Source Code) AGPL-3.0 Nodejs\nEtherCalc - Web spreadsheet. (Source Code) CPAL-1.0/Other Nodejs\nEtherpad - Etherpad is a highly customizable Open Source online editor providing collaborative editing in really real-time. (Demo, Source Code) Apache-2.0 Nodejs\nGrist - Grist is a next-generation spreadsheet with relational structure, formula-based access control, and a portable, self-contained format. Alternative to Airtable. (Demo, Source Code) Apache-2.0 Nodejs/Python\nInfinoted - Server for Gobby, a multi-platform collaborative text editor. (Source Code) MIT C++\nONLYOFFICE - Office suite that enables you to manage documents, projects, team and customer relations in one place. (Source Code) AGPL-3.0 Nodejs\nPHPOffice - PHPOffice contains libraries which permits to write and read files from most office suites. LGPL-3.0 PHP\nRustpad - Efficient and minimal collaborative code editor, self-hosted, no database required. (Source Code) MIT Rust\nWebODF - Tools and libraries to view and edit Open Document Format (ODF) files. (Source Code) AGPL-3.0 HTML5\nPassword Managers # ^ back to top ^\nBitwarden ⚠ - Password manager with webapp, browser extension, and mobile app. (Source Code) AGPL-3.0 C#\nkeeweb - This webapp is a browser and desktop password manager compatible with KeePass databases. (Source Code) MIT HTML5\nPadloc - A modern, open source password manager for individuals and teams. (Source Code) GPL-3.0 Nodejs\nPassbolt - Password manager dedicated for managing passwords in a collaborative way on any Web server, using a MySQL database backend. (Source Code) AGPL-3.0 PHP\nPassIt - Simple password manage with sharing features by group and user, but no administration interface. (Demo, Source Code) AGPL-3.0 Python\nPassky - Simple, modern and open source password manager with website, browser extension, android and desktop application. (Demo, Source Code) GPL-3.0 PHP\nPassWall - Open source password manager. AGPL-3.0 Go\nPsono - A promising password managers fully featured for teams. (Demo, Source Code) Apache-2.0 Python\nShaark - All in one platform for your links, stories, passwords and albums. Built with Laravel and Vue.js. MIT PHP\nsysPass - Multiuser password management system. (Demo, Source Code) GPL-3.0 PHP\nTeampass - Password manager dedicated for managing passwords in a collaborative way. One symmetric key is used to encrypt all shared/team passwords and stored server side in a file and the database. works on any server Apache, MySQL and PHP. (Source Code) GPL-3.0 PHP\nvaults - Password manager featuring client side AES-256 encryption, PBKDF2 hashing, vaults, password generation \u0026amp; more. GPL-3.0 PHP\nVaultwarden - Lightweight Bitwarden server API implementation written in Rust. GPL-3.0 Rust\nPastebins # ^ back to top ^\n0bin - Client side encrypted pastebin. (Demo) WTFPL Python\nbepasty - A pastebin for all kinds of files. (Source Code) BSD-2-Clause Python\nbin - a paste bin. WTFPL/0BSD Rust\ncryptonote - Simple open source web application that lets users encrypt and share messages that can only be read once. (Source Code) MIT Ruby\ndogbin - The sexiest pastebin and URL shortener ever. MIT Kotlin\ndpaste - simple pastebin with multiple text and code option, with short url result easy to remember. (Source Code) MIT Docker\nDrift - Self-hosted Github Gist clone. (Demo) MIT TypeScript\nEdPaste - Self-hosted pastebin written in Laravel (PHP Framework). MIT PHP\nExBin - A pastebin with public/private snippets and netcat server. (Demo) MIT Elixir\nfiche - Command line pastebin, all you need is netcat. (Demo) MIT C\nfilite - A simple, light and standalone pastebin, URL shortener and file-sharing service. (Demo) MIT Rust\nFlashPaper - A one-time encrypted zero-knowledge password/secret sharing application focused on simplicity and security. No database or complicated set-up required. (Demo) MIT PHP\nFugacious - Open source short-term secure messaging (OSSSM). (Source Code) CC0-1.0 Ruby\nHastebin - Open source pastebin. (This is a fork with extended maintenance). (Demo, Source Code) MIT Nodejs\nLogPaste - Minimal pastebin web app that\u0026rsquo;s easy to self-host and persists data to any S3-compatible backend. (Demo) MIT Go\nmkaczanowski pastebin - Simple, fast, feature-rich, standalone pastebin service. MIT Rust\nmojopaste - Perl based pastebin. (Demo, Source Code) Artistic-2.0 Perl\nMokinToken - Clientside encrypted pastebin using tweetnacl. Unlicense PHP\nNoteHub - Free and Hassle-free Pastebin for Markdown Pages. Simple, clean, password provided, generated-short link. MIT Nodejs\npaaster - Paaster is a secure by default end-to-end encrypted pastebin built with the objective of simplicity. (Source Code) GPL-3.0 Docker\nPaste - Paste is forked from the original source pastebin.com used before it was bought. (Source Code) GPL-3.0 PHP\nPastefy - Beautiful, simple and easy to deploy Pastebin with optional Client-Encryption, Multitab-Pastes, an API, a highlighted Editor and more. (Source Code, Clients) MIT Java\npasty - Pasty is a fast and lightweight code pasting server. (Demo) MIT Go\npb - Lightweight pastebin (and url shortener) built using flask. GPL-3.0 Python\nPrivateBin - PrivateBin is a minimalist, opensource online pastebin/discussion board where the server has zero knowledge of hosted data. (Demo, Source Code) Zlib PHP\nprologic pastebin - Simple pastebin service with convenient api and CLI. (Demo) MIT Go\nPurritoBin - Ultra fast, minimalistic, encrypted command line paste-bin, where the server has no knowledge of the paste data. ISC C++\nrustypaste - A minimal file upload/pastebin service. MIT Rust\nSharpPaste - Cross-platform C# pastebin with client-side AES-256 encryption that just works. MIT C#/NancyFX\nSnibox - Code snippets manager with attractive tag-oriented interface. (Demo, Source Code) MIT Ruby\nSnippet Box - Snippet Box is a simple self-hosted app for organizing your code snippets. It allows you to easily create, edit, browse and manage your snippets in various languages. MIT Nodejs\nsnipt - Long-term memory for coders. Share and store code snippets. MIT Python\nSocksBin - Simple and fast terminal based pastebin, with optional code highlighting. No specific client required, all you need is netcat. GPL-3.0 Python\nSpacebin - Text-sharing for the final frontier — Reliable Pastebin server in Golang and Fiber. (Demo, Source Code) Apache-2.0 Go\nStikked - Advanced and beautiful pastebin. (Demo) GPL-3.0 PHP\nSup3rS3cretMes5age - Very simple (to deploy and to use) secret message service using Hashicorp Vault as a secrets storage. MIT Go\nwantguns/bin - Minimal pastebin for both textual and binary files shipped in a single statically linked binary. (Demo) GPL-3.0 Rust\nPersonal Dashboards # ^ back to top ^\nRelated: Monitoring\nBaby Buddy - Helps caregivers track baby sleep, feedings, diaper changes, and tummy time. (Demo) BSD-2-Clause Python\nDashboard - Minimalist homepage for organizing your web applications and bookmarks using JSON-files. MIT Nodejs/Docker\nDashMachine - Another web application bookmark dashboard, with fun features. GPL-3.0 Python\nDashy - Feature-rich homepage for your homelab, with easy YAML configuration. (Demo) MIT Nodejs/Docker\nFlame - Flame is self-hosted startpage for your server. Easily manage your apps and bookmarks with built-in editors. MIT Nodejs\nHabitica - Habit tracker app which treats your goals like a Role Playing Game. Previously called HabitRPG. (Source Code) GPL-3.0/CC-BY-NC-SA-3.0/CC-BY-SA-3.0 Nodejs\nHeimdall - Heimdall is an elegant solution to organise all your web applications. (Source Code) MIT PHP\nHiccup - A beautiful static homepage to get to your links and services quickly. It has built-in search, editing, PWA support and localstorage caching to easily organize your start page. (Source Code) MIT HTML5\nHomepage - Simple, standalone, self-hosted PHP page that is your window to your server and the web. MIT PHP\nHomer - A dead simple static homepage to expose your server services, with an easy yaml configuration and connectivity check. Apache-2.0 HTML5\nJmz HomeProxy - A simple and clean dashboard for self hosted services. GPL-3.0 PHP\nLinkPage - LinkPage is a FOSS self-hosted alternative to link listing websites such as LinkTree and Campsite.bio. (Source Code) BSD-2-Clause Go\nLittleLink Custom - Open-source, customizable, self-hosted alternative to services like Linktree and Manylink with an intuitive, easy to use user/admin interface. LittleLink Custom allows you to link all your social media platforms easily accessible on one page. (Demo, Source Code) GPL-3.0 PHP\nOrganizr - Organizr aims to be your one stop shop for your Servers Frontend. GPL-3.0 PHP\nPersonal management system - Central point for managing personal data (billings, payments, job holidays, notes etc.). (Demo) MIT PHP\nsimple-dash - A simple, fully responsive Dashboard to forward to the services of your choice. (Demo) MIT Javascript\nSmashing - Smashing, the spiritual successor to Dashing, is a Sinatra based framework that lets you build excellent dashboards. It looks especially great on TVs. (Source Code) MIT Ruby\nwger - Web-based personal workout, fitness and weight logger/tracker. It can also be used as a simple gym management utility and offers a full REST API as well. (Demo, Source Code) AGPL-3.0 Python\nYour Spotify ⚠ - Allows you to record your Spotify listening activity and have statistics about them served through a Web application. MIT Nodejs/Docker\nPhoto and Video Galleries # ^ back to top ^\nChevereto Free - Powerful and fast image hosting script that allows you to create your very own full featured image hosting website in just minutes. (Source Code) AGPL-3.0 PHP\nCoppermine - Multilingual photo gallery that integrates with various bulletin boards. Includes upload approval and password protected albums. (Demo, Source Code) GPL-3.0 PHP\nDamselfly - Fast server-based photo management system for large collections of images. Includes face detection, face \u0026amp; object recognition, powerful search, and EXIF Keyword tagging. Runs on Linux, MacOS and Windows. GPL-3.0 C#/.NET\nFussel - Fussel is a static photo gallery generator. Easily generate a reactive gallery and host the optimized static folder of assets. MIT Python\nGallery CSS - Gallery.css is all CSS. Think: Simple, maintainable and understandable galleries without the use of Javascript. (Source Code) MIT CSS\nHomeGallery - Self-hosted open-source web gallery to browse personal photos and videos featuring tagging, mobile-friendly, and AI powered image discovery. (Demo, Source Code) MIT Nodejs\nImageStore - Self-hosted Google Photos alternative, with a very similar UI. (Demo) Apache-2.0 Nodejs/Docker\nImmich - Self-hosted photo and video backup solution directly from your mobile phone. MIT Docker\nLibrePhotos - Self hosted wannabe Google Photos clone, with a slight focus on cool graphs. MIT Python\nLychee - Open source grid and album based photo-management-system. (Source Code) MIT PHP\nMediagoblin - Free software media publishing platform that anyone can run. You can think of it as a decentralized alternative to Flickr, YouTube, SoundCloud, etc. (Source Code) AGPL-3.0 Python\nMediaHut - A truly single-file, no-database, drop-in PHP media gallery. (Demo) MIT PHP\nMejiro - An easy-to-use PHP web application for instant photo publishing. GPL-3.0 PHP\nPhotato - Self-hosted photo gallery, accessible through a responsive WebUI. Directly uses and indexes a specific folder in the filesystem. AGPL-3.0 Java\nPhoto Stream - Minimalist self-hosted photo stream. (Demo) MIT Ruby\nPhotoLight - The easiest photo gallery there is. GPL-3.0 PHP\nPhotonix - A new web-based photo management application with object recognition, location awareness, color analysis and other ML algorithms. (Demo, Source Code) AGPL-3.0 Python\nPhotoPrism - Personal photo management powered by Go and Google TensorFlow. Browse, organize, and share your personal photo collection, using the latest technologies to automatically tag and find pictures. (Source Code) MIT Go\nPhotoview - A simple and user-friendly Photo Gallery for personal servers. It is made for photographers and aims to provide an easy and fast way to navigate directories, with thousands of high resolution photos. (Demo, Source Code) GPL-3.0 Go\nPiGallery 2 - A directory-first photo gallery website, with a rich UI, optimised for running on low resource servers. (Source Code) MIT Docker/Nodejs\nPiwigo - Photo gallery software for the web, built by an active community of users and developers. (Demo, Source Code) GPL-2.0 PHP\nQuru Image Server - High performance dynamically resizing image server offering directory based access control cropping, rotation, color management and other tools. (Demo, Source Code) AGPL-3.0 Python\nsigal - Yet another simple static gallery generator. MIT Python\nUberGallery - UberGallery is an easy to use, simple to manage, web photo gallery. UberGallery does not require a database and supports JPEG, GIF and PNG file types. Simply upload your images and UberGallery will automatically generate thumbnails and output HTML. (Source Code) MIT PHP\nZenphoto - Open-source gallery and CMS project. (Source Code) GPL-2.0 PHP\nPolls and Events # ^ back to top ^\nRelated: Booking and Scheduling\nCalagator - Event aggregator. (Source Code) MIT Ruby\nClearFlask - Community-feedback tool for managing incoming feedback and prioritizing a public roadmap. Alternative to Canny, UserVoice, Upvoty. (Demo, Source Code) AGPL-3.0 Docker\nClerk - Simple event logger to keep track of periodic events, habits, etc. as they occur. GPL-3.0 PHP\nCroodle - Croodle is an end-to-end encrypted web application to schedule a date or to do a poll on any topic. MIT Javascript\ndudle - Online scheduling application. (Demo, Source Code) AGPL-3.0 Ruby\nFeedka ⚠ - Open-source web application that can serve as a platform to get authentic, kindful, and constructive feedback from your friends, family, and co-workers. (Demo) AGPL-3.0 Ruby\nFider - Open source alternative to UserVoice for customer feedback. (Demo, Source Code) MIT Go\nFramadate - Online service for planning an appointment or make a decision quickly and easily: Make a poll, Define dates or subjects to choose, Send the poll link to your friends or colleagues, Discuss and make a decision. (Demo, Source Code) CECILL-B PHP\nGancio - A shared agenda for local communities. (Demo, Source Code) AGPL-3.0 Nodejs\nhitobito - A web application to manage complex group hierarchies with members, events and a lot more. (Demo, Source Code) AGPL-3.0 Ruby\nJD Esurvey - Open source enterprise survey web application. (Source Code) AGPL-3.0 Java\nKyélà - Participation polls for group events. (Demo, Source Code) AGPL-3.0 PHP\nLimeSurvey - Feature-rich Open Source web based polling software. Supports extensive survey logic. (Demo, Source Code) GPL-2.0 PHP\nMeetable - Event aggregator. (Demo, Source Code) MIT PHP\nMobilizon - A federated tool that helps you find, create and organise events and groups. (Demo, Source Code) GPL-3.0 Elixir\nOpen Event Server - Enables organizers to manage events from concerts to conferences and meet-ups. GPL-3.0 Python\nPHPBack - The open source feedback system. (Demo, Source Code) GPL-3.0 PHP\nProxy # ^ back to top ^\nimgproxy - Fast and secure standalone server for resizing and converting remote images. It works great when you need to resize multiple images on the fly without preparing a ton of cached resized images or re-doing it every time the design changes. (Source Code) MIT Go/Docker\ninlets - Expose your local endpoints to the Internet - with a Kubernetes integration, Docker image and CLI available. MIT Go/Docker\niodine - IPv4 over DNS tunnel solution, enabling you to start up a socks5 proxy listener. (Source Code) ISC C\nmicroproxy - lightweight non-caching HTTP/HTTPS proxy server. MIT Go\nNginx Proxy Manager - Nginx Proxy Manager is an easy way to accomplish reverse proxying hosts with SSL termination. (Source Code) MIT Nodejs/Docker\nPHP-Proxy - Web proxy script built specifically to be fast, easy to modify and to support video sites such as YouTube. (Demo, Source Code) MIT PHP\nPomerium - An identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your self-hosted websites to public Internet. (Source Code) Apache-2.0 Go\nPound - Light-weight reverse proxy and load balancer for HTTP/HTTPS. GPL-2.0 C\nPrivoxy - Non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk. GPL-2.0 C\nRedbird - A modern reverse proxy for node that includes cluster, HTTP2, LetsEncrypt, and Docker support. BSD-2-Clause Javascript\nsish - Open source serveo/ngrok alternative providing HTTP(S)/WS(S)/TCP tunnels to localhost using only SSH. MIT Go\nsocks5-proxy-server - SOCKS5 proxy server with built-in authentication and Telegram-bot for user management and user statistics on data spent (handy when you pay per GB of data). It is dockerised and simple to install. Apache-2.0 Nodejs\nSOCKS5Engine - Lightweight \u0026amp; resource-efficient SOCKS5 proxy server, optimized for high-load. AGPL-3.0 Go\nSquid - Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. (Source Code) GPL-2.0 C\nSWAG (Secure Web Application Gateway) - Nginx webserver and reverse proxy with PHP support, built-in Certbot (Let\u0026rsquo;s Encrypt) client and fail2ban integration. GPL-3.0 Docker\nSwiperproxy - Lightning-fast, open source web proxy that is easy for you to run and customize. (Source Code) MIT Python\nTinyproxy - Light-weight HTTP/HTTPS proxy daemon. (Source Code) GPL-2.0 C\nTraefik - Træfɪk is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It supports several backends (Docker, Swarm, Mesos/Marathon, …) to manage its configuration automatically and dynamically. (Source Code) MIT Go\nRead-it-later Lists # ^ back to top ^\nReadflow - Lightweight news reader with modern interface and features: full-text search, automatic categorization, archiving, offline support, notifications\u0026hellip; (Source Code) MIT Go\nWallabag - Wallabag, formerly Poche, is a web application allowing you to save articles to read them later with improved readability. (Demo, Source Code) MIT PHP\nRecipe Management # ^ back to top ^\nGroceri.es - groceri.es is a web-based application to manage your recipes and plan your meals ahead. groceri.es keeps track of your menu plans and generates a groceries list for you. (Source Code) MIT Python\nkcal - Track nutritional information about foods and recipes, set goals, and record a food journal to help along the way. Kcal is a personal system that focuses on direct control of inputs and a minimal, easy to use recipe presentation for preparing meals. (Demo) MPL-2.0 PHP\nMealie - Material design inspired recipe manager with category and tag management, shopping-lists, meal-planner, and site customizations. Mealie is focused on simple user interactions to keep the whole family using the app. (Demo, Source Code) MIT Python\nRecipeSage - A recipe keeper, meal plan organizer, and shopping list manager that can import recipes directly from any URL. (Demo) AGPL-3.0 Nodejs\nTandoor Recipes - Django application to manage, tag and search recipes using either built-in models or external storage providers hosting PDFs, Images or other files. (Demo, Source Code) MIT Python\nResource Planning # ^ back to top ^\nfarmOS - Web-based farm record keeping application. (Source Code) GPL-2.0 PHP\ngrocy - ERP beyond your fridge - grocy is a web-based self-hosted groceries \u0026amp; household management solution for your home. (Demo, Source Code) MIT PHP\nTania - Tania is a free and open source farming management system for everyone. You can manage your areas, reservoirs, farm tasks, inventories, and the crop growing progress. Apache-2.0 Go\nResource Planning - Enterprise Resource Planning # ^ back to top ^\nDolibarr - Dolibarr ERP CRM is a modern software package to manage your company or foundation activity (contacts, suppliers, invoices, orders, stocks, agenda, accounting, \u0026hellip;). (Demo, Source Code) GPL-3.0-or-later PHP\nERPNext - Free open source ERP system. (Source Code) GPL-3.0 Python\nLedgerSMB - Integrated accounting and ERP system for small and midsize businesses, with double entry accounting, budgeting, invoicing, quotations, projects, orders and inventory management, shipping and more. (Demo, Source Code) GPL-2.0 Perl\nOdoo - Free open source ERP system. (Demo, Source Code) LGPL-3.0 Python\nOFBiz - FOSS enterprise resource planning system with a suite of business applications flexible enough to be used across any industry. (Source Code) Apache-2.0 Java\nTryton - Free open source business solution. (Demo, Source Code) GPL-3.0 Python\nSearch Engines # ^ back to top ^\nAmbar - Document Search Engine (OCR, Store \u0026amp; Search). (Demo, Source Code) MIT Nodejs/Python\nGigablast - open source search engine. (Source Code) Apache-2.0 C++\nlibrengine - Private web search engine. GPL-3.0 C++\nJina - Cloud-native neural search framework for any kind of data. Apache-2.0 Python\nMeiliSearch - Ultra relevant, instant and typo-tolerant full-text search API. (Source Code) MIT Rust\nSearx - Privacy-respecting, hackable metasearch engine. (Demo, Source Code) AGPL-3.0 Python\nsist2 - Lightning-fast file system indexer and search tool. (Demo) GPL-3.0 C\nTypesense - Blazing fast, typo-tolerant open source search engine optimized for developer happiness and ease of use. (Source Code) GPL-3.0 C++\nWhoogle ⚠ - A self-hosted, ad-free, privacy-respecting metasearch engine. MIT Python\nYacy - Peer based, decentralized search engine server. (Demo, Source Code) GPL-2.0 Java\nSelf-hosting Solutions # ^ back to top ^\nAnsible-NAS - Build a full-featured home server with this playbook and an Ubuntu box. MIT YAML/Docker\nBitsii Bridge ⚠ - Easy to install self-hosting platform for Windows, MacOS, and Linux. Depends on a dynamic DNS provider and Let\u0026rsquo;s Encrypt. (Source Code) MPL-2.0 Java/Other\nCloudbox - Ansible-based solution for rapidly deploying a Docker containerized cloud media server. (Source Code) GPL-3.0 Shell/Ansible\nDietPi - Minimal Debian OS optimized for single-board computers, which allows you to easily install and manage several services for selfhosting at home. (Source Code) GPL-2.0 Shell\nDockSTARTer - DockSTARTer helps you get started with home server apps running in Docker. (Source Code) MIT Shell\nDPlatform - Deploy self-hosted apps easily: simple, bloat-free, independent installation. (Source Code) MIT Shell\nFLAP - Low maintenance framework to manage self-hosted services. (Source Code) AGPL-3.0 Docker/Shell\nFreedomBone - Home server configuration based on Debian. (Source Code) AGPL-3.0 Shell\nFreedomBox - Community project to develop, design and promote personal servers running free software for private, personal, communications. (Source Code) AGPL-3.0 Python/Other\nHomelabOS - Your very own offline-first privacy-centric open-source data-center. Deploy over 100 services with a few commands. (Source Code) MIT Docker\nNextCloudPi - Nextcloud preinstalled and preconfigured, with a text and web management interface and all the tools needed to self host private data. With installation images for Raspberry Pi, Odroid, Rock64, Docker, and a curl installer for Armbian/Debian. (Source Code) GPL-2.0-or-later Bash/PHP\nOpenMediaVault - OpenMediaVault is the next generation network attached storage (NAS) solution based on Debian Linux. It contains services like SSH, (S)FTP, SMB/CIFS, DAAP media server, RSync, BitTorrent client and many more. (Source Code) GPL-3.0 PHP\nSandstorm - Personal server for running self-hosted apps easily and securely. (Demo, Source Code) Apache-2.0 C++/Other\nsovereign - Set of Ansible playbooks to build and maintain your own private cloud: email, calendar, contacts, file sync, IRC bouncer, VPN, and more. GPL-3.0 YAML/Other\nSyncloud - Your own online file storage, social network or email server. (Source Code) GPL-3.0 Python/Other\nUBOS - Linux distro that runs on indie boxes (personal servers and IoT devices). Single-command installation and management of apps - Jenkins, Mediawiki, Owncloud, WordPress, etc., and other features. GPL-3.0 Perl/Other\nWikiSuite - The most comprehensive and integrated Free / Libre / Open Source enterprise software suite. (Source Code) GPL-3.0/LGPL-2.1/Apache-2.0/MPL-2.0/MPL-1.1/MIT/AGPL-3.0 ClearOS\nxsrv - Install and manage self-hosted services/applications, on your own server(s). (Source Code) GPL-3.0 Shell/Ansible\nYunoHost - Server operating system aiming to make self-hosting accessible to everyone. (Demo, Source Code) AGPL-3.0 Python/Other\nSoftware Development # ^ back to top ^\nSoftware Development - API Management # ^ back to top ^\nDreamFactory - Turns any SQL/NoSQL/Structured data into Restful API. (Source Code) Apache-2.0 PHP\nform.io - A REST API building platform that utilizes a drag \u0026amp; drop form builder, and is application framework agnostic. Contains open source and enterprise version. (Demo, Source Code) MIT Nodejs\nFusio - Open-source API management platform which helps to build and manage REST APIs. (Demo, Source Code) AGPL-3.0 PHP\nHapttic - Simple HTTP server that forwards all requests to a shell script to handle webhooks you receive. Apache-2.0 Go\nHasura - Fast, instant realtime GraphQL APIs on Postgres with fine grained access control, also trigger webhooks on database events. (Source Code) Apache-2.0 Haskell\nHoppscotch - A free, fast and beautiful API request builder. (Source Code) MIT Nodejs/Vue/Nuxt\nKong - The World’s Most Popular Open Source Microservice API Gateway and Platform. (Source Code) Apache-2.0 Lua\nLura - Open source High-Performance API Gateway. (Source Code) Apache-2.0 Go\nPara - Flexible and modular backend framework/server for object persistence, API development and authentication. (Source Code) Apache-2.0 Java\nPizzly - Open-source API Integrations Manager that provides everything a developer needs to interact with OAuth based APIs. MIT Nodejs\nTyk - Fast and scalable open source API Gateway. Out of the box, Tyk offers an API Management Platform with an API Gateway, API Analytics, Developer Portal and API Management Dashboard. (Source Code) MPL-2.0 Go\nSoftware Development - Bug Trackers # ^ back to top ^\nPlease visit Ticketing\nSoftware Development - Continuous Integration \u0026amp; Deployment # ^ back to top ^\nPlease visit awesome-sysadmin/Continuous Integration \u0026amp; Continuous Deployment\nSoftware Development - Documentation Generators # ^ back to top ^\nRelated: Static site generators\nDocstore - Static document hosting without any server-side processing, does not require you to recompile every time you change an article. Clone the repository and add articles in the text/ directory to get started. (Source Code) BSD-3-Clause Javascript\nFlatdoc - Small Javascript file that fetches Markdown files and renders them as full pages. MIT Javascript\nmarkdown-tree - Serve a hierarchy / tree directory of markdown files. Use intended for small sites built in markdown. MIT Ruby\nRead the Docs - Host documentation, making it fully searchable and easy to find; import your docs using any major version control system, including Mercurial, Git, Subversion, and Bazaar. (Demo, Source Code) MIT Python\nSoftware Development - FaaS \u0026amp; Serverless # ^ back to top ^\nServerless computing - Wikipedia\nAppwrite - End to end backend server for web, native, and mobile developers 🚀. (Source Code) BSD-3-Clause PHP\nfx - fx is a tool to help you do Function as a Service with painless on your own servers. MIT Go\nIronFunctions - The serverless microservices platform by iron.io. Apache-2.0 Go\nLocalStack - LocalStack is a fully functional local AWS cloud stack. This includes Lambda for serverless computation. (Source Code) Apache-2.0 Python/Other\nOpenFaaS - Serverless Functions Made Simple for Docker \u0026amp; Kubernetes. (Source Code) MIT Go\nTrusted-CGI - Lightweight self-hosted lambda/applications/cgi/serverless-functions platform. MIT Go\nSoftware Development - IDE \u0026amp; Tools # ^ back to top ^\nAppsmith - Cloud or self-hosted open-source platform to build admin panels, CRUD apps and workflows. Build everything you need, 10x faster. (Source Code) Apache-2.0 Java/Docker\nAtheos - Web-based IDE framework with a small footprint and minimal requirements, continued from Codiad. (Source Code) MIT PHP\nBabelfish - Self-hosted server for source code parsing. It can parse any file, in any supported language, extract an Abstract Syntax Tree from it, and convert it to a Universal Abstract Syntax Tree which can enable further analysis and transformation. GPL-3.0 Go\nBudibase - Build and automate internal tools, admin panels, dashboards, CRUD apps, and more, in minutes. Budibase is the open source alternative to Outsystems, Retool, Mendix, Appian. (Source Code) GPL-3.0 Nodejs\nCode-Server - Visual Studio Code in the browser, hosted on a remote server. (Source Code) MIT Nodejs/Docker\nEclipse Che - Open source workspace server and cloud IDE. (Source Code) EPL-1.0 Docker/Java\nGitpod - Online IDE for GitHub and GitLab. (Demo, Source Code) EPL-2.0 Go/Docker\nHakatime - WakaTime server implementation with analytics dashboard. Unlicense Haskell\nHttPlaceholder - Quickly mock away any webservice using HttPlaceholder. HttPlaceholder lets you specify what the request should look like and what response needs to be returned. MIT C#\nICEcoder - ICEcoder is a web IDE / browser based code editor, which allows you to develop websites directly within the web browser. (Demo, Source Code) MIT PHP\nJS Bin - Open source collaborative web development debugging tool. (Source Code) MIT Nodejs\nJudge0 CE - Open source API to compile and run source code. (Source Code) GPL-3.0 Ruby\nJupyterLab - Web-based environment for interactive and reproducible computing. (Demo, Source Code) BSD-3-Clause Python/Docker\nLowdefy - Build internal tools, BI dashboards, admin panels, CRUD apps and workflows in minutes using YAML / JSON on an self-hosted, open-source platform. Connect to your data sources, host via Serverless, Netlify or Docker. (Source Code) Apache-2.0 Nodejs\nML Workspace - All-in-one web-based IDE for machine learning and data science. Apache-2.0 Docker\nMotor Admin - No-code admin panel and business intelligence software - search, create, update, and delete data entries, create custom actions, and build reports. (Demo, Source Code) AGPL-3.0 Ruby\nRegexr - RegExr is a HTML/JS based tool for creating, testing, and learning about Regular Expressions. (Source Code) MIT Nodejs\nRStudio Server - Web browser based IDE for R. (Source Code) AGPL-3.0 Java/C++\nSlingcode - Web app IDE and computing platform in a single static HTML file. (Demo, Source Code) MIT HTML\nsourcegraph - Sourcegraph is a fast, open-source, fully-featured code search and navigation engine written in Go. (Source Code) Apache-2.0 Go\nToolJet - ToolJet is the open-source low-code framework alternative to Retool \u0026amp; Mendix to build \u0026amp; deploy internal tools with minimal engineering effort. (Source Code) GPL-3.0 Nodejs\nWakapi - Tracking tool for coding statistics, compatible with WakaTime. (Source Code) GPL-3.0 Go\nSoftware Development - Localization # ^ back to top ^\nAccent - Open-source, self-hosted, developer-oriented translation tool. (Source Code) BSD-3-Clause Elixir\nLocalizer - Free self-hosted open-source crowd-translating service for your product. (Demo, Source Code) MIT Nodejs/Docker\nPootle - Online translation and localization tool. (Source Code) GPL-3.0 Python\nTolgee - Developer \u0026amp; translator friendly web-based localization platform enabling users to translate directly in the app they develop. (Source Code) Apache-2.0 Docker/Java\nTraduora - Translation management platform for teams. (Source Code) AGPL-3.0 Docker/Nodejs\nWeblate - Web-based translation tool with tight version control integration. (Demo, Source Code) GPL-3.0 Python\nZanata - Web-based translation platform for translators, content creators and developers to manage localisation projects. (Source Code) GPL-2.0 Java\nSoftware Development - Project Management # ^ back to top ^\nRelated: Ticketing, Task management \u0026amp; To-do lists\nSee also: awesome-sysadmin/Code Review\nBonobo Git Server - Set up your own self hosted git server on IIS for Windows. Manage users and have full control over your repositories with a nice user friendly graphical interface. (Source Code) MIT C#\nFossil - Distributed version control system featuring wiki and bug tracker. BSD-2-Clause-FreeBSD C\nGit WebUI - Standalone web based user interface for git repositories. Apache-2.0 Python\nGitblit - Pure Java stack for managing, viewing, and serving Git repositories. (Source Code) Apache-2.0 Java\ngitbucket - Easily installable GitHub clone powered by Scala. (Source Code) Apache-2.0 Scala/Java\nGitea - Community managed fork of Gogs, lightweight code hosting solution. (Demo, Source Code) MIT Go\nGitLab - Self Hosted Git repository management, code reviews, issue tracking, activity feeds and wikis. (Demo, Source Code) MIT Ruby\nGitlist - Web-based git repository browser - GitList allows you to browse repositories using your favorite browser, viewing files under different revisions, commit history and diffs. (Source Code) BSD-3-Clause PHP\nGitolite - Gitolite allows you to setup git hosting on a central server, with fine-grained access control and many more powerful features. (Source Code) GPL-2.0 Perl\nGitPrep - Portable Github clone. (Demo, Source Code) Artistic-2.0 Perl\nGogs - Painless self-hosted Git Service written in Go. (Demo, Source Code) MIT Go\nGoodwork - Self hosted project management and collaboration tool powered by Laravel \u0026amp; VueJS. (Demo, Source Code) MIT PHP\nKallithea - Source code management system that supports two leading version control systems, Mercurial and Git, with a web interface. (Source Code) GPL-3.0 Python\nKlaus - Simple, easy-to-set-up Git web viewer that Just Works. ISC Python\nLavagna - Lavagna is an open-source issue/project management tool designed for small teams. Lightweight, pure Java, easy to install, easy to use. (Source Code) GPL-3.0 Java\nLazylead ⚠ - Eliminate the annoying work within ticketing systems (Jira, GitHub, Trello). Allows to automate daily actions like tickets fields verification, email notifications by JQL/GQL, meeting requests to your (or teammates) calendar. (Source Code) MIT Ruby\nLeantime - Leantime is a lean project management system for small teams and startups helping to manage projects from ideation through delivery. (Source Code) GPL-2.0 PHP\nMicrogit - Git hosting service made in Crystal and Lucky. MIT Crystal\nOctobox ⚠ - Take back control of your GitHub Notifications. (Source Code) AGPL-3.0 Ruby\nOneDev - All-In-One DevOps Platform. With Git Management, Issue Tracking, and CI/CD. Simple yet Powerful. (Source Code) MIT Java\nOpenProject - OpenProject is a web-based project management system. (Source Code) GPL-3.0 Ruby\nPagure - A lightweight, powerful, and flexible git-centric forge with features laying the foundation for federated and decentralized development. (Demo) GPL-2.0 Python\nPhproject - High performance full-featured project management system. (Demo, Source Code) GPL-3.0 PHP\nProjeQtOr - A complete, mature, multi-user project management system with extensive functionality for all phases of a project. (Demo, Source Code) AGPL-3.0 PHP\nRe:Backlogs - Project management and collaboration tool powered by Ruby on Rails \u0026amp; VueJS. (Demo) MIT Ruby\nRedmine - Redmine is a flexible project management web application. (Demo, Source Code) GPL-2.0 Ruby\nRhodeCode - RhodeCode is an open source platform for software development teams. It unifies and simplifies repository management for Git, Subversion, and Mercurial. (Source Code) AGPL-3.0 Python\nSCM Manager - The easiest way to share and manage your Git, Mercurial and Subversion repositories over http. (Source Code) BSD-3-Clause Java\nTaiga - Agile Project Management Tool based on the Kanban and Scrum methods. (Source Code) AGPL-3.0 Python\nTitra - Time-tracking solution for freelancers and small teams. (Demo, Source Code) GPL-3.0 Javascript\nTrac - Trac is an enhanced wiki and issue tracking system for software development projects. BSD-3-Clause Python\nTuleap - Tuleap is a libre suite to plan, track, code and collaborate on software projects. (Source Code) GPL-2.0 PHP\nUVDesk - UVDesk community is a service oriented, event driven extensible opensource helpdesk system that can be used by your organization to provide efficient support to your clients effortlessly whichever way you imagine. (Demo, Source Code) MIT PHP\nZenTao - An agile(scrum) project management system/tool. (Demo, Source Code) ZPL-1.2 PHP\nSoftware Development - UX Testing # ^ back to top ^\nDeepfakeHTTP - A web server that uses HTTP dumps as a source for responses. MIT Java\nSelenoid - Lightweight Selenium hub implementation launching browsers within Docker containers. (Source Code) Apache-2.0 Go\nUier - Codeless or low-code User Experience test editing and management using Selenium to perform testing or UI automation. Uier tends to be a free self hostable alternative to Applitools, Endtest, Ghost Inspector, Usetrace, Screenster and many others. Apache-2.0 Nodejs\nStatic Site Generators # ^ back to top ^\nPlease visit staticsitegenerators.net, staticgen.com\nStatus / Uptime pages # ^ back to top ^\nPlease visit awesome-sysadmin/Status Pages\ncState - Static status page for hyperfast Hugo. Clean design, minimal JS, super light HTML/CSS, high customization, optional admin panel, read-only API, IE8+. Best used with Netlify, Docker. (Demo) MIT Go\ns.Status - s.Status is a open source server status page written in java. (Demo) MPL-2.0 Java\nUptime Kuma - A self-hosted website monitoring tool like \u0026ldquo;Uptime Robot\u0026rdquo;. (Demo) MIT Nodejs\nTask Management \u0026amp; To-do Lists # ^ back to top ^\nRelated: Software Development - Project Management, Ticketing\nFocalboard - An open source, self-hosted alternative to Trello, Notion, and Asana. It helps define, organize, track and manage work across individuals and teams. (Source Code, Clients) MIT/AGPL-3.0/Apache-2.0 Nodejs/Go\nKanbana - Create boards to track users and projects from flat markdown files. Forked from Crepido. MIT Nodejs\nKanboard - Simple and open source visual task board. (Source Code) MIT PHP\nmyTinyTodo - Simple way to manage your todo list in AJAX style. Uses PHP, jQuery, SQLite/MySQL. GTD compliant. (Demo, Source Code) GPL-2.0 PHP\nNullboard - Single-page minimalist kanban board; compact, highly readable and quick to use. BSD-2-Clause Javascript\nPlanka - Open source Trello alternative. (Demo, Source Code) MIT Nodejs\nRestyaboard - Open source Trello-like kanban board. (Demo, Source Code) OSL-3.0 PHP\nTask Keeper - List editor for power users, backed by a self-hosted server. Apache-2.0 Scala\nTaskBoard - Kanban-inspired app for keeping track of things that need to get done. (Demo, Source Code) MIT PHP\nTaskfreak - Simple but efficient web based task manager written in PHP. GPL-3.0 PHP\nTaskord - Get things done socially with community of makers. (Source Code) MIT PHP\ntasks.php - Simple task/todo list that uses a JSON text file for the tasks. MIT PHP\nTasks - Simple tasks and notes manager written in PHP, jQuery and Bootstrap using a custom flat file database. MPL-2.0 PHP\nTaskwarrior - Taskwarrior is Free and Open Source Software that manages your TODO list from your command line. It is flexible, fast, efficient, and unobtrusive. It does its job then gets out of your way. (Source Code) MIT C++\nthewhitetulip Tasks - Kanban based to-do list manager written in Go. MIT Go\ntodo - Simple todo list manager. (Demo) MIT Go\ntodoMini - Mobile friendly zero-feature TODO list web app. Unix philosophy. (Demo, Source Code) GPL-3.0 PHP/Java\nTracks - Web-based application to help you implement David Allen’s Getting Things Done™ methodology. (Source Code) GPL-2.0 Ruby\nVikunja - The to-do app to organize your life. (Demo, Source Code) GPL-3.0 Go\nWekan - Open-source Trello-like kanban. (Source Code) MIT Nodejs\nTicketing # ^ back to top ^\nRelated: Task management \u0026amp; To-do lists, Software Development - Project Management\nBugzilla - General-purpose bugtracker and testing tool originally developed and used by the Mozilla project. MPL-2.0 Perl\nBumpy Booby - Simple, responsive and highly customizable PHP bug tracking system. (Source Code) MIT PHP\ndjango-todo - django-todo is a pluggable, multi-user, multi-group, multi-list todo and ticketing system - a reusable app designed to be dropped into any existing Django project. (Source Code) BSD-3-Clause Python/Django\nErxes - Marketing, sales, and customer service platform designed to help businesses attract more engaged customers. (Demo, Source Code) GPL-3.0 Javascript\nFlyspray - Uncomplicated, web-based bug tracking system. (Source Code) GPL-2.0 PHP\nFreeScout - Open source clone of Help Scout: email-based customer support application, help desk and shared mailbox. AGPL-3.0 PHP\nGlitchTip - Open source error-tracking app. GlitchTip collects errors reported by your app. (Source Code) MIT Python\nHelpy - Helpy is a modern, open source helpdesk customer support application. Features include knowledgebase, community discussions and support tickets integrated with email. (Demo, Source Code) MIT Ruby\nHuBoard ⚠ - Instant project management for your GitHub issues (Connects directly GitHub API). MIT Ruby\nMantisBT - Self hosted bug tracker, fits best for software development. (Demo, Source Code) GPL-2.0 PHP\nOpenSupports - Multi language ticket system with FAQ, role management, metrics and canned response features. (Demo, Source Code) GPL-3.0 PHP\nosTicket - Manage, organize and archive all your support requests and responses in one place. (Source Code) GPL-2.0 PHP\nOTOBO - Flexible web-based ticketing system used for Customer Service, Help Desk, IT Service Management. (Demo, Source Code) GPL-3.0 Perl\nPachno - Bring your team together to design, build and deliver your project with a tool that works with you and your team, and adapts when you need to. (Source Code) MPL-2.0 PHP\nRequest Tracker - An enterprise-grade issue tracking system. (Source Code) GPL-2.0 Perl\nRoundup Issue Tracker - A simple-to-use and -install issue-tracking system with command-line, web, REST, XML-RPC, and e-mail interfaces. Designed with flexibility in mind - not just another bug tracker. (Source Code) MIT/ZPL-2.0 Python\nSentry On-Premise - A powerful error tracking platform with wide language support and a robust API. (Source Code) BSD-3-Clause Python/Django\nSIT - SCM-agnostic, file-based, offline-first, immutable issue tracker. (Source Code) MIT Apache-2.0 Rust\nTrudesk - Trudesk is an open-source help desk/ticketing solution. (Source Code) Apache-2.0 Nodejs\nZammad - Easy to use but powerful open-source support and ticketing system. (Source Code) AGPL-3.0 Ruby\nTime Trackers # ^ back to top ^\nActivityWatch - An app that automatically tracks how you spend time on your devices. (Source Code) MPL-2.0 Python\nKimai - Kimai is a free \u0026amp; open source timetracker. It tracks work time and prints out a summary of your activities on demand. (Demo, Source Code) MIT PHP\nTimeTagger - An open source time-tracker based on an interactive timeline and powerful reporting. (Demo, Source Code) GPL-3.0 Python\nURL Shorteners # ^ back to top ^\nBefore hosting one, please see shortcomings of URL shorteners.\nBlink - Easy-to-host, SSO-integrated, CDN-powered link shortener (+decoupled analytics) for teams. (Source Code) AGPL-3.0 Nodejs\ngoshorly - An easy self-hosted Link shortener in Golang with Redis \u0026lt;3. (Demo) MIT Go\nKutt - A modern URL shortener with support for custom domains. (Source Code) MIT Nodejs\nLink-shortener-bot ⚠ - URL shortener using a Telegram Bot. (Demo) MIT Ruby\nLink - A minimal, SQLite-backed URL shortener. (Demo, Source Code) GPL-3.0 Go\nliteshort - User-friendly, actually lightweight, and configurable URL shortener. (Demo) MIT Python\nLstu - Let\u0026rsquo;s SHorten That Url - Lightweight URL shortener. WTFPL Perl\nPolr - Modern, minimalist, modular, and lightweight URL shortener. (Source Code) GPL-2.0 PHP\nreduc.io - URL shortener service written in Scala, using Akka-Http and Redis. MIT Scala\nReducePy - URL shortener service using Tornado and Redis runs on Docker and Kubernetes. MIT Python\nschort - No login, no javascript, just short links. (Demo) CC0-1.0 Python\nShlink - URL shortener with REST API and command line interface. Includes official progressive web application and docker images. (Source Code, Clients) MIT PHP\nshorturl - Simple URL shortener with very tiny URLs. (Demo) MIT Go\nSimple-URL-Shortener - KISS URL shortener, public or private (with account). Minimalist and lightweight. No dependencies. (Demo) MIT PHP\nSimply Shorten - A simple URL shortener that just shortens links. MIT Java\nurl-shortener ⚠ - Shitty url shortener, emoji and AI powered. MIT Nodejs\nYOURLS - YOURLS is a set of PHP scripts that will allow you to run Your Own URL Shortener. Features include password protection, URL customization, bookmarklets, statistics, API, plugins, jsonp. (Source Code) MIT PHP\nVPN # ^ back to top ^\nPlease visit awesome-sysadmin/VPN\nWeb Servers # ^ back to top ^\nPlease visit awesome-sysadmin/Web\nWikis # ^ back to top ^\nRelated: Software Development - Documentation Generators\nSee also: Wikimatrix, Wiki Engines - WikiIndex, List of wiki software - Wikipedia, Comparison of wiki software - Wikipedia\nBookStack - BookStack is a simple, self-hosted, easy-to-use platform for organizing and storing information. It allows for documentation to be stored in a book like fashion. (Demo, Source Code) MIT PHP\nCowyo - Cowyo is a feature-rich wiki for minimalists. (Demo) MIT Go\ndjango-wiki - Wiki system with complex functionality for simple integration and a superb interface. Store your knowledge with style: Use django models. (Demo) GPL-3.0 Python\nDocumize - Modern Docs + Wiki software with built-in workflow, single binary executable, just bring MySQL/Percona. (Source Code) AGPL-3.0 Go\nDokuwiki - Easy to use, lightweight, standards-compliant wiki engine with a simple syntax allowing reading the data outside the wiki. All data is stored in plain files, therefore no database is required. (Source Code) GPL-2.0 PHP\nGitit - Wiki program that stores pages and uploaded files in a git repository, which can then be modified using the VCS command line tools or the wiki\u0026rsquo;s web interface. GPL-2.0 Haskell\nGollum - Simple, Git-powered wiki with a sweet API and local frontend. MIT Ruby\njingo - Git based wiki engine written for node.js, with a decent design, a search capability and good typography. MIT Nodejs\nMediawiki - MediaWiki is a free and open-source wiki software package written in PHP. It serves as the platform for Wikipedia and the other Wikimedia projects, used by hundreds of millions of people each month. (Demo, Source Code) GPL-2.0 PHP\nMoinMoin - Advanced, easy to use and extensible WikiEngine with a large community of users. (Source Code) GPL-2.0 Python\nOutline ⚠ - An open, extensible, wiki for your team. (Source Code) BSD-3-Clause Nodejs\nPepperminty Wiki - Complete markdown-powered wiki contained in a single PHP file. (Demo) MPL-2.0 PHP\nPineDocs - Simple, fast, customizable and lightweight site for browsing files. GPL-3.0 PHP\nPmWiki - Wiki-based system for collaborative creation and maintenance of websites. GPL-3.0 PHP\nRaneto - Raneto is an open source Knowledgebase platform that uses static Markdown files to power your Knowledgebase. MIT Nodejs\nTiddlyWiki - Reusable non-linear personal web notebook. (Source Code) BSD-3-Clause Nodejs\nTiki - Wiki CMS Groupware with the most built-in features. (Demo, Source Code) LGPL-2.1 PHP\nTWiki - TWiki is a Perl-based structured wiki application, typically used to run a collaboration platform, knowledge or document management system, a knowledge base, or team portal. (Demo, Source Code) GPL-1.0 Perl\nWackoWiki - WackoWiki is a light and easy to install multilingual Wiki-engine. (Source Code) BSD-3-Clause PHP\nWiki.js - Modern, lightweight and powerful wiki app using Git and Markdown. (Demo) AGPL-3.0 Nodejs\nwiki - Simple Markdown based wiki engine. (Demo) MIT Go\nWiKiss - Wiki, simple to use and install. (Source Code) GPL-2.0 PHP\nWikmd - Modern and simple file based wiki that uses Markdown and Git. MIT Python\nXWiki - Second generation wiki that allows the user to extend its functionalities with a powerful extension-based architecture. (Demo, Source Code) LGPL-2.1 Java\nZim - Graphical text editor used to maintain a collection of wiki pages. Each page can contain links to other pages, simple formatting and images. (Source Code) GPL-2.0 Python\nList of Licenses # ^ back to top ^\n0BSD - BSD Zero-Clause Licence\nAAL - Attribution Assurance License\nAGPL-3.0 - GNU Affero General Public License 3.0\nAGPL-3.0-only - GNU Affero General Public License 3.0 only\nApache-2.0 - Apache, Version 2.0\nAPSL-2.0 - Apple Public Source License, Version 2.0\nArtistic-2.0 - Artistic License Version 2.0\nBeerware - Beerware License\nBSD-2-Clause - BSD 2-clause \u0026ldquo;Simplified\u0026rdquo;\nBSD-2-Clause-FreeBSD - BSD 2-Clause FreeBSD License\nBSD-3-Clause - BSD 3-Clause \u0026ldquo;New\u0026rdquo; or \u0026ldquo;Revised\u0026rdquo;\nBSD-3-Clause-Attribution - BSD with attribution\nBSD-4-Clause - BSD 4-clause \u0026ldquo;Original\u0026rdquo;\nCC-BY-SA-3.0 - Creative Commons Attribution-ShareAlike 3.0 International License\nCC-BY-SA-4.0 - Creative Commons Attribution-ShareAlike 4.0 International License\nCC0-1.0 - Public Domain\nCDDL-1.0 - Common Development and Distribution License\nCECILL-B - CEA CNRS INRIA Logiciel Libre\nCPAL-1.0 - Common Public Attribution License Version 1.0\nECL-2.0 - Educational Community License, Version 2.0\nEPL-1.0 - Eclipse Public License, Version 1.0\nEPL-2.0 - Eclipse Public License, Version 2.0\nEUPL-1.2 - European Union Public License 1.2\nGFDL-1.1-only - GNU Free Documentation License v1.1\nGFDL-1.1-or-later - GNU Free Documentation License v1.1\nGFDL-1.2-only - GNU Free Documentation License v1.2\nGFDL-1.2-or-later - GNU Free Documentation License v1.2\nGFDL-1.3-only - GNU Free Documentation License v1.3\nGFDL-1.3-or-later - GNU Free Documentation License v1.3\nGPL-1.0 - GNU General Public License\nGPL-2.0 - GNU General Public License 2.0\nGPL-2.0-or-later - GNU General Public License v2.0 or later\nGPL-3.0-only - GNU General Public License v3.0 only\nGPL-3.0-or-later - GNU General Public License v3.0 or later\nGPL-3.0 - GNU General Public License 3.0\nIPL-1.0 - IBM Public License\nISC - Internet Systems Consortium License\nLIL-1.0 - The Lil License v1\nLGPL-2.1 - Lesser General Public License 2.1\nLGPL-3.0 - Lesser General Public License 3.0\nMIT - MIT License\nMPL-1.1 - Mozilla Public License Version 1.1\nMPL-2.0 - Mozilla Public License\nOSL-3.0 - Open Software License 3.0\nSendmail - Sendmail License\nUnlicense - The Unlicense\nWTFPL - Do What the Fuck You Want to Public License\nZlib - Zlib/libpng License\nZPL-1.2 - Zope Public License 1.2\nZPL-2.0 - Zope Public License 2.0\nAnti-features # ⚠ - Depends on a proprietary service outside the user\u0026rsquo;s control External Links # ^ back to top ^\nAwesome Big Data - Curated list of awesome big data frameworks, resources and other awesomeness.\nAwesome Public Datasets - List of high quality, topic-centric public data sources.\nAwesome Sysadmin - Curated list of amazingly awesome open source sysadmin resources.\nLists of software aimed at privacy and decentralization in some form: PRISM Break, privacytools.io, Alternative Internet, Libre Projects\nEasy Indie App - Apps that can be self-hosted in a few clicks.\nDynamic Domain Name services: Afraid.org, Pagekite\nCommunities/forums: /r/selfhosted, IndieWeb\nMirrors: GitHub.com, Gitlab.com\nTrack Awesome Selfhosted - Get the latest updates of awesome-selfhosted.\nContributing # Contributing guidelines can be found in .github/CONTRIBUTING.md.\nAuthors # The list of authors can be found in AUTHORS.md.\nLicense # This list is under the Creative Commons Attribution-ShareAlike 3.0 Unported License.\n","date":"May 16, 2022","externalUrl":null,"permalink":"/2022/05/16/awesome-selfhosted/","section":"Blog","summary":"Awesome-Selfhosted # from https://github.com/awesome-selfhosted/awesome-selfhosted\nSelf-hosting is the practice of hosting and managing applications on your own server(s) instead of consuming from SaaSS providers.\n","title":"Awesome-Selfhosted","type":"blog"},{"content":" Начало работы с Lua в Neovim # Содержание # Введение Изучение языка Lua Имеющиеся туториалы по написанию плагинов на Lua для Neovim Связанные плагины Куда класть файлы Lua init.lua Другие файлы Lua Предостережения Советы Заметка относительно пакетов Использование Lua в Vimscript :lua :luado :luafile luafile vs require(): luaeval() v:lua Предостережения Советы Пространство имён vim Советы Использование Vimscript из Lua vim.api.nvim_eval() Предостережения vim.api.nvim_exec() vim.api.nvim_command() Советы Управление опции vim Использование функций API Использование мета-аксессоров Предостережения Управление внутренними переменными vim Использование функций API Использование мета-аксессоров Предостережения Вызов функций Vimscript vim.call() vim.fn.{function}() Советы Предостережения Определение сопоставлений клавиш Определение пользовательских команд Определение автокоманд Определение синтаксиса/подсветки Общие советы и рекомендации Настройка линтеров/языковых серверов luacheck sumneko/lua-language-server coc.nvim Разное vim.loop vim.lsp vim.treesitter Transpilers Created by gh-md-toc\nВведение # Интеграция Lua в Neovim в качестве языка с первоклассной поддержкой превращает её в одну из важнейших особенностей редактора. Тем не менее, количество учебных материалов по написанию плагинов на Lua значительно меньше таковых на Vimscript. Это руководство является попыткой предоставления необходимой информации для написания плагинов на Lua.\nЭто руководство предполагает, что пользователь использует последнюю версию Neovim nightly build. Так как версия 0.5 Neovim находится на стадии разработки, имейте в виду, что API, которые находятся в активной разработке нестабильны и могут быть подвержены изменениям до релиза.\nИзучение Lua # Если вы незнакомы с языком, имеется большое количество материалов для изучения:\nРесурс Learn X in Y minutes page about Lua позволит вам пробежаться по основам языка Если вы предпочитаете видеоуроки, то у Дерека Банаса (Derek Banas) имеется часовой видеоурок 1-hour tutorial on the language Сайт lua-users wiki содержит большое количество полезной информации относительно Lua Сайт official reference manual for Lua должен дать исчерпывающую информацию о языке Следует заметить, что Lua является очень чистым и простым языком. Язык легко изучить, особенно если имеется опыт использования аналогичного скриптового языка наподобие Javascript. Возможно, вы разбираетесь в Lua больше, чем вы представляете!\nЗаметка: версия Lua, встроенное в Neovim является LuaJIT 2.1.0, что поддерживает совместимость с Lua 5.1 (с некоторыми исключениями в виде расширений версии 5.2)\nИмеющиеся туториалы по написанию плагинов на Lua для Neovim # Было написано несколько туториалов, чтобы помочь людям написать плагины на Lua. Некоторые из них значительно помогли для написания этого руководства. Большое спасибо их авторам.\nteukka.tech - From init.vim to init.lua 2n.pl - How to write neovim plugins in Lua 2n.pl - How to make UI for neovim plugins in Lua ms-jpq - Neovim Async Tutorial Связанные плагины # Vimpeccable - Плагин, помогающий написать .vimrc на Lua plenary.nvim - Все функции Lua, которые я не хоче переписывать popup.nvim - Имплементация API Всплывающих окон vim(vim Popup API) для Neovim nvim_utils nvim-luadev - REPL/дебаг консоль для плагинов Neovim, написанных на lua nvim-luapad - Интерактивный Neovim скратчпад для встроенного движка Lua nlua.nvim - Lua Разработка для Neovim BetterLua.vim - Лучшая синтаксическая подсветка Lua в Vim/NeoVim Куда класть файлы Lua # init.lua # Neovim поддерживает загрузку файла init.lua вместо init.vim для конфигурации.\nДля справок:\n:help config Другие файлы Lua # Файлы Lua обычно находятся внутри папки lua/ в вашей runtimepath (для большинства пользователей это папка ~/.config/nvim/lua на *nix-овых системах и ~/AppData/Local/nvim/lua для Windows). Вы можете вызвать эти файлы с помощью require() в качестве Lua модулей.\nВ качестве примера возьмем следующую структуру папок:\n📂 ~/.config/nvim ├── 📁 after ├── 📁 ftplugin ├── 📂 lua │ ├── 🌑 myluamodule.lua │ └── 📂 other_modules │ ├── 🌑 anothermodule.lua │ └── 🌑 init.lua ├── 📁 pack ├── 📁 plugin ├── 📁 syntax └── 🇻 init.vim Lua код ниже загрузит модуль myluamodule.lua:\nrequire(\u0026#39;myluamodule\u0026#39;) Заметьте отсутствие расширения файла .lua.\nАналогично, загрузка other_modules/anothermodule.lua выполняется следующим образом:\nrequire(\u0026#39;other_modules.anothermodule\u0026#39;) -- or require(\u0026#39;other_modules/anothermodule\u0026#39;) Разделители путей обозначены либо точкой . либо слэшем /.\nПапка содержащая файл init.lua может быть загружена напрямую без необходимости уточнять имя файла.\nrequire(\u0026#39;other_modules\u0026#39;) -- загружает other_modules/init.lua Для большей информации: :help lua-require\nПредостережения # В отличие от файлов с расширением .vim, файлы с расширением .lua не загружаются автоматически, если они находятся в специальных папках runtimepath. К примеру, Neovim загрузит plugin/foo.vim, но не загрузит plugin/foo.lua.\nТакже смотрите:\nIssue #12670 Советы # Некоторые Lua плагины могут имет идентичные имена файлов внутри папки lua/. Это может привести к коллизии пространств имён.\nЕсли два плагина имеют файл lua/main.lua, То вызов require('main') неопределён: какой файл необходимо загрузить?\nПоэтому это хорошая идея создать пространство имен вашей конфигурации или плагина с помощью папки в самом верхнем уровне, наподобие: lua/plugin_name/main.lua\nЗаметка относительно пакетов # Обновление: если вы используете последнюю ночную сборку, это [больше не проблема] (https://github.com/neovim/neovim/pull/13119), и вы можете спокойно пропустить этот раздел.\nЕсли вы используете функцию packages или основанного на ней менеджера подключаемых модулей (например, packer.nvim, minpac или vim-packager), при использовании плагинов Lua следует помнить о некоторых вещах.\nПакеты в папке start загружаются только после считывания вашего init.vim. Это означает, что пакет не добавляется в runtimepath до тех пор, пока Neovim не закончит обработку файла. Это может вызвать проблемы, если плагин ожидает, что вы загрузите(require) модуль Lua или вызовете автоматически загружаемую функцию.\nПредполагая, что в пакете start/foo есть файл lua/bar.lua, выполнение кода ниже в init.vim вызовет ошибку, потому что runtimepath еще не обновлен:\nlua require(\u0026#39;bar\u0026#39;) Вы должны использовать команду packadd! foo перед тем как вызвать модуль через require.\npackadd! foo lua require(\u0026#39;bar\u0026#39;) Добавление ! к packadd означает, что Neovim поместит пакет в runtimepath без загрузки каких-либо скриптов в его папках plugin или ftdetect.\nТакже смотрите:\n:help :packadd Issue #11409 Использование Lua в Vimscript # :lua # Эта команда выполняет фрагмент кода Lua.\n:lua require(\u0026#39;myluamodule\u0026#39;) Многострочные скрипты возможны с использованием синтаксиса heredoc:\necho \u0026#34;Here\u0026#39;s a bigger chunk of Lua code\u0026#34; lua \u0026lt;\u0026lt; EOF local mod = require(\u0026#39;mymodule\u0026#39;) local tbl = {1, 2, 3} for k, v in ipairs(tbl) do mod.method(v) end print(tbl) EOF Примечание: каждая команда :lua имеет свою собственную область видимости, и переменные, объявленные с ключевым словом local, недоступны вне команды. Это не сработает:\n:lua local foo = 1 :lua print(foo) \u0026#34; выводит \u0026#39;nil\u0026#39; вместо \u0026#39;1\u0026#39; Примечание 2: функция print() в Lua ведет себя аналогично команде :echomsg. Его вывод сохраняется в истории сообщений и может быть подавлен командой :silent.\nТакже смотрите:\n:help :lua :help :lua-heredoc :luado # Эта команда выполняет фрагмент кода Lua, который воздействует на диапазон строк в текущем буфере. Если диапазон не указан, вместо него используется весь буфер. Строка возвращаемая из блока, используется для определения того, чем должна быть заменена каждая строка в диапазоне.\nСледующая команда заменит каждую строку в текущем буфере текстом hello world:\n:luado return \u0026#39;hello world\u0026#39; Также предусмотрены две неявные переменные line и linenr. line - это текст строки, по которой выполняется итерация, а linenr - ее номер. Следующая команда сделает каждую строку, номер которой делится на 2, в верхний регистр:\n:luado if linenr % 2 == 0 then return line:upper() end Также смотрите:\n:help :luado :luafile # Эта команда считывает файл Lua.\n:luafile ~/foo/bar/baz/myluafile.lua Эта команда аналогична команде :source для файлов .vim или встроенной функции dofile() в Lua.\nТакже смотрите:\n:help :luafile luafile vs require(): # Вам может быть интересно, в чем разница между lua require() и luafile, и стоит ли вам использовать одно вместо другого. У них разные варианты использования:\nrequire(): это встроенная функция Lua. Это позволяет вам использовать модульную систему Lua ищет модули в папках lua в вашем runtimepath отслеживает, какие модули были загружены, и предотвращает повторный парсинг и выполнение скрипта. Если вы измените файл, содержащий код для модуля, и попытаетесь require() второй раз во время работы Neovim, модуль на самом деле не будет обновляться :luafile: является Ex командой. Не поддерживает модули принимает абсолютный или относительный путь к рабочей папке текущего окна выполняет содержимое скрипта независимо от того, выполнялся ли он раньше :luafile также может быть полезен, если вы хотите запустить файл Lua, над которым вы работаете:\n:luafile % luaeval() # Эта встроенная функция Vimscript оценивает выражение Lua в форме строки и возвращает ее значение. Типы данных Lua автоматически преобразуются в типы Vimscript (и наоборот).\n\u0026#34; Вы можете сохранить результат в переменной let variable = luaeval(\u0026#39;1 + 1\u0026#39;) echo variable \u0026#34; 2 let concat = luaeval(\u0026#39;\u0026#34;Lua\u0026#34;..\u0026#34; is \u0026#34;..\u0026#34;awesome\u0026#34;\u0026#39;) echo concat \u0026#34; \u0026#39;Lua is awesome\u0026#39; \u0026#34; Таблицы в виде списков преобразуются в списки Vim. let list = luaeval(\u0026#39;{1, 2, 3, 4}\u0026#39;) echo list[0] \u0026#34; 1 echo list[1] \u0026#34; 2 \u0026#34; Обратите внимание, что в отличие от таблиц Lua, списки Vim индексируются с нуля \u0026#34; Таблицы в виде словарей конвертируются в словари Vim. let dict = luaeval(\u0026#39;{foo = \u0026#34;bar\u0026#34;, baz = \u0026#34;qux\u0026#34;}\u0026#39;) echo dict.foo \u0026#34; \u0026#39;bar\u0026#39; \u0026#34; То же самое для логических значений и значений nil echo luaeval(\u0026#39;true\u0026#39;) \u0026#34; v:true echo luaeval(\u0026#39;nil\u0026#39;) \u0026#34; v:null \u0026#34; Вы можете создавать алиас в Vimscript для функций Lua. let LuaMathPow = luaeval(\u0026#39;math.pow\u0026#39;) echo LuaMathPow(2, 2) \u0026#34; 4 let LuaModuleFunction = luaeval(\u0026#39;require(\u0026#34;mymodule\u0026#34;).myfunction\u0026#39;) call LuaModuleFunction() \u0026#34; Также можно передавать функции Lua в качестве значений функциям Vim. lua X = function(k, v) return string.format(\u0026#34;%s:%s\u0026#34;, k, v) end echo map([1, 2, 3], luaeval(\u0026#34;X\u0026#34;)) luaeval() принимает необязательный второй аргумент, который позволяет передавать данные в выражение. Затем вы можете получить доступ к этим данным из Lua, используя волшебную глобальную переменную _A:\necho luaeval(\u0026#39;_A[1] + _A[2]\u0026#39;, [1, 1]) \u0026#34; 2 echo luaeval(\u0026#39;string.format(\u0026#34;Lua is %s\u0026#34;, _A)\u0026#39;, \u0026#39;awesome\u0026#39;) \u0026#34; \u0026#39;Lua is awesome\u0026#39; Также смотрите:\n:help luaeval() v:lua # Эта глобальная переменная Vim позволяет вам вызывать глобальные функции Lua прямо из Vimscript. Опять же, типы данных Vim преобразуются в типы Lua и наоборот.\ncall v:lua.print(\u0026#39;Hello from Lua!\u0026#39;) \u0026#34; \u0026#39;Hello from Lua!\u0026#39; let scream = v:lua.string.rep(\u0026#39;A\u0026#39;, 10) echo scream \u0026#34; \u0026#39;AAAAAAAAAA\u0026#39; \u0026#34; Загрузка модулей работает call v:lua.require(\u0026#39;mymodule\u0026#39;).myfunction() \u0026#34; Как насчет неплохой статусной строки? lua \u0026lt;\u0026lt; EOF function _G.statusline() local filepath = \u0026#39;%f\u0026#39; local align_section = \u0026#39;%=\u0026#39; local percentage_through_file = \u0026#39;%p%%\u0026#39; return string.format( \u0026#39;%s%s%s\u0026#39;, filepath, align_section, percentage_through_file ) end EOF set statusline=%!v:lua.statusline() \u0026#34; Также работает в сопоставлениях выражений lua \u0026lt;\u0026lt; EOF function _G.check_back_space() local col = vim.fn.col(\u0026#39;.\u0026#39;) - 1 if col == 0 or vim.fn.getline(\u0026#39;.\u0026#39;):sub(col, col):match(\u0026#39;%s\u0026#39;) then return true else return false end end EOF inoremap \u0026lt;silent\u0026gt; \u0026lt;expr\u0026gt; \u0026lt;Tab\u0026gt; \\ pumvisible() ? \u0026#39;\\\u0026lt;C-n\u0026gt;\u0026#39; : \\ v:lua.check_back_space() ? \u0026#39;\\\u0026lt;Tab\u0026gt;\u0026#39; : \\ completion#trigger_completion() Также смотрите:\n:help v:lua :help v:lua-call Предостережения # Эта переменная может использоваться только для вызова функций. Следующий код всегда будет вызывать ошибку:\n\u0026#34; Создание алиасов не работает let LuaPrint = v:lua.print \u0026#34; Доступ к словарям не работает echo v:lua.some_global_dict[\u0026#39;key\u0026#39;] \u0026#34; Использование функции в качестве значения не работает echo map([1, 2, 3], v:lua.global_callback) Советы # Вы можете получить подсветку синтаксиса Lua внутри файлов .vim, поместив let g: vimsyn_embed = 'l' в свой файл конфигурации. См. :help g:vimsyn_embed для получения дополнительной информации об этой опции.\nПространство имён vim # Neovim предоставляет глобальную переменную vim, которая служит точкой входа для взаимодействия с её API из Lua. Она предоставляет пользователям расширенную \u0026ldquo;стандартную библиотеку\u0026rdquo; функций, а также различные подмодули.\nНекоторые примечательные функции и модули включают:\nvim.inspect: вывод Lua объектов (полезно для проверки таблиц) vim.regex: использование регулярных выражений Vim из Lua vim.api: модуль, который предоставляет функции API (тот же API, что используют удалённые(remote) плагины) vim.loop: модуль, который предоставляет функционал цикла событий Neovim (с использованием LibUV) vim.lsp: модуль, который управляет встроенным клиентом LSP vim.treesitter: модуль, который предоставляет функционал библиотеки tree-sitter Этот список ни в коем случае не является исчерпывающим. Если вы хотите узнать больше о том, что делает переменная vim, :help lua-stdlib и :help lua-vim вам в помощь :). В качестве альтернативы вы можете выполнить :lua print (vim.inspect (vim)), чтобы получить список всех модулей.\nСоветы # Писать print(vim.inspect(x)) каждый раз, когда вы хотите проверить содержимое объекта, может оказаться довольно утомительным. Возможно, стоит иметь где-нибудь в вашей конфигурации глобальную функцию-оболочку:\nfunction _G.dump(...) local objects = vim.tbl_map(vim.inspect, {...}) print(unpack(objects)) end Затем вы можете очень быстро проверить содержимое объекта в своем коде или из командной строки:\ndump({1, 2, 3}) :lua dump(vim.loop) Кроме того, вы можете обнаружить, что встроенных функций Lua иногда не хватает по сравнению с тем, что вы найдете в других языках (например, os.clock() возвращает значение только в секундах, а не в миллисекундах). Обязательно посмотрите Neovim stdlib (и vim.fn, подробнее об этом позже), вероятно, в нем есть то, что вы ищете.\nИспользование Vimscript из Lua # vim.api.nvim_eval() # Эта функция оценивает строку выражения Vimscript и возвращает ее значение. Типы данных Vimscript автоматически преобразуются в типы Lua (и наоборот).\nЭто Lua-эквивалент функции luaeval() в Vimscript.\n-- Типы данных конвертируются правильно print(vim.api.nvim_eval(\u0026#39;1 + 1\u0026#39;)) -- 2 print(vim.inspect(vim.api.nvim_eval(\u0026#39;[1, 2, 3]\u0026#39;))) -- { 1, 2, 3 } print(vim.inspect(vim.api.nvim_eval(\u0026#39;{\u0026#34;foo\u0026#34;: \u0026#34;bar\u0026#34;, \u0026#34;baz\u0026#34;: \u0026#34;qux\u0026#34;}\u0026#39;))) -- { baz = \u0026#34;qux\u0026#34;, foo = \u0026#34;bar\u0026#34; } print(vim.api.nvim_eval(\u0026#39;v:true\u0026#39;)) -- true print(vim.api.nvim_eval(\u0026#39;v:null\u0026#39;)) -- nil TODO: возможно ли, чтобы vim.api.nvim_eval() возвращала funcref?\nПредостережения # В отличие от luaeval(), vim.api.nvim_eval() не предоставляет неявную переменную _A для передачи данных в выражение.\nvim.api.nvim_exec() # Эта функция оценивает фрагмент кода Vimscript. Она принимает строку, содержащую исходный код для выполнения, и логическое значение, чтобы определить, должен ли вывод кода возвращаться функцией (вы можете сохранить вывод в переменной, для примера).\nlocal result = vim.api.nvim_exec( [[ let mytext = \u0026#39;hello world\u0026#39; function! MyFunction(text) echo a:text endfunction call MyFunction(mytext) ]], true) print(result) -- \u0026#39;hello world\u0026#39; TODO: в документации указано, что скриптовая область действия(s:) поддерживается, но запуск этого фрагмента с переменной скриптовой области действия вызывает ошибку. Почему?\nvim.api.nvim_command() # Эта функция выполняет команду ex. Она принимает строку, содержащую команду для выполнения.\nvim.api.nvim_command(\u0026#39;new\u0026#39;) vim.api.nvim_command(\u0026#39;wincmd H\u0026#39;) vim.api.nvim_command(\u0026#39;set nonumber\u0026#39;) vim.api.nvim_command(\u0026#39;%s/foo/bar/g\u0026#39;) Примечание: vim.cmd - более короткий alias для этой функции.\nvim.cmd(\u0026#39;buffers\u0026#39;) Советы # Поскольку вам нужно передавать строки этим функциям, вам часто приходится экранировать обратный слэш:\nvim.cmd(\u0026#39;%s/\\\\Vfoo/bar/g\u0026#39;) Строковые литералы проще использовать, поскольку они не требуют экранирующих символов:\nvim.cmd([[%s/\\Vfoo/bar/g]]) Управление опции vim # Использование функций API # Neovim предоставляет набор функций API для изменения опции или получения её текущего значения:\nГлобальные опции: vim.api.nvim_set_option() vim.api.nvim_get_option() Локальные опции буферов: vim.api.nvim_buf_set_option() vim.api.nvim_buf_get_option() Локальные опции окон: vim.api.nvim_win_set_option() vim.api.nvim_win_get_option() Они принимают строку, содержащую имя опции, которую нужно установить / получить, а также значение, которое вы хотите установить.\nЛогические параметры (например, (no)number) должны иметь значение true или false:\nvim.api.nvim_set_option(\u0026#39;smarttab\u0026#39;, false) print(vim.api.nvim_get_option(\u0026#39;smarttab\u0026#39;)) -- false Неудивительно, что параметры строки должны быть строками:\nvim.api.nvim_set_option(\u0026#39;selection\u0026#39;, \u0026#39;exclusive\u0026#39;) print(vim.api.nvim_get_option(\u0026#39;selection\u0026#39;)) -- \u0026#39;exclusive\u0026#39; Числовые опции принимают число:\nvim.api.nvim_set_option(\u0026#39;updatetime\u0026#39;, 3000) print(vim.api.nvim_get_option(\u0026#39;updatetime\u0026#39;)) -- 3000 Локальные опции буффера и окна также нуждаются в номере буфера или номере окна (использование 0 установит/получит опцию для текущего буфера/окна)\nvim.api.nvim_win_set_option(0, \u0026#39;number\u0026#39;, true) vim.api.nvim_buf_set_option(10, \u0026#39;shiftwidth\u0026#39;, 4) print(vim.api.nvim_win_get_option(0, \u0026#39;number\u0026#39;)) -- true print(vim.api.nvim_buf_get_option(10, \u0026#39;shiftwidth\u0026#39;)) -- 4 Использование мета-аксессоров # Если вы хотите установить параметры более \u0026ldquo;идиоматическим\u0026rdquo; способом, доступны несколько мета-аксессуаров. По сути, они обертывают вышеуказанные функции API и позволяют управлять параметрами, как если бы они были переменными:\nvim.o.{option}: глобальные опции vim.bo.{option}: локальные опции буффера vim.wo.{option}: локальные опции окна vim.o.smarttab = false print(vim.o.smarttab) -- false vim.bo.shiftwidth = 4 print(vim.bo.shiftwidth) -- 4 Вы можете указать номер для опций, локальных для буфера и для локального окна. Если номер не указан, используется текущий буфер / окно:\nvim.bo[4].expandtab = true -- тоже самое что и vim.api.nvim_buf_set_option(4, \u0026#39;expandtab\u0026#39;, true) vim.wo.number = true -- тоже самое что и vim.api.nvim_win_set_option(0, \u0026#39;number\u0026#39;, true) Также смотрите:\n:help lua-vim-internal-options Предостережения # В Lua нет эквивалента команде :set, вы либо устанавливаете параметр глобально, либо локально.\nТакже смотрите:\n:help :setglobal :help global-local Управление внутренними переменными vim # Использование функций API # Как и у параметров, внутренние переменные имеют собственный набор функций API:\nГлобальные переменные (g:): vim.api.nvim_set_var () vim.api.nvim_get_var () vim.api.nvim_del_var () Переменные буфера (b:): vim.api.nvim_buf_set_var () vim.api.nvim_buf_get_var () vim.api.nvim_buf_del_var () Оконные переменные (w:): vim.api.nvim_win_set_var () vim.api.nvim_win_get_var () vim.api.nvim_win_del_var () Переменные вкладки (t:): vim.api.nvim_tabpage_set_var () vim.api.nvim_tabpage_get_var () vim.api.nvim_tabpage_del_var () Предопределенные переменные Vim (v:): vim.api.nvim_set_vvar () vim.api.nvim_get_vvar () За исключением предопределенных переменных Vim, они также могут быть удалены (команда :unlet является эквивалентом в Vimscript). Локальные переменные (l:), скриптовые переменные (s:) и аргументы функции (a:) не могут быть изменены, поскольку они имеют смысл только в контексте Vimscript, Lua имеет свои собственные правила области видимости\nЕсли вы не знакомы с тем, что делают эти переменные, :help internal-variables описывает их подробно.\nЭти функции принимают строку, содержащую имя переменной для изменения/получения/удаления, а также значение, которое вы хотите установить.\nvim.api.nvim_set_var(\u0026#39;some_global_variable\u0026#39;, { key1 = \u0026#39;value\u0026#39;, key2 = 300 }) print(vim.inspect(vim.api.nvim_get_var(\u0026#39;some_global_variable\u0026#39;))) -- { key1 = \u0026#34;value\u0026#34;, key2 = 300 } vim.api.nvim_del_var(\u0026#39;some_global_variable\u0026#39;) Переменные, которые ограничены буфером, окном или вкладкой, также получают номер (использование 0 изменит/получит/удалит переменную для текущего буфера/окна/вкладки):\nvim.api.nvim_win_set_var(0, \u0026#39;some_window_variable\u0026#39;, 2500) vim.api.nvim_tab_set_var(3, \u0026#39;some_tabpage_variable\u0026#39;, \u0026#39;hello world\u0026#39;) print(vim.api.nvim_win_get_var(0, \u0026#39;some_window_variable\u0026#39;)) -- 2500 print(vim.api.nvim_buf_get_var(3, \u0026#39;some_tabpage_variable\u0026#39;)) -- \u0026#39;hello world\u0026#39; vim.api.nvim_win_del_var(0, \u0026#39;some_window_variable\u0026#39;) vim.api.nvim_buf_del_var(3, \u0026#39;some_tabpage_variable\u0026#39;) Использование мета-аксессоров # Внутренними переменными можно управлять более интуитивно с помощью этих мета-аксессоров:\nvim.g.{name}: глобальные переменные vim.b.{name}: буферные переменные vim.w.{name}: переменные окна vim.t.{name}: переменные вкладки vim.v.{name}: предопределенные переменные Vim vim.g.some_global_variable = { key1 = \u0026#39;value\u0026#39;, key2 = 300 } print(vim.inspect(vim.g.some_global_variable)) -- { key1 = \u0026#34;value\u0026#34;, key2 = 300 } Чтобы удалить одну из этих переменных, просто присвойте ей nil:\nvim.g.some_global_variable = nil Предостережения # В отличие от мета-аксессоров опций, вы не можете указать число для переменных с областью буфера/окна/вкладки.\nКроме того, вы не можете добавлять/обновлять/удалять ключи из словаря, хранящегося в одной из этих переменных. Например, этот фрагмент кода Vimscript не работает:\nlet g:variable = {} lua vim.g.variable.key = \u0026#39;a\u0026#39; echo g:variable \u0026#34; {} Это известная проблема:\nIssue #12544 Вызов функций Vimscript # vim.call() # vim.call() вызывает функцию Vimscript. Это может быть встроенная функция Vim или пользовательская функция. Опять же, типы данных конвертируются из Lua в Vimscript и обратно.\nОна принимает имя функции, за которым следуют аргументы, которые вы хотите передать этой функции:\nprint(vim.call(\u0026#39;printf\u0026#39;, \u0026#39;Hello from %s\u0026#39;, \u0026#39;Lua\u0026#39;)) local reversed_list = vim.call(\u0026#39;reverse\u0026#39;, { \u0026#39;a\u0026#39;, \u0026#39;b\u0026#39;, \u0026#39;c\u0026#39; }) print(vim.inspect(reversed_list)) -- { \u0026#34;c\u0026#34;, \u0026#34;b\u0026#34;, \u0026#34;a\u0026#34; } local function print_stdout(chan_id, data, name) print(data[1]) end vim.call(\u0026#39;jobstart\u0026#39;, \u0026#39;ls\u0026#39;, { on_stdout = print_stdout }) vim.call(\u0026#39;my#autoload#function\u0026#39;) See also:\n:help vim.call() vim.fn.{function}() # vim.fn does the exact same thing as vim.call(), but looks more like a native Lua function call:\nprint(vim.fn.printf(\u0026#39;Hello from %s\u0026#39;, \u0026#39;Lua\u0026#39;)) local reversed_list = vim.fn.reverse({ \u0026#39;a\u0026#39;, \u0026#39;b\u0026#39;, \u0026#39;c\u0026#39; }) print(vim.inspect(reversed_list)) -- { \u0026#34;c\u0026#34;, \u0026#34;b\u0026#34;, \u0026#34;a\u0026#34; } local function print_stdout(chan_id, data, name) print(data[1]) end vim.fn.jobstart(\u0026#39;ls\u0026#39;, { on_stdout = print_stdout }) Хэши # не являются допустимыми символами для идентификаторов в Lua, поэтому функции автозагрузки должны вызываться с таким синтаксисом:\nvim.fn[\u0026#39;my#autoload#function\u0026#39;]() Также смотрите:\n:help vim.fn Советы # Neovim имеет обширную библиотеку мощных встроенных функций, которые очень полезны для плагинов. Смотрите :help vim-function для списка в алфавитном порядке и :help function-list для списка функций, сгруппированных по темам.\nПредостережения # Некоторые функции Vim, которые должны возвращать логическое значение 1 или 0. В Vimscript это не проблема, поскольку 1 истинно, а 0 ложно, что позволяет использовать такие конструкции:\nif has(\u0026#39;nvim\u0026#39;) \u0026#34; do something... endif Однако в Lua ложными считаются только false и nil, числа всегда оцениваются как true, независимо от их значения. Вы должны явно проверить 1 или 0:\nif vim.fn.has(\u0026#39;nvim\u0026#39;) == 1 then -- do something... end Определение сопоставлений клавиш # Neovim предоставляет список функций API для установки, получения и удаления сопоставлений:\nДля глобальных сопоставлений: vim.api.nvim_set_keymap() vim.api.nvim_get_keymap() vim.api.nvim_del_keymap() Для локальных сопоставлений: vim.api.nvim_buf_set_keymap() vim.api.nvim_buf_get_keymap() vim.api.nvim_buf_del_keymap() Начнем с vim.api.nvim_set_keymap() и vim.api.nvim_buf_set_keymap()\nПервым аргументом, переданным в функцию, является строка, содержащая имя режима, для которого сопоставление будет действовать:\nСтрочное значение Страница помощи Затронутые режимы Эквивалент Vimscript '' (пустая строка) mapmode-nvo Normal, Visual, Select, Operator-pending :map 'n' mapmode-n Normal :nmap 'v' mapmode-v Visual and Select :vmap 's' mapmode-s Select :smap 'x' mapmode-x Visual :xmap 'o' mapmode-o Operator-pending :omap '!' mapmode-ic Insert and Command-line :map! 'i' mapmode-i Insert :imap 'l' mapmode-l Insert, Command-line, Lang-Arg :lmap 'c' mapmode-c Command-line :cmap 't' mapmode-t Terminal :tmap Второй аргумент - это строка, содержащая левую часть отображения (ключ или набор ключей, запускающих команду, определенную в сопоставлении). Пустая строка эквивалентна \u0026lt;Nop\u0026gt;, который отключает ключ.\nТретий аргумент - это строка, содержащая правую часть сопоставления (команду для выполнения).\nПоследний аргумент - это таблица, содержащая логические параметры для сопоставления, как определено в :help :map-arguments (включая noremap и исключая buffer).\nСопоставления локальных буферов также принимают номер буфера в качестве первого аргумента (0 устанавливает сопоставление для текущего буфера).\nvim.api.nvim_set_keymap(\u0026#39;n\u0026#39;, \u0026#39;\u0026lt;leader\u0026gt;\u0026lt;Space\u0026gt;\u0026#39;, \u0026#39;:set hlsearch!\u0026lt;CR\u0026gt;\u0026#39;, { noremap = true, silent = true }) -- :nnoremap \u0026lt;silent\u0026gt; \u0026lt;leader\u0026gt;\u0026lt;Space\u0026gt; :set hlsearch\u0026lt;CR\u0026gt; vim.api.nvim_buf_set_keymap(0, \u0026#39;\u0026#39;, \u0026#39;cc\u0026#39;, \u0026#39;line(\u0026#34;.\u0026#34;) == 1 ? \u0026#34;cc\u0026#34; : \u0026#34;ggcc\u0026#34;\u0026#39;, { noremap = true, expr = true }) -- :noremap \u0026lt;buffer\u0026gt; \u0026lt;expr\u0026gt; cc line(\u0026#39;.\u0026#39;) == 1 ? \u0026#39;cc\u0026#39; : \u0026#39;ggcc\u0026#39; vim.api.nvim_get_keymap() принимает строку, содержащую краткое имя режима, для которого вы хотите получить список сопоставлений (см. таблицу выше). Возвращаемое значение - это таблица, содержащая все глобальные сопоставления для режима.\nprint(vim.inspect(vim.api.nvim_get_keymap(\u0026#39;n\u0026#39;))) -- :verbose nmap vim.api.nvim_buf_get_keymap () принимает дополнительный номер буфера в качестве своего первого аргумента (0 получит сопоставления для текущего буфера)\nprint(vim.inspect(vim.api.nvim_buf_get_keymap(0, \u0026#39;i\u0026#39;))) -- :verbose imap \u0026lt;buffer\u0026gt; vim.api.nvim_del_keymap() принимает режим и левую часть сопоставления.\nvim.api.nvim_del_keymap(\u0026#39;n\u0026#39;, \u0026#39;\u0026lt;leader\u0026gt;\u0026lt;Space\u0026gt;\u0026#39;) -- :nunmap \u0026lt;leader\u0026gt;\u0026lt;Space\u0026gt; Опять же, vim.api.nvim_buf_del_keymap () принимает номер буфера в качестве своего первого аргумента, где 0 представляет текущий буфер.\nvim.api.nvim_buf_del_keymap(0, \u0026#39;i\u0026#39;, \u0026#39;\u0026lt;Tab\u0026gt;\u0026#39;) -- :iunmap \u0026lt;buffer\u0026gt; \u0026lt;Tab\u0026gt; Определение пользовательских команд # В настоящее время в Lua нет интерфейса для создания пользовательских команд. Тем не менее, планы имеются:\nPull request #11613 В настоящее время вам, вероятно, лучше создавать команды в Vimscript.\nОпределение автокоманд # Augroup-ы и autcommand-ы еще не имеют интерфейса, но над ним работают:\nPull request #12378 А пока вы можете создавать автокоманды в Vimscript или использовать эту оболочку из norcalli/nvim_utils\nОпределение синтаксиса/подсветки # Синтаксический API все еще находится в стадии разработки. Вот пара указателей:\nIssue #9876 tjdevries/colorbuddy.vim, библиотека для создания цветовых схем в Lua :help lua-treesitter Общие советы и рекомендации # Настройка линтеров/языковых серверов # Если вы используете линтеры и/или языковые серверы для диагностики и автозаполнения для проектов Lua, возможно, вам придется настроить для них параметры, специфичные для Neovim. Вот несколько рекомендуемых настроек для популярных инструментов:\nluacheck # Вы можете заставить luacheck распознать глобал vim, поместив эту конфигурацию в ~/.luacheckrc (или $XDG_CONFIG_HOME/luacheck/.luacheckrc):\nglobals = { \u0026#34;vim\u0026#34;, } Языковой сервер Alloyed/lua-lsp использует luacheck для обеспечения линтинга и читает тот же файл.\nДля получения дополнительной информации о том, как настроить luacheck, обратитесь к его документации\nsumneko/lua-language-server # Пример конфигурации для sumneko/lua-language-server (в примере используется встроенный клиент LSP, но конфигурация для другого клиента LSP должна быть идентична):\nrequire\u0026#39;lspconfig\u0026#39;.sumneko_lua.setup { settings = { Lua = { runtime = { -- Заставьте языковой сервер распознавать глобальные переменные LuaJIT, такие как `jit` и` bit` version = \u0026#39;LuaJIT\u0026#39;, - Настройте путь к lua path = vim.split(package.path, \u0026#39;;\u0026#39;), }, diagnostics = { - Заставьте языковой сервер распознавать глобальную переменную `vim` globals = {\u0026#39;vim\u0026#39;}, }, workspace = { -- Сделать так, чтобы сервер знал о рантайм файлах Neovim library = { [vim.fn.expand(\u0026#39;$VIMRUNTIME/lua\u0026#39;)] = true, [vim.fn.expand(\u0026#39;$VIMRUNTIME/lua/vim/lsp\u0026#39;)] = true, }, }, }, }, } Для получения дополнительной информации о настройке sumneko/lua-language-server см. \u0026ldquo;Setting without VSCode\u0026rdquo;\ncoc.nvim # Источник автодополнения rafcamlet/coc-nvim-lua для coc.nvim предоставляет элементы автодополнения для библиотеки Neovim stdlib.\nTODO:\nГорячая перезагрузка модулей vim.validate()? Добавить материал о модульных тестах? Я знаю, что Neovim использует фреймворк busted, но я не знаю, как использовать его для плагинов. Лучшие практики? Я не Lua мастер, поэтому не знаю Как использовать пакеты LuaRocks (wbthomason/packer.nvim?) Разное # vim.loop # vim.loop- это модуль, который предоставляет API LibUV . Некоторые ресурсы:\nOfficial documentation for LibUV Luv documentation teukka.tech - Using LibUV in Neovim Также смотрите:\n:help vim.loop vim.lsp # vim.lsp - это модуль, который управляет встроенным клиентом LSP. Репозиторий neovim/nvim-lspconfig содержит конфигурации по умолчанию для популярных языковых серверов.\nПоведение клиента можно настроить с помощью обработчиков \u0026ldquo;lsp-handlers\u0026rdquo;. Для дополнительной информации:\n:help lsp-handler neovim/neovim#12655 How to migrate from diagnostic-nvim Вы также можете взглянуть на плагины, построенные вокруг клиента LSP:\nnvim-lua/completion-nvim RishabhRD/nvim-lsputils Также смотрите:\n:help lsp vim.treesitter # vim.treesitter - это модуль, который управляет интеграцией библиотеки Tree-sitter в Neovim. Если вы хотите узнать больше о Tree-sitter, вам может быть интересна эта презентация (38:37).\nОрганизация nvim-treeitter размещает различные плагины, использующие преимущества библиотеки.\nSee also:\n:help lua-treesitter Транспайлеры # Одним из преимуществ использования Lua является то, что вам фактически не нужно писать код Lua! Для этого языка доступно множество транспайлеров.\nMoonscript Вероятно, один из самых известных транспилеров для Lua. Добавляет множество удобных функций, таких как классы, списковое включение или функциональные литералы. Плагин svermeulen/nvim-moonmaker позволяет писать плагины и настройку Neovim непосредственно в Moonscript.\nFennel Lisp, который компилируется в Lua. Вы можете написать конфигурацию и плагины для Neovim в Fennel с помощью плагина Olical/aniseed. Кроме того, плагин Olical/conjure предоставляет интерактивную среду разработки, которая поддерживает Fennel (среди других языков).\nДругие интересные проекты:\nTypeScriptToLua/TypeScriptToLua teal-language/tl Haxe SwadicalRag/wasm2lua hengestone/lua-languages ","date":"March 15, 2022","externalUrl":null,"permalink":"/2022/03/15/lua-neovim/","section":"Blog","summary":"Начало работы с Lua в Neovim # Содержание # Введение Изучение языка Lua Имеющиеся туториалы по написанию плагинов на Lua для Neovim Связанные плагины Куда класть файлы Lua init.lua Другие файлы Lua Предостережения Советы Заметка относительно пакетов Использование Lua в Vimscript :lua :luado :luafile luafile vs require(): luaeval() v:lua Предостережения Советы Пространство имён vim Советы Использование Vimscript из Lua vim.api.nvim_eval() Предостережения vim.api.nvim_exec() vim.api.nvim_command() Советы Управление опции vim Использование функций API Использование мета-аксессоров Предостережения Управление внутренними переменными vim Использование функций API Использование мета-аксессоров Предостережения Вызов функций Vimscript vim.call() vim.fn.{function}() Советы Предостережения Определение сопоставлений клавиш Определение пользовательских команд Определение автокоманд Определение синтаксиса/подсветки Общие советы и рекомендации Настройка линтеров/языковых серверов luacheck sumneko/lua-language-server coc.nvim Разное vim.loop vim.lsp vim.treesitter Transpilers Created by gh-md-toc\n","title":"Lua  Neovim","type":"blog"},{"content":"This guide is a collection of techniques for improving the security and privacy of a modern Apple Macintosh computer (\u0026ldquo;MacBook\u0026rdquo;) running a recent version of macOS (formerly known as \u0026ldquo;OS X\u0026rdquo;).\nThis guide is targeted to power users who wish to adopt enterprise-standard security, but is also suitable for novice users with an interest in improving their privacy and security on a Mac.\nA system is only as secure as its administrator is capable of making it. There is no one single technology, software, nor technique to guarantee perfect computer security; a modern operating system and computer is very complex, and requires numerous incremental changes to meaningfully improve one\u0026rsquo;s security and privacy posture.\nThis guide is provided on an \u0026lsquo;as is\u0026rsquo; basis without any warranties of any kind. Only you are responsible if you break anything or get in any sort of trouble by following this guide.\nTo suggest an improvement, please send a pull request or open an issue.\nThis guide is also available in 简体中文.\nBasics Preparing and installing macOS Verifying installation integrity Creating a bootable USB installer Creating an install image Manual way Target disk mode Creating a recovery partition Virtualization First boot System activation Admin and standard user accounts Caveats Setup Full disk encryption Firmware Firewall Application layer firewall Third party firewalls Kernel level packet filtering Services Spotlight Suggestions Homebrew DNS Hosts file dnscrypt Dnsmasq Test DNSSEC validation Captive portal Certificate authorities OpenSSL Curl Web Privoxy Browser Firefox Chrome Safari Other Web browsers Web browsers and privacy Plugins Tor VPN PGP/GPG OTR Viruses and malware System Integrity Protection Gatekeeper and XProtect Metadata and artifacts Passwords Backup Wi-Fi SSH Physical access System monitoring OpenBSM audit DTrace Execution Network Binary Whitelisting Miscellaneous Related software Additional resources Basics # Standard security best practices apply:\nCreate a threat model\nWhat are you trying to protect and from whom? Is your adversary a three letter agency (if so, you may want to consider using OpenBSD instead); a nosy eavesdropper on the network; or a determined apt orchestrating a campaign against you? Recognize threats and how to reduce attack surface against them. Keep the system up to date\nPatch the base operating system and all third party software. macOS system updates can be completed using the App Store application, or the softwareupdate command-line utility - neither requires registering an Apple account. Updates can also be downloaded directly from Apple\u0026rsquo;s support site. Subscribe to announcement mailing lists like Apple security-announce. Encrypt sensitive data at rest\nIn addition to full disk encryption, consider creating one or several encrypted partitions or volumes to store passwords, cryptographic keys, personal documents, etc. at rest. This will mitigate damage in case of compromise and data theft. Assure data availability\nCreate regular backups of your data and be ready to format and re-install the operating system in case of compromise. Always encrypt locally before copying backups to external media or the \u0026ldquo;cloud\u0026rdquo;. Verify backups work by testing them regularly, for example by accessing certain files or performing a hash based comparison. Click carefully\nUltimately, the security of a system can be reduced to its administrator. Care should be taken when installing new software. Always prefer free and open source software (which macOS is not). Preparing and installing macOS # There are several ways to install macOS.\nThe simplest way is to boot into Recovery Mode by holding Command and R keys at boot. A system image can be downloaded and applied directly from Apple. However, this way exposes the serial number and other identifying information over the network in plain text, which may not be desired for privacy reasons.\nPacket capture of an unencrypted HTTP conversation during macOS recovery\nAn alternative way to install macOS is to first download macOS Mojave from the App Store or elsewhere, and create a custom installable system image.\nVerifying installation integrity # The macOS installation application is code signed, which should be verified to make sure you received a legitimate copy, using the pkgutil --check-signature or codesign -dvv commands.\nTo verify the code signature and integrity of macOS application bundles:\n$ pkgutil --check-signature /Applications/Install\\ macOS\\ Catalina.app Package \u0026#34;Install macOS Catalina\u0026#34;: Status: signed by a certificate trusted by Mac OS X Certificate Chain: 1. Software Signing SHA1 fingerprint: 01 3E 27 87 74 8A 74 10 3D 62 D2 CD BF 77 A1 34 55 17 C4 82 ----------------------------------------------------------------------------- 2. Apple Code Signing Certification Authority SHA1 fingerprint: 1D 01 00 78 A6 1F 4F A4 69 4A FF 4D B1 AC 26 6C E1 B4 59 46 ----------------------------------------------------------------------------- 3. Apple Root CA SHA1 fingerprint: 61 1E 5B 66 2C 59 3A 08 FF 58 D1 4A E2 24 52 D1 98 DF 6C 60 Use the codesign command to examine an application\u0026rsquo;s code signature:\n$ codesign -dvv /Applications/Install\\ macOS\\ Catalina.app Executable=/Applications/Install macOS Catalina.app/Contents/MacOS/InstallAssistant_springboard Identifier=com.apple.InstallAssistant.Catalina Format=app bundle with Mach-O thin (x86_64) CodeDirectory v=20100 size=276 flags=0x2000(library-validation) hashes=3+3 location=embedded Platform identifier=9 Signature size=4628 Authority=Software Signing Authority=Apple Code Signing Certification Authority Authority=Apple Root CA Info.plist entries=33 TeamIdentifier=not set Sealed Resources version=2 rules=13 files=234 Internal requirements count=1 size=84 Creating a bootable USB installer # Instead of booting from the network or using target disk mode, a bootable macOS installer can be made with the createinstallmedia utility included in Contents/Resources folder of the installer application bundle. See Create a bootable installer for macOS, or run the utility without arguments to see how it works.\nTo create a bootable USB installer, mount a USB drive, and erase and partition it, then use the createinstallmedia utility:\n$ diskutil list [Find disk matching correct size, usually the last disk, e.g. /dev/disk2] $ diskutil unmountDisk /dev/disk2 $ diskutil partitionDisk /dev/disk2 1 JHFS+ Installer 100% $ cd /Applications/Install\\ macOS\\ Catalina.app $ sudo ./Contents/Resources/createinstallmedia --volume /Volumes/Installer --nointeraction Erasing disk: 0%... 10%... 20%... 30%... 100% Copying to disk: 0%... 10%... 20%... 30%... 40%... 50%... 60%... 70%... 80%... 90%... 100% Making disk bootable... Copying boot files... Install media now available at \u0026#34;/Volumes/Install macOS Catalina\u0026#34; Creating an install image # Note Apple\u0026rsquo;s AutoDMG installer does not appear to work across OS versions. If you want to build a 10.14 image, for example, the following steps must be performed on macOS 10.14!\nTo create a custom install image which can be restored to a Mac (using a USB-C cable and target disk mode, for example), use MagerValp/AutoDMG.\nManual way # Note The following instructions appear to work only on macOS versions before 10.13.\nFind InstallESD.dmg which is inside the installation application. Locate it in Terminal or with Finder, right click on the application bundle, select Show Package Contents and navigate to Contents \u0026gt; SharedSupport to find the file InstallESD.dmg\nVerify file integrity by comparing its SHA-256 hash with others found in InstallESD_Hashes.csv or notpeter/apple-installer-checksums.\nTo determine which macOS versions and builds originally shipped with or are available for a Mac, see HT204319.\n$ shasum -a 256 InstallESD.dmg Mount and install the operating system to a temporary image:\n$ hdiutil attach -mountpoint /tmp/InstallESD ./InstallESD.dmg $ hdiutil create -size 32g -type SPARSE -fs HFS+J -volname \u0026#34;macOS\u0026#34; -uid 0 -gid 80 -mode 1775 /tmp/macos.sparseimage $ hdiutil attach -mountpoint /tmp/macos -owners on /tmp/macos.sparseimage $ sudo installer -pkg /tmp/InstallESD/Packages/OSInstall.mpkg -tgt /tmp/macos -verbose installer: OS Install started. ############# [...] The installation will take a while, so be patient. Use tail -F /var/log/install.log in another terminal to monitor progress and check for errors.\nOnce the installation is complete, detach, convert and verify the image:\n$ hdiutil detach /tmp/macos \u0026#34;disk4\u0026#34; unmounted. \u0026#34;disk4\u0026#34; ejected. $ hdiutil detach /tmp/InstallESD \u0026#34;disk3\u0026#34; unmounted. \u0026#34;disk3\u0026#34; ejected. $ hdiutil convert -format UDZO /tmp/macos.sparseimage -o ~/sierra.dmg Preparing imaging engine... [...] $ asr imagescan --source ~/sierra.dmg The file sierra.dmg is now ready to be applied over Target Disk Mode, from a bootable USB installer, booting from the network or recovery mode. The image could be further customized to include provisioned users, installed applications, preferences, for example.\nTarget disk mode # To use Target Disk Mode, boot up the Mac you wish to image while holding the T key and connect it to another Mac using a USB-C, Thunderbolt or Firewire cable.\nIf you don\u0026rsquo;t have another Mac, boot to a USB installer, with sierra.dmg and other required files copied to it, by holding the Option key at boot.\nUse the command diskutil list to identify the disk of the connected Mac, usually /dev/disk2\nOptionally, securely erase the disk with a single pass (if previously FileVault-encrypted, the disk must first be unlocked and mounted as /dev/disk3s2):\n$ sudo diskutil secureErase freespace 1 /dev/disk3s2 Partition the disk to Journaled HFS+:\n$ sudo diskutil unmountDisk /dev/disk2 $ sudo diskutil partitionDisk /dev/disk2 1 JHFS+ macOS 100% Restore the image to the new volume, making sure /dev/disk2 is the disk being erased:\n$ sudo asr restore --source ~/sierra.dmg --target /Volumes/macOS --erase --buffersize 4m [...] Erase contents of /dev/disk2s2 (/Volumes/macOS)? [ny]:y [...] The Disk Utility application may also be used to erase the connected disk and restore sierra.dmg to the newly created partition.\nTo transfer any files, copy them to a shared folder like /Users/Shared on the mounted disk image, e.g. cp Xcode_8.0.dmg /Volumes/macOS/Users/Shared\nFinished restore install from USB recovery boot\nCreating a recovery partition # Unless you have built the image with AutoDMG, or installed macOS to a second partition on the same Mac, you will need to create a recovery partition in order to use full disk encryption. You can do so using MagerValp/Create-Recovery-Partition-Installer or manually by following these steps:\nDownload RecoveryHDUpdate.dmg and verify its integrity:\n$ shasum -a 256 RecoveryHDUpdate.dmg f6a4f8ac25eaa6163aa33ac46d40f223f40e58ec0b6b9bf6ad96bdbfc771e12c RecoveryHDUpdate.dmg Attach and expand the installer, then run it - again ensuring /Volumes/macOS path is the newly created partition on the connected disk:\n$ hdiutil attach RecoveryHDUpdate.dmg $ pkgutil --expand /Volumes/Mac\\ OS\\ X\\ Lion\\ Recovery\\ HD\\ Update/RecoveryHDUpdate.pkg /tmp/recovery $ hdiutil attach /tmp/recovery/RecoveryHDUpdate.pkg/RecoveryHDMeta.dmg $ /tmp/recovery/RecoveryHDUpdate.pkg/Scripts/Tools/dmtest ensureRecoveryPartition /Volumes/macOS/ /Volumes/Recovery\\ HD\\ Update/BaseSystem.dmg 0 0 /Volumes/Recovery\\ HD\\ Update/BaseSystem.chunklist [...] Creating recovery partition: finished Run diskutil list again to make sure Recovery HD now exists on /dev/disk2. Eject the disk with hdiutil unmount /Volumes/macOS and power down the target disk mode-booted Mac.\nVirtualization # To install macOS as a virtual machine (VM) using VMware Fusion, follow the instructions above to create an image. You will not need to download and create a recovery partition manually.\nFor the Installation Method, select Install macOS from the recovery partition. Customize any memory or CPU requirements and complete setup. The guest VM should boot into Recovery Mode by default.\nNote If the virtual machine does not boot due to a kernel panic, adjust the memory and process resource settings.\nIn Recovery Mode, select a language, then select Utilities \u0026gt; Terminal from the menu bar.\nIn the guest VM, type ifconfig | grep inet - you should see a private address like 172.16.34.129\nOn the host Mac, type ifconfig | grep inet - you should see a private gateway address like 172.16.34.1. From the host Mac, you should be able to ping 172.16.34.129 or the equivalent guest VM address.\nFrom the host Mac, serve the installable image to the guest VM by editing /etc/apache2/httpd.conf and adding the following line to the top (using the gateway address assigned to the host Mac and port 80):\nListen 172.16.34.1:80 On the host Mac, link the image to the default Apache Web server directory:\n$ sudo ln ~/sierra.dmg /Library/WebServer/Documents From the host Mac, start Apache in the foreground:\n$ sudo httpd -X From the guest VM, install the disk image to the volume over the local network using asr:\n-bash-3.2# asr restore --source http://172.16.34.1/sierra.dmg --target /Volumes/Macintosh\\ HD/ --erase --buffersize 4m Validating target...done Validating source...done Erase contents of /dev/disk0s2 (/Volumes/Macintosh HD)? [ny]: y Retrieving scan information...done Validating sizes...done Restoring ....10....20....30....40....50....60....70....80....90....100 Verifying ....10....20....30....40....50....60....70....80....90....100 Remounting target volume...done When it\u0026rsquo;s finished, stop the Apache Web server on the host Mac by pressing Control C at the sudo httpd -X window and remove the image copy with sudo rm /Library/WebServer/Documents/sierra.dmg\nIn the guest VM, select Startup Disk from the menubar top-left, select the hard drive and restart. You may wish to disable the Network Adapter in VMware to configure the guest VM initially.\nTake and Restore from saved guest VM snapshots before and after attempting risky browsing, for example, or use a guest VM to install and operate questionable software.\nFirst boot # Note Before setting up macOS, consider disconnecting networking and configuring a firewall(s) first. However, late 2016 MacBooks with Touch Bar hardware require online OS activation (also see next section).\nOn first boot, hold Command Option P R keys to clear NVRAM.\nWhen macOS first starts, you\u0026rsquo;ll be greeted by Setup Assistant.\nWhen creating the first account, use a strong password without a hint.\nIf you enter your real name at the account setup process, be aware that your computer\u0026rsquo;s name and local hostname will comprise that name (e.g., John Appleseed\u0026rsquo;s MacBook) and thus will appear on local networks and in various preference files.\nBoth should be verified and updated as needed in System Preferences \u0026gt; Sharing or with the following commands after installation:\n$ sudo scutil --set ComputerName MacBook $ sudo scutil --set LocalHostName MacBook System activation # A few words on the privacy implications of activating \u0026ldquo;Touch Bar\u0026rdquo; MacBook devices from your friendly anonymous security researcher:\nApple increasingly seems (despite vague claims to the contrary) increasingly interested in merging or \u0026ldquo;unifying\u0026rdquo; the two OSes, and there are constantly rumors of fundamental changes to macOS that make it far more like iOS than the macOS of old. Apple\u0026rsquo;s introduction of ARM-based coprocessors running iOS/sepOS, first with the T1 processor on the TouchBar MacBook Pros (run the TouchBar, implement NFC/ApplePay, add biometric login using sep, and verify firmware integrity) and the iMac Pro\u0026rsquo;s T2 (implements/verifies embedded device firmware, implements secure boot, etc) seems to cement this concern and basically renders using macOS devices without sending metadata to Apple difficult to impossible.\niOS devices have always required \u0026ldquo;activation\u0026rdquo; on first boot and when the battery has gone dead which initializes sepOS to proceed with verified boot. First boot activation not only initializes sepOS as discussed below, but sends metadata to Apple (and carriers via Apple with cellular devices) to activate the baseband and SIM. In activation processes after first boot, just as with first boot, a long list of highly sensitive metadata are sent hashed (note hashing does not give you any privacy from Apple here since they link this exact metadata to payment information at purchase) to Apple so it can return the personalized response required for secure boot to complete. What is particularly worrying about this process is that it is a network-linked secure boot process where centralized external servers have the power to dictate what the device should boot. Equally there are significant privacy concerns with devices constantly sending metadata (both during activation and other Apple-linked/-hosted activities) and linking IP addresses very strongly with real identities based on purchase payment information and if a cellular device, metadata collected about SIM, etc unless such connections are blocked at the network level (which is only possible on self-managed infrastructure, i.e. not cellular) and doing this basically renders using the device impossible since simply installing an application requires sending device metadata to Apple.\nThat the activation verification mechanism is designed specifically to rely on unique device identifiers that are associated with payment information at purchase and actively associated on a continuing basis by Apple for every Apple-hosted service that the device interacts with (Apple ID-based services, softwareupdate, iMessage, FaceTime, etc.) the ability (and invitation) for Apple to silently send targeted malicious updates to devices matching specific unique ID criteria is a valid concern, and something that should not be dismissed as unlikely, especially given Apple\u0026rsquo;s full compliance with recently implemented Chinese (and other authoritarian and \u0026ldquo;non-authoritarian\u0026rdquo; countries\u0026rsquo;) national security laws.\niOS has from the start been designed with very little end-user control with no way for end-users to configure devices according to their wishes while maintaining security and relies heavily on new, closed source code. While macOS has for most of its history been designed on the surface in a similar fashion, power and enterprise users can (for the moment) still configure their devices relatively securely while maintaining basically zero network interaction with Apple and with the installation of third party software/kernel extensions, completely control the network stack and intercept filesystem events on a per-process basis. macOS, despite having a good deal of closed source code, was designed at a very different period in Apple\u0026rsquo;s history and was designed more in line with open source standards, and designed to be configurable and controllable by enterprise/power users.\nThe introduction of these coprocessors to Mac devices, while increasing security in many ways, brings with it all the issues with iOS discussed above, and means that running mac devices securely with complete user control, and without forced network interaction with the Apple mothership in highly sensitive corporate and other environments problematic and risky. Given this author is unaware of the exact hardware configuration of the coprocessors, the following may be inaccurate. However, given the low-level nature of these coprocessors, it would not surprise the author if these coprocessors, if not already, will eventually have separate network access of their own, independent of the Intel CPU (indications suggest not currently the case for T1; unclear on T2), which leads to concerns similar to those that many have raised around Intel ME/AMT (and of course mac devices also have ME in the Intel CPU\u0026hellip;). One could argue that these coprocessors increase security, and in many ways that is the case, but not the user\u0026rsquo;s security against a malicious Apple.\nThe lack of configurability is the key issue. Apple could have introduced secure boot and firmware protection without making it require network access, without making verification linked to device-unique IDs and without introducing an enormous amount of potentially exploitable code to protect against a much smaller, but highly exploitable codebase, while running on a coprocessor with a highly privileged position on the board which gives immense power to an adversary with manufacturer compliance for targeted attacks.\nThis is an ongoing concern and in the worst case scenario could potentially represent the end of macs as independent, end-user controllable and relatively secure systems appropriate for sensitive environments with strict network and security policies.\nFrom iOS, The Future Of macOS, Freedom, Security And Privacy In An Increasingly Hostile Global Environment.\nAdmin and standard user accounts # The first user account is always an admin account. Admin accounts are members of the admin group and have access to sudo, which allows them to usurp other accounts, in particular root, and gives them effective control over the system. Any program that the admin executes can potentially obtain the same access, making this a security risk.\nUtilities like sudo have weaknesses that can be exploited by concurrently running programs and many panes in System Preferences are unlocked by default (pdf) (p. 61–62) for admin accounts.\nIt is considered a best practice by Apple and others (pdf) (p. 41–42) to use a separate standard account for day-to-day work and use the admin account for installations and system configuration.\nIt is not strictly required to ever log into the admin account via the macOS login screen. The system will prompt for authentication when required and Terminal can do the rest. To that end, Apple provides some recommendations for hiding the admin account and its home directory. This can be an elegant solution to avoid having a visible \u0026lsquo;ghost\u0026rsquo; account. The admin account can also be removed from FileVault for additional hardening.\nCaveats # Only administrators can install applications in /Applications (local directory). Finder and Installer will prompt a standard user with an authentication dialog. Many applications can be installed in ~/Applications instead (the directory can be created manually). As a rule of thumb: applications that do not require admin access – or do not complain about not being installed in /Applications – should be installed in the user directory, the rest in the local directory. Mac App Store applications are still installed in /Applications and require no additional authentication. sudo is not available in shells of the standard user, which requires using su or login to enter a shell of the admin account. This can make some maneuvers trickier and requires some basic experience with command-line interfaces. System Preferences and several system utilities (e.g. Wi-Fi Diagnostics) will require root privileges for full functionality. Many panels in System Preferences are locked and need to be unlocked separately by clicking on the lock icon. Some applications will simply prompt for authentication upon opening, others must be opened by an admin account directly to get access to all functions (e.g. Console). There are third-party applications that will not work correctly because they assume that the user account is an admin. These programs may have to be executed by logging into the admin account, or by using the open utility. See additional discussion in issue #167. Setup # Accounts can be created and managed in System Preferences. On settled systems, it is generally easier to create a second admin account and then demote the first account. This avoids data migration. Newly installed systems can also just add a standard account.\nDemoting an account can be done either from the the new admin account in System Preferences – the other account must be logged out – or by executing these commands (it may not be necessary to execute both, see issue #179):\n$ sudo dscl . -delete /Groups/admin GroupMembership \u0026lt;username\u0026gt; $ sudo dscl . -delete /Groups/admin GroupMembers \u0026lt;GeneratedUID\u0026gt; To find the “GeneratedUID” of an account:\n$ dscl . -read /Users/\u0026lt;username\u0026gt; GeneratedUID See also this post for more information about how macOS determines group membership.\nFull disk encryption # FileVault provides full disk (technically, full volume) encryption on macOS.\nFileVault encryption protects data at rest and hardens (but not always prevents) someone with physical access from stealing data or tampering with your Mac.\nWith much of the cryptographic operations happening efficiently in hardware, the performance penalty for FileVault is not noticeable.\nLike all cryptosystems, the security of FileVault greatly depends on the quality of the pseudo random number generator (PRNG).\nThe random device implements the Yarrow pseudo random number generator algorithm and maintains its entropy pool. Additional entropy is fed to the generator regularly by the SecurityServer daemon from random jitter measurements of the kernel.\nSee man 4 random for more information.\nTurning on FileVault in System Preferences after installing macOS, rather than creating an encrypted partition for the installation first, is more secure, because more PRNG entropy is available then.\nAdditionally, the PRNG can be manually seeded with entropy by writing to /dev/random before enabling FileVault. This can be done by simply using the Mac for a little while before activating FileVault.\nIt may also be possible to increase entropy with an external source, like OneRNG. See Entropy and Random Number Generators and Fun with encryption and randomness for more information.\nEnable FileVault with sudo fdesetup enable or through System Preferences \u0026gt; Security \u0026amp; Privacy and reboot.\nIf you can remember the password, there\u0026rsquo;s no reason to save the recovery key. However, all encrypted data will be lost forever if without either the password or recovery key.\nTo learn about how FileVault works, see the paper Infiltrate the Vault: Security Analysis and Decryption of Lion Full Disk Encryption (pdf) and related presentation (pdf). Also see IEEE Std 1619-2007: The XTS-AES Tweakable Block Cipher (pdf).\nOptional Enforce system hibernation and evict FileVault keys from memory instead of traditional sleep to memory:\n$ sudo pmset -a destroyfvkeyonstandby 1 $ sudo pmset -a hibernatemode 25 All computers have firmware of some type - EFI, BIOS - to help in the discovery of hardware components and ultimately to properly bootstrap the computer using the desired OS instance. In the case of Apple hardware and the use of EFI, Apple stores relevant information within EFI to aid in the functionality of macOS. For example, the FileVault key is stored in EFI to transparently come out of standby mode.\nOrganizations especially sensitive to a high-attack environment, or potentially exposed to full device access when the device is in standby mode, should mitigate this risk by destroying the FileVault key in firmware. Doing so doesn\u0026rsquo;t destroy the use of FileVault, but simply requires the user to enter the password in order for the system to come out of standby mode.\nIf you choose to evict FileVault keys in standby mode, you should also modify your standby and power nap settings. Otherwise, your machine may wake while in standby mode and then power off due to the absence of the FileVault key. See issue #124 for more information. These settings can be changed with:\n$ sudo pmset -a powernap 0 $ sudo pmset -a standby 0 $ sudo pmset -a standbydelay 0 $ sudo pmset -a autopoweroff 0 For more information, see Best Practices for Deploying FileVault 2 (pdf) and paper Lest We Remember: Cold Boot Attacks on Encryption Keys (pdf)\nNote APFS may make evicting FileVault keys redundant - see discussion and links in issue #283.\nFirmware # Setting a firmware password prevents a Mac from starting up from any device other than the startup disk. It may also be set to be required on each boot. This may be useful for mitigating some attacks which require physical access to hardware. See How to set a firmware password on your Mac for official documentation.\nThis feature can be helpful if your laptop is lost or stolen, protects against Direct Memory Access (DMA) attacks which can read your FileVault passwords and inject kernel modules such as pcileech, as the only way to reset the firmware password is through an Apple Store, or by using an SPI programmer, such as Bus Pirate or other flash IC programmer.\nStart up pressing Command and R keys to boot to Recovery Mode mode. When the Recovery window appears, choose Firmware Password Utility from the Utilities menu. In the Firmware Utility window that appears, select Turn On Firmware Password. Enter a new password, then enter the same password in the Verify field. Select Set Password. Select Quit Firmware Utility to close the Firmware Password Utility. Select Restart or Shutdown from the Apple menu in the top-left corner. The firmware password will activate at next boot. To validate the password, hold Alt during boot - you should be prompted to enter the password.\nThe firmware password can also be managed with the firmwarepasswd utility while booted into the OS. For example, to prompt for the firmware password when attempting to boot from a different volume:\n$ sudo firmwarepasswd -setpasswd -setmode command To verify the firmware password:\n$ sudo firmwarepasswd -verify Verifying Firmware Password Enter password: Correct A firmware password may be bypassed by a determined attacker or Apple, with physical access to the computer.\nUsing a Dediprog SF600 to dump and flash a 2013 MacBook SPI Flash chip to remove a firmware password, sans Apple\nAs of macOS 10.15 Catalina, the firmwarepasswd program has a new option -disable-reset-capability. According to Apple\u0026rsquo;s new Platform Security page, this effectively prevents any firmware password resets, even by Apple themselves:\nFor users who want no one but themselves to remove their Firmware Password by software means, the -disable-reset-capability option has been added to the firmwarepasswd command-line tool in macOS 10.15. Before setting this option, users must to acknowledge that if the password is forgotten and needs removal, the user must bear the cost of the motherboard replacement necessary to achieve this.\nNewer Mac models (Mac Pro, iMac Pro, Macbook with TouchBar) with Apple T2 chips, which provide a secure enclave for encrypted keys, lessen the risk of EFI firmware attacks. See this blog post for more information.\nSee LongSoft/UEFITool, chipsec/chipsec and discussion in issue #213 for more information.\nFirewall # There are several types of firewalls available for macOS.\nApplication layer firewall # Built-in, basic firewall which blocks incoming connections only. This firewall does not have the ability to monitor, nor block outgoing connections.\nIt can be controlled by the Firewall tab of Security \u0026amp; Privacy in System Preferences, or with the following commands.\nEnable the firewall with logging and stealth mode:\n$ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on Firewall is enabled. (State = 1) $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode on Turning on log mode $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on Stealth mode enabled Computer hackers scan networks so they can attempt to identify computers to attack. You can prevent your computer from responding to some of these scans by using stealth mode. When stealth mode is enabled, your computer does not respond to ICMP ping requests, and does not answer to connection attempts from a closed TCP or UDP port. This makes it more difficult for attackers to find your computer.\nTo prevent built-in software as well as code-signed, downloaded software from being whitelisted automatically:\n$ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned off Disabled allow signed built-in applications automatically $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsignedapp off Disabled allow signed downloaded applications automatically Applications that are signed by a valid certificate authority are automatically added to the list of allowed apps, rather than prompting the user to authorize them. Apps included in macOS are signed by Apple and are allowed to receive incoming connections when this setting is enabled. For example, since iTunes is already signed by Apple, it is automatically allowed to receive incoming connections through the firewall.\nIf you run an unsigned app that is not listed in the firewall list, a dialog appears with options to Allow or Deny connections for the app. If you choose \u0026ldquo;Allow\u0026rdquo;, macOS signs the application and automatically adds it to the firewall list. If you choose \u0026ldquo;Deny\u0026rdquo;, macOS adds it to the list but denies incoming connections intended for this app.\nAfter interacting with socketfilterfw, restart the process by sending a line hangup signal:\n$ sudo pkill -HUP socketfilterfw Third party firewalls # Programs such as Little Snitch, Hands Off, Radio Silence, LuLu and Security Growler provide a good balance of usability and security.\nThese programs are capable of monitoring and blocking incoming and outgoing network connections. However, they may require the use of a closed source kernel extension.\nIf the number of choices of allowing/blocking network connections is overwhelming, use Silent Mode with connections allowed, then periodically check the configuration to gain understanding of applications and what they are doing.\nIt is worth noting that these firewalls can be bypassed by programs running as root or through OS vulnerabilities (pdf), but they are still worth having - just don\u0026rsquo;t expect absolute protection. However, some malware actually deletes itself and doesn\u0026rsquo;t execute if Little Snitch, or other security software, is installed.\nFor more on how Little Snitch works, see the Network Kernel Extensions Programming Guide and Shut up snitch! – reverse engineering and exploiting a critical Little Snitch vulnerability.\nKernel level packet filtering # A highly customizable, powerful, but also most complicated firewall exists in the kernel. It can be controlled with pfctl and various configuration files.\npf can also be controlled with a GUI application such as IceFloor or Murus.\nThere are many books and articles on the subject of pf firewall. Here\u0026rsquo;s is just one example of blocking traffic by IP address.\nAdd the following into a file called pf.rules:\nwifi = \u0026#34;en0\u0026#34; ether = \u0026#34;en7\u0026#34; set block-policy drop set fingerprints \u0026#34;/etc/pf.os\u0026#34; set ruleset-optimization basic set skip on lo0 scrub in all no-df table \u0026lt;blocklist\u0026gt; persist block in log block in log quick from no-route to any block log on $wifi from { \u0026lt;blocklist\u0026gt; } to any block log on $wifi from any to { \u0026lt;blocklist\u0026gt; } antispoof quick for { $wifi $ether } pass out proto tcp from { $wifi $ether } to any keep state pass out proto udp from { $wifi $ether } to any keep state pass out proto icmp from $wifi to any keep state Then use the following commands to manipulate the firewall:\nsudo pfctl -e -f pf.rules to enable the firewall and load the configuration sudo pfctl -d to disable the firewall sudo pfctl -t blocklist -T add 1.2.3.4 to add an IP address to the blocklist sudo pfctl -t blocklist -T show to view the blocklist sudo ifconfig pflog0 create to create an interface for logging sudo tcpdump -ni pflog0 to view filtered packets Unless you\u0026rsquo;re already familiar with packet filtering, spending too much time configuring pf is not recommended. It is also probably unnecessary if your Mac is behind a NAT on a secure home network.\nIt is possible to use the pf firewall to block network access to entire ranges of network addresses, for example to a whole organization:\nQuery Merit RADb for the list of networks in use by an autonomous system, like Facebook:\n$ whois -h whois.radb.net \u0026#39;!gAS32934\u0026#39; Copy and paste the list of networks returned into the blocklist command:\n$ sudo pfctl -t blocklist -T add 31.13.24.0/21 31.13.64.0/24 157.240.0.0/16 Confirm the addresses were added:\n$ sudo pfctl -t blocklist -T show No ALTQ support in kernel ALTQ related functions disabled 31.13.24.0/21 31.13.64.0/24 157.240.0.0/16 Confirm network traffic is blocked to those addresses (note that DNS requests will still work):\n$ dig a +short facebook.com 157.240.2.35 $ curl --connect-timeout 5 -I http://facebook.com/ * Trying 157.240.2.35... * TCP_NODELAY set * Connection timed out after 5002 milliseconds * Closing connection 0 curl: (28) Connection timed out after 5002 milliseconds $ sudo tcpdump -tqni pflog0 \u0026#39;host 157.240.2.35\u0026#39; IP 192.168.1.1.62771 \u0026gt; 157.240.2.35.80: tcp 0 IP 192.168.1.1.62771 \u0026gt; 157.240.2.35.80: tcp 0 IP 192.168.1.1.62771 \u0026gt; 157.240.2.35.80: tcp 0 IP 192.168.1.1.62771 \u0026gt; 157.240.2.35.80: tcp 0 IP 192.168.1.1.162771 \u0026gt; 157.240.2.35.80: tcp 0 Outgoing TCP SYN packets are blocked, so a TCP connection is not established and thus a Web site is effectively blocked at the IP layer.\nTo use pf to audit \u0026ldquo;phone home\u0026rdquo; behavior of user and system-level processes, see fix-macosx/net-monitor. See drduh/config/scripts/pf-blocklist.sh for more inspiration.\nServices # Note System Integrity Protection does not allow disabling system services on recent macOS versions. Either temporarily disable SIP or disable services from Recovery Mode. See Issue 334 for more information.\nSee fix-macosx/yosemite-phone-home, l1k/osxparanoia and karek314/macOS-home-call-drop for further recommendations.\nServices on macOS are managed by launchd. See launchd.info, as well as Apple\u0026rsquo;s Daemons and Services Programming Guide and Technical Note TN2083\nYou can also run KnockKnock that shows more information about startup items.\nUse launchctl list to view running user agents Use sudo launchctl list to view running system daemons Specify the service name to examine it, e.g. launchctl list com.apple.Maps.mapspushd Use defaults read to examine job plists in /System/Library/LaunchDaemons and /System/Library/LaunchAgents Use man and strings to find out more about what an agent/daemon does For example, to learn what a system launch daemon or agent does, start with:\n$ defaults read /System/Library/LaunchDaemons/com.apple.apsd.plist Look at the Program or ProgramArguments section to see which binary is run, in this case apsd. To find more information about that, look at the man page with man apsd\nFor example, if you\u0026rsquo;re not interested in Apple Push Notifications, disable the service:\n$ sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.apsd.plist Note Unloading services may break usability of some applications. Read the manual pages and use Google to make sure you understand what you\u0026rsquo;re doing first.\nBe careful about disabling any system daemons you don\u0026rsquo;t understand, as it may render your system unbootable. If you break your Mac, use single user mode to fix it.\nUse Console and Activity Monitor applications if you notice your Mac heating up, feeling sluggish, or generally misbehaving, as it may have resulted from your tinkering.\nTo view the status of services:\n$ find /var/db/com.apple.xpc.launchd/ -type f -print -exec defaults read {} \\; 2\u0026gt;/dev/null Annotated lists of launch daemons and agents, the respective program executed, and the programs\u0026rsquo; hash sums are included in this repository.\n(Optional) Run the read_launch_plists.py script and diff output to check for any discrepancies on your system, e.g.:\n$ diff \u0026lt;(python read_launch_plists.py | sort ) \u0026lt;(cat 16A323_launchd.csv | sort ) See also cirrusj.github.io/Yosemite-Stop-Launch for descriptions of services and Provisioning OS X and Disabling Unnecessary Services for another explanation.\nPersistent login items may also exist in these directories:\n/Library/LaunchAgents /Library/LaunchDaemons /Library/ScriptingAdditions /Library/StartupItems /System/Library/LaunchAgents /System/Library/LaunchDaemons /System/Library/ScriptingAdditions /System/Library/StartupItems ~/Library/LaunchAgents ~/Library/Preferences/com.apple.loginitems.plist See Mac OSX Startup (pdf) for more information.\nSpotlight Suggestions # Disable Spotlight Suggestions in both the Spotlight preferences and Safari\u0026rsquo;s Search preferences to avoid your search queries being sent to Apple.\nAlso disable Bing Web Searches in the Spotlight preferences to avoid your search queries being sent to Microsoft.\nSee fix-macosx.com for detailed instructions.\nIf you\u0026rsquo;ve upgraded to OS X 10.10 \u0026ldquo;Yosemite\u0026rdquo; and you\u0026rsquo;re using the default settings, each time you start typing in Spotlight (to open an application or search for a file on your computer), your local search terms and location are sent to Apple and third parties (including Microsoft).\nNote This Web site and instructions may no longer work on macOS Sierra - see issue 164.\nFor comparison to Windows 10, see https://fix10.isleaked.com/\nHomebrew # Consider using Homebrew to make software installations easier and to update userland tools (see Apple\u0026rsquo;s great GPL purge).\nNote If you have not already installed Xcode or Command Line Tools, use xcode-select --install to download and install them, or check Apple\u0026rsquo;s developer site.\nInstall Homebrew:\n$ mkdir homebrew \u0026amp;\u0026amp; curl -L https://github.com/Homebrew/brew/tarball/master | tar xz --strip 1 -C homebrew Edit PATH in your shell or shell rc file to use ~/homebrew/bin and ~/homebrew/sbin. For example, echo 'PATH=$PATH:~/homebrew/sbin:~/homebrew/bin' \u0026gt;\u0026gt; .zshrc, then change your login shell to Z shell with chsh -s /bin/zsh, open a new Terminal window and run brew update.\nHomebrew uses SSL/TLS to talk with GitHub and verifies integrity of downloaded packages, so it\u0026rsquo;s fairly secure.\nRemember to periodically run brew update and brew upgrade on trusted and secure networks to download and install software updates. To get information on a package before installation, run brew info \u0026lt;package\u0026gt; and check its recipe online.\nAccording to Homebrew\u0026rsquo;s Anonymous Aggregate User Behaviour Analytics, Homebrew gathers anonymous aggregate user behaviour analytics and reporting these to Google Analytics.\nTo opt out of Homebrew\u0026rsquo;s analytics, you can set export HOMEBREW_NO_ANALYTICS=1 in your environment or shell rc file, or use brew analytics off.\nYou may also wish to enable additional security options, such as HOMEBREW_NO_INSECURE_REDIRECT=1 and HOMEBREW_CASK_OPTS=--require-sha.\nDNS # Hosts file # Use the hosts file to block known malware, advertising or otherwise unwanted domains.\nEdit the hosts file as root, for example with sudo vi /etc/hosts. The hosts file can also be managed with the GUI app 2ndalpha/gasmask.\nTo block a domain by A record, append any one of the following lines to /etc/hosts:\n0 example.com 0.0.0.0 example.com 127.0.0.1 example.com Note IPv6 uses the AAAA DNS record type, rather than A record type, so you may also want to block those connections by also including ::1 example.com entries, like shown here.\nThere are many lists of domains available online which you can paste in, just make sure each line starts with 0, 0.0.0.0, 127.0.0.1, and the line 127.0.0.1 localhost is included.\nHere are some popular and useful hosts lists:\njmdugan/blocklists l1k/osxparanoia Sinfonietta/hostfiles StevenBlack/hosts someonewhocares.org Append a list of hosts with the tee command and confirm only non-routable addresses or comments were added:\n$ curl https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts | sudo tee -a /etc/hosts $ wc -l /etc/hosts 65580 $ egrep -ve \u0026#34;^#|^255.255.255.255|^127.|^0.|^::1|^ff..::|^fe80::\u0026#34; /etc/hosts | sort | uniq | egrep -e \u0026#34;[1,2]|::\u0026#34; [No output] See man hosts and FreeBSD Configuration Files for more information.\nSee the dnsmasq section of this guide for more hosts blocking options.\ndnscrypt # To encrypt outgoing DNS traffic, consider using jedisct1/dnscrypt-proxy. In combination with dnsmasq and DNSSEC, the integrity and authenticity of DNS traffic is greatly improved.\nJayBrown/DNSCrypt-Menu and jedisct1/bitbar-dnscrypt-proxy-switcher provide a graphical user interface to dnscrypt.\nInstall dnscrypt from Homebrew and follow the instructions to configure and start dnscrypt-proxy:\n$ brew install dnscrypt-proxy If using in combination with Dnsmasq, find the file homebrew.mxcl.dnscrypt-proxy.plist by running\n$ brew info dnscrypt-proxy which will show a location like /usr/local/etc/dnscrypt-proxy.toml\nOpen it in a text editor, find the line starting with listen_addresses = and edit that line to use DNScrypt on a port other than 53, like 5355:\nlisten_addresses = [\u0026#39;127.0.0.1:5355\u0026#39;, \u0026#39;[::1]:5355\u0026#39;] Start DNSCrypt:\n$ sudo brew services restart dnscrypt-proxy Make sure DNSCrypt is running:\n$ sudo lsof +c 15 -Pni UDP:5355 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME dnscrypt-proxy 15244 nobody 7u IPv4 0x1337f85ff9f8beef 0t0 UDP 127.0.0.1:5355 dnscrypt-proxy 15244 nobody 10u IPv6 0x1337f85ff9f8beef 0t0 UDP [::1]:5355 dnscrypt-proxy 15244 nobody 12u IPv4 0x1337f85ff9f8beef 0t0 UDP 127.0.0.1:5355 dnscrypt-proxy 15244 nobody 14u IPv6 0x1337f85ff9f8beef 0t0 UDP [::1]:5355 By default, dnscrypt-proxy runs on localhost (127.0.0.1), port 53, and under the \u0026ldquo;nobody\u0026rdquo; user using the resolvers specified in https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v2/public-resolvers.md. If you would like to change these settings, you will have to edit the configuration file (e.g. listen_addresses, user_name, urls, etc.)\nThis can be accomplished by editing /usr/local/etc/dnscrypt-proxy.toml as described above.\nYou can run your own dnscrypt server (see also drduh/Debian-Privacy-Server-Guide#dnscrypt) from a trusted location or use one of many public servers instead.\nConfirm outgoing DNS traffic is encrypted:\n$ sudo tcpdump -qtni en0 IP 10.8.8.8.59636 \u0026gt; 107.181.168.52: UDP, length 512 IP 107.181.168.52 \u0026gt; 10.8.8.8.59636: UDP, length 368 $ dig +short -x 128.180.155.106.49321 d0wn-us-ns4 dnscrypt-proxy also has the capability to blacklist domains, including the use of wild-cards. See the Sample configuration file for dnscrypt-proxy for the options.\nNote Applications and programs may resolve DNS using their own provided servers. If dnscrypt-proxy is used, it is possible to disable all other, non-dnscrypt DNS traffic with the following pf rules:\nblock drop quick on !lo0 proto udp from any to any port = 53 block drop quick on !lo0 proto tcp from any to any port = 53 See also What is a DNS leak, the mDNSResponder manual page and ipv6-test.com.\nDnsmasq # Among other features, dnsmasq is able to cache replies, prevent upstream queries for unqualified names, and block entire top-level domain names.\nUse in combination with DNSCrypt to additionally encrypt outgoing DNS traffic.\nIf you don\u0026rsquo;t wish to use DNSCrypt, you should at least use DNS not provided by your ISP. Two popular alternatives are Google DNS and OpenDNS.\n(Optional) DNSSEC is a set of extensions to DNS which provide to DNS clients (resolvers) origin authentication of DNS data, authenticated denial of existence, and data integrity. All answers from DNSSEC protected zones are digitally signed. The signed records are authenticated via a chain of trust, starting with a set of verified public keys for the DNS root-zone. The current root-zone trust anchors may be downloaded from IANA website. There are a number of resources on DNSSEC, but probably the best one is dnssec.net website.\nInstall Dnsmasq (DNSSEC is optional):\n$ brew install dnsmasq --with-dnssec Download drduh/config/dnsmasq.conf:\n$ curl -o homebrew/etc/dnsmasq.conf https://raw.githubusercontent.com/drduh/config/master/dnsmasq.conf Edit the file and examine all the options. To block entire levels of domains, append drduh/config/domains or your own rules.\nInstall and start the program (sudo is required to bind to privileged port 53):\n$ sudo brew services start dnsmasq To set Dnsmasq as your local DNS server, open System Preferences \u0026gt; Network and select the active interface, then the DNS tab, select + and add 127.0.0.1, or use:\n$ sudo networksetup -setdnsservers \u0026#34;Wi-Fi\u0026#34; 127.0.0.1 Make sure Dnsmasq is correctly configured:\n$ scutil --dns | head DNS configuration resolver #1 search domain[0] : whatever nameserver[0] : 127.0.0.1 flags : Request A records, Request AAAA records reach : 0x00030002 (Reachable,Local Address,Directly Reachable Address) $ networksetup -getdnsservers \u0026#34;Wi-Fi\u0026#34; 127.0.0.1 Note Some VPN software overrides DNS settings on connect. See issue #24 and drduh/config/scripts/macos-dns.sh.\nTest DNSSEC validation # Test DNSSEC validation succeeds for signed zones - the reply should have NOERROR status and contain ad flag:\n$ dig +dnssec icann.org ;; -\u0026gt;\u0026gt;HEADER\u0026lt;\u0026lt;- opcode: QUERY, status: NOERROR, id: 47039 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 Test DNSSEC validation fails for zones that are signed improperly - the reply should have SERVFAIL status:\n$ dig www.dnssec-failed.org ;; -\u0026gt;\u0026gt;HEADER\u0026lt;\u0026lt;- opcode: QUERY, status: SERVFAIL, id: 15190 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 Captive portal # When macOS connects to new networks, it checks for Internet connectivity and may launch a Captive Portal assistant utility application.\nAn attacker could trigger the utility and direct a Mac to a site with malware without user interaction, so it\u0026rsquo;s best to disable this feature and log in to captive portals using your regular Web browser by navigating to a non-secure HTTP page and accepting a redirect to the captive portal login interface (after disabling any custom proxy or DNS settings).\n$ sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.captive.control.plist Active -bool false Also see Apple\u0026rsquo;s secret \u0026ldquo;wispr\u0026rdquo; request, How to disable the captive portal window in Mac OS Lion and An undocumented change to Captive Network Assistant settings in OS X 10.10 Yosemite.\nCertificate authorities # macOS comes with over 200 root authority certificates installed from for-profit corporations like Apple, Verisign, Thawte, Digicert and government agencies from China, Japan, Netherlands, U.S., and more! These Certificate Authorities (CAs) are capable of issuing SSL/TLS certificates for any domain, code signing certificates, etc.\nFor more information, see Certification Authority Trust Tracker, Analysis of the HTTPS certificate ecosystem (pdf), and You Won’t Be Needing These Any More: On Removing Unused Certificates From Trust Stores (pdf).\nInspect system root certificates in Keychain Access, under the System Roots tab or by using the security command line tool and /System/Library/Keychains/SystemRootCertificates.keychain file.\nDisable certificate authorities through Keychain Access by marking them as Never Trust and closing the window:\nThe risk of a man in the middle attack in which a coerced or compromised certificate authority trusted by your system issues a fake/rogue SSL certificate is quite low, but still possible.\nOpenSSL # Note This section may be out of date.\nThe version of OpenSSL in Sierra is 0.9.8zh which is not current. It doesn\u0026rsquo;t support TLS 1.1 or newer, elliptic curve ciphers, and more.\nSince Apple\u0026rsquo;s official supported TLS library on macOS is Secure Transport, OpenSSL deprecated is considered deprecated (according to the Cryptographic Services Guide. Apple\u0026rsquo;s version of OpenSSL may also have patches which may surprise you.\nIf you\u0026rsquo;re going to use OpenSSL on your Mac, download and install a recent version of OpenSSL with brew install openssl. Note, linking brew to be used in favor of /usr/bin/openssl may interfere with built-in software. See issue #39.\nCompare the TLS protocol and cipher between the homebrew version and the system version of OpenSSL:\n$ ~/homebrew/bin/openssl version; echo | ~/homebrew/bin/openssl s_client -connect github.com:443 2\u0026gt;\u0026amp;1 | grep -A2 SSL-Session OpenSSL 1.0.2j 26 Sep 2016 SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 $ /usr/bin/openssl version; echo | /usr/bin/openssl s_client -connect github.com:443 2\u0026gt;\u0026amp;1 | grep -A2 SSL-Session OpenSSL 0.9.8zh 14 Jan 2016 SSL-Session: Protocol : TLSv1 Cipher : AES128-SHA See also Comparison of TLS implementations, How\u0026rsquo;s My SSL and Qualys SSL Labs Tools.\nCurl # The version of Curl which comes with macOS uses Secure Transport for SSL/TLS validation.\nIf you prefer to use OpenSSL, install with brew install curl --with-openssl and ensure it\u0026rsquo;s the default with brew link --force curl\nDownload drduh/config/curlrc or see the man page:\n$ curl -o ~/.curlrc https://raw.githubusercontent.com/drduh/config/master/curlrc Web # Privoxy # Consider using Privoxy as a local proxy to filter Web browsing traffic.\nNote macOS proxy settings are not universal; apps and services may not honor system proxy settings. Ensure the application you wish to proxy is correctly configured and manually verify connections don\u0026rsquo;t leak. Additionally, it may be possible to configure the pf firewall to transparently proxy all traffic.\nA signed installation package for privoxy can be downloaded from silvester.org.uk or Sourceforge. The signed package is more secure than the Homebrew version, and attracts full support from the Privoxy project.\nAlternatively, install and start privoxy using Homebrew:\n$ brew install privoxy $ brew services start privoxy By default, privoxy listens on localhost, TCP port 8118.\nSet the system HTTP proxy for your active network interface 127.0.0.1 and 8118 (This can be done through System Preferences \u0026gt; Network \u0026gt; Advanced \u0026gt; Proxies):\n$ sudo networksetup -setwebproxy \u0026#34;Wi-Fi\u0026#34; 127.0.0.1 8118 (Optional) Set the system HTTPS proxy, which still allows for domain name filtering, with:\n$ sudo networksetup -setsecurewebproxy \u0026#34;Wi-Fi\u0026#34; 127.0.0.1 8118 Confirm the proxy is set:\n$ scutil --proxy \u0026lt;dictionary\u0026gt; { ExceptionsList : \u0026lt;array\u0026gt; { 0 : *.local 1 : 169.254/16 } FTPPassive : 1 HTTPEnable : 1 HTTPPort : 8118 HTTPProxy : 127.0.0.1 } Visit http://p.p/ in a browser, or with Curl:\n$ ALL_PROXY=127.0.0.1:8118 curl -I http://p.p/ HTTP/1.1 200 OK Content-Length: 2401 Content-Type: text/html Cache-Control: no-cache Privoxy already comes with many good rules, however you can also write your own.\nDownload drduh/config/privoxy/config and drduh/config/privoxy/user.action to get started:\n$ curl -o homebrew/etc/privoxy/config https://raw.githubusercontent.com/drduh/config/master/privoxy/config $ curl -o homebrew/etc/privoxy/user.action https://raw.githubusercontent.com/drduh/config/master/privoxy/user.action Restart Privoxy and verify traffic is blocked or redirected:\n$ sudo brew services restart privoxy $ ALL_PROXY=127.0.0.1:8118 curl ads.foo.com/ -IL HTTP/1.1 403 Request blocked by Privoxy Content-Type: image/gif Content-Length: 64 Cache-Control: no-cache $ ALL_PROXY=127.0.0.1:8118 curl imgur.com/ -IL HTTP/1.1 302 Local Redirect from Privoxy Location: https://imgur.com/ Content-Length: 0 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 You can replace ad images with pictures of kittens, for example, by starting a local Web server and redirecting blocked requests to localhost.\nBrowser # The Web browser poses the largest security and privacy risk, as its fundamental job is to download and execute untrusted code from the Internet. This is an important statement. The unique use case of Web Browsers of operation in hostile environments, has forced them to adopt certain impressive security features. The cornerstone of Web Browser security is the Same Origin Policy (SOP). In a few words, SOP prevents a malicious script on one page from obtaining access to sensitive data on another web page through that page\u0026rsquo;s Document Object Model (DOM). If SOP is compromised, the security of the whole Web Browser is compromised.\nThe best tip to ensure secure browsing regardless your choice of Web Browser is proper security hygiene. The majority of Web Browser exploits require social engineering attacks to achieve native code execution. Always be mindful of the links you click and be extra careful when websites ask you to download and install software. 99% percent of the time that software is malware.\nAnother important consideration about Web Browser security is Web Extensions. Web Extensions greatly increase the attack surface of the Web Browser. This is an issue that plagues Firefox and Chrome alike. Luckily, Web Extensions can only access specific browser APIs that are being governed by their manifest. That means we can quickly audit their behavior and remove them if they request access to information they shouldn\u0026rsquo;t (why would an Ad blocker require camera access?). In the interest of security, it is best to limit your use of Web Extensions.\nMozilla Firefox, Google Chrome, Safari, and Tor Browser are covered in this guide. Each Web Browser offers certain benefits and drawbacks regarding their security and privacy. It is best to make an informed choice and not necessarily commit to only one.\nFirefox # Mozilla Firefox is an excellent browser as well as being completely open source. Currently, Firefox is in a renaissance period. It replaces major parts of its infrastructure and code base under projects Quantum and Photon. Part of the Quantum project is to replace C++ code with Rust. Rust is a systems programming language with a focus on security and thread safety. It is expected that Rust adoption will greatly improve the overall security posture of Firefox.\nFirefox offers a similar security model to Chrome: it has a bug bounty program, although it is not a lucrative as Chrome\u0026rsquo;s. Firefox follows a six-week release cycle similar to Chrome. See discussion in issues #2 and #90 for more information about certain differences in Firefox and Chrome.\nFirefox supports user-supplied configuration files. See drduh/config/user.js, pyllyukko/user.js and ghacksuserjs/ghacks-user.js for recommended preferences and hardening measures. Also see NoScript, an extension which allows whitelist-based, pre-emptive script blocking.\nFirefox is focused on user privacy. It supports tracking protection in Private Browsing mode. The tracking protection can be enabled for the default account, although it may break the browsing experience on some websites. Another feature for added privacy unique to Firefox is Containers, similar to Chrome profiles.\nPrevious versions of Firefox used a Web Extension SDK that was quite invasive and offered immense freedom to developers. Sadly, that freedom also introduced a number of vulnerabilities in Firefox that greatly affected its users. You can find more information about vulnerabilities introduced by Firefox\u0026rsquo;s legacy extensions in this paper (pdf). Currently, Firefox only supports Web Extensions through the Web Extension Api, which is very similar to Chrome\u0026rsquo;s.\nSubmission of Web Extensions in Firefox is free. Web Extensions in Firefox most of the time are open source, although certain Web Extensions are proprietary.\nNote Similar to Chrome and Safari, Firefox allows account sync across multiple devices. While stored login passwords are encrypted, Firefox does not require a password to reveal their plain text format. Firefox only displays as yes/no prompt. This is an important security issue. Keep that in mind if you sign in to your Firefox account from devices that do not belong to you and leave them unattended. The issue has been raised among the Firefox community and hopefully will be resolved in the coming versions.\nSee drduh/config/firefox.user.js for additional Firefox configuration options to improve security and privacy.\nChrome # Google Chrome is based on the open source Chromium project with certain proprietary components:\nAutomatic updates with GoogleSoftwareUpdateDaemon. Usage tracking and crash reporting, which can be disabled through Chrome\u0026rsquo;s settings. Chrome Web Store. Adobe Flash Plugin - supports a Pepper API version of Adobe Flash which gets updated automatically with Chrome. Media Codec support - adds support for proprietary codecs. Chrome PDF viewer. Non-optional tracking. Google Chrome installer includes a randomly generated token. The token is sent to Google after the installation completes in order to measure the success rate. The RLZ identifier stores information – in the form of encoded strings – like the source of chrome download and installation week. It doesn’t include any personal information and it’s used to measure the effectiveness of a promotional campaign. Chrome downloaded from Google’s website doesn’t have the RLZ identifier. The source code to decode the strings is made open by Google. Chrome offers account sync between multiple devices. Part of the sync data are stored website credentials. The login passwords are encrypted and in order to access them, a user\u0026rsquo;s Google account password is required. You can use your Google account to sign to your Chrome customized settings from other devices while retaining your the security of your passwords.\nChrome\u0026rsquo;s Web store for extensions requires a 5 dollar lifetime fee in order to submit extensions. The low cost allows the development of many quality Open Source Web Extensions that do not aim to monetize through usage.\nChrome has the largest share of global usage and is the preferred target platform for the majority of developers. Major technologies are based on Chrome\u0026rsquo;s Open Source components, such as node.js which uses Chrome\u0026rsquo;s V8 Engine and the Electron framework, which is based on Chromium and node.js. Chrome\u0026rsquo;s vast user base makes it the most attractive target for threat actors and security researchers. Despite under constants attacks, Chrome has retained an impressive security track record over the years. This is not a small feat.\nChrome offers separate profiles, sandboxing, frequent updates (including Flash, although you should disable it - see below), and carries impressive credentials. In addition, Google offers a very lucrative bounty program for reporting vulnerabilities along with its own Project Zero. This means that a large number of highly talented and motivated people are constantly auditing Chrome\u0026rsquo;s code base.\nCreate separate Chrome profiles to reduce XSS risk and compartmentalize cookies/identities. In each profile, either disable Javascript in Chrome settings and manually whitelist allowed origins - or use uBlock Origin to manage Javascript and/or disable third-party scripts/frames. Also install HTTPSEverywhere to upgrade insecure connections.\nChange the default search engine from Google to reduce additional tracking.\nDisable DNS prefetching (see also DNS Prefetching and Its Privacy Implications (pdf)). Note that Chrome may attempt to resolve DNS using Google\u0026rsquo;s 8.8.8.8 and 8.8.4.4 public nameservers.\nRead Chromium Security and Chromium Privacy for more detailed, technical information.\nRead Google\u0026rsquo;s privacy policy and learn which Google services collect personal information. Users can opt-out of services and see what type of information Google has stored in account settings.\nSafari # Safari is the default Web browser of macOS. It is also the most optimized browser for reducing battery use. Safari, like Chrome, has both Open Source and proprietary components. Safari is based on the open source Web Engine WebKit, which is ubiquitous among the macOS ecosystem. WebKit is used by Apple apps such as Mail, iTunes, iBooks, and the App Store. Chrome\u0026rsquo;s Blink engine is a fork of WebKit and both engines share a number of similarities.\nSafari supports certain unique features that benefit user security and privacy. Content blockers enables the creation of content blocking rules without using Javascript. This rule based approach greatly improves memory use, security, and privacy. Safari 11 introduced an Intelligent Tracking Prevention system. This feature automatically removes tracking data stored in Safari after a period of non-interaction by the user from the tracker\u0026rsquo;s website.\nSimilar to Chrome and Firefox, Safari offers an invite only bounty program for bug reporting to a select number of security researchers. The bounty program was announced during Apple\u0026rsquo;s presentation at BlackHat 2016.\nWeb Extensions in Safari have an additional option to use native code in the Safari\u0026rsquo;s sandbox environment, in addition to Web Extension APIs. Web Extensions in Safari are also distributed through Apple\u0026rsquo;s App store. App store submission comes with the added benefit of Web Extension code being audited by Apple. On the other hand App store submission comes at a steep cost. Yearly developer subscription fee costs 100 USD (in contrast to Chrome\u0026rsquo;s 5 dollar lifetime fee and Firefox\u0026rsquo;s free submission). The high cost is prohibitive for the majority of Open Source developers. As a result, Safari has very few extensions to choose from. However, you should keep the high cost in mind when installing extensions. It is expected that most Web Extensions will have some way of monetizing usage in order to cover developer costs. Be wary of Web Extensions whose source code is not open.\nSafari syncs user preferences and saved passwords with iCloud Keychain. In order to be viewed in plain text, a user must input the account password of the current device. This means that users can sync data across devices with added security.\nSafari follows a slower release cycle than Chrome and Firefox (3-4 minor releases, 1 major release, per year). Newer features are slower to be adopted to the stable channel. Although security updates in Safari are handled independent of the stable release schedule and issued automatically through the App store. The Safari channel that follows a six-week release cycle (similar to as Chrome and Firefox) is called Safari Technology Preview and it is the recommended option instead of the stable channel of Safari.\nAn excellent open source ad blocker for Safari that fully leverages content blockers is dgraham/Ka-Block. See also el1t/uBlock-Safari to disable hyperlink auditing beacons.\nOther Web browsers # Many Chromium-derived browsers are not recommended. They are usually closed source, poorly maintained, have bugs, and make dubious claims to protect privacy. See The Private Life of Chromium Browsers.\nOther miscellaneous browsers, such as Brave, are not evaluated in this guide, so are neither recommended nor actively discouraged from use.\nWeb browsers and privacy # All Web Browsers retain certain information about our browsing habits. That information is used for a number of reasons. One of them is to improve the overall performance of the Web Browser. Most Web Browsers offer prediction services to resolve typos or URL redirections, store analytics data of browsing patterns, crash reports and black listing of known malicious servers. Those options can be turned on and off from each Web browser\u0026rsquo;s settings panel.\nSince Web browsers execute untrusted code from the server, it is important to understand what type of information can be accessed. The Navigator interface gives access to information about the Web Browser\u0026rsquo;s user agent. Those include information such as the operating system, Web sites\u0026rsquo; permissions, and the device\u0026rsquo;s battery level. For more information about security conscious browsing and what type of information is being \u0026ldquo;leaked\u0026rdquo; by your browser, see HowTo: Privacy \u0026amp; Security Conscious Browsing, browserleaks.com and EFF Panopticlick.\nTo hinder third party trackers, it is recommended to disable third-party cookies in Web browser settings. A third party cookie is a cookie associated with a file requested by a different domain than the one the user is currently viewing. Most of the time third-party cookies are used to create browsing profiles by tracking a user\u0026rsquo;s movement on the web. Disabling third-party cookies prevents HTTP responses and scripts from other domains from setting cookies. Moreover, cookies are removed from requests to domains that are not the document origin domain, so cookies are only sent to the current site that is being viewed.\nAlso be aware of WebRTC, which may reveal your local or public (if connected to VPN) IP address(es). In Firefox and Chrome/Chromium this can be disabled with extensions such as uBlock Origin and rentamob/WebRTC-Leak-Prevent. Disabling WebRTC in Safari is only possible with a system hack.\nPlugins # Adobe Flash, Oracle Java, Adobe Reader, Microsoft Silverlight (Netflix now works with HTML5) and other plugins are security risks and should not be installed.\nIf they are necessary, only use them in a disposable virtual machine and subscribe to security announcements to make sure you\u0026rsquo;re always patched.\nSee Hacking Team Flash Zero-Day, Java Trojan BackDoor.Flashback, Acrobat Reader: Security Vulnerabilities, and Angling for Silverlight Exploits for examples.\nTor # Tor is an anonymizing proxy which can be used for browsing the Web.\nDownload Tor Browser from Tor Project.\nDo not attempt to configure other browsers or applications to use Tor as you may make a mistake which will compromise anonymity.\nDownload both the dmg and asc signature files, then verify the disk image has been signed by Tor developers:\n$ cd ~/Downloads $ file Tor* TorBrowser-8.0.4-osx64_en-US.dmg: bzip2 compressed data, block size = 900k TorBrowser-8.0.4-osx64_en-US.dmg.asc: PGP signature Signature (old) $ gpg Tor*asc [...] gpg: Can\u0026#39;t check signature: No public key $ gpg --recv 0x4E2C6E8793298290 gpg: key 0x4E2C6E8793298290: public key \u0026#34;Tor Browser Developers (signing key) \u0026lt;torbrowser@torproject.org\u0026gt;\u0026#34; imported gpg: no ultimately trusted keys found gpg: Total number processed: 1 gpg: imported: 1 $ gpg --verify Tor*asc gpg: assuming signed data in \u0026#39;TorBrowser-8.0.4-osx64_en-US.dmg\u0026#39; gpg: Signature made Mon Dec 10 07:16:22 2018 PST gpg: using RSA key 0xEB774491D9FF06E2 gpg: Good signature from \u0026#34;Tor Browser Developers (signing key) \u0026lt;torbrowser@torproject.org\u0026gt;\u0026#34; [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290 Subkey fingerprint: 1107 75B5 D101 FB36 BC6C 911B EB77 4491 D9FF 06E2 Make sure Good signature from \u0026quot;Tor Browser Developers (signing key) \u0026lt;torbrowser@torproject.org\u0026gt;\u0026quot; appears in the output. The warning about the key not being certified is benign, as it has not yet been manually assigned trust.\nSee How to verify signatures for packages for more information.\nTo finish installing Tor Browser, open the disk image and drag the it into the Applications folder, or with:\n$ hdiutil mount TorBrowser-8.0.4-osx64_en-US.dmg $ cp -r /Volumes/Tor\\ Browser/Tor\\ Browser.app/ ~/Applications/ Verify the Tor application\u0026rsquo;s code signature was made by with The Tor Project\u0026rsquo;s Apple developer ID MADPSAYN6T, using the spctl -a -v and/or pkgutil --check-signature commands:\n$ spctl -a -vv ~/Applications/Tor\\ Browser.app /Users/drduh/Applications/Tor Browser.app: accepted source=Developer ID origin=Developer ID Application: The Tor Project, Inc (MADPSAYN6T) $ pkgutil --check-signature ~/Applications/Tor\\ Browser.app Package \u0026#34;Tor Browser.app\u0026#34;: Status: signed by a certificate trusted by Mac OS X Certificate Chain: 1. Developer ID Application: The Tor Project, Inc (MADPSAYN6T) SHA1 fingerprint: 95 80 54 F1 54 66 F3 9C C2 D8 27 7A 29 21 D9 61 11 93 B3 E8 ----------------------------------------------------------------------------- 2. Developer ID Certification Authority SHA1 fingerprint: 3B 16 6C 3B 7D C4 B7 51 C9 FE 2A FA B9 13 56 41 E3 88 E1 86 ----------------------------------------------------------------------------- 3. Apple Root CA SHA1 fingerprint: 61 1E 5B 66 2C 59 3A 08 FF 58 D1 4A E2 24 52 D1 98 DF 6C 60 You can also use the codesign command to examine an application\u0026rsquo;s code signature:\n$ codesign -dvv ~/Applications/Tor\\ Browser.app Executable=/Users/drduh/Applications/Tor Browser.app/Contents/MacOS/firefox Identifier=org.torproject.torbrowser Format=app bundle with Mach-O thin (x86_64) CodeDirectory v=20200 size=229 flags=0x0(none) hashes=4+3 location=embedded Library validation warning=OS X SDK version before 10.9 does not support Library Validation Signature size=4247 Authority=Developer ID Application: The Tor Project, Inc (MADPSAYN6T) Authority=Developer ID Certification Authority Authority=Apple Root CA Signed Time=Dec 10, 2018 at 12:18:45 AM Info.plist entries=24 TeamIdentifier=MADPSAYN6T Sealed Resources version=2 rules=12 files=128 Internal requirements count=1 size=188 To view full certificate details for a signed application, extract them with codesign and decode it with openssl:\n$ codesign -d --extract-certificates ~/Applications/Tor\\ Browser.app Executable=/Users/drduh/Applications/Tor Browser.app/Contents/MacOS/firefox $ file codesign* codesign0: data codesign1: data codesign2: data $ openssl x509 -inform der -in codesign0 -subject -issuer -startdate -enddate -noout subject= /UID=MADPSAYN6T/CN=Developer ID Application: The Tor Project, Inc (MADPSAYN6T)/OU=MADPSAYN6T/O=The Tor Project, Inc/C=US issuer= /CN=Developer ID Certification Authority/OU=Apple Certification Authority/O=Apple Inc./C=US notBefore=Apr 12 22:40:13 2016 GMT notAfter=Apr 13 22:40:13 2021 GMT $ openssl x509 -inform der -in codesign0 -fingerprint -noout SHA1 Fingerprint=95:80:54:F1:54:66:F3:9C:C2:D8:27:7A:29:21:D9:61:11:93:B3:E8 $ openssl x509 -inform der -in codesign0 -fingerprint -sha256 -noout SHA256 Fingerprint=B5:0D:47:F0:3E:CB:42:B6:68:1C:6F:38:06:2B:C2:9F:41:FA:D6:54:F1:29:D3:E4:DD:9C:C7:49:35:FF:F5:D9 Tor traffic is encrypted to the exit node (i.e., cannot be read by a passive network eavesdropper), but Tor use can be identified - for example, TLS handshake \u0026ldquo;hostnames\u0026rdquo; will show up in plaintext:\n$ sudo tcpdump -An \u0026#34;tcp\u0026#34; | grep \u0026#34;www\u0026#34; listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes .............\u0026#34;. ...www.odezz26nvv7jeqz1xghzs.com......... .............#.!...www.bxbko3qi7vacgwyk4ggulh.com......... .6....m.....\u0026gt;...:.........|../*\tZ....W....X=..6...C../....................................0...0..0.......\u0026#39;....F./0..\t*.H........0%1#0!..U....www.b6zazzahl3h3faf4x2.com0...160402000000Z..170317000000Z0\u0026#39;1%0#..U....www.tm3ddrghe22wgqna5u8g.net0..0.. See Tor Protocol Specification and Tor/TLSHistory for more information.\nYou may wish to additionally obfuscate Tor traffic using a pluggable transport, such as Yawning/obfs4proxy or SRI-CSL/stegotorus.\nThis can be done by setting up your own Tor relay or finding an existing private or public bridge to serve as an obfuscating entry node.\nFor extra security, use Tor inside a VirtualBox or VMware virtualized GNU/Linux or BSD machine.\nFinally, remember the Tor network provides anonymity, which is not necessarily synonymous with privacy. The Tor network does not guarantee protection against a global observer capable of traffic analysis and correlation. See also Seeking Anonymity in an Internet Panopticon (pdf) and Traffic Correlation on Tor by Realistic Adversaries (pdf).\nAlso see Invisible Internet Project (I2P) and its Tor comparison.\nVPN # Unencrypted network traffic is being actively monitored and possibly tampered with. Encrypted traffic still exposes connection metadata and could be used to infer behavior or specific actions.\nIt is a good idea to use a VPN with outgoing network traffic (not split tunnel) together with a trustworthy provider. drduh/Debian-Privacy-Server-Guide is one of many available guides for setting up a personal VPN server.\nDon\u0026rsquo;t just blindly sign up for a VPN service without understanding the full implications and how your traffic will be routed. If you don\u0026rsquo;t understand how the VPN works or are not familiar with the software used, you are probably better off without it.\nWhen choosing a VPN service or setting up your own, be sure to research the protocols, key exchange algorithms, authentication mechanisms, and type of encryption being used. Some protocols, such as PPTP, should be avoided in favor of OpenVPN or Linux-based Wireguard on a Linux VM or via a set of cross platform tools.\nSome clients may send traffic over the next available interface when VPN is interrupted or disconnected. See scy/8122924 for an example on how to allow traffic only over VPN.\nAnother set of scripts to lock down your system so it will only access the internet via a VPN can be found as part of the Voodoo Privacy project - sarfata/voodooprivacy and there is an updated guide to setting up an IPSec VPN on a virtual machine (hwdsl2/setup-ipsec-vpn) or a docker container (hwdsl2/docker-ipsec-vpn-server).\nIt may be worthwhile to consider the geographical location of the VPN provider. See further discussion in issue #114.\nAlso see this technical overview of the macOS built-in VPN L2TP/IPSec and IKEv2 client.\nOther open source OpenVPN clients/GUI: Eddie, Pritunl are not evaluated in this guide, so are neither recommended nor actively discouraged from use.\nPGP/GPG # PGP is a standard for encrypting email end to end. That means only the chosen recipients can decrypt a message, unlike regular email which is read and forever archived by providers.\nGPG, or GNU Privacy Guard, is a GPL-licensed open source program compliant with the PGP standard.\nGPG is used to verify signatures of software you download and install, as well as symmetrically or asymmetrically encrypt files and text.\nInstall from Homebrew with brew install gnupg.\nIf you prefer a graphical application, download and install GPG Suite.\nDownload drduh/config/gpg.conf to use recommended settings:\n$ curl -o ~/.gnupg/gpg.conf https://raw.githubusercontent.com/drduh/config/master/gpg.conf See drduh/YubiKey-Guide to securely generate and store GPG keys.\nRead online guides and practice encrypting and decrypting email to yourself and your friends. Get them interested in this stuff!\nOTR # OTR stands for off-the-record and is a cryptographic protocol for encrypting and authenticating conversations over instant messaging.\nYou can use OTR on top of any existing XMPP chat service, even Google Hangouts (which only encrypts conversations between users and the server using TLS).\nThe first time you start a conversation with someone new, you\u0026rsquo;ll be asked to verify their public key fingerprint. Make sure to do this in person or by some other secure means (e.g. GPG encrypted mail).\nA popular macOS GUI client for XMPP and other chat protocols is Adium.\nOther XMPP clients include profanity and agl/xmpp-client. Another relatively new XMPP chat client is CoyIM, it\u0026rsquo;s focused and security and has built-in support for OTR and Tor.\nIf you want to know how OTR works, read the paper Off-the-Record Communication, or, Why Not To Use PGP (pdf)\nViruses and malware # There is an ever-increasing amount of Mac malware in the wild. Macs aren\u0026rsquo;t immune from viruses and malicious software!\nSome malware comes bundled with both legitimate software, such as the Java bundling Ask Toolbar, and some with illegitimate software, such as Mac.BackDoor.iWorm bundled with pirated programs. Malwarebytes Anti-Malware for Mac is an excellent program for ridding oneself of \u0026ldquo;garden-variety\u0026rdquo; malware and other \u0026ldquo;crapware\u0026rdquo;.\nSee Methods of malware persistence on Mac OS X (pdf) and Malware Persistence on OS X Yosemite to learn about how garden-variety malware functions.\nYou could periodically run a tool like Knock Knock to examine persistent applications (e.g. scripts, binaries). But by then, it is probably too late. Maybe applications such as Block Block and Ostiarius will help. See warnings and caveats in issue #90 first, however. An open-source alternative could be maclaunch.sh.\nAnti-virus programs are a double-edged sword \u0026ndash; not so useful for advanced users and will likely increase attack surface against sophisticated threats; however possibly useful for catching \u0026ldquo;garden variety\u0026rdquo; malware on novice users\u0026rsquo; Macs. There is also the additional processing overhead to consider when using \u0026ldquo;active\u0026rdquo; scanning features.\nSee Sophail: Applied attacks against Antivirus (pdf), Analysis and Exploitation of an ESET Vulnerability, a trivial Avast RCE, Popular Security Software Came Under Relentless NSA and GCHQ Attacks, How Israel Caught Russian Hackers Scouring the World for U.S. Secrets and AVG: \u0026ldquo;Web TuneUP\u0026rdquo; extension multiple critical vulnerabilities.\nTherefore, the best anti-virus is Common Sense 2020. See discussion in issue #44.\nLocal privilege escalation bugs are plenty on macOS, so always be careful when downloading and running untrusted programs or trusted programs from third party websites or downloaded over HTTP (example).\nSubscribe to updates at The Safe Mac and Malwarebytes Blog for current Mac security news.\nTo scan an application with multiple AV products and examine its behavior, upload it to VirusTotal.\nAlso check out Hacking Team malware for macOS: root installation for MacOS, Support driver for Mac Agent and RCS Agent for Mac, which is a good example of advanced malware with capabilities to hide from userland (e.g., ps, ls). For more, see A Brief Analysis of an RCS Implant Installer and reverse.put.as\nSystem Integrity Protection # System Integrity Protection (SIP) is a security feature since OS X 10.11 \u0026ldquo;El Capitan\u0026rdquo;. It is enabled by default, but can be disabled, which may be necessary to change some system settings, such as deleting root certificate authorities or unloading certain launch daemons. Keep this feature on, as it is by default.\nFrom What\u0026rsquo;s New in OS X 10.11:\nA new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.\nAlso see What is the “rootless” feature in El Capitan, really?\nSome MacBook hardware has shipped with SIP disabled. To verify SIP is enabled, use the command csrutil status, which should return: System Integrity Protection status: enabled. Otherwise, enable SIP through Recovery Mode.\nGatekeeper and XProtect # Gatekeeper and the quarantine system try to prevent unsigned or \u0026ldquo;bad\u0026rdquo; programs and files from running and opening.\nXProtect prevents the execution of known bad files and outdated plugin versions, but does nothing to cleanup or stop existing malware.\nBoth offer trivial protection against common risks and are fine at default settings.\nSee also Mac Malware Guide : How does Mac OS X protect me? and Gatekeeper, XProtect and the Quarantine attribute.\nNote Quarantine stores information about downloaded files in ~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2, which may pose a privacy risk. To examine the file, simply use strings or the following command:\n$ echo \u0026#39;SELECT datetime(LSQuarantineTimeStamp + 978307200, \u0026#34;unixepoch\u0026#34;) as LSQuarantineTimeStamp, \u0026#39; \\ \u0026#39;LSQuarantineAgentName, LSQuarantineOriginURLString, LSQuarantineDataURLString from LSQuarantineEvent;\u0026#39; | \\ sqlite3 /Users/$USER/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2 See here for more information.\nTo permanently disable this feature, clear the file and make it immutable:\n$ :\u0026gt;~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2 $ sudo chflags schg ~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2 Alternatively, you can also disable Gatekeeper using the following command:\nsudo spctl --master-disable\n(See https://disable-gatekeeper.github.io/ and https://objective-see.com/blog/blog_0x64.html for reference)\nMetadata and artifacts # macOS attaches metadata (HFS+ extended attributes) to downloaded files, which can be viewed with the mdls and xattr commands:\n$ ls -l@ ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg -rw-r--r--@ 1 drduh staff 63M Jan 1 12:00 TorBrowser-8.0.4-osx64_en-US.dmg com.apple.metadata:kMDItemWhereFroms\t46B com.apple.quarantine\t57B $ mdls ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg kMDItemContentCreationDate = 2019-01-01 00:00:00 +0000 kMDItemContentCreationDate_Ranking = 2019-01-01 00:00:00 +0000 kMDItemContentModificationDate = 2019-01-01 00:00:00 +0000 kMDItemContentType = \u0026#34;com.apple.disk-image-udif\u0026#34; kMDItemContentTypeTree = ( \u0026#34;public.archive\u0026#34;, \u0026#34;public.item\u0026#34;, \u0026#34;public.data\u0026#34;, \u0026#34;public.disk-image\u0026#34;, \u0026#34;com.apple.disk-image\u0026#34;, \u0026#34;com.apple.disk-image-udif\u0026#34; ) kMDItemDateAdded = 2019-01-01 00:00:00 +0000 kMDItemDateAdded_Ranking = 2019-01-01 00:00:00 +0000 kMDItemDisplayName = \u0026#34;TorBrowser-8.0.4-osx64_en-US.dmg\u0026#34; kMDItemFSContentChangeDate = 2019-01-01 00:00:00 +0000 kMDItemFSCreationDate = 2019-01-01 00:00:00 +0000 kMDItemFSCreatorCode = \u0026#34;\u0026#34; kMDItemFSFinderFlags = 0 kMDItemFSHasCustomIcon = (null) kMDItemFSInvisible = 0 kMDItemFSIsExtensionHidden = 0 kMDItemFSIsStationery = (null) kMDItemFSLabel = 0 kMDItemFSName = \u0026#34;TorBrowser-8.0.4-osx64_en-US.dmg\u0026#34; kMDItemFSNodeCount = (null) kMDItemFSOwnerGroupID = 5000 kMDItemFSOwnerUserID = 501 kMDItemFSSize = 65840402 kMDItemFSTypeCode = \u0026#34;\u0026#34; kMDItemInterestingDate_Ranking = 2019-01-01 00:00:00 +0000 kMDItemKind = \u0026#34;Disk Image\u0026#34; kMDItemWhereFroms = ( \u0026#34;https://dist.torproject.org/torbrowser/8.0.4/TorBrowser-8.0.4-osx64_en-US.dmg\u0026#34;, \u0026#34;https://www.torproject.org/projects/torbrowser.html.en\u0026#34; ) $ xattr -l ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg com.apple.metadata:kMDItemWhereFroms: 00000000 62 70 6C 69 73 74 30 30 A2 01 02 5F 10 4D 68 74 |bplist00..._.Mht| 00000010 74 70 73 3A 2F 2F 64 69 73 74 2E 74 6F 72 70 72 |tps://dist.torpr| 00000020 6F 6A 65 63 74 2E 6F 72 67 2F 74 6F 72 62 72 6F |oject.org/torbro| [...] com.apple.quarantine: 0081;58519ffa;Google Chrome.app;1F032CAB-F5A1-4D92-84EB-CBECA971B7BC Metadata attributes can also be removed with the -d flag:\n$ xattr -d com.apple.metadata:kMDItemWhereFroms ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg $ xattr -d com.apple.quarantine ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg $ xattr -l ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg [No output expected] Other metadata and artifacts may be found in the directories including, but not limited to, ~/Library/Preferences/, ~/Library/Containers/\u0026lt;APP\u0026gt;/Data/Library/Preferences, /Library/Preferences, some of which is detailed below.\n~/Library/Preferences/com.apple.sidebarlists.plist contains historical list of volumes attached. To clear it, use the command /usr/libexec/PlistBuddy -c \u0026quot;delete :systemitems:VolumesList\u0026quot; ~/Library/Preferences/com.apple.sidebarlists.plist\n/Library/Preferences/com.apple.Bluetooth.plist contains Bluetooth metadata, including device history. If Bluetooth is not used, the metadata can be cleared with:\n$ sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist DeviceCache $ sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist IDSPairedDevices $ sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist PANDevices $ sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist PANInterfaces $ sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist SCOAudioDevices /var/spool/cups contains the CUPS printer job cache. To clear it, use the commands:\n$ sudo rm -rfv /var/spool/cups/c0* $ sudo rm -rfv /var/spool/cups/tmp/* $ sudo rm -rfv /var/spool/cups/cache/job.cache* To clear the list of iOS devices connected, use:\n$ sudo defaults delete /Users/$USER/Library/Preferences/com.apple.iPod.plist \u0026#34;conn:128:Last Connect\u0026#34; $ sudo defaults delete /Users/$USER/Library/Preferences/com.apple.iPod.plist Devices $ sudo defaults delete /Library/Preferences/com.apple.iPod.plist \u0026#34;conn:128:Last Connect\u0026#34; $ sudo defaults delete /Library/Preferences/com.apple.iPod.plist Devices $ sudo rm -rfv /var/db/lockdown/* Quicklook thumbnail data can be cleared using the qlmanage -r cache command, but this writes to the file resetreason in the Quicklook directories, and states that the Quicklook cache was manually cleared. Disable the thumbnail cache with qlmanage -r disablecache\nIt can also be manually cleared by getting the directory names with getconf DARWIN_USER_CACHE_DIR and sudo getconf DARWIN_USER_CACHE_DIR, then removing them:\n$ rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/exclusive $ rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite $ rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite-shm $ rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite-wal $ rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/resetreason $ rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/thumbnails.data Similarly, for the root user:\n$ sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/thumbnails.fraghandler $ sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/exclusive $ sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite $ sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite-shm $ sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite-wal $ sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/resetreason $ sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/thumbnails.data $ sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/thumbnails.fraghandler Also see \u0026lsquo;quicklook\u0026rsquo; cache may leak encrypted data.\nTo clear Finder preferences:\n$ defaults delete ~/Library/Preferences/com.apple.finder.plist FXDesktopVolumePositions $ defaults delete ~/Library/Preferences/com.apple.finder.plist FXRecentFolders $ defaults delete ~/Library/Preferences/com.apple.finder.plist RecentMoveAndCopyDestinations $ defaults delete ~/Library/Preferences/com.apple.finder.plist RecentSearches $ defaults delete ~/Library/Preferences/com.apple.finder.plist SGTRecentFileSearches Additional diagnostic files may be found in the following directories - but caution should be taken before removing any, as it may break logging or cause other issues:\n/var/db/CoreDuet/ /var/db/diagnostics/ /var/db/systemstats/ /var/db/uuidtext/ /var/log/DiagnosticMessages/ macOS stored preferred Wi-Fi data (including credentials) in NVRAM. To clear it, use the following commands:\n$ sudo nvram -d 36C28AB5-6566-4C50-9EBD-CBB920F83843:current-network $ sudo nvram -d 36C28AB5-6566-4C50-9EBD-CBB920F83843:preferred-networks $ sudo nvram -d 36C28AB5-6566-4C50-9EBD-CBB920F83843:preferred-count macOS may collect sensitive information about what you type, even if user dictionary and suggestions are off. To remove them, and prevent them from being created again, use the following commands:\n$ rm -rfv \u0026#34;~/Library/LanguageModeling/*\u0026#34; \u0026#34;~/Library/Spelling/*\u0026#34; \u0026#34;~/Library/Suggestions/*\u0026#34; $ chmod -R 000 ~/Library/LanguageModeling ~/Library/Spelling ~/Library/Suggestions $ chflags -R uchg ~/Library/LanguageModeling ~/Library/Spelling ~/Library/Suggestions QuickLook application support metadata can be cleared and locked with the following commands:\n$ rm -rfv \u0026#34;~/Library/Application Support/Quick Look/*\u0026#34; $ chmod -R 000 \u0026#34;~/Library/Application Support/Quick Look\u0026#34; $ chflags -R uchg \u0026#34;~/Library/Application Support/Quick Look\u0026#34; Document revision metadata is stored in /.DocumentRevisions-V100 and can be cleared and locked with the following commands - caution should be taken as this may break some core Apple applications:\n$ sudo rm -rfv /.DocumentRevisions-V100/* $ sudo chmod -R 000 /.DocumentRevisions-V100 $ sudo chflags -R uchg /.DocumentRevisions-V100 Saved application state metadata may be cleared and locked with the following commands:\n$ rm -rfv \u0026#34;~/Library/Saved Application State/*\u0026#34; $ rm -rfv \u0026#34;~/Library/Containers/\u0026lt;APPNAME\u0026gt;/Saved Application State\u0026#34; $ chmod -R 000 \u0026#34;~/Library/Saved Application State/\u0026#34; $ chmod -R 000 \u0026#34;~/Library/Containers/\u0026lt;APPNAME\u0026gt;/Saved Application State\u0026#34; $ chflags -R uchg \u0026#34;~/Library/Saved Application State/\u0026#34; $ chflags -R uchg \u0026#34;~/Library/Containers/\u0026lt;APPNAME\u0026gt;/Saved Application State\u0026#34; Autosave metadata can be cleared and locked with the following commands:\n$ rm -rfv \u0026#34;~/Library/Containers/\u0026lt;APP\u0026gt;/Data/Library/Autosave Information\u0026#34; $ rm -rfv \u0026#34;~/Library/Autosave Information\u0026#34; $ chmod -R 000 \u0026#34;~/Library/Containers/\u0026lt;APP\u0026gt;/Data/Library/Autosave Information\u0026#34; $ chmod -R 000 \u0026#34;~/Library/Autosave Information\u0026#34; $ chflags -R uchg \u0026#34;~/Library/Containers/\u0026lt;APP\u0026gt;/Data/Library/Autosave Information\u0026#34; $ chflags -R uchg \u0026#34;~/Library/Autosave Information\u0026#34; The Siri analytics database, which is created even if the Siri launch agent disabled, can be cleared and locked with the following commands:\n$ rm -rfv ~/Library/Assistant/SiriAnalytics.db $ chmod -R 000 ~/Library/Assistant/SiriAnalytics.db $ chflags -R uchg ~/Library/Assistant/SiriAnalytics.db ~/Library/Preferences/com.apple.iTunes.plist contains iTunes metadata. Recent iTunes search data may be cleared with the following command:\n$ defaults delete ~/Library/Preferences/com.apple.iTunes.plist recentSearches If you do not use Apple ID-linked services, the following keys may be cleared, too, using the following commands:\n$ defaults delete ~/Library/Preferences/com.apple.iTunes.plist StoreUserInfo $ defaults delete ~/Library/Preferences/com.apple.iTunes.plist WirelessBuddyID All media played in QuickTime Player can be found in:\n~/Library/Containers/com.apple.QuickTimePlayerX/Data/Library/Preferences/com.apple.QuickTimePlayerX.plist Additional metadata may exist in the following files:\n~/Library/Containers/com.apple.appstore/Data/Library/Preferences/com.apple.commerce.knownclients.plist ~/Library/Preferences/com.apple.commerce.plist ~/Library/Preferences/com.apple.QuickTimePlayerX.plist Passwords # Generate strong passwords with several programs or directly from /dev/urandom:\n$ openssl rand -base64 30 qb8ZWbUU2Ri3FOAPY/1wKSFAJwMXmpQM4mZU4YbO $ gpg --gen-random -a 0 90 | fold -w 40 3e+kfHOvovHVXxZYPgu+OOWQ1g1ttbljr+kNGv7f loD//RsjUXYGIjfPM/bT0itsoEstyGLVUsFns8wP zYM8VRBga+TsnxWrS7lWKfH1uvVPowzkq9kXCdvJ $ LANG=C tr -dc \u0026#39;A-F0-9\u0026#39; \u0026lt; /dev/urandom | fold -w 40 | head -n 5 45D0371481EE5E5A5C1F68EA59E69F9CA52CB321 A30B37A00302643921F205621B145E7EAF520164 B6EF38A2DA1D0586D20105502AFFF0468EA5F16A 029D6EA9F76CD64D3356E342EA154BEFEBE23387 07F468F0569579A0A06471247CABC4F4C1386E24 $ tr -dc \u0026#39;[:alnum:]\u0026#39; \u0026lt; /dev/urandom | fold -w 40 | head -n5 zmj8S0iuxud8y8YHjzdg7Hefu6U1KAYBiLl3aE8v nCNpuMkWohTjQHntTzbiLQJG5zLzEHWSWaYSwjtm R2L6M909S3ih852IkJqQFMDawCiHcpPBxlllAPrt aZOXKVUmxhzQwVSYb6nqAbGTVMFSJOLf094bFZAb HfgwSNlkVBXwIPQST6E6x6vDNCCasMLSSOoTUfSK $ tr -dc \u0026#39;[:lower:]\u0026#39; \u0026lt; /dev/urandom | fold -w 40 | head -n5 gfvkanntxutzwxficgvavbwdvttexdezdftvvtmn lgrsuiugwkqbtbkyggcbpbqlynwbiyxzlabstqcf ufctdlsbyonkowzpmotxiksnsbwdzkjrjsupoqvr hjwibdjxtmuvqricljayzkgdfztcmapsgwsubggr bjstlmvwjczakgeetkbmwbjnidbeaerhaonpkacg $ tr -dc \u0026#39;[:upper:]\u0026#39; \u0026lt; /dev/urandom | fold -w 40 | head -n5 EUHZMAOBOLNFXUNNDSTLJTPDCPVQBPUEQOLRZUQZ HVNVKBEPAAYMXRCGVCNEZLFHNUYMRYPTWPWOOZVM TAHEUPQJTSYQVJVYSKLURESMKWEZONXLUDHWQODB PRDITWMAXXZLTRXEEOGOSGAWUXYDGDRJYRHUWICM VHERIQBLBPHSIUZSGYZRDHTNAPUGJMRODIKBWZRJ $ tr -dc \u0026#39;[:graph:]\u0026#39; \u0026lt; /dev/urandom | fold -w 40 | head -n5 n\\T2|zUz:\\C,@z9!#p3!B/[t6m:B94}q\u0026amp;t(^)Ol~ J%MMDbAgGdP}zrSQO!3mrP3$w!.[Ng_xx-_[C\u0026lt;3g ^)6V\u0026amp;*\u0026lt;2\u0026#34;ZOgU.mBd]iInvFKiT\u0026lt;dq~y\\O[cdDK`V +RE]UYPIf3:StX`y#w,.iG~g\u0026#34;urD)\u0026#39;FnDIFI_q^) 6?HRillpgvvFDBAr4[:H{^oAL\u0026lt;`Em7$roF=2w;1~ You can also generate passwords, even memorable ones, using Keychain Access password assistant, or a command line equivalent like anders/pwgen.\nKeychains are encrypted with a PBKDF2 derived key and are a pretty safe place to store credentials. See also Breaking into the OS X keychain. Also be aware that Keychain does not encrypt the names corresponding to password entries.\nAlternatively, you can manage an encrypted passwords file yourself with GnuPG (see drduh/Purse and drduh/pwd.sh for example).\nIn addition to passwords, ensure eligible online accounts, such as GitHub, Google accounts, banking, have two factor authentication enabled.\nYubikey offers affordable hardware tokens. See drduh/YubiKey-Guide and trmm.net/Yubikey. One of two Yubikey\u0026rsquo;s slots can also be programmed to emit a long, static password (which can be used in combination with a short, memorized password, for example).\nIn Addition to Login and other PAMs, you can use Yubikey to secure your login and sudo, here is a pdf guide from Yubico. Yubikey are a bit pricey, there is cheaper alternative, but not as capable, U2F Zero. Here is a great guide to set it up\nBackup # Always encrypt files locally before backing them up to external media or online services.\nOne way is to use a symmetric cipher with GPG and a password of your choosing. Files can also be encrypted to a public key with GPG, with the private key stored on YubiKey.\nTo compress and encrypt a directory:\n$ tar zcvf - ~/Downloads | gpg -c \u0026gt; ~/Desktop/backup-$(date +%F-%H%M).tar.gz.gpg tar: Removing leading \u0026#39;/\u0026#39; from member names a Users/drduh/Downloads a Users/drduh/Downloads/.DS_Store a Users/drduh/Downloads/.localized a Users/drduh/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg.asc a Users/drduh/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg To decrypt and decompress the directory:\n$ gpg -o ~/Desktop/decrypted-backup.tar.gz -d ~/Desktop/backup-2015-01-01-0000.tar.gz.gpg gpg: AES256 encrypted data gpg: encrypted with 1 passphrase $ tar zxvf ~/Desktop/decrypted-backup.tar.gz tar: Removing leading \u0026#39;/\u0026#39; from member names x Users/drduh/._Downloads x Users/drduh/Downloads/ x Users/drduh/Downloads/._.DS_Store x Users/drduh/Downloads/.DS_Store x Users/drduh/Downloads/.localized x Users/drduh/Downloads/._TorBrowser-8.0.4-osx64_en-US.dmg.asc x Users/drduh/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg.asc x Users/drduh/Downloads/._TorBrowser-8.0.4-osx64_en-US.dmg x Users/drduh/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg You can also create and use encrypted volumes using Disk Utility or hdiutil:\n$ hdiutil create ~/Desktop/encrypted.dmg -encryption -size 50M -volname \u0026#34;secretStuff\u0026#34; -fs JHFS+ Enter a new password to secure \u0026#34;encrypted.dmg\u0026#34;: Re-enter new password: .................................... Created: /Users/drduh/Desktop/encrypted.img $ hdiutil mount ~/Desktop/encrypted.dmg Enter password to access \u0026#34;encrypted.dmg\u0026#34;: [...] /Volumes/secretStuff $ cp -v ~/Documents/passwords.txt /Volumes/secretStuff [...] $ hdiutil eject /Volumes/secretStuff \u0026#34;disk4\u0026#34; unmounted. \u0026#34;disk4\u0026#34; ejected. With hdiutil you are also able to add the option -type SPARSE-BUNDLE. With these sparse bundles you may achieve faster backups because after the first run, the updated information and some padding needs to be transferred.\nA simple way to synchronize this encrypted folder to another server is using rsync:\nrsync --recursive --times --progress --delete --verbose --stats MyEncryptedDrive.sparsebundle user@server:/path/to/backup See also the following applications and services: Tresorit, SpiderOak, Arq, Espionage, and restic.\nWi-Fi # macOS remembers access points it has connected to. Like all wireless devices, the Mac will broadcast all access point names it remembers (e.g., MyHomeNetwork) each time it looks for a network, such as when waking from sleep.\nThis is a privacy risk, so remove networks from the list in System Preferences \u0026gt; Network \u0026gt; Advanced when they are no longer needed.\nAlso see Signals from the Crowd: Uncovering Social Relationships through Smartphone Probes (pdf) and Wi-Fi told me everything about you (pdf).\nSaved Wi-Fi information (SSID, last connection, etc.) can be found in:\n/Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist You may want to spoof the MAC address of the network card before connecting to new and untrusted wireless networks to mitigate passive fingerprinting:\n$ sudo ifconfig en0 ether $(openssl rand -hex 6 | sed \u0026#39;s%\\(..\\)%\\1:%g; s%.$%%\u0026#39;) macOS stores Wi-Fi SSIDs and passwords in NVRAM in order for Recovery Mode to access the Internet. Be sure to either clear NVRAM or de-authenticate your Mac from your Apple account, which will clear the NVRAM, before passing a Mac along. Resetting the SMC will clear some of the NVRAM, but not all.\nNote MAC addresses will reset to hardware defaults on each boot.\nFinally, WEP protection on wireless networks is not secure and you should only connect to WPA2 protected networks when possible.\nSSH # For outgoing SSH connections, use hardware or password-protected keys, set up remote hosts and consider hashing them for added privacy. See drduh/config/ssh_config for recommended client options.\nYou can also use ssh to create an encrypted tunnel to send traffic through, similar to a VPN.\nFor example, to use Privoxy running on a remote host port 8118:\n$ ssh -C -L 5555:127.0.0.1:8118 you@remote-host.tld $ sudo networksetup -setwebproxy \u0026#34;Wi-Fi\u0026#34; 127.0.0.1 5555 $ sudo networksetup -setsecurewebproxy \u0026#34;Wi-Fi\u0026#34; 127.0.0.1 5555 Or to use an ssh connection as a SOCKS proxy:\n$ ssh -NCD 3000 you@remote-host.tld By default, macOS does not have sshd or Remote Login enabled.\nTo enable sshd and allow incoming ssh connections:\n$ sudo launchctl load -w /System/Library/LaunchDaemons/ssh.plist Or use the System Preferences \u0026gt; Sharing menu.\nIf enabling sshd, be sure to disable password authentication and consider further hardening your configuration. See drduh/config/sshd_config for recommended options.\nConfirm whether sshd is running:\n$ sudo lsof -Pni TCP:22 Physical access # Keep your Mac physically secure at all times. Don\u0026rsquo;t leave it unattended in public spaces, such as hotels.\nA skilled attacker with unsupervised physical access to your computer can infect the boot ROM to install a keylogger and steal your password, for example - see Thunderstrike.\nA helpful tool is usbkill, which is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.\nConsider purchasing a privacy filter for your screen to thwart shoulder surfers.\nSuperglues or epoxy resins can also be used to disable physical access to computer ports. Nail polish and tamper-evidence seals can be applied to components to detect tampering.\nSystem monitoring # OpenBSM audit # macOS has a powerful OpenBSM (Basic Security Module) auditing capability. You can use it to monitor process execution, network activity, and much more.\nTo tail audit logs, use the praudit utility:\n$ sudo praudit -l /dev/auditpipe header,201,11,execve(2),0,Thu Sep 1 12:00:00 2015, + 195 msec,exec arg,/Applications/.evilapp/rootkit,path,/Applications/.evilapp/rootkit,path,/Applications/.evilapp/rootkit,attribute,100755,root,wheel,16777220,986535,0,subject,drduh,root,wheel,root,wheel,412,100005,50511731,0.0.0.0,return,success,0,trailer,201, header,88,11,connect(2),0,Thu Sep 1 12:00:00 2015, + 238 msec,argument,1,0x5,fd,socket-inet,2,443,173.194.74.104,subject,drduh,root,wheel,root,wheel,326,100005,50331650,0.0.0.0,return,failure : Operation now in progress,4354967105,trailer,88 header,111,11,OpenSSH login,0,Thu Sep 1 12:00:00 2015, + 16 msec,subject_ex,drduh,drduh,staff,drduh,staff,404,404,49271,::1,text,successful login drduh,return,success,0,trailer,111, See the manual pages for audit, praudit, audit_control and other files in /etc/security\nNote although man audit says the -s flag will synchronize the audit configuration, it appears necessary to reboot for changes to take effect.\nSee articles on ilostmynotes.blogspot.com and derflounder.wordpress.com for more information.\nDTrace # Note System Integrity Protection interferes with DTrace, so it is not possible to use it in recent macOS versions without disabling SIP.\niosnoop monitors disk I/O opensnoop monitors file opens execsnoop monitors execution of processes errinfo monitors failed system calls dtruss monitors all system calls See man -k dtrace for more information.\nExecution # ps -ef lists information about all running processes.\nYou can also view processes with Activity Monitor.\nlaunchctl list and sudo launchctl list list loaded and running user and system launch daemons and agents.\nNetwork # List open network files:\n$ sudo lsof -Pni List contents of various network-related data structures:\n$ sudo netstat -atln Wireshark can be used from the command line with tshark.\nMonitor DNS queries and replies:\n$ tshark -Y \u0026#34;dns.flags.response == 1\u0026#34; -Tfields \\ -e frame.time_delta \\ -e dns.qry.name \\ -e dns.a \\ -Eseparator=, Monitor HTTP requests and responses:\n$ tshark -Y \u0026#34;http.request or http.response\u0026#34; -Tfields \\ -e ip.dst \\ -e http.request.full_uri \\ -e http.request.method \\ -e http.response.code \\ -e http.response.phrase \\ -Eseparator=/s Monitor x509 (SSL/TLS) certificates:\n$ tshark -Y \u0026#34;ssl.handshake.certificate\u0026#34; -Tfields \\ -e ip.src \\ -e x509sat.uTF8String \\ -e x509sat.printableString \\ -e x509sat.universalString \\ -e x509sat.IA5String \\ -e x509sat.teletexString \\ -Eseparator=/s -Equote=d Also see the simple networking monitoring application BonzaiThePenguin/Loading.\nBinary Whitelisting # google/santa is a security software developed for Google\u0026rsquo;s corporate Macintosh fleet and open sourced.\nSanta is a binary whitelisting/blacklisting system for macOS. It consists of a kernel extension that monitors for executions, a userland daemon that makes execution decisions based on the contents of a SQLite database, a GUI agent that notifies the user in case of a block decision and a command-line utility for managing the system and synchronizing the database with a server.\nSanta uses the Kernel Authorization API to monitor and allow/disallow binaries from executing in the kernel. Binaries can be white- or black-listed by unique hash or signing developer certificate. Santa can be used to only allow trusted code execution, or to blacklist known malware from executing on a Mac, similar to Bit9 software for Windows.\nNote Santa does not currently have a graphical user interface for managing rules. The following instructions are for advanced users only!\nTo install Santa, visit the Releases page and download the latest disk image, the mount it and install the contained package:\n$ hdiutil mount ~/Downloads/santa-0.9.20.dmg $ sudo installer -pkg /Volumes/santa-0.9.20/santa-0.9.20.pkg -tgt / By default, Santa installs in \u0026ldquo;Monitor\u0026rdquo; mode (meaning, nothing gets blocked, only logged) and comes with two rules: one for Apple binaries and another for Santa software itself.\nVerify Santa is running and its kernel module is loaded:\n$ santactl status \u0026gt;\u0026gt;\u0026gt; Daemon Info Mode | Monitor File Logging | No Watchdog CPU Events | 0 (Peak: 0.00%) Watchdog RAM Events | 0 (Peak: 0.00MB) \u0026gt;\u0026gt;\u0026gt; Kernel Info Kernel cache count | 0 \u0026gt;\u0026gt;\u0026gt; Database Info Binary Rules | 0 Certificate Rules | 2 Events Pending Upload | 0 $ ps -ef | grep \u0026#34;[s]anta\u0026#34; 0 786 1 0 10:01AM ?? 0:00.39 /Library/Extensions/santa-driver.kext/Contents/MacOS/santad --syslog $ kextstat | grep santa 119 0 0xffffff7f822ff000 0x6000 0x6000 com.google.santa-driver (0.9.14) 693D8E4D-3161-30E0-B83D-66A273CAE026 \u0026lt;5 4 3 1\u0026gt; Create a blacklist rule to prevent iTunes from executing:\n$ sudo santactl rule --blacklist --path /Applications/iTunes.app/ Added rule for SHA-256: e1365b51d2cb2c8562e7f1de36bfb3d5248de586f40b23a2ed641af2072225b3. Try to launch iTunes - it will be blocked.\n$ open /Applications/iTunes.app/ LSOpenURLsWithRole() failed with error -10810 for the file /Applications/iTunes.app. To remove the rule:\n$ sudo santactl rule --remove --path /Applications/iTunes.app/ Removed rule for SHA-256: e1365b51d2cb2c8562e7f1de36bfb3d5248de586f40b23a2ed641af2072225b3. Open iTunes:\n$ open /Applications/iTunes.app/ [iTunes will open successfully] Create a new, example C program:\n$ cat \u0026lt;\u0026lt;EOF \u0026gt; foo.c \u0026gt; #include \u0026lt;stdio.h\u0026gt; \u0026gt; main() { printf(\u0026#34;Hello World\\n”); } \u0026gt; EOF Compile the program with GCC (requires installation of Xcode or command-line tools):\n$ gcc -o foo foo.c $ file foo foo: Mach-O 64-bit executable x86_64 $ codesign -d foo foo: code object is not signed at all Run it:\n$ ./foo Hello World Toggle Santa into \u0026ldquo;Lockdown\u0026rdquo; mode, which only allows whitelisted binaries to run:\n$ sudo defaults write /var/db/santa/config.plist ClientMode -int 2 Try to run the unsigned binary:\n$ ./foo bash: ./foo: Operation not permitted Santa The following application has been blocked from executing because its trustworthiness cannot be determined. Path: /Users/demouser/foo Identifier: 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed Parent: bash (701) To whitelist a specific binary, determine its SHA-256 sum:\n$ santactl fileinfo /Users/demouser/foo Path : /Users/demouser/foo SHA-256 : 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed SHA-1 : 4506f3a8c0a5abe4cacb98e6267549a4d8734d82 Type : Executable (x86-64) Code-signed : No Rule : Blacklisted (Unknown) Add a whitelist rule:\n$ sudo santactl rule --whitelist --sha256 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed Added rule for SHA-256: 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed. Run it:\n$ ./foo Hello World It\u0026rsquo;s allowed and works!\nApplications can also be whitelisted by developer certificate (so that new binary versions will not need to be manually whitelisted on each update). For example, download and run Google Chrome - it will be blocked by Santa in \u0026ldquo;Lockdown\u0026rdquo; mode:\n$ curl -sO https://dl.google.com/chrome/mac/stable/GGRO/googlechrome.dmg $ hdiutil mount googlechrome.dmg $ cp -r /Volumes/Google\\ Chrome/Google\\ Chrome.app /Applications/ $ open /Applications/Google\\ Chrome.app/ LSOpenURLsWithRole() failed with error -10810 for the file /Applications/Google Chrome.app. Whitelist the application by its developer certificate (first item in the Signing Chain):\n$ santactl fileinfo /Applications/Google\\ Chrome.app/ Path : /Applications/Google Chrome.app/Contents/MacOS/Google Chrome SHA-256 : 0eb08224d427fb1d87d2276d911bbb6c4326ec9f74448a4d9a3cfce0c3413810 SHA-1 : 9213cbc7dfaaf7580f3936a915faa56d40479f6a Bundle Name : Google Chrome Bundle Version : 2883.87 Bundle Version Str : 55.0.2883.87 Type : Executable (x86-64) Code-signed : Yes Rule : Blacklisted (Unknown) Signing Chain: 1. SHA-256 : 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153 SHA-1 : 85cee8254216185620ddc8851c7a9fc4dfe120ef Common Name : Developer ID Application: Google Inc. Organization : Google Inc. Organizational Unit : EQHXZ8M8AV Valid From : 2012/04/26 07:10:10 -0700 Valid Until : 2017/04/27 07:10:10 -0700 2. SHA-256 : 7afc9d01a62f03a2de9637936d4afe68090d2de18d03f29c88cfb0b1ba63587f SHA-1 : 3b166c3b7dc4b751c9fe2afab9135641e388e186 Common Name : Developer ID Certification Authority Organization : Apple Inc. Organizational Unit : Apple Certification Authority Valid From : 2012/02/01 14:12:15 -0800 Valid Until : 2027/02/01 14:12:15 -0800 3. SHA-256 : b0b1730ecbc7ff4505142c49f1295e6eda6bcaed7e2c68c5be91b5a11001f024 SHA-1 : 611e5b662c593a08ff58d14ae22452d198df6c60 Common Name : Apple Root CA Organization : Apple Inc. Organizational Unit : Apple Certification Authority Valid From : 2006/04/25 14:40:36 -0700 Valid Until : 2035/02/09 13:40:36 -0800 In this case, 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153 is the SHA-256 of Google’s Apple developer certificate (team ID EQHXZ8M8AV). To whitelist it:\n$ sudo santactl rule --whitelist --certificate --sha256 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153 Added rule for SHA-256: 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153. Google Chrome should now launch, and subsequent updates to the application will continue to work as long as the code signing certificate doesn’t change or expire.\nTo disable \u0026ldquo;Lockdown\u0026rdquo; mode:\n$ sudo defaults delete /var/db/santa/config.plist ClientMode See /var/log/santa.log to monitor ALLOW and DENY execution decisions.\nA log and configuration server for Santa is available in Zentral, an open source event monitoring solution and TLS server for osquery and Santa.\nZentral will support Santa in both MONITORING and LOCKDOWN operation mode. Clients need to be enrolled with a TLS connection to sync Santa Rules, all Santa events from endpoints are aggregated and logged back in Zentral. Santa events can trigger actions and notifications from within the Zentral Framework.\nNote Python, Bash and other interpreters are whitelisted (since they are signed by Apple\u0026rsquo;s developer certificate), so Santa will not be able to block such scripts from executing. Thus, a potential non-binary program which disables Santa is a weakness (not vulnerability, since it is so by design) to take note of.\nMiscellaneous # Disable Diagnostics \u0026amp; Usage Data.\nIf you want to play music or watch videos, use VLC media player which is free and open source.\nIf you want to use torrents, use Transmission which is free and open source (note: like all software, even open source projects, malware may still find its way in). You may also wish to use a block list to avoid peering with known bad hosts - see Which is the best blocklist for Transmission and johntyree/3331662.\nManage default file handlers with duti, which can be installed with brew install duti. One reason to manage extensions is to prevent auto-mounting of remote file systems in Finder (see Protecting Yourself From Sparklegate). Here are several recommended file handlers to manage:\n$ duti -s com.apple.Safari afp $ duti -s com.apple.Safari ftp $ duti -s com.apple.Safari nfs $ duti -s com.apple.Safari smb $ duti -s com.apple.TextEdit public.unix-executable Monitor system logs with the Console application or syslog -w or /usr/bin/log stream commands.\nIn systems prior to macOS Sierra (10.12), enable the tty_tickets flag in /etc/sudoers to restrict the sudo session to the Terminal window/tab that started it. To do so, use sudo visudo and add the line Defaults tty_tickets.\nSet your screen to lock as soon as the screensaver starts:\n$ defaults write com.apple.screensaver askForPassword -int 1 $ defaults write com.apple.screensaver askForPasswordDelay -int 0 Expose hidden files and Library folder in Finder:\n$ defaults write com.apple.finder AppleShowAllFiles -bool true $ chflags nohidden ~/Library Show all filename extensions (so that \u0026ldquo;Evil.jpg.app\u0026rdquo; cannot masquerade easily).\n$ defaults write NSGlobalDomain AppleShowAllExtensions -bool true Don\u0026rsquo;t default to saving documents to iCloud:\n$ defaults write NSGlobalDomain NSDocumentSaveNewDocumentsToCloud -bool false Enable Secure Keyboard Entry in Terminal (unless you use YubiKey or applications such as TextExpander).\nDisable crash reporter (the dialog which appears after an application crashes and prompts to report the problem to Apple):\n$ defaults write com.apple.CrashReporter DialogType none Disable Bonjour multicast advertisements:\n$ sudo defaults write /Library/Preferences/com.apple.mDNSResponder.plist NoMulticastAdvertisements -bool YES Disable Handoff and Bluetooth features, if they aren\u0026rsquo;t necessary.\nConsider sandboxing your applications. See fG! Sandbox Guide (pdf) and s7ephen/OSX-Sandbox\u0026ndash;Seatbelt\u0026ndash;Profiles.\nDid you know Apple has not shipped a computer with TPM since 2006?\nmacOS comes with this line in /etc/sudoers:\nDefaults env_keep += \u0026#34;HOME MAIL\u0026#34; Which stops sudo from changing the HOME variable when you elevate privileges. This means it will execute as root the bash dotfiles in the non-root user\u0026rsquo;s home directory when you run \u0026ldquo;sudo bash\u0026rdquo;. It is advisable to comment this line out to avoid a potentially easy way for malware or a local attacker to escalate privileges to root.\nIf you want to retain the convenience of the root user having a non-root user\u0026rsquo;s home directory, you can append an export line to /var/root/.bashrc, e.g.:\nexport HOME=/Users/blah Set a custom umask:\n$ sudo launchctl config user umask 077 Reboot, create a file in Finder and verify its permissions (macOS default allows \u0026lsquo;group/other\u0026rsquo; read access):\n$ ls -ld umask* drwx------ 2 kevin staff 64 Dec 4 12:27 umask_testing_dir -rw-------@ 1 kevin staff 2026566 Dec 4 12:28 umask_testing_file Related software # CISOfy/lynis - Cross-platform security auditing tool and assists with compliance testing and system hardening. Dylib Hijack Scanner - Scan for applications that are either susceptible to dylib hijacking or have been hijacked. F-Secure XFENCE (formerly Little Flocker) - \u0026ldquo;Little Snitch for files\u0026rdquo;; prevents applications from accessing files. Lockdown - Audits and remediates security configuration settings. Zentral - A log and configuration server for santa and osquery. Run audit and probes on inventory, events, logfiles, combine with point-in-time alerting. A full Framework and Django web server build on top of the elastic stack (formerly known as ELK stack). facebook/osquery - Can be used to retrieve low level system information. Users can write SQL queries to retrieve system information. google/grr - Incident response framework focused on remote live forensics. jipegit/OSXAuditor - Analyzes artifacts on a running system, such as quarantined files, Safari, Chrome and Firefox history, downloads, HTML5 databases and localstore, social media and email accounts, and Wi-Fi access point names. kristovatlas/osx-config-check - Checks your OSX machine against various hardened configuration settings. libyal/libfvde - Library to access FileVault Drive Encryption (FVDE) (or FileVault2) encrypted volumes. stronghold - Securely and easily configure your Mac from the terminal. Inspired by this guide. yelp/osxcollector - Forensic evidence collection \u0026amp; analysis toolkit for OS X. The Eclectic Light Company - Downloads - A collection of useful diagnostics and control applications and utilities for macOS. Pareto Security - A MenuBar app to automatically audit your Mac for basic security hygiene. Additional resources # Apple Open Source Auditing and Exploiting Apple IPC CIS Benchmarks Demystifying the DMG File Format Demystifying the i-Device NVMe NAND (New storage used by Apple) Developing Mac OSX kernel rootkits DoD Security Technical Implementation Guides for Mac OS EFF Surveillance Self-Defense Guide Extracting FileVault 2 Keys with Volatility Fuzzing the macOS WindowServer for Exploitable Vulnerabilities Hacker News discussion 2 Hacker News discussion Harden the World: Mac OSX 10.11 El Capitan Hidden backdoor API to root privileges in Apple OS X How to Switch to the Mac How to make macOS Spotlight fuck the fuck off and do your bidding IOKit kernel code execution exploit IPv6 Hardening Guide for OS X Mac Developer Library: Secure Coding Guide Mac Forensics: Mac OS X and the HFS+ File System (pdf) Mac OS X Forensics - Technical Report (pdf) Mac OS X and iOS Internals: To the Apple\u0026rsquo;s Core by Jonathan Levin MacAdmins on Slack MacOS Hardening Guide - Appendix of *OS Internals: Volume III - Security \u0026amp; Insecurity Internals (pdf) Managing Macs at Google Scale (LISA \u0026lsquo;13) OS X 10.10 Yosemite: The Ars Technica Review OS X Core Technologies Overview White Paper (pdf) OS X Hardening: Securing a Large Global Mac Fleet (LISA \u0026lsquo;13) OSX.Pirrit Mac Adware Part III: The DaVinci Code Over The Air - Vol. 2, Pt. 1: Exploiting The Wi-Fi Stack on Apple Devices Patrick Wardle\u0026rsquo;s Objective-See blog Remote code execution, git, and OS X Reverse Engineering Mac OS X blog Reverse Engineering Resources Security Configuration For Mac OS X Version 10.6 Snow Leopard (pdf) The EFI boot process The Great DOM Fuzz-off of 2017 The Intel Mac boot process The macOS Phishing Easy Button: AppleScript Dangers There\u0026rsquo;s a lot of vulnerable OS X applications out there (Sparkle Framework RCE) Userland Persistence on Mac OS X iCloud security and privacy overview iSeeYou: Disabling the MacBook Webcam Indicator LED ","date":"September 6, 2021","externalUrl":null,"permalink":"/2021/09/06/macos-security-and-privacy-guide/","section":"Blog","summary":"This guide is a collection of techniques for improving the security and privacy of a modern Apple Macintosh computer (“MacBook”) running a recent version of macOS (formerly known as “OS X”).\n","title":"macOS-Security-and-Privacy-Guide","type":"blog"},{"content":" free-for.dev # Developers and Open Source authors now have a massive amount of services offering free tiers, but it can be hard to find them all to make informed decisions.\nThis is a list of software (SaaS, PaaS, IaaS, etc.) and other offerings that have free tiers for developers.\nThe scope of this particular list is limited to things that infrastructure developers (System Administrator, DevOps Practitioners, etc.) are likely to find useful. We love all the free services out there, but it would be good to keep it on topic. It\u0026rsquo;s a bit of a grey line at times so this is a bit opinionated; do not be offended if I do not accept your contribution.\nThis list is the result of Pull Requests, reviews, ideas and work done by 900+ people. You too can help by sending Pull Requests to add more services or by remove ones whose offerings have changed or been retired.\nNOTE: This list is only for as-a-Service offerings, not for self-hosted software. For a service to be eligible it has to offer a free tier and not just a free trial. If the free tier is time-bucketed it has to be for at least a year. We also consider the free tier from a security perspective, so SSO is fine but I will not accept services that restrict TLS to paid-only tiers.\nTable of Contents # Major Cloud Providers\u0026rsquo; Always-Free Limits\nAnalytics, Events and Statistics\nAPIs, Data and ML\nArtifact Repos\nBaaS\nCDN and Protection\nCI and CD\nCMS\nCode Quality\nCode Search and Browsing\nCrash and Exception Handling\nData Visualization on Maps\nDBaaS\nDesign and UI\nDev Blogging Sites\nDNS\nDocker Related\nEmail\nFont\nForms\nIaaS\nIDE and Code Editing\nInternational Mobile Number Verification API and SDK\nIssue Tracking and Project Management\nLog Management\nManagement Systems\nMessaging and Streaming\nMiscellaneous\nMonitoring\nPaaS\nPackage Build System\nPayment and Billing Integration\nPrivacy Management\nScreenshot APIs\nSearch\nSecurity and PKI\nSource Code Repos\nStorage and Media Processing\nSTUN, WebRTC, Web Socket Servers and Other Routers\nTesting\nTools for Teams and Collaboration\nTranslation Management\nVagrant Related\nVisitor Session Recording\nWeb Hosting\nCommenting Platforms\nBrowser based hardware emulation\nRemote Desktop Tools\nOther Free Resources\nMajor Cloud Providers # Google Cloud Platform\nApp Engine - 28 frontend instance hours per day, 9 backend instance hours per day\nCloud Firestore - 1GB storage, 50,000 reads, 20,000 writes, 20,000 deletes per day\nCompute Engine - 1 non-preemptible f1-micro, 30GB HDD, 5GB snapshot storage (restricted to certain regions), 1 GB network egress from North America to all region destinations (excluding China and Australia) per month\nCloud Storage - 5GB, 1GB network egress\nCloud Shell - Web-based Linux shell/basic IDE with 5GB of persistent storage. 60 hours limit per week\nCloud Pub/Sub - 10GB of messages per month\nCloud Functions - 2 million invocations per month (includes both background and HTTP invocations)\nCloud Run - 2 million requests per month, 360,000 GB-seconds memory, 180,000 vCPU-seconds of compute time, 1 GB network egress from North America per month\nGoogle Kubernetes Engine - No cluster management fee for one zonal cluster. Each user node is charged at standard Compute Engine pricing\nBigQuery - 1 TB of querying per month, 10 GB of storage each month\nCloud Build - 120 build-minutes per day\nCloud Source Repositories - Up to 5 Users, 50 GB Storage, 50 GB Egress\nFull, detailed list - https://cloud.google.com/free\nAmazon Web Services\nAmazon DynamoDB - 25GB NoSQL DB\nAmazon Lambda - 1 Million requests per month\nAmazon SNS - 1 million publishes per month\nAmazon Cloudwatch - 10 custom metrics and 10 alarms\nAmazon Glacier - 10GB long-term object storage\nAmazon SQS - 1 million messaging queue requests\nAmazon CodeBuild - 100min of build time per month\nAmazon Code Commit - 5 active users per month\nAmazon Code Pipeline - 1 active pipeline per month\nFull, detailed list - https://aws.amazon.com/free/\nMicrosoft Azure\nVirtual Machines - 1 B1S Linux VM, 1 B1S Windows VM\nApp Service - 10 web, mobile or API apps\nFunctions - 1 million requests per month\nDevTest Labs - Enable fast, easy, and lean dev-test environments\nActive Directory - 500,000 objects\nActive Directory B2C - 50,000 monthly stored users\nAzure DevOps - 5 active users, unlimited private Git repos\nAzure Pipelines — 10 free parallel jobs with unlimited minutes for open source for Linux, macOS, and Windows\nMicrosoft IoT Hub - 8,000 messages per day\nLoad Balancer - 1 free public load balanced IP (VIP)\nNotification Hubs - 1 million push notifications\nBandwidth - 5GB egress per month\nCosmos DB - 5GB storage and 400 RUs of provisioned throughput\nStatic Web Apps — Build, deploy and host static apps and serverless functions, with free SSL, Authentication/Authorization and custom domains\nStorage - 5GB LRS File or Blob storage\nCognitive Services - AI/ML APIs (Computer Vision, Translator, Face detection, Bots\u0026hellip;) with free tier including limited transactions\nCognitive Search - AI-based search and indexation service, free for 10,000 documents\nAzure Kubernetes Service - Managed Kubernetes service, free cluster management\nEvent Grid - 100K ops/month\nFull, detailed list - https://azure.microsoft.com/free/\nOracle Cloud\nCompute - 2 VM.Standard.E2.1.Micro 1GB RAM, 4 Arm-based Ampere A1 cores and 24 GB of memory usable as one VM or up to 4 VMs\nBlock Volume - 2 volumes, 200 GB total (used for compute)\nObject Storage - 10 GB\nLoad balancer - 1 instance with 10 Mbps\nDatabases - 2 DBs, 20 GB each\nMonitoring - 500 million ingestion datapoints, 1 billion retrieval datapoints\nBandwidth - 10TB egress per month, speed limited to 5Mbps\nNotifications - 1 million delivery options per month, 1000 emails sent per month\nFull, detailed list - https://www.oracle.com/cloud/free/\nIBM Cloud\nCloud Functions - 5 million executions per month\nObject Storage - 25GB per month\nCloudant database - 1 GB of data storage\nDb2 database - 100MB of data storage\nAPI Connect - 50,000 API calls per month\nAvailability Monitoring - 3 million data points per month\nLog Analysis - 500MB of daily log\nFull, detailed list - https://www.ibm.com/cloud/free/\n⬆ back to top\nSource Code Repos # bitbucket.org — Unlimited public and private Git repos for up to 5 users with Pipelines for CI/CD\nchiselapp.com — Unlimited public and private Fossil repositories\ncodebasehq.com — One free project with 100 MB space and 2 users\ncodeberg.org - Unlimited public and private Git repos for free and open-source projects. Static website hosting with Codeberg Pages.\ngitea.com - Unlimited public and private Git repos\nGitGud — Unlimited private and public repositories. Free forever. Powered by GitLab \u0026amp; Sapphire. CI/CD not provided.\ngithub.com — Unlimited public repositories and unlimited private repositories (with unlimited collaborators). Apart from this some other free services(there are much more but we list the main ones here) provided are :\nCI/CD(Free for Public Repos, 2000 min/month for private repos free)\nStatic Website Hosting (Free for Public Repos)\nPackage Hosting \u0026amp; Container Registry (Free for public repos,500 MB storage \u0026amp; 1GB bandwidth outside CI/CD free for private repos)\nProject Management \u0026amp; Issue Tracking.\ngitlab.com — Unlimited public and private Git repos with unlimited collaborators. Also offers the following features :\nCI/CD (Free for Public Repos, 400 mins/month for private repos)\nStatic Sites with GitLab Pages.\nContainer Registry with 10 GB limit per repo.\nProject Management \u0026amp; Issue Tracking.\nheptapod.net — Heptapod is a friendly fork of GitLab Community Edition providing support for Mercurial\nionicframework.com - Repo and tools to develop applications with Ionic, also you have an ionic repo\nNotABug — NotABug.org is a free-software code collaboration platform for freely licensed projects, Git-based\nPagure.io — Pagure.io is a free and open source software code collaboration platform for FOSS-licensed projects, Git-based\nperforce.com — Free 1GB Cloud and Git, Mercurial, or SVN repositories.\npijul.com - Unlimited free and open source distributed version control system. Its distinctive feature is to be based on a sound theory of patches, which makes it easy to learn and use, and really distributed. Solves many problems of git/hg/svn/darcs.\nplasticscm.com — Free for individuals, OSS and nonprofit organizations\nprojectlocker.com — One free private project (Git and Subversion) with 50 MB space\nRocketGit — Repository Hosting based on Git. Unlimited Public \u0026amp; Private repositories.\nsavannah.gnu.org - Serves as a collaborative software development management system for free Software projects (for GNU Projects)\nsavannah.nongnu.org - Serves as a collaborative software development management system for free Software projects (for non-GNU projects)\n⬆ back to top\nAPIs, Data and ML # IP.City — 100 free IP geolocation requests per day\nAbstract API — API suite for a variety of use cases including IP geolocation, gender detection or even email validation.\nalgorithmia.com — Host algorithms for free. Includes free monthly allowance for running algorithms. Now with CLI support.\nApify — Web scraping and automation platform to create an API for any website and extract data. Ready-made scrapers, integrated proxies, and custom solutions. Free plan with $5 platform credits included every month.\nAPI Mocha - Completely free online API mocking for testing and prototyping. Make up to 500 requests per day, fully customizable API responses, download mock rules as a Postman collection.\nAPITemplate.io - Auto-generate images and PDF documents with a simple API or automation tools like Zapier \u0026amp; Airtable. No CSS/HTML required. Free plan comes with 50 images/month and 3 templates.\nAtlas toolkit - Lightweight library to develop single-page web applications that are instantly accessible. Available for Java, Node.js, Perl, Python and Ruby.\nBeeceptor - Mock a rest API in seconds, fake API response and much more. Free 50 requests per day, public dashboard, open endpoints (anyone having link to the dashboard can view requests and responses).\nbigml.com — Hosted machine learning algorithms. Unlimited free tasks for development, limit of 16 MB data/task.\nCalendarific - Enterprise-grade Public holiday API service for over 200 countries. Free plan includes 1000 calls per month.\nClarifai — Image API for custom face recognition and detection. Able to train AI models. Free plan has 5000 calls per month.\nCloudmersive — Utility API platform with full access to expansive API Library including Document Conversion, Virus Scanning, and more with 800 calls/month.\nColaboratory — Free web-based Python notebook environment with Nvidia Tesla K80 GPU.\nCollect2 — Create an API endpoint to test, automate, and connect webhooks. Free plan allows for two datasets, 2000 records, 1 forwarder, and 1 alert.\nConversion Tools - Online File Converter for documents, images, video, audio, eBooks. REST API is available. Libraries for Node.js, PHP, Python. Support files up to 50 GB (for paid plans). Free tier is limited by file size and number of conversions per day.\nCurlHub — Proxy service for inspecting and debugging API calls. Free plan includes 10,000 requests per month.\nCurrencyScoop - Realtime currency data API for fintech apps. Free plan includes 5000 calls per month.\nDatapane - API for building interactive reports in Python and deploying Python scripts and Jupyter Notebooks as self-service tools.\nDB Designer — Cloud based Database schema design and modeling tool with a free starter plan of 2 Database models and 10 tables per model.\nDeepAR — Augmented reality face filters for any platform with one SDK. Free plan provides up to 10 monthly active users (MAU) and tracking up to 4 faces\nDeepnote - A new kind of data science notebook. Jupyter-compatible with real-time collaboration and running in the cloud. Free tier includes unlimited personal projects, up to 750 hours of standard hardware and teams with up to 3 editors.\nDiggernaut — Cloud based web scraping and data extraction platform for turning any website to the dataset or to work with it as with an API. Free plan includes 5K page requests monthly.\nDisease.sh — A free API providing accurate data for building the Covid-19 related useful Apps.\ndominodatalab.com — Data science with support for Python, R, Spark, Hadoop, MATLAB and others.\ndreamfactory.com — Open source REST API backend for mobile, web, and IoT applications. Hook up any SQL/NoSQL database, file storage system, or external service and it instantly creates a comprehensive REST API platform with live documentation, user management,\u0026hellip;\nEfemarai - Testing and debugging platform for ML models and data. Visualize any computational graph. Free 30 debugging sessions per month for developers.\nExtendsClass - Free web-based HTTP client to send HTTP requests.\nFraudLabs Pro — Screen an order transaction for credit card payment fraud. This REST API will detect all possible fraud traits based on the input parameters of an order. Free Micro plan has 500 transactions per month.\nFreeGeoIP.app - Completely free Geo IP information (JSON, CSV, XML). No registration required, 15000 queries per hour rate limit.\nGeoDataSource — Location search service lookup for city name by using latitude and longitude coordinate. Free API queries up to 500 times per month.\nGlitterly - Programatically generate dynamic images from base templates. Restful API and nocode integrations. Free tier comes with 50 images/month and 5 templates.\nHookbin - Create unique (public or private) endpoints to collect, parse, and inspect HTTP requests. Inspect headers, body, query strings, cookies, uploaded files, etc. Useful for testing/inspecting webhook. Similar to RequestBin, and Webhook.site.\nHoppscotch - A free, fast, and beautiful API request builder.\nInvantive Cloud — Access over 70 (cloud)platforms such as Exact Online, Twinfield, ActiveCampaign or Visma using Invantive SQL or OData4 (typically Power BI or Power Query). Includes data replication and exchange. Free plan for developers and implementation consultants. Free for specific platforms with limitations in data volumes.\nIploka — IP to Geolocation API - Forever free plan for developers with 10k requests per month limit.\nIP Geolocation — IP Geolocation API - Forever free plan for developers with 30k requests per month (1k/day) limit.\nIP Geolocation API — IP Geolocation API from Abstract - Extensive free plan allowing 200,000 requests per month.\nIP2Location — Freemium IP geolocation service. LITE database is available for free download. Import the database in server and perform local query to determine city, coordinates and ISP information.\nipapi - IP Address Location API by Kloudend, Inc - A reliable geolocation API, built on AWS, trusted by Fortune 500. Free tier offers 30k lookups/month (1k/day) without signup. Contact us for a higher limit trial plan.\nIPinfo — Fast, accurate, and free (up to 100k/month) IP address data API. Offers APIs with details on geolocation, companies, carriers, IP ranges, domains, abuse contacts, and more. All paid APIs can be trialed for free.\nIPList — Lookup details about any IP address, such as Geo IP information, tor addresses, hostnames and ASN details. Free for personal and business users.\nBigDataCloud - Provides fast, accurate and free (Unlimited or up to 10K-50K/month) APIs for modern web like IP Geolocation, Reverse Geocoding, Networking Insights, Email and Phone Validation, Client Info and more.\nIPTrace — An embarrassingly simple API that provides reliable and useful IP geolocation data for your business.\nJSON IP — Returns the Public IP address of the client it is requested from. No registration required for free tier. Using CORS data can be requested using client side JS directly from browser. Useful for services monitoring change in client and server IPs. Unlimited Requests.\nkonghq.com/ — API Marketplace and powerful tools for private and public APIs. With the free tier, some features are limited such as monitoring, alerting and support.\nKreya — Free gRPC GUI client to call and test gRPC APIs. Can import gRPC APIs via server reflection.\nKSoft.Si — Free lyrics api chiefly aimed for discord bots.Also provides an extensive library of images and user data\nLightly — Improve your machine learning models by using the right data. Use datasets of up to 1'000 samples for free.\nMailboxValidator — Email verification service using real mail server connection to confirm valid email. Free API plan has 300 verifications per month.\nmicrolink.io – It turns any website into data such as metatags normalization, beauty link previews, scraping capabilities or screenshots as a service. 100 reqs/day every day free.\nmonkeylearn.com — Text analysis with machine learning, free 300 queries/month.\nMockAPI — MockAPI is a simple tool that lets you easily mock up APIs, generate custom data, and preform operations on it using RESTful interface. MockAPI is meant to be used as a prototyping/testing/learning tool. 1 project/50 resources per project for free.\nMocki - A tool that lets you create mock GraphQL and REST APIs synced to a GitHub repository. Simple REST APIs are free to create and use without signup.\nMocko.dev — Proxy your API, choose which endpoints to mock in the cloud and inspect traffic, for free. Speed up your development and integrations tests.\nreqres.in - A Free hosted REST-API ready to respond to your AJAX requests.\nmicroenv.com — Create fake REST API for developers with possibility to generate code and app in docker container.\nNews API — Search news on the web with code, get JSON results. Developers get 3,000 queries free each month.\nOCR.Space — An OCR API which parses image and pdf files returning the text results in JSON format. 25,000 requests per month free.\nOpenAPI3 Designer — Visually create Open API 3 definitions for free.\nparsehub.com — Extract data from dynamic sites, turn dynamic websites into APIs, 5 projects free.\nPixela - Free daystream database service. All operations are performed by API. Visualization with heat maps and line graphs is also possible.\nPostbacks - Request HTTP callbacks for a later time. 8,000 free requests on signup.\nPostman — Simplify workflows and create better APIs – faster – with Postman, a collaboration platform for API development. Use the Postman App for free forever. Postman cloud features are also free forever with certain limits.\nProxyCrawl — Crawl and scrape websites without the need of proxies, infrastructure or browsers. We solve captchas for you and prevent you being blocked. The first 1000 calls are free of charge.\nQuickMocker — Manage online fake API endpoints under your own subdomain, forward requests to localhost URL for webhooks development and testing, use RegExp and multiple HTTP methods for URL path, prioritize endpoints, more than 100 shortcodes (dynamic or fake response values) for response templating, import from OpenAPI (Swagger) Specifications in JSON format, proxy requests, restrict endpoint by IP address and authorization header. Free account provides 1 random subdomain, 10 endpoints, 5 RegExp URL paths, 50 shortcodes per endpoint, 100 requests per day, 50 history records in requests log.\nRequestBin.com — Create a free endpoint to which you can send HTTP requests. Any HTTP requests sent to that endpoint will be recorded with the associated payload and headers so you can observe requests from webhooks and other services.\nrestlet.com — APISpark enables any API, application or data owner to become an API provider in minutes via an intuitive browser interface.\nRoboflow - create and deploy a custom computer vision model with no prior machine learning experience required. Free tier includes up to 1,000 free source images.\nROBOHASH - Web service to generate unique (cool :) images from any text.\nScraper.AI - SaaS that turns any website into a consumable API for you to build on. Free 50 extractions and 10000 API calls / month.\nScraper API — Cloud based web scraping API handles proxies, browsers, and CAPTCHAs. Scrape any web page with a simple API call. Get started with 1000 free API calls/month.\nScraper\u0026rsquo;s Proxy — Simple HTTP proxy API made for scraping. Scrape anonymously without having to worry about restrictions, blocks or captchas. First 100 successfully scrape\u0026rsquo;s per month free including javascript rendering (more available if you contact support).\nScrapingAnt — Headless Chrome scraping API and free checked proxies service. Javascript rendering, premium rotating proxies, CAPTCHAs avoiding. Free plans available.\nScraperBox — Undetectable web scraping API using real Chrome browsers and proxy rotation. Use a simple API call to scrape any web page. Free plan has 1000 requests per month.\nScrapingDog — Scrapingdog handles millions of proxies, browsers and CAPTCHAs to provide you with HTML of any web page in a single API call. It also provides Web Scraper for Chrome \u0026amp; Firefox and a software for instant scraping demand. Free plans available.\nscrapinghub.com — Data scraping with visual interface and plugins. Free plan includes unlimited scraping on a shared server.\nScrapingNinja — Handle JS rendering, Chrome Headless, Proxy rotation and CAPTCHAs solving all in one place. The first 1000 are free of charge, no credit card required.\nSheetson - Instantly turn any Google Sheets into RESTful API. Free plan available.\nshrtcode API - Free URL Shortening API without authorization and no request limits.\nSerpApi - Real-time search engine scraping API. Returns structured JSON results for Google, Youtube, Bing, Baidu, Walmart and many other engines. Free plan includes 100 successful API calls per month.\nSimilar Words API — An API to find similar words, has vocabulary of about 4Million words.\nSofodata - Create secure RESTful APIs from CSV files. Upload a CSV file and instantly access the data via its API allowing faster application development. Free plan includes 2 APIs and 2,500 API calls per month. No credit card required.\ntamber — Put deep-learning powered recommendations in your app. Free 5k monthly active users.\nTime Door - A time series analysis API.\nTinyMCE - rich text editing API. Core features free for unlimited usage.\nUnixtime - Free API to convert Unixtime to DateTime and vice versa.\nVattly - Highly available, fast and secure VAT validation API, that provides full European Union coverage. 10 free API calls per day.\nWebhook.site - Easily test HTTP webhooks with this handy tool that displays requests instantly.\nwit.ai — NLP for developers.\nwolfram.com — Built-in knowledge-based algorithms in the cloud.\nwrapapi.com — Turn any website into a parameterized API. 30k API calls per month.\nZenscrape — Web scraping API with headless browsers, residentials IPs and simple pricing. 1000 free API calls/month, extra free credits for students and non-profits.\nip-api — IP Geolocation API, Free for non-commercial use, no API key required, limited to 45 req/minute from the same IP address for the free plan.\nWebScraping.AI - Simple Web Scraping API with built-in parsing, Chrome rendering and proxies. 2000 free API calls per month.\nZipcodebase - Free Zip Code API, access to Worldwide Postal Code Data. 10000 free requests/month.\nEVA - Free email validator API, which helps to identify whether an email is disposable and having valid MX records.\nhappi.dev - Freemium api services collection (Music, Exchange Rate, Key value store, Language Detection, Password Generator, QRCode Generator, Lyrics). 8000 free API calls per month.\n⬆ back to top\nArtifact Repos # Artifactory - An artifact repository that supports numerous package formats like Maven, Docker, Cargo, Helm, PyPI, CocoaPods, and GitLFS. Incudes package scanning tool XRay and CI/CD tool Pipelines (formerly Shippable) with a free tier of 2,000 CI/CD minutes per month.\ncentral.sonatype.org — The default artifact repository for Apache Maven, SBT and other build systems.\ncloudrepo.io - Cloud based, private and public, Maven and PyPi repositories. Free for open source projects.\ncloudsmith.io — Simple, secure and centralised repository service for Java/Maven, RedHat, Debian, Python, Ruby, Vagrant +more. Free tier + free for open source.\njitpack.io — Maven repository for JVM and Android projects on GitHub, free for public projects.\npackagecloud.io — Easy to use repository hosting for: Maven, RPM, DEB, PyPi, NPM, and RubyGem packages (has free tier).\nrepsy.io — 1 GB Free private/public Maven Repository.\n⬆ back to top\nTools for Teams and Collaboration # 3Cols - A free cloud based code snippet manager for personal and collaborative code.\nBitwarden — The easiest and safest way for individuals, teams, and business organizations to store, share, and sync sensitive data.\nBraid — Chat app designed for teams. Free for public access group, unlimited users, history, and integrations. also it provide self-hostable open-source version.\ncally.com — Find the perfect time and date for a meeting. Simple to use, works great for small and large groups.\nCalendly — Calendly is the tool for connecting and scheduling meetings. Free plan provides 1 Calendar connection per user and Unlimited meetings. Desktop and Mobile apps also provided.\nDiscord — Chat with public/private rooms. Markdown text, voice, video, and screen sharing capabilities. Free for unlimited users.\nTelegram — Telegram is for everyone who wants fast and reliable messaging and calls. Business users and small teams may like the large groups, usernames, desktop apps and powerful file sharing options.\nDuckly — Talk and collaborate in real-time with your team. Pair programming with any IDE, terminal sharing, voice, video and screen sharing. Free for small teams.\nevernote.com — Tool for organizing information. Share your notes and work together with others\nFibery — Connected workspace platform. Free for single user, up to 2 GB disk space.\nFilestash — A Dropbox-like file manager that connects to a range of protocols and platforms: S3, FTP, SFTP, Minio, Git, WebDAV, Backblaze, LDAP and more.\nflock.com — A faster way for your team to communicate. Free Unlimited Messages, Channels, Users, Apps \u0026amp; Integrations\nflowdock.com — Chat and inbox, free for teams up to 5\ngitter.im — Chat, for GitHub. Unlimited public and private rooms, free for teams up to 25\nhangouts.google.com — One place for all your conversations, for free, need a Google account\nHeySpace - Task management tool with chat, calendar, timeline and video calls. Free for up to 5 users.\nhelplightning.com — Help over video with augmented reality. Free without analytics, encryption, support\nideascale.com — Allow clients to submit ideas and vote, free for 25 members in 1 community\nIgloo — Internal portal for sharing documents, blogs and calendars etc. Free for up to 10 users.\nKeybase — Keybase is a cool FOSS alternative to Slack, it keeps everyone\u0026rsquo;s chats and files safe, from families to communities to companies.\nGoogle Meet — Use Google Meet for your business\u0026rsquo;s online video meeting needs. Meet provides secure, easy-to-join online meetings.\nmeet.jit.si — One click video conversations, screen sharing, for free\nMicrosoft Teams — Microsoft Teams is a chat-based digital hub that brings conversations, content, and apps together in one place all from a single experience. Free for up to 500k users.\nMiro - Scalable, secure, cross-device and enterprise-ready team collaboration whiteboard for distributed teams. With freemium plan.\nNotion - Notion is a note-taking and collaboration application with markdown support that also integrates tasks, wikis, and databases. The company describes the app as an all-in-one workspace for note-taking, project management and task management. In addition to cross-platform apps, it can be accessed via most web browsers.\nNuclino - A lightweight and collaborative wiki for all your team\u0026rsquo;s knowledge, docs, and notes. Free plan with all essential features, up to 50 items, 5GB total storage.\nPendulums - Pendulums is a free time tracking tool which helps you to manage your time in a better manner with an easy to use interface and useful statistics.\nRaindrop.io - Private and secure bookmarking app for macOS, Windows, Android, iOS and Web. Free Unlimited Bookmarks and Collaboration.\nelement.io — A decentralized and open source communication tool built on Matrix. Group chats, direct messaging, encrypted file transfers, voice and video chats, and easy integration with other services.\nRocket.Chat - Shared inbox for teams, secure, unlimited and open source.\nseafile.com — Private or cloud storage, file sharing, sync, discussions. Private version is full. Cloud version has just 1 GB\nSlab — A modern knowledge management service for teams. Free for up to 10 users.\nslack.com — Free for unlimited users with some feature limitations\nSpectrum - Create public or private communities for free.\nStatusPile - A status page of status pages. Track the status pages of your upstream providers.\ntalky.io — Free group video chat. Anonymous. Peer‑to‑peer. No plugins, signup, or payment required\nTefter - Bookmarking app with a powerful Slack integration. Free for open-source teams.\nTeleType — share terminals, voice, code, whiteboard and more. no sign-in required, end-to-end encrypted collaboration for developers.\nTimeCamp - Free time tracking software for unlimited users. Easily integrates with PM tools like Jira, Trello, Asana, etc.\nTree Schema — Data catalog and metadata management with APIs to manage data lineage as code. Free for teams of up to 5 users.\ntwist.com — An asynchronous-friendly team communication app where conversations stay organized and on-topic. Free and Unlimited plans available. Discounts provided for eligible teams.\nBookmarkOS.com - Free all-on-one bookmark manager, tab manager, and task manager in a customizable online desktop with folder collaboration.\ntypetalk.com — Share and discuss ideas with your team through instant messaging on the web or on your mobile\nTugboat - Preview every pull request, automated and on-demand. Free for all, complimentary Nano tier for non-profits.\nwhereby.com — One click video conversations, for free (formerly known as appear.in)\nvadoo.tv — Video hosting and marketing made simple. Upload videos with a single click. Record, manage, share \u0026amp; more. Free tier provides upto 10 videos, 1 GB storage, 10 GB bandwidth/month\nuserforge.com - Interconnected online personas, user stories and context mapping. Helps keep design and dev in sync, free for up to 3 personas and 2 collaborators.\nwistia.com — Video hosting with viewer analytics, HD video delivery and marketing tools to help understand your visitors, 25 videos and Wistia branded player\nwormhol.org — Straightforward file sharing service. Share unlimited files up to 5GB to as many peers as you want.\nzoom.us — Secure Video and Web conferencing, add-ons available. Free limited to 40 minutes\nshtab.app - Project management service that makes collaboration in the office and remotely transparent with tracker based on AI.\nzdoo.co — With CRM, OA, and Project management suites, zdoo is so powerful for team collaboration. Free cloud version with limited users and space offered, one-month free trial for premium versions.\nZulip — Real-time chat with unique email-like threading model. Free plan includes 10,000 messages of search history and File storage up to 5 GB. also it provides self-hostable open-source version.\nAutomate.io - Simple and complex automation workflow tool with over 200+ app integrations. 300 monthly actions and 5 bots are free\nrobocorp.com - Open-source stack for powering Automation Ops. Try out Cloud features and implement simple automations for free. Robot work 240 min/month, 10 Assistant runs, Storage of 100 MB.\n⬆ back to top\nCMS # acquia.com — Hosting for Drupal sites. Free tier for developers. Free development tools (such as Acquia Dev Desktop) also available\nContentful — Headless CMS. Content management and delivery APIs in the cloud. Comes with one free Community space that includes 5 users, 25K records, 48 Content Types, 2 locales.\nCosmic — Headless CMS and API toolkit. Free personal plans for developers.\nCrystallize — Headless PIM with ecommerce support. Built-in GraphQL API. Free version includes unlimited users, 1000 catalogue items, 5 GB/month bandwidth and 25k/month API calls.\nDirectus — Headless CMS. A completely free and open-source platform for managing assets and database content on-prem or in the Cloud. No limitations or paywalls.\nForestry.io/ — Headless CMS. Give your editors the power of Git. Create and edit Markdown-based content with ease. Comes with three free sites that includes 3 editors, Instant Previews. Integrates with blogs hosted on Netlify/GitHubpages/ elsewhere\nkontent.ai - A Content-as-a-Service platform that gives you all the headless CMS benefits while empowering marketers at the same time. Developer plan provides 2 users with unlimited projects with 2 environments for each, 500 content items, 2 languages with Delivery and Management API, and Custom elements support. Larger plans available to meet your needs.\nPrismic — Headless CMS. Content management interface with fully hosted and scalable API. The Community Plan provides 1 user with unlimited API calls, documents, custom types, assets, and locales. Everything that you need for your next project. Bigger free plans available for Open Content/Open Source projects.\nsanity.io – Hosted backend for structured content with customizable MIT licensed editor built with React. Unlimited projects. 3 users, 2 datasets, 500k API CDN requests, 5GB assets for free per project\nsensenet - API-first headless CMS providing enterprise-grade solutions for businesses of all size. The Developer plan provides 3 users, 500 content items, 3 built-in roles, 25+5 content types, fully accessible REST API, document preview generation and Office Online editing.\nGraphCMS - Offers free tier for small projects. GraphQL first API. Move away from legacy solutions to the GraphQL native Headless CMS - and deliver omnichannel content API first.\nSquidex - Offers free tier for small projects. API / GraphQL first. Open source, and based on event sourcing (versing every changes automatically).\n⬆ back to top\nCode Quality # SoftaCheck — An online tool that performs static analysis for C/C++ code using open source tools such as cppcheck and clang-tidy and automatically generates code documentation for users using doxygen. This tool is free for use.\nbeanstalkapp.com — A complete workflow to write, review and deploy code), free account for 1 user and 1 repository with 100 MB of storage\nbrowserling.com — Live interactive cross-browser testing, free only 3 minutes sessions with MS IE 9 under Vista at 1024 x 768 resolution\ncodacy.com — Automated code reviews for PHP, Python, Ruby, Java, JavaScript, Scala, CSS and CoffeeScript, free for unlimited public and private repositories\nCodeac.io - Automated Infrastructure as Code review tool for DevOps integrates with GitHub, Bitbucket and GitLab (even self-hosted). In addition to standard languages, it analyzes also Ansible, Terraform, CloudFormation, Kubernetes, and more. (open-source free)\nCodeBeat — Automated Code Review Platform available for many languages. Free forever for public repositories with Slack \u0026amp; E-mail integration.\ncodeclimate.com — Automated code review, free for Open Source and unlimited organisation-owned private repos (up to 4 collaborators). Also free for students and institutions.\ncodecov.io — Code coverage tool (SaaS), free for Open Source and 1 free private repo\nCodeFactor — Automated Code Review for Git. Free version includes unlimited users, unlimited public repositories and 1 private repo.\ncodescene.io - CodeScene prioritizes technical debt based on how the developers work with the code and visualizes organizational factors like team coupling and system mastery. Free for Open Source.\ncoveralls.io — Display test coverage reports, free for Open Source\ndareboost - 5 free analysis report for web performance, accessibility, security each month\ndeepcode.ai — DeepCode finds bugs, security vulnerabilities, performance and API issues based on AI. DeepCode\u0026rsquo;s speed of analysis allow us to analyse your code in real time and deliver results when you hit the save button in your IDE. Supported languages are Java, C/C++, JavaScript, Python, and TypeScript. Integrations with GitHub, BitBucket and Gitlab. Free for open source and private repos, free up to 30 developers.\ndeepscan.io — Advanced static analysis for automatically finding runtime errors in JavaScript code, free for Open Source\nDeepSource - DeepSource continuously analyzes source code changes, finds and fixes issues categorized under security, performance, anti-patterns, bug-risks, documentation and style. Native integration with GitHub, GitLab and Bitbucket.\neversql.com — EverSQL - The #1 platform for database optimization. Gain critical insights into your database and SQL queries, auto-magically.\ngerrithub.io — Gerrit code review for GitHub repositories for free\ngocover.io — Code coverage for any Go package\ngoreportcard.com — Code Quality for Go projects, free for Open Source\ngtmetrix.com — Reports and thorough recommendations to optimize websites\nholistic.dev - The #1 static code analyzer for Postgresql optimization. Performance, security, and architect database issues automatic detection service\nhoundci.com — Comments on GitHub commits about code quality, free for Open Source\nImgbot — Imgbot is a friendly robot that optimizes your images and saves you time. Optimized images mean smaller file sizes without sacrificing quality. It\u0026rsquo;s free for open source.\nKritika — Static Code Analysis for Perl with integration for GitHub. Free for unlimited public repositories.\nresmush.it — reSmush.it is a FREE API that provides image optimization. reSmush.it has been implemented on the most common CMS such as Wordpress, Drupal or Magento. reSmush.it is the most used image optimization API with more than 7 billions images already treated, and is still Free of charge.\ninsight.sensiolabs.com — Code Quality for PHP/Symfony projects, free for Open Source\nlgtm.com — Continuous security analysis for Java, Python, JavaScript, TypeScript, C#, C and C++, free for Open Source\nreviewable.io — Code review for GitHub repositories, free for public or personal repos\nparsers.dev - Abstract syntax tree parsers and intermediate representation compilers as a service\nscan.coverity.com — Static code analysis for Java, C/C++, C# and JavaScript, free for Open Source\nscrutinizer-ci.com — Continuous inspection platform, free for Open Source\nshields.io — Quality metadata badges for open source projects\nSider — Code review platform for many languages. Supports integration with GitHub. Free for public repositories with unlimited users.\nsonarcloud.io — Automated source code analysis for Java, JavaScript, C/C++, C#, VB.NET, PHP, Objective-C, Swift, Python, Groovy and even more languages, free for Open Source\nSourceLevel — Automated Code Review and Team Analytics. Free for Open Source and organizations up to 5 collaborators.\nTypo CI — Typo CI reviews your Pull Requests and commits for spelling mistakes, free for Open Source.\nViezly - Enhanced code review tool for easier code reading and navigation. Free for Open Source and free for personal usage.\nwebceo.com — SEO tools but with also code verifications and different type of advices\nzoompf.com — Fix the performance of your web sites, detailed analysis\n⬆ back to top\nCode Search and Browsing # codota.com — Codota helps developers create better software, faster by providing insights learned from all the code in the world. Plugin available.\nlibraries.io — Search and dependency update notifications for 32 different package managers, free for open source\nNamae - Search across various websites like github,gitlab,heroku,netlify and many more for availabilty of your project name.\nsearchcode.com — Comprehensive text-based code search, free for Open Source\nsourcegraph.com — Java, Go, Python, Node.js, etc., code search/cross-references, free for Open Source\ntickgit.com — Surfaces TODO comments (and other markers) to identify areas of code worth returning to for improvement.\nCodeKeep - Google Keep for Code Snippets. Organize,Discover and share code snippets, featuring a powerful code screenshot tool with preset templates and linking feature.\n⬆ back to top\nCI and CD # AccessLint — AccessLint brings automated web accessibility testing into your development workflow. It\u0026rsquo;s free for open source and education purposes.\nappcircle.io — Automated mobile CI/CD/CT for iOS and Android with online device emulators. 20 minutes build timeout (60 mins for Open Source) with single concurrency for free.\nappveyor.com — CD service for Windows, free for Open Source\nbitrise.io — A CI/CD for mobile apps, native or hybrid. With 200 free builds/month 10 min build time and two team members. OSS projects get 45 min build time, +1 concurrency and unlimited team size.\nbuddy.works — A CI/CD with 5 free projects and 1 concurrent runs (120 executions/month)\nbuddybuild.com — Build, deploy and gather feedback for your iOS and Android apps in one seamless, iterative system\ncircleci.com — Free for one concurrent build\ncirrus-ci.org - Free for public GitHub repositories\ncodefresh.io — Free-for-Life plan: 1 build, 1 environment, shared servers, unlimited public repos\ncodemagic.io - Free 500 build minutes/month\ncodeship.com — 100 private builds/month, 5 private projects, unlimited for Open Source\nContinuous PHP — continuousphp is the first and only PHP-centric Platform to build, package, test and deploy applications in the same workflow. Free for Community Projects i.e. OSS/Public/Educational projects.\ndeployhq.com — 1 project with 10 daily deployments (30 build minutes/month)\ndrone - Drone Cloud enables developers to run Continuous Delivery pipelines across multiple architectures - including x86 and Arm (both 32 bit and 64 bit) - all in one place\nLayerCI — CI for full stack projects. 1 full stack preview environment with 5GB memory \u0026amp; 3 CPUs .\nligurio/awesome-ci — Comparison of Continuous Integration services\nOctopus Deploy - Automated deployment and release-management. Free for \u0026lt;= 10 deployment targets.\nscalr.com - Remote state \u0026amp; operations backend for Terraform with full CLI support, integration with OPA and a hierarchical configuration model. Free up to 5 users.\nsemaphoreci.com — Free for Open Source, 100 private builds per month\nSquash Labs — creates a VM for each branch and makes your app available from a unique URL, Unlimited public \u0026amp; private repos, Up to 2 GB VM Sizes.\nstackahoy.io — 100% free. Unlimited deployments, branches and builds\nstyleci.io — Public GitHub repositories only\ntravis-ci.org — Free for public GitHub repositories\nMergify — workflow automation and merge queue for GitHub — Free for public GitHub repositories\n⬆ back to top\nTesting # Applitools.com — Smart visual validation for web, native mobile and desktop apps. Integrates with almost all automation solutions (like Selenium and Karma) and remote runners (Sauce Labs, Browser Stack). free for open source. A free tier for a single user with limited checkpoints per week.\nAppetize — Test your Android \u0026amp; iOS apps on this Cloud Based Android Phone/Tablets emulators and iPhone/iPad simulators directly in your browser. Free tier includes 1 concurrent session with 100 minutes usage per month. No limit on app size.\nBird Eats Bug — Report bugs faster (and better). Record your screen with Bird browser extension, it will auto-capture technical data that engineers need to debug. Free tier suitable for small teams.\nbrowserstack.com — Manual and automated browser testing, free for Open Source\ncheckbot.io — Browser extension that tests if your website follows 50+ SEO, speed and security best practices. Free tier for smaller websites.\ncrossbrowsertesting.com - Manual, Visual, and Selenium Browser Testing in the cloud - free for Open Source\ncypress.io - Fast, easy and reliable testing for anything that runs in a browser. Cypress Test Runner is always free and open source with no restrictions and limitations. Cypress Dashboard is free for open source projects for up to 5 users.\neverystep-automation.com — Records and replays all steps made in a web browser and creates scripts,\u0026hellip; free with fewer options\nGremlin — Gremlin\u0026rsquo;s Chaos Engineering tools allow you to safely, securely, and simply inject failure into your systems to find weaknesses before they cause customer-facing issues. Gremlin Free provides access to Shutdown and CPU attacks on up to 5 hosts or containers.\ngridlastic.com — Selenium Grid testing with free plan up to 4 simultaneous selenium nodes/10 grid starts/4,000 test minutes/month\nloadmill.com - Automatically create API and load tests by analyzing network traffic. Simulate up to 50 concurrent users for up to 60 minutes for free every month.\npercy.io - Add visual testing to any web app, static site, style guide, or component library. Unlimited team members, Demo app and unlimited projects, 5,000 snapshots / month.\nreflect.run - Codeless automated tests for web apps. Tests can be scheduled in-app or executed from a CI/CD tool. Each test run includes a full video recording along with console and network logs. The free tier includes an unlimited number of saved tests, with 25 test runs per month and up to 3 users.\nsaucelabs.com — Cross browser testing, Selenium testing and mobile testing, free for Open Source\ntestingbot.com — Selenium Browser and Device Testing, free for Open Source\nTestspace.com - A Dashboard for publishing automated test results and a Framework for implementing manual tests as code using GitHub. The service is free for Open Source accounts for 450 results per month.\ntesults.com — Test results reporting and test case management. Integrates with popular test frameworks. Open Source software developers, individuals, educators, and small teams getting started can request discounted and free offerings beyond basic free project.\nwebsitepulse.com — Various free network and server tools.\nqase.io - Test management system for Dev and QA teams. Manage test cases, compose test runs, perform test runs, track defects and measure impact. The free tier includes all core features, with 500Mb available for attachments and up to 3 users.\nknapsackpro.com - Speed up your tests with optimal test suite parallelisation on any CI provider. Split Ruby, JavaScript tests on parallel CI nodes to save time. Free plan for up to 10 minutes test files and free unlimited plan for Open Source projects.\nwebhook.site - Verify webhooks, outbound HTTP requests, or emails with a custom URL. Temporary URL and email address is always free.\nVaadin — Build scalable UIs in Java or TypeScript, and use the integrated tooling, components and design system to iterate faster, design better and simplify the development process. Unlimited Projects with 5 years free maintenance.\n⬆ back to top\nSecurity and PKI # alienvault.com — Uncovers compromised systems in your network\natomist.com — A quicker and more convenient way to automate a variety of development tasks. Now in beta.\nauth0.com — Hosted free for development SSO. Up to 2 social identity providers for closed-source projects.\nAuthress — Authentication login and access control, unlimited identity providers for any project. Facebook, Google, Twitter and more. First 1000 API calls are free.\nAuthy - Two-factor authentication (2FA) on multiple devices, with backups. Drop-in replacement for Google Authenticator. Free for up to 100 successful authentications.\nbitninja.io — Botnet protection through a blacklist, free plan only reports limited information on each attack\nBridgecrew — Infrastructure as code (IaC) security powered by the open source tool - Checkov. The core Bridgecrew platform is free for up to 50 IaC resources.\ncloudsploit.com — Amazon Web Services (AWS) security and compliance auditing and monitoring\nCmd — Security platform providing real-time access control and dynamic policy enforcement on every Linux instance in your cloud or datacenter\nCodeNotary.io — Open Source platform with indelible proof to notarize code, files, directories or container\ncrypteron.com — Cloud-first, developer-friendly security platform prevents data breaches in .NET and Java applications\nDependabot Automated dependency updates for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java (Maven and Gradle), .NET, Go, Elm, Docker, Terraform, Git Submodules and GitHub Actions.\nDJ Checkup — Scan your Django site for security flaws with this free, automated, checkup tool. Forked from the Pony Checkup site.\nDoppler — Universal Secrets Manager for application secrets and config, with support for syncing to various cloud providers. Free for unlimited users with basic access controls.\nduo.com — Two-factor authentication (2FA) for website or app. Free for 10 users, all authentication methods, unlimited, integrations, hardware tokens.\nfoxpass.com — Hosted LDAP and RADIUS. Easy per-user logins to servers, VPNs and wireless networks. Free for 10 users\nglobalsign.com — Free SSL certificates for Open Source\nHave I been pwned? — REST API for fetching the information on the breaches.\nInternet.nl — Test for modern Internet Standards like IPv6, DNSSEC, HTTPS, DMARC, STARTTLS and DANE\nJumpcloud — Provides directory as a service similar to Azure AD, user management, single sign-on, and RADIUS authentication. Free for up to 10 users.\nkeychest.net - SSL expiry management and cert purchase with an integrated CT database\nletsencrypt.org — Free SSL Certificate Authority with certs trusted by all major browsers\nLoginRadius — Managed User Authentication service for free. Email registration and 3 social providers.\nlogintc.com — Two-factor authentication (2FA) by push notifications, free for 10 users, VPN, Websites and SSH\nmeterian.io - Monitor Java, Javascript, .NET, Scala, Ruby and NodeJS projects for security vulnerabilities in dependencies. Free for one private project, unlimited projects for open source.\nMozilla Observatory — Find and fix security vulnerabilities in your site.\nOkta — User management, authentication and authorization. Free for up to 1000 monthly active users.\nonelogin.com — Identity as a Service (IDaaS), Single Sign-On Identity Provider, Cloud SSO IdP, 3 company apps and 5 personal apps, unlimited users\nOperous — Cloud instance testing tool with a comprehensive and automated set of test-suites of best practices, performance, and security. Free tier offers 100 testing minutes, 10 Test Suites, and up to 5 instances to 1 user.\nopswat.com — Security Monitoring of computers, devices, applications, configurations,\u0026hellip; Free 25 users and 30 days history users.\npyup.io — Monitor Python dependencies for security vulnerabilities and update them automatically. Free for one private project, unlimited projects for open source.\nqualys.com — Find web app vulnerabilities, audit for OWASP Risks\nreCAPTCHAMe — free reCAPTCHA and hCAPTCHA backend service. No Server-Side coding needed. Works for static websites.\nreport-uri.io — CSP and HPKP violation reporting\nringcaptcha.com — Tools to use phone number as id, available for free\nsnyk.io — Can find and fix known security vulnerabilities in your open source dependencies. Unlimited tests and remediation for open source projects. Limited to 200 tests/month for your private projects.\nSqreen — Application security monitoring and protection (RASP, WAF and more) for web applications and APIs. Free for 1 app and 3 million requests.\nssllabs.com — Very deep analysis of the configuration of any SSL web server\nStackHawk Automate application scanning throughout your pipeline to find and fix security bugs before they hit production. Unlimited scans and environments for a single app.\nSucuri SiteCheck - Free website security check and malware scanner\nProtectumus - Free website security check, site antivirus and server firewall (WAF) for PHP. Email notifications for registered users in free tier.\nTestTLS.com - Test a SSL/TLS service for secure server configuration, certificates, chains etc. Not limited to HTTPS.\nthreatconnect.com — Threat intelligence: It is designed for individual researchers, analysts and organizations who are starting to learn about cyber threat intelligence. Free up to 3 Users\ntinfoilsecurity.com — Automated vulnerability scanning. Free plan allows weekly XSS scans\nUbiq Security — Encrypt and decrypt data with 3 lines of code and automatic key management. Free for 1 application and up to 1,000,000 encryptions per month.\nVirgil Security — Tools and services for implementing end-to-end encryption, database protection, IoT security and more in your digital solution. Free for applications with up to 250 users.\nVirushee — Privacy-oriented file/data scanning powered by hybrid heuristic and AI-assisted engine. Possible to use internal dynamic sandbox analysis. Limited to 50MB per file upload\n⬆ back to top\nManagement System # bitnami.com — Deploy prepared apps on IaaS. Management of 1 AWS micro instance free\nEsper — MDM and MAM for Android Devices with DevOps. 100 devices free with 1 user license and 25 MB Application Storage.\njamf.com — Device management for iPads, iPhones and Macs, 3 devices free\nMiradore — Device Management service. Stay up-to-date with your device fleet and secure an unlimited number of devices for free. Free plan offers basic features.\nmoss.sh - Help developers deploy and manage their web apps and servers. Free up to 25 git deployments per month\nruncloud.io - Server management focusing mainly on PHP projects. Free for up to 1 server.\nploi.io - Server management tool to easily manage and deploy your servers \u0026amp; sites. Free for 1 server.\n⬆ back to top\nMessaging # Ably - Realtime messaging service with presence, persistence and guaranteed delivery. Free plan includes 3m messages per month, 100 peak connections and 100 peak channels.\ncloudamqp.com — RabbitMQ as a Service. Little Lemur plan: max 1 million messages/month, max 20 concurrent connections, max 100 queues, max 10,000 queued messages, multiple nodes in different AZ\u0026rsquo;s\nconnectycube.com - Unlimited chat messages, p2p voice \u0026amp; video calls, files attachments and push notifications. Free for apps up to 20K MAU.\ncourier.com — Single API for push, in-app, email, chat, SMS, and other messaging channels with template management and other features. Free plan includes 10,000 messages/mo.\npusher.com — Realtime messaging service. Free for up to 100 simultaneous connections and 200,000 messages/day\nscaledrone.com — Realtime messaging service. Free for up to 20 simultaneous connections and 100,000 events/day\nsynadia.com — NATS.io as a service. Global, AWS, GCP, and Azure. Free forever with 4k msg size, 50 active connections and 5GB of data per month.\ncloudkarafka.com - Free Shared Kafka cluster, up to 5 topics, 10MB data per topic and 28 days of data retention.\npubnub.com - Swift, Kotlin and React messaging at 1 million transactions each month. Transactions may contain multiple messages.\n⬆ back to top\nLog Management # bugfender.com — Free up to 100k log lines/day with 24 hours retention\nhumio.com — Free up to 2 GB/day with 7 days retention\nlogdna.com - Free for a single user, no retention, unlimited hosts and sources\nlogentries.com — Free up to 5 GB/month with 7 days retention\nloggly.com — Free for a single user, see the lite option\nlogz.io — Free up to 3 GB/day, 3 days retention\nManageEngine Log360 Cloud — Log Management service powered by Manage Engine. Free Plan offers 50 GB storage with 1 Month retention.\npapertrailapp.com — 48 hours search, 7 days archive, 100 MB/month\nsematext.com — Free up to 500 MB/day, 7 days retention\nsumologic.com — Free up to 500 MB/day, 7 days retention\n⬆ back to top\nTranslation Management # crowdin.com — Unlimited projects, unlimited strings and collaborators for Open Source\ngitlocalize.com - Free and unlimited for both private and public repositories\nlingohub.com — Free up to 3 users, always free for Open Source\nlocalazy.com - Free for 1000 source language strings, unlimited languages, unlimited contributors, startup and open source deals\nLocaleum - Free up to 1000 strings, 1 user, unlimited languages, unlimited projects\nlocalizely.com — Free for Open Source\nLoco — Free up to 2000 translations, Unlimited translators, 10 languages/project, 1000 translatable assets/project\noneskyapp.com — Limited free edition for up to 5 users, free for Open Source\nPOEditor — Free up to 1000 strings\nSimpleLocalize - Free up to 100 translation keys, unlimited strings, unlimited languages, startup deals\nTexterify - Free for a single user\ntransifex.com — Free for Open Source\nTranslation.io - Free for Open Source\nwebtranslateit.com — Free up to 500 strings\nweblate.org — It\u0026rsquo;s free for libre projects up to 10,000 string source for the free tier, and Unlimited Self-hosted on-premises.\n⬆ back to top\nMonitoring # Pingmeter.com - 5 uptime monitors with 10 minutes interval. monitor SSH, HTTP, HTTPS, and any custom TCP ports.\namixr.io - Developer-friendly alerting and on-call management with brilliant Slack Integration, API and Terraform. Free phone call, SMS, Telegram, Slack and E-Mail packages.\nappdynamics.com — Free for 24 hours metrics, application performance management agents limited to one Java, one .NET, one PHP and one Node.js\nappneta.com — Free with 1-hour data retention\nassertible.com — Automated API testing and monitoring. Free plans for teams and individuals.\nblackfire.io — Blackfire is the SaaS-delivered Application Performance Solution. Free Hacker plan (PHP only)\nchecklyhq.com - Open source E2E / Synthetic monitoring and deep API monitoring for developers. Free plan with 5 users and 50k+ check runs.\ncirconus.com — Free for 20 metrics\ncloudsploit.com — AWS security and configuration monitoring. Free: unlimited on-demand scans, unlimited users, unlimited stored accounts. Subscription: automated scanning, API access, etc.\ndatadoghq.com — Free for up to 5 nodes\ndeadmanssnitch.com — Monitoring for cron jobs. 1 free snitch (monitor), more if you refer others to sign up\nelastic.co — Instant performance insights for JS developers. Free with 24 hours data retention\nfreeboard.io — Free for public projects. Dashboards for your Internet of Things (IoT) projects\nfreshworks.com — Monitor 50 URLs at 1-minute interval with 10 Global locations and 5 Public status pages for Free\ngitential.com — Software Development Analytics platform. Free: unlimited public repositories, unlimited users, free trial for private repos. On-prem version available for enterprise.\nGrafana Cloud - Grafana Cloud is a composable observability platform, integrating metrics and logs with Grafana. Free: 3 users, 10 dashboards, 100 alerts, metrics storage in Prometheus and Graphite (10,000 series, 14 days retention), logs storage in Loki (50 GB of logs, 14 days retention)\nhealthchecks.io — Monitor your cron jobs and background tasks. Free for up to 20 checks.\ninspector.dev - A complete Real-Time monitoring dashboard in less than one minute with free forever tier.\ninstrumentalapp.com - Beautiful and easy-to-use application and server monitoring with up to 500 metrics and 3 hours of data visibility for free\nkeychest.net/speedtest - Independent speed test and TLS handshake latency test against Digital Ocean\nletsmonitor.org - SSL monitoring, free for up to 5 monitors\nloader.io — Free load testing tools with limitations\nnewrelic.com — New Relic observability platform built to help engineers create more perfect software. From monoliths to serverless, you can instrument everything, then analyze, troubleshoot, and optimize your entire software stack. Free tier offers 100GB/month of free data ingest, 1 free full access user, and unlimited free basic users.\nnixstats.com - Free for one server. E-Mail Notifications, public status page, 60 second interval and more.\nnodequery.com — Free basic server monitors up to 10 servers\nOnlineOrNot.com - 10 uptime monitors with a 5 minute interval, 1 page speed monitors with a 12 hour interval. Free alerts via Slack and Email.\nopsgenie.com — Powerful alerting and on-call management for operating always-on services. Free up to 5 users.\npaessler.com — Powerful infrastructure and network monitoring solution including alerting, strong visualization capabilities and basic reporting. Free up to 100 sensors.\npagertree.com - Simple interface for alerting and on-call management. Free up to 5 users.\npingbreak.com — Modern uptime monitoring service. Check unlimited URLs and get downtime notifications via Discord, Slack or email.\npingpong.one — Advanced status page platform with monitoring. Free tier includes one public customizable status page with SSL subdomain. Pro plan is offered to open-source projects and non-profits free of charge.\nsematext.com — Free for 24 hours metrics, unlimited number of servers, 10 custom metrics, 500,000 custom metrics data points, unlimited dashboards, users, etc.\nsitemonki.com — Website, domain, Cron \u0026amp; SSL monitoring, 5 monitors in each category for free\nskylight.io — Free for first 100,000 requests (Rails only)\nspeedchecker.xyz — Performance Monitoring API, checks Ping, DNS, etc.\nstathat.com — Get started with 10 stats for free, no expiration\nstatuscake.com — Website monitoring, unlimited tests free with limitations\nstatusgator.com — Status page monitoring, 3 monitors free\nthousandeyes.com — Network and user experience monitoring. 3 locations and 20 data feeds of major web services free\nthundra.io/apm — Application monitoring and debugging. Has a free tier up to 250k monthly invocations.\nuptimerobot.com — Website monitoring, 50 monitors free\nuptimetoolbox.com — Free monitoring for 5 websites, 60 second intervals, public statuspage.\nzenduty.com — End-to-end incident management, alerting, on-call management and response orchestration platform for network operations, site reliability engineering and DevOps teams. Free for upto 5 users.\nasayer.io — Hosted version of openreplay, an open-source session replay (alternative to FullStory and LogRocket). Free 1k sessions/month with 14 days retention\nlean20.com - Public status pages for incident reporting. 100% free.\n⬆ back to top\nCrash and Exception Handling # CatchJS.com - JavaScript error tracking with screenshots and click trails. Free for open source projects.\nbugsnag.com — Free for up to 2,000 errors/month after the initial trial\nexceptionless — Real-time error, feature, log reporting and more. Free for 3k events per month/1 user. Open source and easy to self-host for unlimited use.\nGlitchTip — Simple, open source error tracking. Compatible with open-source Sentry SDKs. 1000 events per month for free, or can self-host with no limits\nhoneybadger.io - Exception, uptime, and cron monitoring. Free for small teams and open-source projects (12,000 errors/month).\nrollbar.com — Exception and error monitoring, free plan with 5,000 errors/month, unlimited users, 30 days retention\nsentry.io — Sentry tracks app exceptions in real-time, has a small free plan. Free for 5k errors per month/ 1 user, unrestricted use if self-hosted\n⬆ back to top\nSearch # algolia.com — Hosted search-as-you-type (instant). Free hacker plan up to 10,000 documents and 100,000 operations. Bigger free plans available for community/Open Source projects\nbonsai.io — Free 1 GB memory and 1 GB storage\nsearchly.com — Free 2 indices and 20 MB storage\npagedart.com - AI search as a service the free tier includes 1000 Documents, 50000 searches. Larger free tiers are possible for worthwhile projects.\n⬆ back to top\nEmail # 10minutemail - Free, temporary email for testing.\nAnonAddy - Open-source anonymous email forwarding, create unlimited email aliases for free\nAntideo — 10 API requests per hour for email verification, IP and phone number validation in free tier. No Credit Cards required.\nbiz.mail.ru — 5,000 mailboxes with 25 GB each per custom domain with DNS hosting\nBump - Free 10 Bump email addresses, 1 custom domain\nBurnermail – Free 5 Burner Email Addresses, 1 Mailbox, 7 day Mailbox History\nButtondown — Newsletter service. Up to 1,000 subscribers free\nCloudMailin - Incoming email via HTTP POST and transactional outbound - 10,000 free emails/month\ncloudmersive.com — Email validation and verification API for developers, 2,000 free API requests/month\nContact.do — Contact form in a link (bitly for contact forms) - totally free!\ndebugmail.io — Easy to use testing mail server for developers\nelasticemail.com — 100 free emails/day. 1,000 emails for $0.09 through API (pay as you go).\nEva — Verify 5 million emails per day for free using REST API. No sign-ups required.\nfakermail.com — Free, temporary email for testing with last 100 email accounts stored.\nforwardemail.net — Free email forwarding for custom domains. Create and forward an unlimited amount of email addresses with your domain name (note: You must pay if you use .casa, .cf, .click, .email, .fit, .ga, .gdn, .gq, .loan, .london, .men, .ml, .pl, .rest, .ru, .tk, .top, .work TLDs due to spam)\nImprovMX – Free email forwarding\ninboxkitten.com - Free temporary/disposable email inbox, with up-to 3 day email auto-deletes. Open sourced, and can be self-hosted.\ninumbo.com — SMTP based spam filter, free for 10 users\nkickbox.io — Verify 100 emails free, real-time API available\nmail.tm — Disposable e-mail with user friendly interface. No registration needed.\nmailazy.com — Mailazy is the only simple transactional email service you’ll need. 15,000 emails/month free forever (500 emails/day sending limit).\nmail-tester.com — Test if email\u0026rsquo;s dns/spf/dkim/dmarc settings are correct, 20 free/month\nmailboxlayer.com — Email validation and verification JSON API for developers. 1,000 free API requests/month\nmailcatcher.me — Catches mail and serves it through a web interface\nmailchimp.com — 2,000 subscribers and 12,000 emails/month free\nMailerLite.com — 1,000 subscribers/month, 12,000 emails/month free\nmailinator.com — Free, public, email system where you can use any inbox you want\nmailjet.com — 6,000 emails/month free (200 emails daily sending limit)\nmailkitchen — Free for life without commitment, 10,000 emails/month, 1,000 emails/day\nMailnesia - Free temporary/disposable email, which auto visit registration link.\nmailsac.com - Free API for temporary email testing, free public email hosting, outbound capture, email-to-slack/websocket/webhook (1,500 monthly API limit)\nMailtie.com - Free Email Forwarding for Your Domain. No registration required. Free Forever.\nmailtrap.io — Fake SMTP server for development, free plan with 1 inbox, 50 messages, no team member, 2 emails/second, no forward rules\nmailvalidator.io - Verify 300 emails/month for free, real-time API with bulk processing available\nmail7.io — Free Temp Email Addresses for QA Developers. Create email addresses instantly using Web Interface or API\nmohmal.com — Disposable temporary email\nmoosend.com — Mailing list management service. Free account for 6 months for startups\nOutlook.com - Free personal email and calendar\npepipost.com — 30k emails free for first month, then first 100 emails/day free\nphplist.com — Hosted version allow 300 emails/month free\npostmarkapp.com - 100 emails/month free, unlimited DMARC weekly digests\nQuickEmailVerification — Verify 100 emails daily for free on a free tier along with other free APIs like DEA Detector, DNS Lookup, SPF Detector and more.\nSender Up to 15 000 emails/month - Up to 2 500 subscribers\nsendgrid.com — 100 emails/day and 2,000 contacts free\nsendinblue.com — 9,000 emails/month free\nsendpulse.com — 50 emails free/hour, first 12,000 emails/month free\nsocketlabs.com - 40k emails free for first month, then first 2000 emails/month free\nsparkpost.com — First 500 emails/month free\nSubstack — Unlimited free newsletter service. Start paying when you charge for it.\nTempmailo - Unlimited free temp email addresses. Autoexpire in two days.\nHotTempMail - Unlimited free temp email or disposable temporary email addresses. Autoexpires in one day.\ntemp-mail.io — Free disposable temporary email service with multiple emails at once and forwarding\ntemp-mail.org — Temporary, secure, anonymous, free, disposable email address with REST API for fetching 100 emails from its disposable mailbox per day for free.\ntestmail.app - Automate end-to-end email tests with unlimited mailboxes and a GraphQL API. 100 emails/month free forever, unlimited free for open source.\ntinyletter.com — 5,000 subscribers/month free\ntrashmail.com - Free disposable email addresses with forwarding and automatic address expiration\nValidator.Pizza — Free API to detect disposable emails\nVerifalia — Real-time email verification API with mailbox confirmation and disposable email address detector; 25 free email verifications/day.\nverimail.io — Bulk and API email verification service. 100 free verifications/month\nYandex.Connect — Free email and DNS hosting for up to 1,000 users\nyopmail.fr — Disposable email addresses\nZoho — Started as an e-mail provider but now provides a suite of services out of which some of them have free plans. List of services having free plans :\nEmail Free for 5 users. 5GB/user \u0026amp; 25 MB attachment limit, 1 domain.\nSprints Free for 5 users,5 Projects \u0026amp; 500MB storage.\nDocs — Free for 5 users with 1 GB upload limit \u0026amp; 5GB storage. Zoho Office Suite (Writer,Sheets \u0026amp; Show) comes bundled with it.\nProjects — Free for 3 users, 2 projects \u0026amp; 10 MB attachment limit. Same plan applies to Bugtracker.\nConnect — Team Collaboration free for 25 users with 3 groups, 3 custom apps, 3 Boards, 3 Manuals, 10 Integrations along with channels,events \u0026amp; forums.\nMeeting — Meetings with upto 3 meeting participants \u0026amp; 10 Webinar attendees.\nVault — Password Management free for Individuals.\nShowtime — Yet another Meeting software for training for a remote session upto 5 attendees.\nNotebook — A free alternative to Evernote.\nWiki — Free for 3 users with 50 MB storage, unlimited pages, zip backups, RSS \u0026amp; Atom feed, access controls \u0026amp; customisable CSS.\nSubscriptions — Recurring Billing management free for 20 customers/subscriptions \u0026amp; 1 user with all the payment hosting done by Zoho themselves. Last 40 subscription metrics are stored\nCheckout — Product Billing management with 3 pages \u0026amp; up to 50 payments.\nDesk — Customer Support management with 3 agents and private knowledge base, email tickets. Integrates with Assist for 1 remote technician \u0026amp; 5 unattended computers.\nCliq — Team chat software with 100 GB storage, unlimited users, 100 users per channel \u0026amp; SSO.\nCampaigns\nForms\nSign\nSurveys\nBookings\nAnalytics\nSimpleLogin – Open source, self-hostable email alias/forwarding solution. Free 5 Aliases, unlimited bandwith, unlimited reply/send. Free for educational staffs (student, researcher, etc).\nEmailJS – This is not a full email server, this is just email client which you can use to send emails right from client send without exposing your credentials, the free tier has: 200 monthly requests, 2 email templates, Requests up to 50Kb, Limited contacts history.\n⬆ back to top\nFont # dafont - The fonts presented on this website are their authors\u0026rsquo; property, and are either freeware, shareware, demo versions or public domain.\nEverything Fonts - Offers multiple tools; @font-face, Units Converter, Font Hinter and Font Submitter.\nFont Squirrel - Freeware fonts that is licensed for commercial work. Hand-selected these typefaces and presenting them in an easy-to-use format.\nGoogle Fonts - Lots of free fonts that are easy and quick to install in a website via a download or a link to Google\u0026rsquo;s CDN.\nFontGet - Has a variety of fonts available to download and sorted neatly with tags.\n⬆ back to top\nForms # 99inbound.com - Build forms and share them online. Get an email or Slack message for each submission. Free plan has 2 forms, 100 entries per month, basic email \u0026amp; Slack.\nForm.taxi — Endpoint for HTML forms submissions. With notifications, spam blocker and GDPR-compliant data processing. Free plan for basic usage.\nFormcake.com - Form backend for devs, free plan allows unlimited forms, 100 submissions, Zapier integration. No libraries or dependencies required.\nFormcarry.com - HTTP POST Form endpoint, Free plan allows 100 submissions per month.\nformingo.co- Easy HTML forms for static websites, get started for free without registering an account. Free plan allows 500 submissions per month, customizable reply-to email address.\nformlets.com — Online forms, unlimited single page forms/month, 100 submissions/month, email notifications.\nformspark.io - Form to Email service, free plan allows unlimited forms, 250 submissions per month, support by Customer assistance team.\nFormspree.io — Send email using an HTTP POST request. Free tier limits to 50 submissions per form per month.\nFormsubmit.co — Easy form endpoints for your HTML forms. Free Forever. No registration required.\ngetform.io - Form backend platform for designers and developers, 1 form, 50 submissions, Single file upload, 100MB file storage.\nHeroTofu.com - Forms backend with bot detection and encrypted archive. Forward submissions via UI to email, Slack, or Zapier. Use your own frontend, no server code required. Free plan gives unlimited forms and 100 submissions per month.\nKwes.io - Feature rich form endpoint. Works great with static sites. Free plan includes up 1 website with up to 50 submissions per month.\nQualtrics Survey — Create professional forms \u0026amp; survey using this first class tool. 50+ expert-designed survey templates. Free Account has limit of 1 active survey, 100 responses/survey \u0026amp; 8 response types.\nPageclip - Free plan allows one site, one form, 1,000 submissions per month.\nsmartforms.dev - Powerful and easy form backend for your website, forever free plan allows 50 submissions per month, 250MB file storage, Zapier integration, CSV/JSON export, custom redirect, custom response page, Telegram \u0026amp; Slack bot, single email notifications.\nstaticforms.xyz - Integrate HTML forms easily without any server side code for free. After user submits the form an email will be sent to your registered address with form content.\nTypeform.com — Include beautifully designed forms on websites. Free plan allows only 10 fields per form and 100 responses per month.\nWaiverStevie.com - Electronic Signature platform with a REST API. Receive notifications with webhooks. Free plan watermarks signed documents, but allows unlimited envelopes + signatures.\nWufoo - Quick forms to use on websites. Free plan has a limit of 100 submissions each month.\nWeb3Forms - Contact forms for Static \u0026amp; JAMStack Websites without writing backend code. Free plan allows Unlimited Forms, Unlimited Domains \u0026amp; 250 Submissions per month.\n⬆ back to top\nCDN and Protection # Arvan Cloud — Offers cloud related services (CDN,Cloud DNS, PaaS, Security etc.). Free plan offers :\nCDN with Free SSL. 50 GB Traffic + 1 Million HTTP(S) Requests.\nFree Cloud DNS for unlimited domains.\nFree Cloud Security with Basic DDoS Protection + 5 Firewall Rules.\nFree VoD (Video On Demand) Platform with 10 GB Storage + 50 GB Traffic.\nbootstrapcdn.com — CDN for bootstrap, bootswatch and fontawesome.io\ncdnjs.com — Simple. Fast. Reliable. Content delivery at its finest. cdnjs is a free and open-source CDN service trusted by over 11% of all websites, powered by Cloudflare.\nCloudflare\nCDN along with free SSL\nFree DNS for unlimited number of domains\nFirewall rules and pagerules\nAnalytics\nTryCloudflare — Expose local HTTP servers through Argo Tunnel to public.\nCloudflare Pages — Free web hosting (JAMstack platform) for frontend developers to collaborate and deploy websites. 1 build at a time, 500 builds/month, unlimited sites, unlimited requests, unlimited bandwidth.\nCloudflare Workers - Deploy serverless code for free on Cloudflare\u0026rsquo;s global network. 100,000 free requests per day with a workers.dev subdomain.\nddos-guard.net — Free CDN, DDoS protection and SSL certificate\ndevelopers.google.com — The Google Hosted Libraries is a content distribution network for the most popular, Open Source JavaScript libraries\njare.io — CDN for images. Uses AWS CloudFront\njsdelivr.com — A free, fast, and reliable CDN for open source. Supports npm, GitHub, WordPress, Deno, and more.\nMicrosoft Ajax — The Microsoft Ajax CDN hosts popular third-party JavaScript libraries such as jQuery and enables you to easily add them to your Web application\nnetdepot.com — First 100 GB free/month\novh.ie — Free DDoS protection and SSL certificate\nPageCDN.com - Offers free Public CDN for everyone, and free Private CDN for opensource / nonprofits.\nSkypack — The 100% Native ES Module JavaScript CDN. Free for 1 million requests per domain, per month.\nraw.githack.com — A modern replacement of rawgit.com which simply hosts file using Cloudflare\nsection.io — A simple way to spin up and manage a complete Varnish Cache solution. Supposedly free forever for one site\nspeeder.io — Uses KeyCDN. Automatic image optimization and free CDN boost. Free and does not require any server changes\nstatically.io — CDN for Git repos (GitHub, GitLab, Bitbucket), WordPress-related assets and images\ntoranproxy.com — Proxy for Packagist and GitHub. Never fail CD. Free for personal use, 1 developer, no support\nunpkg.com — CDN for everything on npm\nNamecheap Supersonic — Free DDoS protection\n⬆ back to top\nPaaS # anvil.works - Web app development with nothing but Python. Free tier with unlimited apps.\nappharbor.com — A .Net PaaS that provides 1 free worker\nconfigure.it — Mobile app development platform, free for 2 projects, limited features but no resource limits\ncodenameone.com — Open source, cross platform, mobile app development toolchain for Java/Kotlin developers. Free for commercial use with unlimited number of projects\nDeta – Deploy unlimited number of Node.js and Python apps for free. Includes free DBs, Auth and email.\ndronahq.com — No code application development platform for enterprises to visually develop application, integrate with existing systems to Build internal apps, processes and forms, rapidly. Free plan offers 200 Tasks/month, Unlimited Draft Apps and 1 Published Apps\nencore.dev — Backend framework using static analysis to provide automatic infrastructure, boilerplate free code, and more. Includes free cloud hosting for hobby projects.\ngigalixir.com - Gigalixir provide 1 free instance that never sleeps, and free-tier PostgreSQL database limited to 2 connections, 10, 000 rows and no backups, for Elixir/Phoenix apps.\nglitch.com — Free public hosting with features such as code sharing and real-time collaboration. Free plan has 1000 hours/month limit.\nheroku.com — Host your apps in the cloud, free for single process apps\nKrucible — Krucible is a platform for creating Kubernetes clusters for testing and development. Free tier accounts come with 25 cluster-hours per month.\nMendix — Rapid Application Development for Enterprises, unlimited number of free sandbox environments supporting unlimited users, 0.5 GB storage and 1 GB RAM per app. Also Studio and Studio Pro IDEs are allowed in free tier.\nm3o.com - A cloud platform for API services development. M3O is a fully managed Micro as a Service offering focusing on Go microservices development in the Cloud. Free tier provides enough to run 5 services and collaborate with others.\nOkteto Cloud - Managed Kubernetes service designed for remote development. Free developer accounts come with 5 Kubernetes namespaces, 3Gi/pod with a maximum of 8Gi/namespace, 1CPU/pod with a maximum of 4CPUs/namespace and 5GB Disk space. The apps sleep after 24 hours of inactivity.\nopeNode — Free Node.js hosting for Open Source projects. 100 GB Bandwidth/month with 100 MB memory \u0026amp; 1000 MB storage. Deploy using CLI or existing Git repository.\noutsystems.com — Enterprise web development PaaS for on-premise or cloud, free \u0026ldquo;personal environment\u0026rdquo; offering allows for unlimited code and up to 1 GB database\npipedream.com - An integration platform built for developers. Develop any workflow, based on any trigger. Workflows are code, which you can run for free. No server or cloud resources to manage.\npythonanywhere.com — Cloud Python app hosting. Beginner account is free, 1 Python web application at your-username.pythonanywhere.com domain, 512 MB private file storage, one MySQL database\nscn.sap.com — The in-memory Platform-as-a-Service offering from SAP. Free developer accounts come with 1 GB structured, 1 GB unstructured, 1 GB of Git data and allow you to run HTML5, Java and HANA XS apps\nstaroid.com - Managed Kubernetes namespace service designed to fund open source developers. Free 8 CPUs and 16GB of RAM namespace to test branches and pull requests of public repository. Free test namespace shutdown every 30 minutes. Maximum 2 concurrent test namespaces.\nSUSE Developer Program — Experience cloud native productivity for free. Get hands-on with the SUSE Cloud Application Platform with your own Developer Sandbox. 1 Free Application. Free subdomain provided along with API for CLI. Storage \u0026amp; Memory Quota of 1 GB.\nPlatform9 - Managed Kubernetes service designed for developers. Free developer accounts come with up to 3 clusters \u0026amp; 20 nodes cluster.\nfly.io - Fly is a platform for applications that need to run globally. It runs your code close to users and scales compute in cities where your app is busiest. Write your code, package it into a Docker image, deploy it to Fly\u0026rsquo;s platform and let that do all the work to keep your app snappy. Free for side projects, $10/mo of service credit that automatically applies to any paid service. And if you ran really small virtual machines, credits will go a long way.\nappfleet.com - appfleet is an edge platform that allows its users to deploy containers globally to multiple regions at the same time. It offers a simple to use UI while automating all the complexity like smart routing, clustering, failover, monitoring and so on. It’s free for open source projects and all users automatically get $10 to host whatever they want.\nDivio - A platform to manage cloud application deploying only using Docker. Available free subscription for development projects.\nKoyeb - Koyeb is a developer-friendly serverless platform to deploy apps globally. Seamlessly run Docker containers, web apps, and APIs with git-based deployment, native autoscaling, a global edge network, and built-in service mesh and discovery. Koyeb provides two nano services to run your apps with its forever-free tier and also sponsors open-source projects with free resources.\nRailway - Railway is an infrastructure platform where you can provision infrastructure, develop with that infrastructure locally, and then deploy to the cloud. 3 Projects, 2 Plugins / Project, 2 Environments / Project, 3 Live Deploys / Environment available for free.\n⬆ back to top\nBaaS # ably.com - APIs for realtime messaging, push notifications, and event-driven API creation. Free plan has 3m messages/mo, 100 concurrent connections, 100 concurrent channels.\nback4app.com - Back4App is an easy-to-use, flexible and scalable backend based on Parse Platform.\nbackendless.com — Mobile and Web Baas, with 1 GB file storage free, push notifications 50000/month, and 1000 data objects in table.\nblockspring.com — Cloud functions. Free for 5 million runs/month\nBMC Developer Program — The BMC Developer Program provides documentation and resources to build and deploy digital innovations for your enterprise. Access to a comprehensive, personal sandbox which includes the platform, SDK, and a library of components that can be used to build and tailor apps.\ndarklang.com - Hosted language combined with editor and infrastructure. Free during the beta, generous free tier planned after beta.\nFirebase — Firebase helps you build and run successful apps. Free Spark Plan offers Authentication, Hosting, Firebase ML , Realtime Database,Cloud Storage,Testlab. A/B Testing, Analytics, App Distribution, App Indexing, Cloud Messaging (FCM), Crashlytics, Dynamic Links, In-App Messaging, Performance Monitoring, Predictions, and Remote Config are always-free.\nFlutter Flow — Build your Flutter App UI without writing a single line of code. Also has a Firebase integration. Free plan includes full access to UI Builder and Free templates.\ngetstream.io — Build scalable newsfeeds, activity streams, chat and messaging in a few hours instead of weeks\nhasura.io — Platform to build and deploy app backends fast, free for single node cluster.\niron.io — Async task processing (like AWS Lambda) with free tier and 1-month free trial\nnetlicensing.io - A cost-effective and integrated Licensing-as-a-Service (LaaS) solution for your software on any platform from Desktop to IoT and SaaS. Basic Plan for FREE while you are a student.\nonesignal.com — Unlimited free push notifications\nparaio.com — Backend service API with flexible authentication, full-text search and caching. Free for 1 app, 1GB app data.\nposthook.io — Job Scheduling Service. Allows you to schedule requests for specific times. 500 scheduled requests/month free.\nprogress.com — Mobile backend, starter plan has unlimited requests/second, with 1 GB of data storage. Enterprise application support\npubnub.com — Free push notifications for up to 1 million messages/month and 100 active daily devices\npushbots.com — Push notification service. Free for up to 1.5 million pushes/month\npushcrew.com — Push notification service. Unlimited notifications up to 2000 Subscribers\npusher.com — Free, unlimited push notifications for 2000 monthly active users. A single API for iOS and Android devices.\npushtechnology.com — Real-time Messaging for browsers, smartphones and everyone. 100 concurrent connections. Free 10 GB data/month\nquickblox.com — A communication backend for instant messaging, video and voice calling and push notifications\nrestspace.io - Configure a server with services for auth, data, files, email API, templates etc, then compose into pipelines and transform data.\nSalesforce Developer Program — Build apps Lightning fast with drag and drop tools. Customize your data model with clicks. Go further with Apex code. Integrate with anything using powerful APIs. Stay protected with enterprise-grade security. Customize UI with clicks or any leading-edge web framework. Free Developer Program gives access to the full Lightining Platform.\nServiceNow Developer Program — Rapidly build, test, and deploy applications that make work better for your organization. Free Instance \u0026amp; access early previews.\nsimperium.com — Move data everywhere instantly and automatically, multi-platform, unlimited sending and storage of structured data, max. 2,500 users/month\nstackstorm.com — Event-driven automation for apps, services and workflows, free without flow, access control, LDAP,\u0026hellip;\nstreamdata.io — Turns any REST API into an event-driven streaming API. Free plan up to 1 million messages and 10 concurrent connections.\nSupabase — The Open Source Firebase Alternative to build backends. Free Plan offers Authentication, Realtime Database \u0026amp; Object Storage.\ntyk.io — API management with authentication, quotas, monitoring and analytics. Free cloud offering\nzapier.com — Connect the apps you use, to automate tasks. 5 zaps, every 15 minutes and 100 tasks/month\nLeanCloud — Mobile backend. 1GB of data storage, 256MB instance, 3K API requests/day, 10K pushes/day are free. (API is very similar to Parse Platform)\nLiteflow - Low-code development toolkit built to help you focus on your app’s real value.\n⬆ back to top\nWeb Hosting # Alwaysdata — 100 MB free web hosting with support for MySQL, PostgreSQL, CouchDB, MongoDB, PHP, Python, Ruby, Node.js, Elixir, Java, Deno, custom web servers, access via FTP, WebDAV and SSH; mailbox, mailing list and app installer included.\nAwardspace.com — Free web hosting + a free short domain, PHP, MySQL, App Installer, Email Sending \u0026amp; No Ads.\nBubble — Visual programming to build web and mobile apps without code, free with Bubble branding.\ncloudno.de — Free cloud hosting for Node.js apps.\nDeploy Now — Deploy smarter. Deploy faster. Deploy Now. - Deploy up to 3 web projects from your GitHub repository for free.\nDrive To Web — Host directly to the web from Google Drive \u0026amp; OneDrive. Static sites only. Free forever. One site per Google/Microsoft account.\nEndless Hosting — 300 MB storage, Free SSL, PHP, MySQL, FTP, free sub-domains, E-Mail, DNS, beatiful panel UI. One of the best!\nFenix Web Server - A developer desktop app for hosting sites locally and sharing them publically (in realtime). Work however you like, using its beautiful user interface, API, and/or CLI.\nFree Hosting — Free Hosting With PHP 5, Perl, CGI, MySQL, FTP, File Manager, POP E-Mail, free sub-domains, free domain hosting, DNS Zone Editor, Web Site Statistics, FREE Online Support and many more features not offered by other free hosts.\nFreehostia — FreeHostia offers free hosting services incl. an industry-best Control Panel \u0026amp; a 1-click installation of 50+ free apps. Instant setup. No forced ads.\nheliohost.org — Community powered free hosting for everyone.\nhostman.com — Deploy up to 3 static sites from your GitHub repository for free.\nneocities.org — Static, 1 GB free storage with 200 GB Bandwidth.\nnetlify.com — Builds, deploy and hosts static site/app free for, 100 GB data and 100 GB/month bandwidth.\ncommons.host - Static web hosting and CDN.100% free and open source software (FOSS). With a commercially sustainable software as a service (SaaS) to fund R\u0026amp;D.\npantheon.io — Drupal and WordPress hosting, automated DevOps and scalable infrastructure. Free for developers and agencies\nreadthedocs.org — Free documentation hosting with versioning, PDF generation and more\nrender.com — A unified platform to build and run all your apps and web app free SSL, a global CDN, private networks and auto deploys from Git, free for static web page.\nsourceforge.net — Find, Create and Publish Open Source software for free\nStormkit — Integrate building, deploying and hosting seamlessly with your git flow of your JAMStack or Node.JS app. 50 GB bandwith and 10m requests for free per month including free SSL.\nsurge.sh — Static web publishing for Front-End developers. Unlimited sites with custom domain support\ntilda.cc — One site, 50 pages, 50 MB storage, only the main pre-defined blocks among 170+ available, no fonts, no favicon and no custom domain\ntxti.es — Quickly create web pages with markdown.\nVercel — Build, deploy, and host web apps with free SSL, global CDN, and unique Preview URLs each time you git push. Perfect for Next.js and other Static Site Generators.\nVersoly — SaaS focussed website builder - unlimited websites, 70+ blocks, 5 templates, custom CSS, favicon, SEO and forms. No custom domain.\nQovery — Qovery is the simplest way to deploy your full-stack apps on AWS, GCP and Azure. It is free web hosting for developers with Database, SSL, a global CDN, and auto deploys from Git.\nFlashDrive.io - PaaS service similar to Heroku with a developer-centric approach and all inclusive features. Free tier for static assets, staging and developer apps.\n⬆ back to top\nDNS # 1984.is — Free DNS service with API, and lots of other free DNS features included.\nbiz.mail.ru — Free email and DNS hosting for up to 5,000 users\ncloudns.net — Free DNS hosting up to 1 domain with 50 records\ndns.he.net — Free DNS hosting service with Dynamic DNS Support\ndnspod.com — Free DNS hosting.\nduckdns.org — Free DDNS with up to 5 domains on the free tier. With configuration guides for various setups.\ndynu.com — Free dynamic DNS service\nfosshost.org - Free open source hosting VPS, web, storage and mirror hosting\nfreedns.afraid.org — Free DNS hosting. Also provide free subdomain based on numerous public user contributed domains. Get free subdomains from \u0026ldquo;Subdomains\u0026rdquo; menu after signing up.\nluadns.com — Free DNS hosting, 3 domains, all features with reasonable limits\nnamecheap.com — Free DNS. No limit on number of domains\nnextdns.io - DNS based firewall, 300K free queries monthly\nnoip — a dynamic dns service that allows up to 3 hostnames free with confirmation every 30 days\nns1.com — Data Driven DNS, automatic traffic management, 500k free queries\npointhq.com — Free DNS hosting on Heroku.\nselectel.com — Free DNS hosting, anycast\nweb.gratisdns.dk — Free DNS hosting.\nYandex.Connect — Free email and DNS hosting for up to 1,000 users\nzilore.com — Free DNS hosting.\nzoneedit.com — Free DNS hosting with Dynamic DNS Support.\nzonewatcher.com — Automatic backups and DNS change monitoring. 1 domain free\nhuaweicloud.com – Free DNS hosting by Huawei\nHetzner – Free DNS hosting from Hetzner with API support\nGlauca – Free DNS hosting for up to 3 domains and DNSSEC support\nF5 – Free Anycast DNS hosting for primary zones. And free for secondary zones up to 1 domain and 3 million requests per month.\n⬆ back to top\nIaaS # backblaze.com — Backblaze B2 cloud storage. Free 10 GB (Amazon S3-like) object storage for unlimited time\nscaleway.com — S3-Compatible Object Storage. Free 75 GB storage and external outgoing traffic\nterraform.io — Terraform Cloud. Free remote state management and team collaboration for teams up to 5 users.\n⬆ back to top\nDBaaS # airtable.com — Looks like a spreadsheet, but it\u0026rsquo;s a relational database, unlimited bases, 1,200 rows/base and 1,000 API requests/month\nAstra — Cloud Native Cassandra as a Service with 40GB free tier\ncloudamqp.com — RabbitMQ as a Service, up to 1M messages/month and 20 connections free\nelephantsql.com — PostgreSQL as a service, 20 MB free\nFaunaDB — Serverless cloud database, with native GraphQL, multi-model access and daily free tiers up to 100 MB\nHarperDb — Serverless cloud database, with dynamic schema based on JSON, 3000 IOPS with 1GB storage\nheroku.com — PostgreSQL as a service, up to 10,000 rows and 20 connections free (provided as an \u0026ldquo;addon,\u0026rdquo; but can be attached to an otherwise empty app and accessed externally)\nUpstash — Serverless Redis with free tier up to 10,000 requests per day, 256MB max database size, and 20 concurrent connections\nMongoDB Atlas — free tier gives 512 MB\nredsmin.com — Online real-time monitoring and administration service for Redis, Monitoring for 1 Redis instance free\nredislabs - Free 30Mb redis instance\nMemCachier — Managed Memcache service. Free for up to 25MB, 1 Proxy Server and basic analytics\nscalingo.com — Primarily a PaaS but offers a 128MB to 192MB free tier of MySQL, PostgreSQL or MongoDB\nSeaTable — Flexible, Spreadsheet-like Database built by Seafile team. unlimited tables, 2,000 lines, 1-month versioning, up to 25 team members.\nskyvia.com — Cloud Data Platform, offers free tier and all plans are completely free while in beta\nStackBy — One tool that brings together flexibility of spreadsheets, power of databases and built-in integrations with your favorite business apps. Free plan includes unlimited users, 10 stacks, 2GB attachment per stack.\nInfluxDB — Timeseries database, free up to 3MB/5 minutes writes, 30MB/5 minutes reads and 10,000 cardinalities series\nQuickmetrics — Timeseries database with dashboard included, free up to 10,000 events/day and total of 5 metrics.\nrestdb.io - a fast and simple NoSQL cloud database service. With restdb.io you get schema, relations, automatic REST API (with MongoDB-like queries) and an efficient multi-user admin UI for working with data. Free plan allows 3 users, 2500 records and 1 API requests per second.\ncockroachlabs.com — Free CockroachDB up to 5GB and 1vCPU.\nMacrometa - a noSQL database, Pub/Sub, event processing, and serverless edge computing platform for building geo-distributed and real-time applications. Free dev account gives access to 10,000 Operations/Day \u0026amp; 200MB Storage.\nPlanetscale - PlanetScale is a MySQL compatible, serverless database platform powered by Vitess, 3 databases for free with 10GB storage, 100 Million rows read/mo per database, and 10 Million rows written/mo per database.\n⬆ back to top\nSTUN, WebRTC, Web Socket Servers and Other Routers # conveyor.cloud — Visual Studio extension to expose IIS Express to the local network or over a tunnel to a public URL.\nHamachi — LogMeIn Hamachi is a hosted VPN service that lets you securely extend LAN-like networks to distributed teams with free plan allows unlimited networks with up to 5 peoples\nRadmin VPN - Connect multiple computers together via a VPN enabling LAN-like networks. Unlimited peers. (Hamachi alternative)\nlocalhost.run — Instantly share your localhost environment! No download required. Run your app on port 8080 and then run this command and share the URL.\nngrok.com — Expose locally running servers over a tunnel to a public URL.\nsegment.com — Hub to translate and route events to other third-party services. 100,000 events/month free\nstun:global.stun.twilio.com:3478?transport=udp — Twilio STUN\nstun:stun.l.google.com:19302 — Google STUN\nwebhookrelay.com — Manage, debug, fan-out and proxy all your webhooks to public or internal (ie: localhost) destinations. Also, expose servers running in a private network over a tunnel by getting a public HTTP endpoint (https://yoursubdomain.webrelay.io \u0026lt;----\u0026gt; http://localhost:8080).\nXirsys — Global network of STUN / TURN servers with a generous free tier.\nZeroTier — FOSS managed virtual Ethernet as a service. Unlimited end-to-end encrypted networks of 100 clients on free plan. Clients for desktop/mobile/NA; web interface for configuration of custom routing rules and approval of new client nodes on private networks.\n⬆ back to top\nIssue Tracking and Project Management # acunote.com — Free project management and SCRUM software for up to 5 team members\nAppFlux — Project Management tool with Log Management \u0026amp; Issues. Take your team onboard \u0026amp; forget management through emails.\nasana.com — Free for private project with collaborators\nBacklog — Everything your team needs to release great projects in one platform. Free plan offers 1 Project with 10 users \u0026amp; 100MB storage.\nBasecamp - To-do lists, milestone management, forum-like messaging, file sharing, and time tracking. Up to 3 projects, 20 users, and 1GB of storage space.\nbitrix24.com — Free intranet and project management tool\ncacoo.com — Online diagrams in real-time: flowchart, UML, network. Free max. 15 users/diagram, 25 sheets\nChpokify — Teams based Planning Poker that saves time of sprint estimation. Free up to 5 users, free Jira integrations, unlimited video calls, unlimited teams, unlimited sessions.\nclickup.com — Project management. Free, premium version with cloud storage. Mobile applications and Git integrations available\nCloudcraft — Design a professional architecture diagram in minutes with the Cloudcraft visual designer, optimized for AWS with smart components that show live data too.\nClubhouse - Project management platform. Free for up to 10 users forever\nCodegiant — Project Management with Repository hosting \u0026amp; CI/CD. Free Plan Offers Unlimited Repositories,Projects \u0026amp; Documents with 5 Team Members. 500 CI/CD minutes per month. 30000 Serverless Code Run minutes per month.1GB repository storage.\nConfluence - Atlassian\u0026rsquo;s content collaboration tool used to help teams collaborate and share knowledge efficiently. Free plan up to 10 users.\ncontriber.com — Customizable project management platform, free starter plan, 5 workspaces\ndraw.io — Online diagrams stored locally, in Google Drive, OneDrive or Dropbox. Free for all features and storage levels\nfreedcamp.com - tasks, discussions, milestones, time tracking, calendar, files and password manager. Free plan with unlimited projects, users and files storage.\neasyretro.io — Free simple and intuitive sprint retrospective tool\nGForge — Project Management \u0026amp; Issue Tracking toolset for complex projects with self-premises and SaaS options. SaaS free plan offers first 5 users free \u0026amp; free for Open Source Projects.\ngleek.io — Free description-to-diagrams tool for developers. Create informal, UML class, object, or entity-relationship diagrams using your keyword.\ngliffy.com — Online diagrams: flowchart, UML, wireframe,\u0026hellip; Also plugins for Jira and Confluence. 5 diagrams and 2 MB free\nGraphQL Inspector - GraphQL Inspector ouputs a list of changes between two GraphQL schemas. Every change is precisely explained and marked as breaking, non-breaking or dangerous.\nhuboard.com — Instant project management for your GitHub issues, free for Open Source\nHygger — Project management platform. Free plan offers unlimited users,projects \u0026amp; boards with 100 MB Storage.\nInstabug — A comprehensive bug reporting and in-app feedback SDK for mobile apps. Free plan up to 1 app and 1 member.\nIlograph — interactive diagrams that allow users to see their infrastructure from multiple perspectives and levels of detail. Diagrams can be expressed in code. Free tier has unlimited private diagrams with up to 3 viewers.\nIssue Embed - A bug reporting tool for websites to go directly into your Github Issues. Free plan for personal repositories with up to 500 issues/month and 10,000 page views/month.\nJira — Advanced software development project management tool used in many corporate environments. Free plan up to 10 users.\nkanbanflow.com — Board-based project management. Free, premium version with more options\nkanbantool.com — Kanban board-based project management. Free, paid plans with more options\nKitemaker.co - Collaborate through all phases of the product development process and keep track of work across Slack, Discord, Figma, and Github. Unlimited users, unlimited spaces. Free plan up to 250 work items.\nkanrails.com — Kanban board-based project management. Free for 3 collaborators, 2 projects and 5 tracks. Paid plans available for unlimited collaborators, projects and tracks.\nKumu.io — Relationship maps with animation, decorations, filters, clustering, spreadsheet imports and more. Free tier allows unlimited public projects. Graph size unlimited. Free private projects for students. Sandbox mode is available if you prefer to not leave your file publicly online (upload, edit, download, discard).\nLeanBoard — Collaborative whiteboard with sticky notes for your GitHub issues (Useful for Example Mapping and other techniques)\nLinear — Issue tracker with streamlined interface. Free for unlimited members, up to 10MB file upload size, 250 issues (excluding Archive)\nMeisterTask — Online task management for teams. Free up to 3 projects, unlimited project members.\nMeuScrum - Free online scrum tool with kanban board\nnTask — Project management software that enables your teams tn collaborate, plan, analyze and manage everyday tasks. Basic Plan free forever with 100 MB storage, 5 users/team. Unlimited workspaces, meetings,tasks, timesheets and issue tracking.\nOra - Agile task management \u0026amp; team collaboration. Free for up to 3 users and files are limited to 10 MB.\npivotaltracker.com — Free for unlimited public projects and two private projects with 3 total active users (read-write) and unlimited passive users (read-only).\nplan.io — Project Management with Repository Hosting and more options. Free for 2 users with 10 customers and 500MB Storage\nplanitpoker.com — Free online planning poker (estimation tool)\nsaas.zentao.pm - An Application Lifecycle Management solution for Issue Tracking and Project Management, on-premise and open source version are available as well.\nScrumFast - Scrum board with a very intuitive interface, free up to 5 users.\nSpeedBoard - Board for Agile and Scrum retrospectives - Free.\nShake - In-app bug reporting and feedback tool for mobile apps. Free plan, 10 bug reports per app/per month.\nTadum - Meeting agenda and minutes app designed for recurring meetings, free for teams up to 10\ntaiga.io — Project management platform for startups and agile developers, free for Open Source\nTara AI — Simple sprint management service. Free plan has unlimited tasks, sprints and workspaces, with no user limits.\ntargetprocess.com — Visual project management, from Kanban and Scrum to almost any operational process. Free for unlimited users, up to 1,000 data entities {more details}\ntaskade.com — Real-time collaborative task lists and outlines for teams\ntaskulu.com — Role based project management. Free up to 5 users. Integration with GitHub/Trello/Dropbox/Google Drive\nteamwork.com — Project management \u0026amp; Team Chat. Free for 5 users and 2 projects. Premium plans available.\ntestlio.com — Issue tracking, test management and beta testing platform. Free for private use\nterrastruct.com — Online diagram maker specifically for software architecture. Free tier up to 4 layers per diagram.\ntodoist.com — Collaborative and individual task management. Free, Premium and Team plans are available. Discounts provided for eligible users.\ntrello.com — Board-based project management. Unlimited Personal Boards, 10 Team Boards.\nTweek — Simple Weekly To-Do Calendar \u0026amp; Task Management.\nubertesters.com — Test platform, integration and crowdtesters, 2 projects, 5 members\nvabotu - A collaborative tool for project management. Free and other plans are available. The Freelance plan is for 10 users, include messaging, task-boards, 5GB online storage, workspaces, export data.\nvivifyscrum.com — Free tool for Agile project management. Scrum Compatible\nWikifactory — Product designing Service with Projects, VCS \u0026amp; Issues. Free plan offers unlimited projects \u0026amp; collaborators and 3GB storage.\nYodiz — Agile development and issue tracking. Free up to 3 users, unlimited projects.\nYouTrack — Free hosted YouTrack (InCloud) for FOSS projects, private projects (free for 3 users). Includes time tracking and agile boards\nzenhub.com — The only project management solution inside GitHub. Free for public repos, OSS and nonprofit organizations\nzepel.io - The project management tool that lets you plan features, collaborate across disciplines, and build software together. Free up to 5 members. No feature restrictions.\nzenkit.com — Project management and collaboration tool. Free for up to 5 members, 5 GB attachments.\nZube — Project management with free plan for 4 Projects \u0026amp; 4 users. GitHub integration available.\n⬆ back to top\nStorage and Media Processing # borgbase.com — Simple and secure offsite backup hosting for Borg Backup. 10 GB free backup space and 2 repositories.\nsirv.com — Smart Image CDN with on-the-fly image optimization and resizing. Free tier includes 500 MB of storage and 2 GB bandwidth.\nimage4.io — Image upload, powerful manipulations, storage and delivery for websites and apps, with SDK\u0026rsquo;s, integrations and migration tools. Free tier includes 25 credits. 1 credit is equal to 1 GB of CDN usage, 1GB of storage or 1000 image transformations.\ncloudimage.com — Full image optimization and CDN service with 1500+ Points of Presence around the world. A variety of image resizing, compression, watermarking functions. Open source plugins for responsive images, 360 image making and image editing. Free monthly plan with 25GB of CDN traffic and 25GB of cache storage and unlimited transformations.\ncloudinary.com — Image upload, powerful manipulations, storage and delivery for sites and apps, with libraries for Ruby, Python, Java, PHP, Objective-C and more. Free tier includes 25 monthly credits. 1 credit is equal to 1,000 image transformations, 1 GB of storage, or 1 GB of CDN usage.\neasyDB.io — one-click, hosted database provider. They provide a database for the programming language of your choice for development purposes. The DB is ephemeral and will be deleted after 24 or 72 hours on the free tier.\nembed.ly — Provides APIs for embedding media in a webpage, responsive image scaling, extracting elements from a webpage. Free for up to 5,000 URLs/month at 15 requests/second\nfilestack.com — File picker, transform and deliver, free for 250 files, 500 transformations and 3 GB bandwidth\ngumlet.com — Image resize-as-a-service. It also optimizes images and performs delivery via CDN. Free tier includes 1 GB bandwidth and unlimited number of image processing every month for 1 year.\nimage-charts.com — Unlimited image chart generation with a watermark\njsonbin.io — Free JSON data storage service, ideal for small-scale web apps, website, mobile apps.\nkraken.io — Image optimization for website performance as a service, free plan up to 1 MB file size\nnpoint.io — JSON store with collaborative schema editing\notixo.com — Encrypt, share, copy and move all your cloud storage files from one place. Basic plan provides unlimited files transfer with 250 MB max. file size and allows 5 encrypted files\npackagecloud.io — Hosted Package Repositories for YUM, APT, RubyGem and PyPI. Limited free plans, open source plans available via request\npiio.co — Responsive image optimization and delivery for every website. Free plan for developers and personal websites. Includes free CDN, WebP and Lazy Loading out of the box.\nPinata IPFS — Pinata is the simplest way to upload and manage files on IPFS. Our friendly user interface combined with our IPFS API makes Pinata the easiest IPFS pinning service for platforms, creators, and collectors. 1 GB storage free along with access to API.\nplaceholder.com — A quick and simple image placeholder service\nplacekitten.com — A quick and simple service for getting pictures of kittens for use as placeholders\nplot.ly — Graph and share your data. Free tier includes unlimited public files and 10 private files\npodio.com — You can use Podio with a team of up to five people and try out the features of the Basic Plan, except user management\nQuickChart — Generate embeddable image charts, graphs, and QR codes\nredbooth.com — P2P file syncing, free for up to 2 users\nshrinkray.io — Free image optimization of GitHub repos\nSkynet — An open protocol for hosting data and web applications on the decentralized web using Sia. Free tier provides storage upto 100GB.\nStorj — Decentralised Private Cloud Storage for Apps and Developers. Free plan provides 3 Projects, 50 GB storage per project/month , 50 GB bandwidth per project/month.\ntinypng.com — API to compress and resize PNG and JPEG images, offers 500 compressions for free each month\ntransloadit.com — Handles file uploads and encoding of video, audio, images, documents. Free for Open source, charities, and students via the GitHub Student Developer Pack. Commercial applications get 2 GB free for test driving\nuploadcare.com — Uploadcare provides media pipeline with ultimate toolkit based on cutting-edge algorithms. All features are available for developers absolutely for free: File Uploading API and UI, Image CDN and Origin Services, Adaptive Delivery and Smart Compression.\nimagekit.io – Image CDN with automatic optimization, real-time transformation, and storage that you can integrate with existing setup in minutes. Free plan includes up to 20GB bandwidth per month.\ninternxt.com – Internxt Drive is a zero-knowledge file storage service that\u0026rsquo;s based on absolute privacy and uncompromising security. Sign up and get 2 GB for free, forever!\n⬆ back to top\nDesign and UI # Mockplus iDoc - Mockplus iDoc is a powerful design collaboration \u0026amp; handoff tool. Free Plan includes 3 users and 5 projects with all features available.\nAllTheFreeStock - a curated list of free stock images, audio and videos.\nAnt Design Landing Page - Ant Design Landing Page provides a template built by Ant Motion\u0026rsquo;s motion components. It has a rich homepage template, downloads the template code package, and can be used quickly. You can also use the editor to quickly build your own dedicated page.\nBoxySVG — A free installable Web app for drawing SVGs and exporting in svg,png,jpeg an other formats.\nclevebrush.com — Free Graphics Design / Photo Collage App, also they offer paid integration of it as component.\ncloudconvert.com — Convert anything to anything. 208 supported formats including videos to gif.\nCodeMyUI - Handpicked collection of Web Design \u0026amp; UI Inspiration with Code Snippets.\ndesigner.io — Design tool for UI, illustrations and more. Has a native app. Free.\nfigma.com — Online, collaborative design tool for teams; free tier includes unlimited files and viewers with a max of 2 editors and 3 projects.\nIcons8 — Icons, illustrations, photos, music, and design tools. Free Plan offers Limited formats in lower resolution. Link to Icons8 when you use our assets.\nimagebin.ca — Pastebin for images.\nInvision App - UI design and prototyping tool. Desktop and webapp available. Free to use with 1 active prototype.\nlanden.co — Generate, edit and publish beautiful websites and landing pages for your startup. All without code. Free tier allows you to have one website, fully customizable and published on the web.\nlensdump.com - Free cloud image hosting.\nLorem Picsum - A Free tool, easy to use stylish placeholders. Just add your desired image size (width \u0026amp; height) after our URL, and you\u0026rsquo;ll get a random image.\nmarvelapp.com — Design, prototyping and collaboration, free plan limited to one user and one project.\nMindmup.com — Unlimited mind maps for free, and store them in the cloud. Your mind maps are available everywhere, instantly, from any device.\nmockupmark.com — Create realistic t-shirt and clothing mockups for social media and E-commerce, 40 free mockups.\nOctopus.do — Visual sitemap builder. Build your website structure in real-time and rapidly share it to collaborate with your team or clients.\nPencil - Open source design tool using Electron.\nPenpot - Web based, open source design and prototyping tool. Supports SVG. Completely free.\npexels.com - Free stock photos for commercial use. Has free API that allows you to search photos by keywords.\nphotopea.com — A Free, Advanced online design editor with Adobe Photoshop UI supporting PSD, XCF \u0026amp; Sketch formats (Adobe Photoshop, Gimp and Sketch App).\npixlr.com — Free online browser editor on the level of commercial ones.\nPlasmic - A fast, easy to use, powerful web design tool and page builder that integrates into your codebase. Build responsive pages or complex components; optionally extend with code; and publish to production sites and apps.\nProto.io - Create fully interactive UI prototypes without coding. Free tier available when free trial ends. Free tier includes: 1 user, 1 project, 5 prototypes, 100MB online storage and preview in proto.io app.\nresizeappicon.com — A simple service to resize and manage your app icons.\nRive — Create and ship beautiful animations to any platform. Free forever for Individuals. The service is a editor which hosts all the graphics on their servers as well. They also provide runtimes for many platforms to run graphics made using Rive.\nsmartmockups.com — Create product mockups, 200 free mockups.\nunDraw - A constantly updated collection of beautiful svg images that you can use completely free and without attribution.\nunsplash.com - Free stock photos for commercial and noncommercial purposes (do-whatever-you-want license).\nvectr.com — Free Design App for Web + Desktop.\nwalkme.com — Enterprise Class Guidance and Engagement Platform, free plan 3 walk-thrus up to 5 steps/walk.\nWebflow - WYSIWYG web site builder with animations and website hosting. Free for 2 projects.\nUpdrafts.app - WYSIWYG web site builder for tailwindcss based designs. Free for non-commercial usage.\nwhimsical.com - Collaborative flowcharts, wireframes, sticky notes and mind maps. Create up to 4 free boards.\nZeplin — Designer and developer collaboration platform. Show designs, assets and styleguides. Free for 1 project.\nPixelixe — Create and edit engaging and unique graphics and images online.\nResponsively App - A free dev-tool for faster and precise responsive web application development.\nSceneLab - Online mockup graphics editor with an ever-expanding collection of free design templates\nxLayers - Preview and convert Sketch design files into Angular, React, Vue, LitElement, Stencil, Xamarin and more (free and open source at https://github.com/xlayers/xlayers)\nGrapedrop — Responsive, powerful, SEO optimized web page builder based on GrapesJS Framework. Free for first 5 pages, unlimited custom domains, all features and simple usage.\nMastershot - Completely free browser-based video editor. No watermark, up to 1080p export options.\nUnicorn Platform - Effortless landing page builder with hosting. 1 website for free.\n⬆ back to top\nData Visualization on Maps # IP Geolocation — Free DEVELOPER plan available with 30K requests/month.\ncarto.com — Create maps and geospatial APIs from your data and public data.\ndatamaps.world — The simple, yet powerful platform that gives you tools to visualize your geospatial data with a free tier.\ndevelopers.arcgis.com — APIs and SDKs for maps, geospatial data storage, analysis, geocoding, routing, and more across web, desktop, and mobile. 2,000,000 free basemap tiles, 20,000 non-stored geocodes, 20,000 simple routes, 5,000 drive time calculations, 5GB free tile+data storage per month.\nFoursquare - Location discovery, venue search, and context-aware content from Places API and Pilgrim SDK.\ngeocod.io — Geocoding via API or CSV Upload. 2,500 free queries/day.\ngeocodify.com — Geocoding and Geoparsing via API or CSV Upload. 10k free queries/month.\ngiscloud.com — Visualize, analyze and share geo data online.\ngogeo.io — Maps and geospatial services with an easy to use API and support for big data.\ngraphhopper.com A free package for developers is offered for Routing, Route Optimization, Distance Matrix, Geocoding, Map Matching.\nhere — APIs and SDKs for maps and location-aware apps. 250k transactions/month for free.\nmapbox.com — Maps, geospatial services and SDKs for displaying map data.\nmaptiler.com — Vector maps, map services and SDKs for map visualisation. Free vector tiles with weekly update and four map styles.\nopencagedata.com — Geocoding API that aggregates OpenStreetMap and other open geo sources. 2,500 free queries/day.\nosmnames — Geocoding, search results ranked by the popularity of related Wikipedia page.\npositionstack - Free geocoding for global places and coordinates. 25.000 Requests per month for personal use.\nstadiamaps.com — Map tiles, routing, navigation, and other geospatial APIs. 2,500 free map views and API requests / day for non-commercial usage and testing.\nhttp://maps.stamen.com/ - Free map tiles and tile hosting.\nGeocodeAPI - Geocode API: Address to Coordinate Conversion \u0026amp; Geoparsing based on Pelias. Batch geocoding via CSV. 350000 free requests/month.\nGeokeo api - Geocoding api with language correction and more. Worldwide coverage. 2,500 free daily queries\n⬆ back to top\nPackage Build System # build.opensuse.org — Package build service for multiple distros (SUSE, EL, Fedora, Debian etc).\ncopr.fedorainfracloud.org — Mock-based RPM build service for Fedora and EL.\nhelp.launchpad.net — Ubuntu and Debian build service.\n⬆ back to top\nIDE and Code Editing # 3v4l - Free online PHP shell and snippet sharing site, runs your code in 300+ PHP versions\nAndroid Studio — Android Studio provides the fastest tools for building apps on every type of Android device. Open Source IDE, free for everyone and the best to develop Android apps. Available for Windows,Mac,Linux and even ChromeOS!\nApache Netbeans — Development Environment, Tooling Platform and Application Framework.\napiary.io — Collaborative design API with instant API mock and generated documentation (Free for unlimited API blueprints and unlimited user with one admin account and hosted documentation).\nAtom - Atom is a hackable text editor built on Electron.\nBlueJ — A free Java Development Environment designed for beginners, used by millions worldwide. Powered by Oracle \u0026amp; simple GUI to help beginners.\nBootify.io - Spring Boot app generator with custom database and REST API.\ncacher.io — Code snippet organizer with labels and support for 100+ programming languages.\nCode::Blocks — Free Fortran \u0026amp; C/C++ IDE. Open Source and runs on Windows,macOS \u0026amp; Linux.\ncodesnip.com.br — Simple code snippets manager with categories, search and tags. free and unlimited.\ncocalc.com — (formerly SageMathCloud at cloud.sagemath.com) — Collaborative calculation in the cloud. Browser access to full Ubuntu with built-in collaboration and lots of free software for mathematics, science, data science, preinstalled: Python, LaTeX, Jupyter Notebooks, SageMath, scikitlearn, etc.\nide.cs50.io - A free IDE powered by AWS Cloud9 by Harvard University.\ncodepen.io — CodePen is a playground for the front end side of the web.\ncodesandbox.io — Online Playground for React, Vue, Angular, Preact and more.\nEclipse Che - Web based and Kubernetes-Native IDE for Developer Teams with multi-language support. Open Source and community driven. A online instance hosted by Red Hat is available at workspaces.openshift.com.\nfakejson.com — FakeJSON helps you quickly generate fake data using its API. Make an API request describing what you want and how you want it. The API returns it all in JSON. Speed up the go to market process for ideas and fake it till you make it.\ngitpod.io — Instant, ready-to-code dev environments for GitHub projects. Free for open source.\nide.goorm.io goormIDE is full IDE on cloud. multi-language support, linux-based container via the fully-featured web-based terminal, port forwarding, custom url, real-time collaboration and chat, share link, Git/Subversion support. There are many more features (free tier includes 1GB RAM and 10GB Storage per container, 5 Container slot).\nJDoodle — Online compiler and editor for more than 60 programming languages with a free plan for REST API code compiling up to 200 credits per day.\njetbrains.com — Productivity tools, IDEs and deploy tools (aka IntelliJ IDEA, PyCharm, etc). Free license for students, teachers, Open Source and user groups.\njsbin.com — JS Bin is another playground and code sharing site of front end web (HTML, CSS and JavaScript. Also supports Markdown, Jade and Sass).\njsfiddle.net — JS Fiddle is a playground and code sharing site of front end web, support collaboration as well.\nJSONPlaceholder Some REST API endpoints that return some fake data in JSON format. The source code is also available if you would like to run the server locally.\nKatacoda — Interactive learning and training platform for software engineers helping developers learn and companies increase adoption.\nLazarus — Lazarus is a Delphi compatible cross-platform IDE for Rapid Application Development.\nmicro-jaymock - Tiny API mocking microservice for generating fake JSON data.\nmockable.io — Mockable is a simple configurable service to mock out RESTful API or SOAP web-services. This online service allows you to quickly define REST API or SOAP endpoints and have them return JSON or XML data.\nmockaroo — Mockaroo lets you generate realistic test data in CSV, JSON, SQL, and Excel formats. You can also create mocks for back-end API.\nMocklets - a HTTP-based mock API simulator, which helps simulate APIs for faster parallel development and more comprehensive testing, with lifetime free tier.\nPaiza — Develop Web apps in Browser without having the need to setup anything. Free Plan offers 1 server with 24 hours lifetime and 4 hours running time per day with 2 CPU cores, 2 GB RAM and 1 GB storage.\nPrepros - Prepros can compile Sass, Less, Stylus, Pug/Jade, Haml, Slim, CoffeeScript and TypeScript out of the box, reloads your browsers and makes it really easy to develop \u0026amp; test your websites so you can focus on making them perfect. You can also add your own tools with just a few clicks.\nReplit — A cloud coding environment for various program languages.\nSoloLearn — A cloud programming playground well-suited for running code snippets. Supports various programming languages. No registration required for running code but required when you need to save code on their platform. Also offers free courses for begginers and intermediate level coders.\nstackblitz.com — Online VS Code IDE for Angular \u0026amp; React.\nVisual Studio Code - Code editor redefined and optimized for building and debugging modern web and cloud applications. Developed by Microsoft for Windows, macOS and Linux.\nVisual Studio Community — Fully-featured IDE with thousands of extensions, cross-platform app development (Microsoft extensions available for download for iOS and Android), desktop, web and cloud development, multi-language support (C#, C++, JavaScript, Python, PHP and more).\nVSCodium - Community-driven, without telemetry/tracking, and freely-licensed binary distribution of Microsoft’s editor VSCode\nwakatime.com — Quantified self-metrics about your coding activity, using text editor plugins, limited plan for free.\n⬆ back to top\nAnalytics, Events and Statistics # AO Analytics — Forever FREE Customer Analytics for ALL your websites, with Unlimited Events per month\nAvo — Simplified analytics release workflow. Single-source-of-truth tracking plan, type safe analytics tracking library, in-app debuggers, data observability to catch all data issues before you release. Free for 2 workspace members and 1 hour data observability lookback.\nBranch — Mobile Analytics Platform. Free Tier offers upto 10K Mobile App Users with deep-linking \u0026amp; other services.\nClicky — Website Analytics Platform. Free Plan for 1 website with 3000 views analytics.\nDatabox — Business Insights \u0026amp; Analytics by combining other analytics \u0026amp; BI platforms. Free Plan offers 3 users, dashboards \u0026amp; data sources. 11M historical data records.\nindicative.com — Customer analytics platform to optimize customer engagement, increase conversion, and improve retention. Free up to 50M events/month.\nPanelbear.com — Blazingly fast and private, free tier includes 5,000 pageviews per month for unlimited websites\nHitsteps.com — 2,000 pageviews per month for 1 website\namplitude.com — 1 million monthly events, up to 2 apps\ngoatcounter.com — GoatCounter is an open source web analytics platform available as a hosted service (free for non-commercial use) or self-hosted app. It aims to offer easy to use and meaningful privacy-friendly web analytics as an alternative to Google Analytics or Matomo. Free tier is for non-commerical use and includes unlimited number of sites, 6 months of data retention, and 100k pageviews/month.\nGoogle Analytics — Google Analytics\nexpensify.com — Expense reporting, free personal reporting approval workflow\ngetinsights.io - Privacy-focused, cookie free analytics, free for up to 5k events/month.\nheap.io — Automatically captures every user action in iOS or web apps. Free for up to 5,000 visits/month\nHotjar — Website Analytics and Reports . Free Plan allows 2000 pageviews/day. 100 snapshots/day (max capacity: 300). 3 snapshot heatmaps which can be stored for 365 days. Unlimited Team Members.\nimprace.com — Landing page analysis with suggestions to improve bounce rates. Free 5 landing pages/domain\nkeen.io — Custom Analytics for data collection, analysis and visualization. 50,000 events/month free\nmetrica.yandex.com — Unlimited free analytics\nmixpanel.com — 100,000 monthly tracked users, unlimited data history and seats, US or EU data residency\nMoesif — API analytics for REST and GraphQL. (Free up to 500,000 API calls/mo)\nMolasses - Powerful feature flags and A/B testing. Free up to 3 environments with 5 feature flags each.\noptimizely.com — A/B Testing solution, free starter plan, 1 website, 1 iOS and 1 Android app\nMicrosoft PowerBI — Business Insights \u0026amp; Analytics by Microsoft. Free Plan offers limited use with 1 Million User licenses.\nquantcast.com — Unlimited free analytics\nsematext.com — Free for up to 50 K actions/month, 1-day data retention, unlimited dashboards, users, etc.\nSimilar Web — Analytics for Web \u0026amp; Mobile Apps. Free Plan offers 5 results per metric, 1 month of mobile app data \u0026amp; 3 months of website data.\nStatCounter — Website Viewer Analytics. Free plan for analytics of 500 most recent visitors.\nTableau Developer Program — Innovate, create, and make Tableau work perfectly for your organization. Free developer program gives a personal development sandbox license for Tableau Online. The version is the latest pre-release version so Data Devs can test each \u0026amp; every feature of this superb platform.\nusabilityhub.com — Test designs and mockups on real people, track visitors. Free for one user, unlimited tests\nwoopra.com — Free user analytics platform for 500K actions, 90 day data retention, 30+ one click integration.\n⬆ back to top\nVisitor Session Recording # Reactflow.com — Per site: 1,000 pages views/day, 3 heatmaps, 3 widgets, free bug tracking\nLogRocket.com - 1,000 sessions/month with 30 day retention, error tracking, live mode\nFullStory.com — 1,000 sessions/month with 1 month data retention and 3 user seats. More information here.\nhotjar.com — Per site: 2,000 pages views/day, 3 heatmaps, data stored for 3 months,\u0026hellip;\ninspectlet.com — 100 sessions/month free for 1 website\nlivesession.io — 1,000 sessions/month free for 1 website\nMicrosoft Clarity - Session recording completely free with \u0026ldquo;no traffic limits\u0026rdquo;, no project limits, and no sampling\nmouseflow.com — 100 sessions/month free for 1 website\nmousestats.com — 100 sessions/month free for 1 website\nsmartlook.com — free packages for web and mobile apps (1500 sessions/month), 3 heatmaps, 1 funnel, 1-month data history\nusersurge.com — 250K sessions per month for individuals.\nhowuku.com — Track user interaction, engagement, and event. Free for up to 5,000 visits/month\nUXtweak.com — Record and watch how visitors use your web site or app. Free unlimited time for small projects\n⬆ back to top\nInternational Mobile Number Verification API and SDK # cognalys.com — Freemium mobile number verification through an innovative and reliable method than using SMS gateway. Free 10 tries and 15 verifications/day\nnumverify.com — Global phone number validation and lookup JSON API. 250 API requests/month\nveriphone.io — Global phone number verification in a free, fast, reliable JSON API. 1000 requests/month\n⬆ back to top\nPayment and Billing Integration # CurrencyFreaks — Provides current and historical currency exchange rates. Free DEVELOPER plan available with 1000 requests/month.\ncurrencyapi.net — Live Currency Rates for Physical and Crypto currencies, delivered in JSON and XML. Free tier offers 1,250 API requests/month.\ncurrencylayer.com — Reliable Exchange Rates and Currency Conversion for your Business, 1,000 API requests/month free\ncurrencystack.io — Production-ready real-time exchange rates for 154 currencies.\nexchangerate-api.com - An easy to use currency conversion JSON API. Free tier with no request limit.\nfraudlabspro.com — Help merchants to prevent payment fraud and chargebacks. Free Micro Plan available with 500 queries/month.\nmailpop.in - Get the most of your Stripe notifications with contextualized information.\nnamiml.com - Complete platform for in-app purchases and subscriptions on iOS and Android, including no-code paywalls, CRM, and analytics. Free for all base features to run an IAP business.\nrevenuecat.com — Hosted backend for in-app purchases and subscriptions (iOS and Android). Free up to $10k/mo in tracked revenue.\nvatlayer.com — Instant VAT number validation and EU VAT rates API, free 100 API requests/month\nfreecurrencyapi.net — Free currency conversion and exchange rate data API. 10 requests/hour without an API key, 50 000 requests per month when you register for free.\n⬆ back to top\nDocker Related # canister.io — 20 free private repositories for developers, 30 free private repositories for teams to build and store Docker images\nContainer Registry Service - Harbor based Container Management Solution. Free tier offers 1 GB storage for private repositories.\nDocker Hub — One free private repository and unlimited public repositories to build and store Docker images\nPlay with Docker — A simple, interactive and fun playground to learn Docker.\nquay.io — Build and store container images with unlimited free public repositories\nTreeScale.com — Host and manage container images with group permissions. Free tier offers 1 GB storage for private repositories.\n⬆ back to top\nVagrant Related # app.vagrantup.com - HashiCorp Vagrant Cloud. Vagrant box hosting.\nvagrantbox.es — An alternative public box index\n⬆ back to top\nDev Blogging Sites # dev.to - Where programmers share ideas and help each other grow.\nhashnode.com — Hassle-free Blogging Software for Developers!.\nmedium.com — Get smarter about what matters to you.\n⬆ back to top\nCommenting Platforms # Staticman - Staticman is a Node.js application that receives user-generated content and uploads it as data files to a GitHub and/or GitLab repository, using Pull Requests.\nGraphComment - GraphComment is a comments platform that helps you build an active community from website’s audience.\nUtterances - A lightweight comments widget built on GitHub issues. Use GitHub issues for blog comments, wiki pages and more!\nDisqus - Disqus is a networked community platform used by hundreds of thousands of sites all over the web.\n⬆ back to top\nScreenshot APIs # 24browser.com – Capture beautifully rendered website screenshots at scale with powerful API.\nApiFlash — A screenshot API based on Aws Lambda and Chrome. Handles full page, capture timing, viewport dimensions, \u0026hellip;\nmicrolink.io – It turns any website into data such as metatags normalization, beauty link previews, scraping capabilities or screenshots as a service. 250 reqs/day every day free.\nScreenshotAPI.net - Screenshot API use one simple API call to generate screenshots of any website. Build to scale and hosted on Google Cloud. Offers 100 free screenshots per month.\nscreenshotlayer.com — Capture highly customizable snapshots of any website. Free 100 snapshots/month\nscreenshotmachine.com — Capture 100 snapshots/month, png, gif and jpg, including full-length captures, not only home page\nPhantomJsCloud — Browser automation and page rendering. Free Tier offers up to 500 pages/day. Free Tier since 2017.\nWebshrinker.com — Web Shrinker provides web site screenshot and domain intelligence API services. Free 100 requests/month.\n⬆ back to top\nBrowser based hardware emulation written in Javascript # JsLinux — a really fast x86 virtual machine capable of running Linux and Windows 2k.\nJor1k — a OpenRISC virtual machine capable of running Linux with network support.\nv86 — a x86 virtual machine capable of running Linux and other OS directly into the browser.\n⬆ back to top\nPrivacy Management # Bearer - Helps implement privacy by design via audits and continuous workflows so that organizations comply with GDPR and other regulations. Free tier is limited to smaller teams and SaaS version only.\nOsano - Consent management and compliance platform with everything from GDPR representation to cookie banners. Free tier offers basic features.\nIubenda - Privacy and cookie policies along with consent management. Free tier offers limited privacy and cookie policy as well as cookie banners.\nCookiefirst - Cookie banners, auditing, and multi-language consent management solution. Free tier offers a one-time scan and a single banner.\nKetch - Consent management and privacy framework tool. Free tier offers most features with a limited visitor count.\n⬆ back to top\nMiscellaneous # Smartcar API - An API for cars to locate, get fuel tank, battery levels, odometer, unlock/lock doors, etc.\nBlynk — A SaaS with API to control, build \u0026amp; evaluate IoT devices. Free Developer Plan with 5 devices,Free Cloud \u0026amp; data storage. Mobile Apps also available.\nBricks Note Calculator - a note-taking app (PWA) with a powerful built-in multiline calculator.\nCode Time - an extension for time-tracking and coding metrics in VS Code, Atom, IntelliJ, Sublime Text, and more.\nConfigCat - Cross-platform feature flag service. SDKs for all major languages. Free plan up to 10 flags, 2 environments, 1 product and 5 Million requests per month. Unlimited user seats. Students get 100 flags and 100 Million requests per month for free.\ndatelist.io - Online booking / appointment scheduling system. Free up to 5 bookings per month, includes 1 calendar\ndocsapp.io — Easiest way to publish documentation, free for Open Source\nElementor — WordPress website builder. Free plan available with 40+ Basic Widgets.\nForm2Channel — Place a static html form on your website and receive submissions directly to Google Sheets, Email, Slack, Telegram or Http. No coding necessary.\nFOSSA - Scalable, end-to-end management for third-party code, license compliance and vulnerabilities.\nfullcontact.com — Help your users know more about their contacts by adding social profile into your app. 500 free Person API matches/month\nhttp2.pro — HTTP/2 protocol readiness test and client HTTP/2 support detection API.\nJWT Decoder — Online free tool for decoding JWT(JSON web token) and verifying it\u0026rsquo;s signature.\nBase64 decoder/encoder — Online free tool for decoding \u0026amp; encoding data.\nnewreleases.io - Receive notifications on email, Slack, Telegram, Discord and custom webhooks for new releases from GitHub, GitLab, Bitbucket, Python PyPI, Java Maven, Node.js NPM, Node.js Yarn, Ruby Gems, PHP Packagist, .NET NuGet, Rust Cargo and Docker Hub.\nPDFMonkey — Manage PDF templates in a dashboard, call the API with dynamic data, download your PDF. Offers 1000 free documents per month.\nreadme.com — Beautiful documentation made easy, free for Open Source.\nredirection.io — SaaS tool for managing HTTP redirections for businesses, marketing and SEO.\nredirect.pizza - Easily manage redirects with HTTPS support. Free plan includes 10 sources and 100.000 hits per month.\nReqBin — Post HTTP Requests Online. Popular Request Methods include GET, POST, PUT, DELETE, and HEAD. Supports Headers and Token Authentication. Includes a basic login system for saving your requests.\nsuperfeedr.com — Real-time PubSubHubbub compliant feeds, export, analytics. Free with less customization\nSurveyMonkey.com — Create online surveys. Analyze the results online. Free plan allows only 10 questions and 100 responses per survey.\nvideoinu — Create and edit screen recordings and other videos online.\nRandomKeygen - A free mobile-friendly tool offers a variety of randomly generated keys and passwords you can use to secure any application, service or device.\nCronhooks - Schedule one time or recurring webhooks using api and web app. Free plan allows 1 webhook schedule.\nHook Relay - Add webhook support to your app without the hassles: done-for-you queueing, retries with backoff, and logging. The free plan has 100 deliveries per day, 14-day retention, and 3 hook endpoints.\nFormat Express - Instant online formatter for JSON / XML / SQL.\n⬆ back to top\nRemote Desktop Tools # Getscreen.me — Free for 2 devices, no limits on the number and duration of sessions\nApache Guacamole™ — Open source clientless remote desktop gateway\n⬆ back to top\nOther Free Resources # education.github.com — Collection of free services for students. Registration required\neu.org — Free eu.org domain. Request is usually approved in 14 days.\npp.ua — Free pp.ua domain.\nFramacloud — A list of Free/Libre Open Source Software and SaaS by the French non-profit Framasoft.\ngetawesomeness — Retrieve all amazing awesomeness from GitHub\u0026hellip; a must see\ngithub.com — FOSS for Dev — A hub of free and Open Source software for developers.\nMicrosoft 365 Developer Program — Get a free sandbox, tools, and other resources you need to build solutions for the Microsoft 365 platform. The subscription is a 90-day Microsoft 365 E5 Subscription (Windows excluded) which is renewable. It is renewed if you\u0026rsquo;re active in development(measured using telemetry data \u0026amp; algorithms).\nRedHat for Developers — Free access to Red Hat products including RHEL,OpenShift,CodeReady etc exclusively for developers. Individual plan only. Free e-Books also offered for reference.\nsmsreceivefree.com — Provides free temporary and disposable phone numbers.\nsimplebackups.io — Backup automation service for servers and databases (MySQL, PostgreSQL, MongoDB) stored directly into cloud storage providers (AWS, DigitalOcean, Backblaze\u0026hellip;). Provides free plan for 1 backup.\nSnapShooter — Backup solution for DigitalOcean, AWS, LightSail, Hetzner and Exoscale, with support for direct database, file system and application backups to s3 based storage. Provides a free plan with daily backups for one resource.\nthedev.id — A free thedev.id subdomain for developers.\nWeb.Dev — This is a free tool that allows you to see the performance of your website and improve the SEO to get higher rank list in search engines.\nSmallDev.tools — A free tool for developers that allows you to Encode/Decode various formats, Minify HTML/CSS/Javascript, Beautify, Generate Fake/Testing real like dataset in JSON/CSV \u0026amp; multiple other formats and many more features. With a delightful interface.\n⬆ back to top\n","date":"August 29, 2021","externalUrl":null,"permalink":"/2021/08/29/free-for-dev/","section":"Blog","summary":"free-for.dev # Developers and Open Source authors now have a massive amount of services offering free tiers, but it can be hard to find them all to make informed decisions.\n","title":"free-for.dev","type":"blog"},{"content":" PoC in GitHub # 2020 # CVE-2020-0022 # In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715 marcinguy/CVE-2020-0022 leommxj/cve-2020-0022 CVE-2020-0041 # In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel bluefrostsecurity/CVE-2020-0041 CVE-2020-0069 # In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754 R0rt1z2/AutomatedRoot TheRealJunior/mtk-su-reverse-cve-2020-0069 yanglingxi1993/CVE-2020-0069 quarkslab/CVE-2020-0069_poc CVE-2020-0551 # Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html bitdefender/lvi-lfb-attack-poc CVE-2020-0557 # Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access. hessandrew/CVE-2020-0557_INTEL-SA-00338 CVE-2020-0568 # Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access. hessandrew/CVE-2020-0568_INTEL-SA-00344 CVE-2020-0601 # A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'. nissan-sudo/CVE-2020-0601 0xxon/cve-2020-0601 SherlockSec/CVE-2020-0601 JPurrier/CVE-2020-0601 0xxon/cve-2020-0601-plugin ollypwn/CurveBall kudelskisecurity/chainoffools RrUZi/Awesome-CVE-2020-0601 BleepSec/CVE-2020-0601 apmunch/CVE-2020-0601 saleemrashid/badecparams 0xxon/cve-2020-0601-utils Doug-Moody/Windows10_Cumulative_Updates_PowerShell MarkusZehnle/CVE-2020-0601 YoannDqr/CVE-2020-0601 thimelp/cve-2020-0601-Perl dlee35/curveball_lua IIICTECH/-CVE-2020-0601-ECC\u0026mdash;EXPLOIT cosmicifint/CVE-2020-0601 gentilkiwi/curveball Hans-MartinHannibalLauridsen/CurveBall apodlosky/PoC_CurveBall ioncodes/Curveball amlweems/gringotts aloswoya/CVE-2020-0601 talbeerysec/CurveBallDetection david4599/CurveballCertTool eastmountyxz/CVE-2020-0601-EXP eastmountyxz/CVE-2018-20250-WinRAR gremwell/cve-2020-0601_poc bsides-rijeka/meetup-2-curveball TechHexagon/CVE-2020-0601-spoofkey ShayNehmad/twoplustwo CVE-2020-0609 # A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610. 2d4d/rdg_scanner_cve-2020-0609 ollypwn/BlueGate MalwareTech/RDGScanner Bechsen/CVE-2020-0609 ioncodes/BlueGate CVE-2020-0618 # A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'. euphrat1ca/CVE-2020-0618 wortell/cve-2020-0618 CVE-2020-0624 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0642. james0x40/CVE-2020-0624 CVE-2020-0668 # An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672. itm4n/SysTracingPoc RedCursorSecurityConsulting/CVE-2020-0668 Nan3r/CVE-2020-0668 CVE-2020-0674 # A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767. binaryfigments/CVE-2020-0674 CVE-2020-0683 # An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686. padovah4ck/CVE-2020-0683 CVE-2020-0688 # A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'. random-robbie/cve-2020-0688 Jumbo-WJB/CVE-2020-0688 Ridter/cve-2020-0688 Yt1g3r/CVE-2020-0688_EXP righter83/CVE-2020-0688 truongtn/cve-2020-0688 onSec-fr/CVE-2020-0688-Scanner youncyb/CVE-2020-0688 zcgonvh/CVE-2020-0688 justin-p/PSForgot2kEyXCHANGE cert-lv/CVE-2020-0688 ravinacademy/CVE-2020-0688 mahyarx/Exploit_CVE-2020-0688 ktpdpro/CVE-2020-0688 CVE-2020-0692 # An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. githubassets/CVE-2020-0692 CVE-2020-0728 # An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'. irsl/CVE-2020-0728 CVE-2020-0753 # An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754. afang5472/CVE-2020-0753-and-CVE-2020-0754 VikasVarshney/CVE-2020-0753-and-CVE-2020-0754 CVE-2020-0796 # A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'. Aekras1a/CVE-2020-0796-PoC technion/DisableSMBCompression T13nn3s/CVE-2020-0796 ollypwn/SMBGhost joaozietolie/CVE-2020-0796-Checker pr4jwal/CVE-2020-0796 ButrintKomoni/cve-2020-0796 dickens88/cve-2020-0796-scanner kn6869610/CVE-2020-0796 awareseven/eternalghosttest weidutech/CVE-2020-0796-PoC OfJAAH/CVE-2020-0796 xax007/CVE-2020-0796-Scanner Dhoomralochana/Scanners-for-CVE-2020-0796-Testing UraSecTeam/smbee 0xtobu/CVE-2020-0796 netscylla/SMBGhost eerykitty/CVE-2020-0796-PoC wneessen/SMBCompScan ioncodes/SMBGhost laolisafe/CVE-2020-0796 gabimarti/SMBScanner Almorabea/SMBGhost-WorkaroundApplier IAreKyleW00t/SMBGhosts vysecurity/CVE-2020-0796 marcinguy/CVE-2020-0796 plorinquer/cve-2020-0796 BinaryShadow94/SMBv3.1.1-scan\u0026mdash;CVE-2020-0796 x1n5h3n/SMBGhost wsfengfan/CVE-2020-0796 miraizeroday/CVE-2020-0796 GuoKerS/aioScan_CVE-2020-0796 jiansiting/CVE-2020-0796-Scanner maxpl0it/Unauthenticated-CVE-2020-0796-PoC ran-sama/CVE-2020-0796 sujitawake/smbghost julixsalas/CVE-2020-0796 insightglacier/SMBGhost_Crash_Poc 5l1v3r1/CVE-2020-0796-PoC-and-Scan cory-zajicek/CVE-2020-0796-DoS tripledd/cve-2020-0796-vuln danigargu/CVE-2020-0796 ZecOps/CVE-2020-0796-LPE-POC TinToSer/CVE-2020-0796-LPE f1tz/CVE-2020-0796-LPE-EXP tango-j/CVE-2020-0796 jiansiting/CVE-2020-0796 eastmountyxz/CVE-2020-0796-SMB LabDookhtegan/CVE-2020-0796-EXP Rvn0xsy/CVE_2020_0796_CNA 0xeb-bp/cve-2020-0796 intelliroot-tech/cve-2020-0796-Scanner thelostworldFree/CVE-2020-0796 syadg123/CVE-2020-0796 section-c/CVE-2020-0796 CVE-2020-0798 # An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0814, CVE-2020-0842, CVE-2020-0843. githubassets/CVE-2020-0798 CVE-2020-0814 # An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0798, CVE-2020-0842, CVE-2020-0843. klinix5/CVE-2020-0814 CVE-2020-0883 # A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881. githubassets/CVE-2020-0883 thelostworldFree/CVE-2020-0883 syadg123/CVE-2020-0883 CVE-2020-0905 # An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'. githubassets/CVE-2020-0905 CVE-2020-0910 # A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. inetshell/CVE-2020-0910 CVE-2020-0976 # A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0975, CVE-2020-0977. ericzhong2010/GUI-Check-CVE-2020-0976 CVE-2020-10199 # Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). zhzyker/exphub wsfengfan/CVE-2020-10199-10204 jas502n/CVE-2020-10199 magicming200/CVE-2020-10199_CVE-2020-10204 zhzyker/CVE-2020-10199_POC-EXP CVE-2020-10204 # Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. duolaoa333/CVE-2020-10204 CVE-2020-10238 # An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potential attack vectors. HoangKien1020/CVE-2020-10238 CVE-2020-10239 # An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows access for non-superadmin users. HoangKien1020/CVE-2020-10239 CVE-2020-10551 # QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\\SYSTEM by writing a malicious executable to the location of TsService. seqred-s-a/CVE-2020-10551 CVE-2020-10558 # The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notifications, along with other miscellaneous functions from the main screen. nuzzl/CVE-2020-10558 CVE-2020-10560 # An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php. LucidUnicorn/CVE-2020-10560-Key-Recovery kevthehermit/CVE-2020-10560 CVE-2020-10663 # The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent. rails-lts/json_cve_2020_10663 CVE-2020-10673 # FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus). 0nise/CVE-2020-10673 CVE-2020-11107 # An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution. S1lkys/CVE-2020-11107 andripwn/CVE-2020-11107 CVE-2020-11539 # An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any authentication or signature verification. Thus, any attacker can control a parameter of the device. the-girl-who-lived/CVE-2020-11539 CVE-2020-11650 # An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent. weinull/CVE-2020-11650 CVE-2020-11651 # An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions. chef-cft/salt-vulnerabilities CVE-2020-11890 # An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration. HoangKien1020/CVE-2020-11890 CVE-2020-12078 # An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address to the global discovery settings (internally called exclude_ip). This exclude_ip value is passed to the exec function in the discoveries_helper.php file (inside the all_ip_list function) without being filtered, which means that the attacker can provide a payload instead of a valid IP address. mhaskar/CVE-2020-12078 CVE-2020-12112 # BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion. tchenu/CVE-2020-12112 CVE-2020-12122 # FULLSHADE/CVE-2020-12122 CVE-2020-1611 # A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1. Ibonok/CVE-2020-1611 CVE-2020-1938 # When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations. 0nise/CVE-2020-1938 xindongzhuaizhuai/CVE-2020-1938 nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC Kit4y/CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner laolisafe/CVE-2020-1938 DaemonShao/CVE-2020-1938 sv3nbeast/CVE-2020-1938-Tomact-file_include-file_read fairyming/CVE-2020-1938 dacade/cve-2020-1938 woaiqiukui/CVE-2020-1938TomcatAjpScanner fatal0/tomcat-cve-2020-1938-check ze0r/GhostCat-LFI-exp delsadan/CNVD-2020-10487-Bulk-verification 00theway/Ghostcat-CNVD-2020-10487 shaunmclernon/ghostcat-verification Zaziki1337/Ghostcat-CVE-2020-1938 w4fz5uck5/CVE-2020-1938-Clean-Version syncxx/CVE-2020-1938-Tool ZhengHaoCHeng/CNVD-2020-10487 CVE-2020-1947 # In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE. Imanfeng/CVE-2020-1947 jas502n/CVE-2020-1947 wsfengfan/CVE-2020-1947 shadowsock5/ShardingSphere_CVE-2020-1947 CVE-2020-1958 # When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with Druid. They are still subject to role-based authorization checks, if configured. Callers of Druid APIs can also retrieve any LDAP attribute values of users that exist on the LDAP server, so long as that information is visible to the Druid server. This information disclosure does not require the caller itself to be a valid LDAP user. ggolawski/CVE-2020-1958 CVE-2020-1967 # Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the \u0026quot;signature_algorithms_cert\u0026quot; TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f). irsl/CVE-2020-1967 CVE-2020-2333 # section-c/CVE-2020-2333 CVE-2020-2546 # Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - JavaEE). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). hktalent/CVE_2020_2546 CVE-2020-2551 # Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). 0xn0ne/weblogicScanner jas502n/CVE-2020-2551 hktalent/CVE-2020-2551 0nise/CVE-2020-2551 Y4er/CVE-2020-2551 Gspider7/rmi-iiop cnsimo/CVE-2020-2551 fa1c0n1/test-poc-weblogic CVE-2020-2555 # Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Hu3sky/CVE-2020-2555 wsfengfan/CVE-2020-2555 0nise/CVE-2020-2555 Y4er/CVE-2020-2555 Maskhe/cve-2020-2555 CVE-2020-2655 # Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N). RUB-NDS/CVE-2020-2655-DemoServer CVE-2020-3766 # Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation. hessandrew/CVE-2020-3766_APSB20-12 CVE-2020-3833 # An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing. c0d3G33k/Safari-Address-Bar-Spoof-CVE-2020-3833- CVE-2020-3952 # Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls. commandermoon/CVE-2020-3952 frustreated/CVE-2020-3952 guardicore/vmware_vcenter_cve_2020_3952 gelim/CVE-2020-3952 Fa1c0n35/vmware_vcenter_cve_2020_3952 CVE-2020-4276 # IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector. X-Force ID: 175984. mekoko/CVE-2020-4276 CVE-2020-5236 # Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like \u0026quot;Bad-header: xxxxxxxxxxxxxxx\\x10\u0026quot; is received, it will cause the regular expression engine to catastrophically backtrack causing the process to use 100% CPU time and blocking any other interactions. This allows an attacker to send a single request with an invalid header and take the service offline. This issue was introduced in version 1.4.2 when the regular expression was updated to attempt to match the behaviour required by errata associated with RFC7230. The regular expression that is used to validate incoming headers has been updated in version 1.4.3, it is recommended that people upgrade to the new version of Waitress as soon as possible. motikan2010/CVE-2020-5236 CVE-2020-5250 # In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change all information of all accounts. The problem is patched in version 1.7.6.4. drkbcn/lblfixer_cve2020_5250 CVE-2020-5254 # In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue. dpmdpm2/CVE-2020-5254 CVE-2020-5260 # Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external \u0026quot;credential helper\u0026quot; programs to store and retrieve passwords or other credentials from secure storage provided by the operating system. Specially-crafted URLs that contain an encoded newline can inject unintended values into the credential helper protocol stream, causing the credential helper to retrieve the password for one server (e.g., good.example.com) for an HTTP request being made to another server (e.g., evil.example.com), resulting in credentials for the former being sent to the latter. There are no restrictions on the relationship between the two, meaning that an attacker can craft a URL that will present stored credentials for any host to a host of their choosing. The vulnerability can be triggered by feeding a malicious URL to git clone. However, the affected URLs look rather suspicious; the likely vector would be through systems which automatically clone URLs not visible to the user, such as Git submodules, or package systems built around Git. The problem has been patched in the versions published on April 14th, 2020, going back to v2.17.x. Anyone wishing to backport the change further can do so by applying commit 9a6bbee (the full release includes extra checks for git fsck, but that commit is sufficient to protect clients against the vulnerability). The patched versions are: 2.17.4, 2.18.3, 2.19.4, 2.20.3, 2.21.2, 2.22.3, 2.23.2, 2.24.2, 2.25.3, 2.26.1. brompwnie/cve-2020-5260 Asgavar/CVE-2020-5260 sv3nbeast/CVE-2020-5260 CVE-2020-5267 # In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2. GUI/legacy-rails-CVE-2020-5267-patch CVE-2020-5398 # In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \u0026quot;Content-Disposition\u0026quot; header in the response where the filename attribute is derived from user supplied input. motikan2010/CVE-2020-5398 CVE-2020-5509 # PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image. FULLSHADE/CVE-2020-5509 CVE-2020-5844 # index.php?sec=godmode/extensions\u0026amp;sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742_FIX_PERL2020. TheCyberGeek/CVE-2020-5844 CVE-2020-6418 # Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. ChoKyuWon/CVE-2020-6418 CVE-2020-6650 # UPS companion software v1.05 \u0026amp; Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates available. This results in arbitrary code execution on the machine where software is installed. RavSS/Eaton-UPS-Companion-Exploit CVE-2020-6861 # ph4r05/ledger-app-monero-1.42-vuln CVE-2020-6888 # section-c/CVE-2020-6888 CVE-2020-72381 # jdordonezn/CVE-2020-72381 CVE-2020-7246 # A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by leveraging a path traversal vulnerability in the users['photop_preview'] delete photo feature, allowing bypass of .htaccess protection. NOTE: this issue exists because of an incomplete fix for CVE-2015-3884. lnxcrew/CVE-2020-7246 CVE-2020-7247 # smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the \u0026quot;uncommented\u0026quot; default configuration. The issue exists because of an incorrect return value upon failure of input validation. FiroSolutions/cve-2020-7247-exploit superzerosec/cve-2020-7247 r0lh/CVE-2020-7247 CVE-2020-7471 # Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitably crafted delimiter to a contrib.postgres.aggregates.StringAgg instance, it was possible to break escaping and inject malicious SQL. Saferman/CVE-2020-7471 secoba/DjVul_StringAgg SNCKER/CVE-2020-7471 CVE-2020-7799 # An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -\u0026gt; Settings -\u0026gt; Email Templates) or themes (Home -\u0026gt; Settings -\u0026gt; Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates. Pikaqi/cve-2020-7799 ianxtianxt/CVE-2020-7799 CVE-2020-7931 # In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authorized_keys file. Patches are available for various versions between 5.11.8 and 6.16.0. The issue exists because use of the DefaultObjectWrapper class makes certain Java functions accessible to a template. gquere/CVE-2020-7931 CVE-2020-7961 # Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS). mzer0one/CVE-2020-7961-POC Thisisfarhadzadeh/CVE-2020-7961-payloads wcxxxxx/CVE-2020-7961 CVE-2020-7980 # Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed. Xh4H/Satellian-CVE-2020-7980 CVE-2020-8012 # CA Unified Infrastructure Management (Nimsoft/UIM) 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code. wetw0rk/Exploit-Development CVE-2020-8417 # The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu. vulncrate/wp-codesnippets-cve-2020-8417 waleweewe12/CVE-2020-8417 CVE-2020-8515 # DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1. imjdl/CVE-2020-8515-PoC truerandom/nmap_draytek_rce CVE-2020-8597 # eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. marcinguy/CVE-2020-8597 mentalburden/MrsEAPers WinMin/CVE-2020-8597 CVE-2020-8809 # Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by modifying the contents of gurux.fi/obis/files.xml and gurux.fi/updates/updates.xml. Then, the attacker can modify the contents of downloaded files. In the case of add-ins (if the user is using those), this will lead to code execution. In case of OBIS codes (which the user is always using as they are needed to communicate with the energy meters), this can lead to code execution when combined with CVE-2020-8810. seqred-s-a/gxdlmsdirector-cve CVE-2020-8813 # graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege. mhaskar/CVE-2020-8813 CVE-2020-8825 # index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS. hacky1997/CVE-2020-8825 CVE-2020-8840 # FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter. jas502n/CVE-2020-8840 Wfzsec/FastJson1.2.62-RCE fairyming/CVE-2020-8840 0nise/CVE-2020-8840 CVE-2020-88888 # tdcoming/CVE-2020-88888 CVE-2020-8950 # The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\\AMD\\PPC\\upload and then creating a symbolic link in %PROGRAMDATA%\\AMD\\PPC\\temp that points to an arbitrary folder with an arbitrary file name. sailay1996/amd_eop_poc CVE-2020-9008 # Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor. kyletimmermans/blackboard-xss CVE-2020-9038 # Joplin through 1.0.184 allows Arbitrary File Read via XSS. JavierOlmedo/CVE-2020-9038 CVE-2020-9375 # TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field. thewhiteh4t/cve-2020-9375 CVE-2020-9380 # IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script. migueltarga/CVE-2020-9380 CVE-2020-9442 # OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\\OpenVPN Connect\\drivers\\tap\\amd64\\win10, which allows local users to gain privileges by copying a malicious drvstore.dll there. hessandrew/CVE-2020-9442 CVE-2020-9453 # FULLSHADE/CVE-2020-9453_-_CVE-2020-9014 CVE-2020-9460 # Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable. Guilherme-Rubert/CVE-2020-9460 CVE-2020-9461 # Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable. Guilherme-Rubert/CVE-2020-9461 CVE-2020-9547 # FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap). fairyming/CVE-2020-9547 CVE-2020-9548 # FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core). fairyming/CVE-2020-9548 CVE-2020-9758 # An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from unauthenticated to user-level access, leading to full account takeover. The attack fetches multiple credentials because they are stored in the database (stored XSS). This affects the mobile/chat URI via the lgn and psswrd parameters. ari034/CVE-2020-9758 CVE-2020-9768 # A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2. An application may be able to execute arbitrary code with system privileges. MrKris99/CVE-2020-9768 CVE-2020-9781 # The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user may grant website permissions to a site they didn't intend to. c0d3G33k/Safari-Video-Permission-Spoof-CVE-2020-9781 CVE-2020-98989 # tdcoming/CVE-2020-98989 CVE-2020-9999 # tdcoming/CVE-2020-9999 CVE-2020-99999999 # tdcoming/CVE-2020-99999999 2019 # CVE-2019-0053 # Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects the telnet client — accessible from the CLI or shell — in Junos OS. Inbound telnet services are not affected by this issue. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D237, 15.1X53-D496, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S11, 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. dreamsmasher/inetutils-CVE-2019-0053-Patched-PKGBUILD CVE-2019-0192 # In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side. mpgn/CVE-2019-0192 Rapidsafeguard/Solr-RCE-CVE-2019-0192 CVE-2019-0193 # In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \u0026quot;dataConfig\u0026quot; parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \u0026quot;enable.dih.dataConfigParam\u0026quot; to true. xConsoIe/CVE-2019-0193 jas502n/CVE-2019-0193 1135/solr_exploit jaychouzzk/CVE-2019-0193-exp CVE-2019-0211 # In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected. ozkanbilge/Apache-Exploit-2019 CVE-2019-0227 # A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue. ianxtianxt/cve-2019-0227 CVE-2019-0232 # When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/). pyn3rd/CVE-2019-0232 jas502n/CVE-2019-0232 CherishHair/CVE-2019-0232-EXP setrus/CVE-2019-0232 CVE-2019-0539 # A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka \u0026quot;Chakra Scripting Engine Memory Corruption Vulnerability.\u0026quot; This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568. 0x43434343/CVE-2019-0539 CVE-2019-0604 # A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594. linhlhq/CVE-2019-0604 denmilu/CVE-2019-0604_sharepoint_CVE k8gege/CVE-2019-0604 m5050/CVE-2019-0604 boxhg/CVE-2019-0604 CVE-2019-0678 # An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'. c0d3G33k/CVE-2019-0678 CVE-2019-0708 # A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'. hook-s3c/CVE-2019-0708-poc SherlockSec/CVE-2019-0708 yetiddbb/CVE-2019-0708-PoC p0p0p0/CVE-2019-0708-exploit rockmelodies/CVE-2019-0708-Exploit matengfei000/CVE-2019-0708 xiyangzuishuai/Dark-Network-CVE-2019-0708 temp-user-2014/CVE-2019-0708 areusecure/CVE-2019-0708 pry0cc/cve-2019-0708-2 sbkcbig/CVE-2019-0708-EXPloit sbkcbig/CVE-2019-0708-EXPloit-3389 YSheldon/MS_T120 k8gege/CVE-2019-0708 hotdog777714/RDS_CVE-2019-0708 jiansiting/CVE-2019-0708 NullByteSuiteDevs/CVE-2019-0708 heaphopopotamus/CVE-2019-0708 thugcrowd/CVE-2019-0708 omaidf/CVE-2019-0708-PoC blacksunwen/CVE-2019-0708 infenet/CVE-2019-0708 n0auth/CVE-2019-0708 gildaaa/CVE-2019-0708 sbkcbig/CVE-2019-0708-Poc-exploit HackerJ0e/CVE-2019-0708 syriusbughunt/CVE-2019-0708 Barry-McCockiner/CVE-2019-0708 ShadowBrokers-ExploitLeak/CVE-2019-0708 shumtheone/CVE-2019-0708 safly/CVE-2019-0708 Jaky5155/cve-2019-0708-exp fourtwizzy/CVE-2019-0708-Check-Device-Patch-Status 303sec/CVE-2019-0708 f8al/CVE-2019-0708-POC blockchainguard/CVE-2019-0708 haoge8090/CVE-2019-0708 branbot1000/CVE-2019-0708 yushiro/CVE-2019-0708 bilawalzardaer/CVE-2019-0708 skyshell20082008/CVE-2019-0708-PoC-Hitting-Path ttsite/CVE-2019-0708- ttsite/CVE-2019-0708 biggerwing/CVE-2019-0708-poc n1xbyte/CVE-2019-0708 freeide/CVE-2019-0708 edvacco/CVE-2019-0708-POC pry0cc/BlueKeepTracker zjw88282740/CVE-2019-0708-win7 zerosum0x0/CVE-2019-0708 herhe/CVE-2019-0708poc l9c/rdp0708scanner major203/cve-2019-0708-scan SugiB3o/Check-vuln-CVE-2019-0708 gobysec/CVE-2019-0708 adalenv/CVE-2019-0708-Tool smallFunction/CVE-2019-0708-POC freeide/CVE-2019-0708-PoC-Exploit robertdavidgraham/rdpscan closethe/CVE-2019-0708-POC krivegasa/Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit Rostelecom-CERT/bluekeepscan Leoid/CVE-2019-0708 ht0Ruial/CVE-2019-0708Poc-BatchScanning oneoy/BlueKeep infiniti-team/CVE-2019-0708 haishanzheng/CVE-2019-0708-generate-hosts Ekultek/BlueKeep UraSecTeam/CVE-2019-0708 Gh0st0ne/rdpscan-BlueKeep algo7/bluekeep_CVE-2019-0708_poc_to_exploit JasonLOU/CVE-2019-0708 shun-gg/CVE-2019-0708 AdministratorGithub/CVE-2019-0708 umarfarook882/CVE-2019-0708 HynekPetrak/detect_bluekeep.py Wileysec/CVE-2019-0708-Batch-Blue-Screen Pa55w0rd/CVE-2019-0708 at0mik/CVE-2019-0708-PoC cream492/CVE-2019-0708-Msf\u0026ndash; wdfcc/CVE-2019-0708 cvencoder/cve-2019-0708 ze0r/CVE-2019-0708-exp mekhalleh/cve-2019-0708 cve-2019-0708-poc/cve-2019-0708 andripwn/CVE-2019-0708 0xeb-bp/bluekeep ntkernel0/CVE-2019-0708 dorkerdevil/Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708- turingcompl33t/bluekeep fade-vivida/CVE-2019-0708-test skommando/CVE-2019-0708 RickGeex/msf-module-CVE-2019-0708 wqsemc/CVE-2019-0708 mai-lang-chai/CVE-2019-0708-RCE Micr067/CVE-2019-0708RDP-MSF adkinguzi/CVE-2019-0708-BlueKeep FrostsaberX/CVE-2019-0708 qinggegeya/CVE-2019-0708-EXP-MSF- distance-vector/CVE-2019-0708 0xFlag/CVE-2019-0708-test 1aa87148377/CVE-2019-0708 coolboy4me/cve-2019-0708_bluekeep_rce Cyb0r9/ispy shishibabyq/CVE-2019-0708 pwnhacker0x18/Wincrash R4v3nG/CVE-2019-0708-DOS ulisesrc/-2-CVE-2019-0708 worawit/CVE-2019-0708 cbwang505/CVE-2019-0708-EXP-Windows eastmountyxz/CVE-2019-0708-Windows JSec1337/Scanner-CVE-2019-0708 wanghuohuobutailao/cve-2019-0708 CVE-2019-0709 # A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0620, CVE-2019-0722. YHZX2013/CVE-2019-0709 qq431169079/CVE-2019-0709 CVE-2019-0768 # A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow requests that should otherwise be ignored, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0761. ruthlezs/ie11_vbscript_exploit CVE-2019-0785 # A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'. Jaky5155/CVE-2019-0785 CVE-2019-0803 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859. ExpLife0011/CVE-2019-0803 CVE-2019-0808 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797. ze0r/cve-2019-0808-poc rakesh143/CVE-2019-0808 exodusintel/CVE-2019-0808 CVE-2019-0841 # An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836. rogue-kdc/CVE-2019-0841 denmilu/CVE-2019-0841 0x00-0x00/CVE-2019-0841-BYPASS CVE-2019-0859 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803. Sheisback/CVE-2019-0859-1day-Exploit CVE-2019-0888 # A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory, aka 'ActiveX Data Objects (ADO) Remote Code Execution Vulnerability'. sophoslabs/CVE-2019-0888 CVE-2019-0986 # An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'. padovah4ck/CVE-2019-0986 CVE-2019-10008 # Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ login attempt within a different browser tab. FlameOfIgnis/CVE-2019-10008 CVE-2019-1002101 # The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. The untar function can both create and follow symbolic links. The issue is resolved in kubectl v1.11.9, v1.12.7, v1.13.5, and v1.14.0. brompwnie/CVE-2019-1002101-Helpers CVE-2019-1003000 # A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM. wetw0rk/Exploit-Development adamyordan/cve-2019-1003000-jenkins-rce-poc 0xtavian/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins 1NTheKut/CVE-2019-1003000_RCE-DETECTION CVE-2019-10086 # In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean. evilangelplus/CVE-2019-10086 CVE-2019-10092 # In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed. motikan2010/CVE-2019-10092_Docker CVE-2019-1010054 # Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls. chaizeg/CSRF-breach CVE-2019-1010298 # Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (kernel). The component is: optee_os. The fixed version is: 3.4.0 and later. RKX1209/CVE-2019-1010298 CVE-2019-10149 # A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. bananaphones/exim-rce-quickfix cowbe0x004/eximrce-CVE-2019-10149 MNEMO-CERT/PoC\u0026ndash;CVE-2019-10149_Exim aishee/CVE-2019-10149-quick AzizMea/CVE-2019-10149-privilege-escalation Brets0150/StickyExim ChrissHack/exim.exp darsigovrustam/CVE-2019-10149 Diefunction/CVE-2019-10149 CVE-2019-10207 # A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash. butterflyhack/CVE-2019-10207 CVE-2019-10392 # Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection. jas502n/CVE-2019-10392 ftk-sostupid/CVE-2019-10392_EXP CVE-2019-1040 # A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'. Ridter/CVE-2019-1040 lazaars/UltraRealy_with_CVE-2019-1040 fox-it/cve-2019-1040-scanner wzxmt/CVE-2019-1040 CVE-2019-10475 # A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin. vesche/CVE-2019-10475 CVE-2019-1064 # An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. RythmStick/CVE-2019-1064 0x00-0x00/CVE-2019-1064 attackgithub/CVE-2019-1064 CVE-2019-10678 # Domoticz before 4.10579 neglects to categorize \\n and \\r as insecure argument options. cved-sources/cve-2019-10678 CVE-2019-10685 # A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0. alt3kx/CVE-2019-10685 CVE-2019-1069 # An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations, aka 'Task Scheduler Elevation of Privilege Vulnerability'. S3cur3Th1sSh1t/SharpPolarBear CVE-2019-10708 # S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter. stavhaygn/CVE-2019-10708 CVE-2019-10758 # mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment. masahiro331/CVE-2019-10758 lp008/CVE-2019-10758 CVE-2019-10869 # Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php (aka upload/submit page) name and tmp_name parameters. KTN1990/CVE-2019-10869 CVE-2019-10915 # A vulnerability has been identified in TIA Administrator (All versions \u0026lt; V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. jiansiting/CVE-2019-10915 CVE-2019-1096 # An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. ze0r/cve-2019-1096-poc CVE-2019-10999 # The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute arbitrary code by providing a long string in the WEPEncryption parameter when requesting wireless.htm. Vulnerable devices include DCS-5009L (1.08.11 and below), DCS-5010L (1.14.09 and below), DCS-5020L (1.15.12 and below), DCS-5025L (1.03.07 and below), DCS-5030L (1.04.10 and below), DCS-930L (2.16.01 and below), DCS-931L (1.14.11 and below), DCS-932L (2.17.01 and below), DCS-933L (1.14.11 and below), and DCS-934L (1.05.04 and below). fuzzywalls/CVE-2019-10999 CVE-2019-11043 # In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution. neex/phuip-fpizdam B1gd0g/CVE-2019-11043 tinker-li/CVE-2019-11043 jas502n/CVE-2019-11043 AleWong/PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043- ianxtianxt/CVE-2019-11043 fairyming/CVE-2019-11043 akamajoris/CVE-2019-11043-Docker theMiddleBlue/CVE-2019-11043 shadow-horse/cve-2019-11043 huowen/CVE-2019-11043 ypereirareis/docker-CVE-2019-11043 MRdoulestar/CVE-2019-11043 0th3rs-Security-Team/CVE-2019-11043 k8gege/CVE-2019-11043 moniik/CVE-2019-11043_env scgs66/CVE-2019-11043 CVE-2019-11061 # A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). tim124058/ASUS-SmartHome-Exploit CVE-2019-11076 # Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request. livehybrid/poc-cribl-rce CVE-2019-1108 # An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desktop Protocol Client Information Disclosure Vulnerability'. Lanph3re/cve-2019-1108 CVE-2019-11157 # Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access. zkenjar/v0ltpwn CVE-2019-11223 # An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension. AngelCtulhu/CVE-2019-11223 CVE-2019-1125 # An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071, CVE-2019-1073. bitdefender/swapgs-attack-poc CVE-2019-1132 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Vlad-tri/CVE-2019-1132 petercc/CVE-2019-1132 CVE-2019-11358 # jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. bitnesswise/jquery-prototype-pollution-fix CVE-2019-11477 # Jonathan Looney discovered that the TCP_SKB_CB(skb)-\u0026gt;tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff. sasqwatch/cve-2019-11477-poc CVE-2019-11510 # In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability . projectzeroindia/CVE-2019-11510 ladyleet1337/Pulse imjdl/CVE-2019-11510-poc es0/CVE-2019-11510_poc r00tpgp/http-pulse_ssl_vpn.nse jas502n/CVE-2019-11510-1 jason3e7/CVE-2019-11510 BishopFox/pwn-pulse aqhmal/pulsexploit cisagov/check-your-pulse CVE-2019-11523 # Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption is done. Attackers can fully interact with the device: for example, send the \u0026quot;open door\u0026quot; command, download the users list (which includes RFID codes and passcodes in cleartext), or update/create users. The same attack can be executed on a local network and over the internet (if the device is exposed on a public IP address). wizlab-it/anviz-m3-rfid-cve-2019-11523-poc CVE-2019-11539 # In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands. 0xDezzy/CVE-2019-11539 CVE-2019-11580 # Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits remote code execution on systems running a vulnerable version of Crowd or Crowd Data Center. All versions of Crowd from version 2.1.0 before 3.0.5 (the fixed version for 3.0.x), from version 3.1.0 before 3.1.6 (the fixed version for 3.1.x), from version 3.2.0 before 3.2.8 (the fixed version for 3.2.x), from version 3.3.0 before 3.3.5 (the fixed version for 3.3.x), and from version 3.4.0 before 3.4.4 (the fixed version for 3.4.x) are affected by this vulnerability. jas502n/CVE-2019-11580 shelld3v/CVE-2019-11580 CVE-2019-11581 # There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and Data Center from 4.4.0 before 7.6.14, from 7.7.0 before 7.13.5, from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability. jas502n/CVE-2019-11581 kobs0N/CVE-2019-11581 CVE-2019-11687 # An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b. The preamble of a DICOM file that complies with this specification can contain the header for an executable file, such as Portable Executable (PE) malware. This space is left unspecified so that dual-purpose files can be created. (For example, dual-purpose TIFF/DICOM files are used in digital whole slide imaging for applications in medicine.) To exploit this vulnerability, someone must execute a maliciously crafted file that is encoded in the DICOM Part 10 File Format. PE/DICOM files are executable even with the .dcm file extension. Anti-malware configurations at healthcare facilities often ignore medical imagery. Also, anti-malware tools and business processes could violate regulatory frameworks (such as HIPAA) when processing suspicious DICOM files. kosmokato/bad-dicom CVE-2019-11707 # A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR \u0026lt; 60.7.1, Firefox \u0026lt; 67.0.3, and Thunderbird \u0026lt; 60.7.2. vigneshsrao/CVE-2019-11707 tunnelshade/cve-2019-11707 CVE-2019-11708 # Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR \u0026lt; 60.7.2, Firefox \u0026lt; 67.0.4, and Thunderbird \u0026lt; 60.7.2. 0vercl0k/CVE-2019-11708 CVE-2019-11730 # A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and they may uploaded to a server. It was demonstrated that in combination with a popular Android messaging app, if a malicious HTML attachment is sent to a user and they opened that attachment in Firefox, due to that app's predictable pattern for locally-saved file names, it is possible to read attachments the victim received from other correspondents. This vulnerability affects Firefox ESR \u0026lt; 60.8, Firefox \u0026lt; 68, and Thunderbird \u0026lt; 60.8. alidnf/CVE-2019-11730 CVE-2019-1181 # A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1182, CVE-2019-1222, CVE-2019-1226. major203/cve-2019-1181 CVE-2019-11881 # A vulnerability exists in Rancher 2.1.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit phishing sites with scare tactics, e.g., displaying a \u0026quot;This version of Rancher is outdated, please visit https://malicious.rancher.site/upgrading\u0026quot; message. MauroEldritch/VanCleef CVE-2019-11931 # A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100. kasif-dekel/whatsapp-rce-patched nop-team/CVE-2019-11931 CVE-2019-11932 # A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image. dorkerdevil/CVE-2019-11932 KeepWannabe/WhatsRCE awakened1712/CVE-2019-11932 TulungagungCyberLink/CVE-2019-11932 infiniteLoopers/CVE-2019-11932 alexanderstonec/CVE-2019-11932 valbrux/CVE-2019-11932-SupportApp fastmo/CVE-2019-11932 mRanonyMousTZ/CVE-2019-11932-whatsApp-exploit SmoZy92/CVE-2019-11932 dashtic172/https-github.com-awakened171 Err0r-ICA/WhatsPayloadRCE CVE-2019-12086 # A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation. codeplutos/CVE-2019-12086-jackson-databind-file-read CVE-2019-1215 # An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303. bluefrostsecurity/CVE-2019-1215 CVE-2019-12169 # ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a \u0026quot;..\u0026quot; pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component. fuzzlove/ATutor-2.2.4-Language-Exploit CVE-2019-12170 # ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload.php (aka backup) component. This may result in remote command execution. An attacker can use the instructor account to fully compromise the system using a crafted backup ZIP archive. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. fuzzlove/ATutor-Instructor-Backup-Arbitrary-File CVE-2019-1218 # A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages, aka 'Outlook iOS Spoofing Vulnerability'. d0gukank/CVE-2019-1218 CVE-2019-12180 # An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5. When opening a project, the Groovy \u0026quot;Load Script\u0026quot; is automatically executed. This allows an attacker to execute arbitrary Groovy Language code (Java scripting language) on the victim machine by inducing it to open a malicious Project. The same issue is present in the \u0026quot;Save Script\u0026quot; function, which is executed automatically when saving a project. 0x-nope/CVE-2019-12180 CVE-2019-12181 # A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. guywhataguy/CVE-2019-12181 CVE-2019-12185 # eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. fuzzlove/eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE CVE-2019-12189 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field. falconz/CVE-2019-12189 tuyenhva/CVE-2019-12189 CVE-2019-12190 # XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or filename parameter. tuyenhva/CVE-2019-12190 CVE-2019-12252 # In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution\u0026amp;mode=E-Mail\u0026amp;notifyTo=SOLFORWARD\u0026amp;id= substring. tuyenhva/CVE-2019-12252 CVE-2019-12255 # Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. sud0woodo/Urgent11-Suricata-LUA-scripts CVE-2019-12272 # In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability. HACHp1/LuCI_RCE_exp roguedream/lede-17.01.3 CVE-2019-12314 # Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI. ras313/CVE-2019-12314 CVE-2019-12384 # FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible. jas502n/CVE-2019-12384 MagicZer0/Jackson_RCE-CVE-2019-12384 CVE-2019-12409 # The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and exposed on RMI_PORT (default=18983), without any authentication. If this port is opened for inbound traffic in your firewall, then anyone with network access to your Solr nodes will be able to access JMX, which may in turn allow them to upload malicious code for execution on the Solr server. jas502n/CVE-2019-12409 CVE-2019-12453 # In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation. undefinedmode/CVE-2019-12453 CVE-2019-12460 # Web Port 1.19.1 allows XSS via the /access/setup type parameter. EmreOvunc/WebPort-v1.19.1-Reflected-XSS CVE-2019-12475 # In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation. undefinedmode/CVE-2019-12475 CVE-2019-12476 # An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus before 5.0.6 allows an attacker with physical access to gain a shell with SYSTEM privileges via the restricted thick client browser. The attack uses a long sequence of crafted keyboard input. 0katz/CVE-2019-12476 CVE-2019-1253 # An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303. rogue-kdc/CVE-2019-1253 denmilu/CVE-2019-1253 padovah4ck/CVE-2019-1253 sgabe/CVE-2019-1253 CVE-2019-12538 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do search field. tarantula-team/CVE-2019-12538 CVE-2019-12541 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter. tarantula-team/CVE-2019-12541 CVE-2019-12542 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do userConfigID parameter. tarantula-team/CVE-2019-12542 CVE-2019-12543 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the PurchaseRequest.do serviceRequestId parameter. tarantula-team/CVE-2019-12543 CVE-2019-12562 # Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to the server, etc. Successful exploitation occurs when an admin user visits a notification page with stored cross-site scripting. MAYASEVEN/CVE-2019-12562 CVE-2019-12586 # The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP method completion or failure, which allows attackers in radio range to cause a denial of service (crash) via a crafted message. Matheus-Garbelini/esp32_esp8266_attacks CVE-2019-12594 # DOSBox 0.74-2 has Incorrect Access Control. Alexandre-Bartel/CVE-2019-12594 CVE-2019-12735 # getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim. pcy190/ace-vim-neovim oldthree3/CVE-2019-12735-VIM-NEOVIM CVE-2019-12750 # Symantec Endpoint Protection, prior to 14.2 RU1 \u0026amp; 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.1.7491.7002), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. v-p-b/cve-2019-12750 CVE-2019-12796 # PeterUpfold/CVE-2019-12796 CVE-2019-12815 # An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306. KTN1990/CVE-2019-12815 CVE-2019-12836 # The Bobronix JEditor editor before 3.0.6 for Jira allows an attacker to add a URL/Link (to an existing issue) that can cause forgery of a request to an out-of-origin domain. This in turn may allow for a forged request that can be invoked in the context of an authenticated user, leading to stealing of session tokens and account takeover. 9lyph/CVE-2019-12836 CVE-2019-12840 # In Webmin through 1.910, any user authorized to the \u0026quot;Package Updates\u0026quot; module can execute arbitrary commands with root privileges via the data parameter to update.cgi. bkaraceylan/CVE-2019-12840_POC KrE80r/webmin_cve-2019-12840_poc CVE-2019-12889 # An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. A user with local access to only the Windows logon screen can escalate their privileges to NT AUTHORITY\\System. An attacker would need local access to the machine for a successful exploit. The attacker must disconnect the computer from the local network / WAN and connect it to an internet facing access point / network. At that point, the attacker can execute the password-reset functionality, which will expose a web browser. Browsing to a site that calls local Windows system functions (e.g., file upload) will expose the local file system. From there an attacker can launch a privileged command shell. nulsect0r/CVE-2019-12889 CVE-2019-12890 # RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create admin users via a con.automationframework users insert_one call. EthicalHackingCOP/CVE-2019-12890 CVE-2019-12949 # In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button on a phishing page, an attacker can leverage XSS to upload arbitrary executable code, via diag_command.php and rrd_fetch_json.php (timePeriod parameter), to a server. Then, the remote attacker can run any command with root privileges on that server. tarantula-team/CVE-2019-12949 CVE-2019-12999 # Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control. lightninglabs/chanleakcheck CVE-2019-13000 # Eclair through 0.3 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states \u0026quot;it is beta-quality software and don't put too much money in it.\u0026quot; ACINQ/detection-tool-cve-2019-13000 CVE-2019-13024 # Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value \u0026quot;init_script\u0026quot;-\u0026quot;Monitoring Engine Binary\u0026quot; in main.get.php to insert a arbitrary command into the database, and execute it by calling the vulnerable page www/include/configuration/configGenerate/xml/generateFiles.php (which passes the inserted value to the database to shell_exec without sanitizing it, allowing one to execute system arbitrary commands). mhaskar/CVE-2019-13024 get-get-get-get/Centreon-RCE CVE-2019-13025 # Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST (HTTP) request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable modem. x1tan/CVE-2019-13025 CVE-2019-13027 # Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter. IckoGZ/CVE-2019-13027 CVE-2019-13051 # Pi-Hole 4.3 allows Command Injection. pr0tean/CVE-2019-13051 CVE-2019-13063 # Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page. This will result in file disclosure (i.e., being able to pull any file from the remote victim application). This can be used to steal and obtain sensitive config and other files. This can result in complete compromise of the application. The script parameter is vulnerable to directory traversal and both local and remote file inclusion. 0x6b7966/CVE-2019-13063-POC CVE-2019-13086 # core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter. lingchuL/CVE_POC_test CVE-2019-13101 # An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page. halencarjunior/dlkploit600 CVE-2019-13115 # In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855. CSSProject/libssh2-Exploit CVE-2019-13143 # An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3. With the user ID, user name, and the lock's MAC address, anyone can unbind the existing owner of the lock, and bind themselves instead. This leads to complete takeover of the lock. The user ID, name, and MAC address are trivially obtained from APIs found within the Android or iOS application. With only the MAC address of the lock, any attacker can transfer ownership of the lock from the current user, over to the attacker's account. Thus rendering the lock completely inaccessible to the current user. securelayer7/pwnfb50 CVE-2019-1315 # An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342. Mayter/CVE-2019-1315 CVE-2019-13272 # In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments. jas502n/CVE-2019-13272 Cyc1eC/CVE-2019-13272 bigbigliang-malwarebenchmark/cve-2019-13272 oneoy/CVE-2019-13272 Huandtx/CVE-2019-13272 polosec/CVE-2019-13272 sumedhaDharmasena/-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272 CVE-2019-13361 # Smanos W100 1.0.0 devices have Insecure Permissions, exploitable by an attacker on the same Wi-Fi network. lodi-g/CVE-2019-13361 CVE-2019-13403 # Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information. B3Bo1d/CVE-2019-13403 CVE-2019-13404 # ** DISPUTED ** The MSI installer for Python through 2.7.16 on Windows defaults to the C:\\Python27 directory, which makes it easier for local users to deploy Trojan horse code. (This also affects old 3.x releases before 3.5.) NOTE: the vendor's position is that it is the user's responsibility to ensure C:\\Python27 access control or choose a different directory, because backwards compatibility requires that C:\\Python27 remain the default for 2.7.x. alidnf/CVE-2019-13404 CVE-2019-13496 # One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response. FurqanKhan1/CVE-2019-13496 CVE-2019-13497 # One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests. FurqanKhan1/CVE-2019-13497 CVE-2019-13498 # One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4. FurqanKhan1/CVE-2019-13498 CVE-2019-13504 # There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2. hazedic/fuzzenv-exiv2 CVE-2019-13574 # In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command. masahiro331/CVE-2019-13574 CVE-2019-1367 # A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221. mandarenmanman/CVE-2019-1367 CVE-2019-13720 # Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. cve-2019-13720/cve-2019-13720 ChoKyuWon/CVE-2019-13720 CVE-2019-1385 # An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'. klinix5/CVE-2019-1385 CVE-2019-1388 # An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'. jas502n/CVE-2019-1388 jaychouzzk/CVE-2019-1388 sv3nbeast/CVE-2019-1388 CVE-2019-13956 # Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH4_0df5_language=en to 4gH4_0df5_language=en'.phpinfo().'; (if the random prefix 4gH4_0df5_ were used). rhbb/CVE-2019-13956 CVE-2019-1402 # An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Information Disclosure Vulnerability'. lauxjpn/CorruptQueryAccessWorkaround CVE-2019-14040 # Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026amp; Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150, SXR1130 tamirzb/CVE-2019-14040 CVE-2019-14041 # During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026amp; Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130 tamirzb/CVE-2019-14041 CVE-2019-1405 # An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. apt69/COMahawk CVE-2019-14079 # Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leading to kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8953, QCA6574AU, QCS605, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SM8150, SXR1130 parallelbeings/CVE-2019-14079 CVE-2019-14205 # A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php. security-kma/EXPLOITING-CVE-2019-14205 CVE-2019-1422 # An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1420, CVE-2019-1423. ze0r/cve-2019-1422 CVE-2019-14220 # An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine (VM) to enable Android apps to run on Windows or MacOS. Bug is in a local arbitrary file read through a system service call. The impacted method runs with System admin privilege and if given the file name as parameter returns you the content of file. A malicious app using the affected method can then read the content of any system file which it is not authorized to read seqred-s-a/cve-2019-14220 CVE-2019-14267 # PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled. snappyJack/pdfresurrect_CVE-2019-14267 CVE-2019-14287 # In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \u0026quot;sudo -u \\#$((0xffffffff))\u0026quot; command. FauxFaux/sudo-cve-2019-14287 CashWilliams/CVE-2019-14287-demo n0w4n/CVE-2019-14287 gurneesh/CVE-2019-14287-write-up shellvhack/Sudo-Security-Bypass-CVE-2019-14287 Janette88/cve-2019-14287sudoexp huang919/cve-2019-14287-PPT wenyu1999/sudo- Sindadziy/cve-2019-14287 Sindayifu/CVE-2019-14287-CVE-2014-6271 Unam3dd/sudo-vulnerability-CVE-2019-14287 CMNatic/Dockerized-CVE-2019-14287 CVE-2019-14314 # A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php. imthoe/CVE-2019-14314 CVE-2019-14319 # The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic. MelroyB/CVE-2019-14319 CVE-2019-14326 # An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and ssh (ports 22 and 23) with root privileges in the emulated Android system. This can be exploited by remote attackers to gain full access to the device, or by malicious apps installed inside the emulator to perform privilege escalation from a normal user to root (unlike with standard methods of getting root privileges on Android - e.g., the SuperSu program - the user is not asked for consent). There is no authentication performed - access to a root shell is given upon a successful connection. NOTE: although this was originally published with a slightly different CVE ID number, the correct ID for this Andy vulnerability has always been CVE-2019-14326. seqred-s-a/cve-2019-14326 CVE-2019-14339 # The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key. 0x48piraj/CVE-2019-14339 CVE-2019-14439 # A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath. jas502n/CVE-2019-14439 CVE-2019-14514 # An issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating system inside the MEmu emulator contains a /system/bin/systemd binary that is run with root privileges on startup (this is unrelated to Red Hat's systemd init program, and is a closed-source proprietary tool that seems to be developed by Microvirt). This program opens TCP port 21509, presumably to receive installation-related commands from the host OS. Because everything after the installer:uninstall command is concatenated directly into a system() call, it is possible to execute arbitrary commands by supplying shell metacharacters. seqred-s-a/cve-2019-14514 CVE-2019-14529 # OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php. Wezery/CVE-2019-14529 CVE-2019-14530 # An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (that is readable by the user www-data) from server storage. If the requested file is writable for the www-data user and the directory /var/www/openemr/sites/default/documents/cqm_qrda/ exists, it will be deleted from server. Wezery/CVE-2019-14530 CVE-2019-14537 # YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass. Wocanilo/CVE-2019-14537 CVE-2019-14540 # A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig. LeadroyaL/cve-2019-14540-exploit CVE-2019-1458 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. piotrflorczyk/cve-2019-1458_POC unamer/CVE-2019-1458 CVE-2019-14615 # Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access. HE-Wenjian/iGPU-Leak CVE-2019-14745 # In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in executables. xooxo/CVE-2019-14745 CVE-2019-14751 # NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction. mssalvatore/CVE-2019-14751_PoC CVE-2019-1476 # An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483. sgabe/CVE-2019-1476 CVE-2019-14830 # Fr3d-/moodle-token-stealer CVE-2019-14912 # An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie. Wocanilo/adaPwn CVE-2019-15029 # FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command. mhaskar/CVE-2019-15029 CVE-2019-15053 # The \u0026quot;HTML Include and replace macro\u0026quot; plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element. l0nax/CVE-2019-15053 CVE-2019-15107 # An issue was discovered in Webmin \u0026lt;=1.920. The parameter old in password_change.cgi contains a command injection vulnerability. jas502n/CVE-2019-15107 HACHp1/webmin_docker_and_exp ketlerd/CVE-2019-15107 AdministratorGithub/CVE-2019-15107 Pichuuuuu/CVE-2019-15107 Rayferrufino/Make-and-Break AleWong/WebminRCE-EXP-CVE-2019-15107- ianxtianxt/CVE-2019-15107 hannob/webminex ChakoMoonFish/webmin_CVE-2019-15107 CVE-2019-15120 # The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode. h3llraiser/CVE-2019-15120 CVE-2019-15126 # An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503. 0x13enny/kr00k hexway/r00kie-kr00kie akabe1/kr00ker mustafasevim/kr00k-vulnerability CVE-2019-15224 # The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions \u0026lt;=1.6.9 and \u0026gt;=1.6.14 are unaffected. chef-cft/inspec_cve_2019_15224 CVE-2019-15233 # The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie. l0nax/CVE-2019-15233 CVE-2019-15511 # An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is installed. All GOG Galaxy versions before 1.2.60 and all corresponding versions of GOG Galaxy 2.0 Beta are affected. adenkiewicz/CVE-2019-15511 CVE-2019-15642 # rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states \u0026quot;RPC can be used to run any command or modify any file on a server, which is why access to it must not be granted to un-trusted Webmin users.\u0026quot; jas502n/CVE-2019-15642 CVE-2019-1579 # Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code. securifera/CVE-2019-1579 CVE-2019-15802 # An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware hashes and encrypts passwords using a hardcoded cryptographic key in sal_util_str_encrypt() in libsal.so.0.0. The parameters (salt, IV, and key data) are used to encrypt and decrypt all passwords using AES256 in CBC mode. With the parameters known, all previously encrypted passwords can be decrypted. This includes the passwords that are part of configuration backups or otherwise embedded as part of the firmware. jasperla/CVE-2019-15802 CVE-2019-15846 # Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash. synacktiv/Exim-CVE-2019-15846 CVE-2019-15858 # admin/includes/class.import.snippet.php in the \u0026quot;Woody ad snippets\u0026quot; plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution. GeneralEG/CVE-2019-15858 CVE-2019-15972 # A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates SQL values. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to modify values on or return values from the underlying database. FSecureLABS/Cisco-UCM-SQLi-Scripts CVE-2019-16097 # core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend and allow user to do self-registration. Fixed version: v1.7.6 v1.8.3. v.1.9.0. Workaround without applying the fix: configure Harbor to use non-DB authentication backend such as LDAP. evilAdan0s/CVE-2019-16097 rockmelodies/CVE-2019-16097-batch ianxtianxt/CVE-2019-16097 dacade/cve-2019-16097 theLSA/harbor-give-me-admin luckybool1020/CVE-2019-16097 CVE-2019-16098 # The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code. Barakat/CVE-2019-16098 CVE-2019-16278 # Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. jas502n/CVE-2019-16278 imjdl/CVE-2019-16278-PoC ianxtianxt/CVE-2019-16278 darkerego/Nostromo_Python3 AnubisSec/CVE-2019-16278 rptucker/CVE-2019-16278-Nostromo_1.9.6-RCE Kr0ff/cve-2019-16278 NHPT/CVE-2019-16278 Unam3dd/nostromo_1_9_6_rce keshiba/cve-2019-16278 CVE-2019-16279 # A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request. ianxtianxt/CVE-2019-16279 CVE-2019-16394 # SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers. SilentVoid13/Silent_CVE_2019_16394 CVE-2019-16405 # Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same. TheCyberGeek/CVE-2019-16405.rb CVE-2019-1652 # A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious HTTP POST requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux shell as root. Cisco has released firmware updates that address this vulnerability. 0x27/CiscoRV320Dump CVE-2019-1653 # A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability. dubfr33/CVE-2019-1653 shaheemirza/CiscoSpill CVE-2019-16662 # An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution. mhaskar/CVE-2019-16662 CVE-2019-16663 # An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution. mhaskar/CVE-2019-16663 CVE-2019-16692 # phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used. kkirsche/CVE-2019-16692 CVE-2019-16724 # File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331. FULLSHADE/OSCE CVE-2019-16759 # vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request. Frint0/mass-pwn-vbulletin M0sterHxck/CVE-2019-16759-Vbulletin-rce-exploit r00tpgp/http-vuln-CVE-2019-16759 jas502n/CVE-2019-16759 FarjaalAhmad/CVE-2019-16759 andripwn/pwn-vbulletin psychoxploit/vbull CVE-2019-16784 # In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in \u0026quot;onefile\u0026quot; mode is launched by a privileged user (at least more than the current one) which have his \u0026quot;TempPath\u0026quot; resolving to a world writable directory. This is the case for example if the software is launched as a service or as a scheduled task using a system account (TempPath will be C:\\Windows\\Temp). In order to be exploitable the software has to be (re)started after the attacker launch the exploit program, so for a service launched at startup, a service restart is needed (e.g. after a crash or an upgrade). AlterSolutions/PyInstallerPrivEsc CVE-2019-16889 # Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs. grampae/meep CVE-2019-16920 # Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a \u0026quot;PingTest\u0026quot; device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825. pwnhacker0x18/CVE-2019-16920-MassPwn3r CVE-2019-16941 # NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used with a modified XML document. This occurs in Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java. An attack could start with an XML document that was originally created by DumpFunctionPatternInfoScript but then directly modified by an attacker (for example, to make a java.lang.Runtime.exec call). purpleracc00n/CVE-2019-16941 CVE-2019-17080 # mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports. Andhrimnirr/Mintinstall-object-injection CVE-2019-17124 # Kramer VIAware 2.5.0719.1034 has Incorrect Access Control. hessandrew/CVE-2019-17124 CVE-2019-17221 # PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page.open() function of the webpage module, which loads a specified URL and calls a given callback. An attacker can supply a specially crafted HTML file, as user input, that allows reading arbitrary files on the filesystem. For example, if page.render() is the function callback, this generates a PDF or an image of the targeted file. NOTE: this product is no longer developed. h4ckologic/CVE-2019-17221 CVE-2019-17234 # includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion. administra1tor/CVE-2019-17234-Wordpress-DirStroyer CVE-2019-17424 # A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file. guywhataguy/CVE-2019-17424 CVE-2019-17427 # In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors. RealLinkers/CVE-2019-17427 CVE-2019-17495 # A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that \u0026lt;style\u0026gt;@import within the JSON data was a functional attack method. SecT0uch/CVE-2019-17495-test CVE-2019-17525 # The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks. huzaifahussain98/CVE-2019-17525 CVE-2019-17558 # Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting `params.resource.loader.enabled` by defining a response writer with that setting set to `true`. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is `trusted` (has been uploaded by an authenticated user). SDNDTeam/CVE-2019-17558_Solr_Vul_Tool CVE-2019-17564 # Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue affected Apache Dubbo 2.7.0 to 2.7.4, 2.6.0 to 2.6.7, and all 2.5.x versions. r00t4dm/CVE-2019-17564 Jaky5155/CVE-2019-17564 Hu3sky/CVE-2019-17564 Exploit-3389/CVE-2019-17564 Dor-Tumarkin/CVE-2019-17564-FastJson-Gadget fairyming/CVE-2019-17564 CVE-2019-17570 # An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maintained and this issue will not be fixed. r00t4dm/CVE-2019-17570 orangecertcc/xmlrpc-common-deserialization CVE-2019-17571 # Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17. shadow-horse/CVE-2019-17571 CVE-2019-17596 # Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates. pquerna/poc-dsa-verify-CVE-2019-17596 CVE-2019-17625 # There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron, such as an exec of OS commands within the onerror attribute of an IMG element. Ekultek/CVE-2019-17625 CVE-2019-17633 # For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of an arbitrary Che workspace. Che with no authentication and no TLS is not usually deployed on a public network but is often used for local installations (e.g. on personal laptops). In that case, even if the Che API is not exposed externally, some javascript running in the local browser is able to send requests to it. mgrube/CVE-2019-17633 CVE-2019-17658 # An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executable service path. Ibonok/CVE-2019-17658 CVE-2019-17671 # In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled. rhbb/CVE-2019-17671 CVE-2019-1821 # A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system. k8gege/CiscoExploit CVE-2019-18371 # An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC CVE-2019-18418 # clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management. Andhrimnirr/ClonOS-WEB-control-panel-multi-vulnerability CVE-2019-18426 # A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message. PerimeterX/CVE-2019-18426 CVE-2019-18634 # In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c. Plazmaz/CVE-2019-18634 saleemrashid/sudo-cve-2019-18634 N1et/CVE-2019-18634 jeandelboux/CVE-2019-18634 CVE-2019-18873 # FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET request. When the admin visits user information under \u0026quot;User Manager\u0026quot; in the control panel, the payload will execute. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. The problem is in admsession.php and admuser.php. fuzzlove/FUDforum-XSS-RCE CVE-2019-18885 # fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices-\u0026gt;devices is mishandled within find_device, aka CID-09ba3bc9dd15. bobfuzzer/CVE-2019-18885 CVE-2019-18890 # A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query. RealLinkers/CVE-2019-18890 CVE-2019-18935 # Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote code execution. (As of 2020.1.114, a default setting prevents the exploit. In 2019.3.1023, but not earlier versions, a non-default setting can prevent exploitation.) bao7uo/RAU_crypto noperator/CVE-2019-18935 CVE-2019-19012 # An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression. ManhNDd/CVE-2019-19012 tarantula-team/CVE-2019-19012 CVE-2019-19033 # Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password. ricardojoserf/CVE-2019-19033 CVE-2019-19203 # An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. ManhNDd/CVE-2019-19203 tarantula-team/CVE-2019-19203 CVE-2019-19204 # An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. ManhNDd/CVE-2019-19204 tarantula-team/CVE-2019-19204 CVE-2019-19231 # An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges. hessandrew/CVE-2019-19231 CVE-2019-19268 # TheCyberGeek/CVE-2019-19268 CVE-2019-19315 # NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \\\\.\\mailslot\\nlsX86ccMailslot mailslot. monoxgas/mailorder CVE-2019-19356 # Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing. shadowgatt/CVE-2019-19356 qq1515406085/CVE-2019-19356 CVE-2019-19369 # TheCyberGeek/CVE-2019-19369 CVE-2019-19383 # freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled). m0rph-1/CVE-2019-19383 CVE-2019-19511 # jra89/CVE-2019-19511 CVE-2019-19550 # Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. underprotection/CVE-2019-19550 CVE-2019-19576 # class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions. jra89/CVE-2019-19576 CVE-2019-19633 # jra89/CVE-2019-19633 CVE-2019-19634 # class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576. jra89/CVE-2019-19634 CVE-2019-19651 # jra89/CVE-2019-19651 CVE-2019-19652 # jra89/CVE-2019-19652 CVE-2019-19653 # jra89/CVE-2019-19653 CVE-2019-19654 # jra89/CVE-2019-19654 CVE-2019-19658 # jra89/CVE-2019-19658 CVE-2019-19699 # There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. To exploit the vulnerability, someone must have Admin access to the Centreon Web Interface and create a custom main.php?p=60803\u0026amp;type=3 command. The user must then set the Pollers Post-Restart Command to this previously created command via the main.php?p=60901\u0026amp;o=c\u0026amp;server_id=1 URI. This is triggered via an export of the Poller Configuration. SpengeSec/CVE-2019-19699 CVE-2019-19732 # translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir_0 and/or sSortDir_0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. jra89/CVE-2019-19732 CVE-2019-19733 # _get_all_file_server_paths.ajax.php (aka get_all_file_server_paths.ajax.php) in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the fileIds parameter on the page, which would allow an attacker to input HTML or execute scripts on the site, aka XSS. jra89/CVE-2019-19733 CVE-2019-19734 # _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. jra89/CVE-2019-19734 CVE-2019-19735 # class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set the password within a few hours by bruteforcing. jra89/CVE-2019-19735 CVE-2019-19738 # log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow an attacker to input HTML or execute scripts on the site, aka XSS. jra89/CVE-2019-19738 CVE-2019-19781 # An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. mekoko/CVE-2019-19781 projectzeroindia/CVE-2019-19781 trustedsec/cve-2019-19781 cisagov/check-cve-2019-19781 jas502n/CVE-2019-19781 ianxtianxt/CVE-2019-19781 mpgn/CVE-2019-19781 oways/CVE-2019-19781 becrevex/Citrix_CVE-2019-19781 unknowndevice64/Exploits_CVE-2019-19781 bufsnake/CVE-2019-19781 x1sec/citrixmash_scanner Jabo-SCO/Shitrix-CVE-2019-19781 x1sec/CVE-2019-19781 hollerith/CVE-2019-19781 aqhmal/CVE-2019-19781 MalwareTech/CitrixHoneypot mekhalleh/citrix_dir_traversal_rce zenturacp/cve-2019-19781-web zgelici/CVE-2019-19781-Checker digitalshadows/CVE-2019-19781_IOCs onSec-fr/CVE-2019-19781-Forensic DanielWep/CVE-NetScalerFileSystemCheck Castaldio86/Detect-CVE-2019-19781 j81blog/ADC-19781 clm123321/Citrix_CVE-2019-19781 b510/CVE-2019-19781 redscan/CVE-2019-19781 DIVD-NL/Citrix-CVE-2019-19781 ynsmroztas/citrix.sh digitalgangst/massCitrix fireeye/ioc-scanner-CVE-2019-19781 citrix/ioc-scanner-CVE-2019-19781 x1sec/citrix-honeypot L4r1k/CitrixNetscalerAnalysis Azeemering/CVE-2019-19781-DFIR-Notes 0xams/citrixvulncheck RaulCalvoLaorden/CVE-2019-19781 nmanzi/webcvescanner darren646/CVE-2019-19781POC CVE-2019-19844 # Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token for the matched user account. (One mitigation in the new releases is to send password reset tokens only to the registered user email address.) ryu22e/django_cve_2019_19844_poc andripwn/django_cve201919844 0xsha/CVE_2019_19844 CVE-2019-1987 # In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-118143775. marcinguy/android-7-9-png-bug CVE-2019-19871 # VDISEC/CVE-2019-19871-AuditGuide CVE-2019-19905 # NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own configuration files. dpmdpm2/CVE-2019-19905 CVE-2019-19943 # The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free. m0rph-1/CVE-2019-19943 CVE-2019-20059 # payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values from the sSortDir_0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. NOTE: this issue exists because of an incomplete fix for CVE-2019-19732. jra89/CVE-2019-20059 CVE-2019-20085 # TVT NVMS-1000 devices allow GET /.. Directory Traversal AleDiBen/NVMS1000-Exploit CVE-2019-20197 # In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account. lp008/CVE-2019-20197 jas502n/CVE-2019-20197 CVE-2019-20224 # netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?operation/netflow/nf_live_view request. This issue has been fixed in Pandora FMS 7.0 NG 742. mhaskar/CVE-2019-20224 CVE-2019-20326 # A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file. Fysac/CVE-2019-20326 CVE-2019-2107 # In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130024844. marcinguy/CVE-2019-2107 infiniteLoopers/CVE-2019-2107 CVE-2019-2196 # In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-135269143 IOActive/AOSP-DownloadProviderDbDumperSQLiLimit CVE-2019-2198 # In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-135270103 IOActive/AOSP-DownloadProviderDbDumperSQLiWhere CVE-2019-2215 # A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095 timwr/CVE-2019-2215 addhaloka/CVE-2019-2215 kangtastic/cve-2019-2215 marcinguy/CVE-2019-2215 LIznzn/CVE-2019-2215 DimitriFourny/cve-2019-2215 c0n71nu3/android-kernel-exploitation-ashfaq-CVE-2019-2215 CVE-2019-2525 # Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N). Phantomn/VirtualBox_CVE-2019-2525-CVE-2019-2548 wotmd/VirtualBox-6.0.0-Exploit-1-day CVE-2019-2615 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). chiaifan/CVE-2019-2615 CVE-2019-2618 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N). pyn3rd/CVE-2019-2618 jas502n/cve-2019-2618 wsfengfan/CVE-2019-2618- dr0op/WeblogicScan he1dan/cve-2019-2618 ianxtianxt/cve-2019-2618 0xn0ne/weblogicScanner zhzyker/exphub CVE-2019-2725 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). shack2/javaserializetools SkyBlueEternal/CNVD-C-2019-48814-CNNVD-201904-961 iceMatcha/CNTA-2019-0014xCVE-2019-2725 lasensio/cve-2019-2725 davidmthomsen/CVE-2019-2725 leerina/CVE-2019-2725 zhusx110/cve-2019-2725 lufeirider/CVE-2019-2725 CVCLabs/cve-2019-2725 TopScrew/CVE-2019-2725 welove88888/CVE-2019-2725 jiansiting/CVE-2019-2725 kerlingcode/CVE-2019-2725 black-mirror/Weblogic pimps/CVE-2019-2725 ianxtianxt/CVE-2019-2725 GEIGEI123/CVE-2019-2725-POC GGyao/weblogic_2019_2725_wls_batch CVE-2019-2729 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). waffl3ss/CVE-2019-2729 ruthlezs/CVE-2019-2729-Exploit CVE-2019-2888 # Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). 21superman/weblogic_cve-2019-2888 jas502n/CVE-2019-2888 CVE-2019-2890 # Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). ZO1RO/CVE-2019-2890 Ky0-HVA/CVE-2019-2890 SukaraLin/CVE-2019-2890 jas502n/CVE-2019-2890 ianxtianxt/CVE-2019-2890 CVE-2019-3010 # Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). chaizeg/privilege-escalation-breach CVE-2019-3394 # There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a page is able to exploit this issue to read arbitrary file on the server under \u0026lt;install-directory\u0026gt;/confluence/WEB-INF directory, which may contain configuration files used for integrating with other services, which could potentially leak credentials or other sensitive information such as LDAP credentials. The LDAP credential will be potentially leaked only if the Confluence server is configured to use LDAP as user repository. All versions of Confluence Server from 6.1.0 before 6.6.16 (the fixed version for 6.6.x), from 6.7.0 before 6.13.7 (the fixed version for 6.13.x), and from 6.14.0 before 6.15.8 (the fixed version for 6.15.x) are affected by this vulnerability. jas502n/CVE-2019-3394 CVE-2019-3396 # The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection. dothanthitiendiettiende/CVE-2019-3396 x-f1v3/CVE-2019-3396 shadowsock5/CVE-2019-3396 Yt1g3r/CVE-2019-3396_EXP jas502n/CVE-2019-3396 pyn3rd/CVE-2019-3396 s1xg0d/CVE-2019-3396 quanpt103/CVE-2019-3396 vntest11/confluence_CVE-2019-3396 tanw923/test1 skommando/CVE-2019-3396-confluence-poc JonathanZhou348/CVE-2019-3396TEST am6539/CVE-2019-3396 W2Ning/CVE-2019-3396 CVE-2019-3398 # Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluence Server from 2.0.0 before 6.6.13 (the fixed version for 6.6.x), from 6.7.0 before 6.12.4 (the fixed version for 6.12.x), from 6.13.0 before 6.13.4 (the fixed version for 6.13.x), from 6.14.0 before 6.14.3 (the fixed version for 6.14.x), and from 6.15.0 before 6.15.2 are affected by this vulnerability. superevr/cve-2019-3398 CVE-2019-3462 # Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine. tonejito/check_CVE-2019-3462 atilacastro/update-apt-package CVE-2019-3663 # Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details funoverip/mcafee_atd_CVE-2019-3663 CVE-2019-3719 # Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables via SupportAssist client from attacker hosted sites. jiansiting/CVE-2019-3719 CVE-2019-3778 # Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the \u0026quot;redirect_uri\u0026quot; parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and uses the DefaultRedirectResolver in the AuthorizationEndpoint. This vulnerability does not expose applications that: Act in the role of an Authorization Server and uses a different RedirectResolver implementation other than DefaultRedirectResolver, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient). BBB-man/CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection CVE-2019-3799 # Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack. mpgn/CVE-2019-3799 CVE-2019-3847 # A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the \u0026quot;login as other users\u0026quot; capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf. danielthatcher/moodle-login-csrf CVE-2019-3929 # The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root. xfox64x/CVE-2019-3929 CVE-2019-48814 # wucj001/cve-2019-48814 CVE-2019-5010 # An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability. JonathanWilbur/CVE-2019-5010 CVE-2019-5096 # An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A specially crafted HTTP request can lead to a use-after-free condition during the processing of this request that can be used to corrupt heap structures that could lead to full code execution. The request can be unauthenticated in the form of GET or POST requests, and does not require the requested resource to exist on the server. papinnon/CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit CVE-2019-5418 # There is a File Content Disclosure vulnerability in Action View \u0026lt;5.2.2.1, \u0026lt;5.1.6.2, \u0026lt;5.0.7.2, \u0026lt;4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed. mpgn/CVE-2019-5418 omarkurt/CVE-2019-5418 brompwnie/CVE-2019-5418-Scanner mpgn/Rails-doubletap-RCE takeokunn/CVE-2019-5418 Bad3r/RailroadBandit ztgrace/CVE-2019-5418-Rails3 random-robbie/CVE-2019-5418 CVE-2019-5420 # A remote code execution vulnerability in development mode Rails \u0026lt;5.2.2.1, \u0026lt;6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit. knqyf263/CVE-2019-5420 cved-sources/cve-2019-5420 CVE-2019-5475 # The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability. jaychouzzk/CVE-2019-5475-Nexus-Repository-Manager- rabbitmask/CVE-2019-5475-EXP CVE-2019-5489 # The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. mmxsrup/CVE-2019-5489 CVE-2019-5624 # Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Zip import function of Metasploit. Exploiting this vulnerability can allow an attacker to execute arbitrary code in Metasploit at the privilege level of the user running Metasploit. This issue affects: Rapid7 Metasploit Framework version 4.14.0 and prior versions. VoidSec/CVE-2019-5624 CVE-2019-5630 # A Cross-Site Request Forgery (CSRF) vulnerability was found in Rapid7 Nexpose InsightVM Security Console versions 6.5.0 through 6.5.68. This issue allows attackers to exploit CSRF vulnerabilities on API endpoints using Flash to circumvent a cross-domain pre-flight OPTIONS request. rbeede/CVE-2019-5630 CVE-2019-5700 # NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields of the boot image, which may lead to code execution, denial of service, escalation of privileges, and information disclosure. oscardagrach/CVE-2019-5700 CVE-2019-5736 # runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe. q3k/cve-2019-5736-poc Frichetten/CVE-2019-5736-PoC jas502n/CVE-2019-5736 denmilu/CVE-2019-5736 denmilu/cve-2019-5736-poc agppp/cve-2019-5736-poc Matthew-Stacks/cve-2019-5736 ebdecastro/poc-cve-2019-5736 twistlock/RunC-CVE-2019-5736 k-onishi/CVE-2019-5736-PoC k-onishi/CVE-2019-5736-PoC-0 zyriuse75/CVE-2019-5736-PoC stillan00b/CVE-2019-5736 milloni/cve-2019-5736-exp 13paulmurith/Docker-Runc-Exploit RyanNgWH/CVE-2019-5736-POC Lee-SungYoung/cve-2019-5736-study chosam2/cve-2019-5736-poc epsteina16/Docker-Escape-Miner GiverOfGifts/CVE-2019-5736-Custom-Runtime Billith/CVE-2019-5736-PoC CVE-2019-5786 # Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. exodusintel/CVE-2019-5786 CVE-2019-5825 # Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. timwr/CVE-2019-5825 CVE-2019-5893 # Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter. EmreOvunc/OpenSource-ERP-SQL-Injection CVE-2019-6203 # A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic. qingxp9/CVE-2019-6203-PoC CVE-2019-6207 # An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout. dothanthitiendiettiende/CVE-2019-6207 maldiohead/CVE-2019-6207 DimitriFourny/cve-2019-6207 CVE-2019-6225 # A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges. fatgrass/OsirisJailbreak12 TrungNguyen1909/CVE-2019-6225-macOS raystyle/jailbreak-iOS12 CVE-2019-6249 # An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/index.php?load=admins\u0026amp;act=edit_info\u0026amp;act_type=add. NMTech0x90/CVE-2019-6249_Hucart-cms CVE-2019-6260 # The ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware implement Advanced High-performance Bus (AHB) bridges, which allow arbitrary read and write access to the BMC's physical address space from the host (or from the network in unusual cases where the BMC console uart is attached to a serial concentrator). This CVE applies to the specific cases of iLPC2AHB bridge Pt I, iLPC2AHB bridge Pt II, PCIe VGA P2A bridge, DMA from/to arbitrary BMC memory via X-DMA, UART-based SoC Debug interface, LPC2AHB bridge, PCIe BMC P2A bridge, and Watchdog setup. amboar/cve-2019-6260 CVE-2019-6263 # An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings allowed stored XSS. praveensutar/CVE-2019-6263-Joomla-POC CVE-2019-6329 # HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328. ManhNDd/CVE-2019-6329 CVE-2019-6340 # Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows PATCH or POST requests, or the site has another web services module enabled, like JSON:API in Drupal 8, or Services or RESTful Web Services in Drupal 7. (Note: The Drupal 7 Services module itself does not require an update at this time, but you should apply other contributed updates associated with this advisory if Services is in use.) g0rx/Drupal-SA-CORE-2019-003 knqyf263/CVE-2019-6340 DevDungeon/CVE-2019-6340-Drupal-8.6.9-REST-Auth-Bypass oways/CVE-2019-6340 cved-sources/cve-2019-6340 d1vious/cve-2019-6340-bits jas502n/CVE-2019-6340 CVE-2019-6440 # Zemana AntiMalware before 3.0.658 Beta mishandles update logic. hexnone/CVE-2019-6440 CVE-2019-6446 # ** DISPUTED ** An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources. RayScri/CVE-2019-6446 CVE-2019-6447 # The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unauthenticated application/json data over HTTP. fs0c131y/ESFileExplorerOpenPortVuln CVE-2019-6453 # mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable). proofofcalc/cve-2019-6453-poc andripwn/mIRC-CVE-2019-6453 CVE-2019-6467 # A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-\u0026gt; 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch. knqyf263/CVE-2019-6467 CVE-2019-6487 # TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field. afang5472/TP-Link-WDR-Router-Command-injection_POC CVE-2019-6690 # python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a \u0026quot;CWE-20: Improper Input Validation\u0026quot; issue affecting the affect functionality component. stigtsp/CVE-2019-6690-python-gnupg-vulnerability brianwrf/CVE-2019-6690 CVE-2019-6715 # pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data. random-robbie/cve-2019-6715 CVE-2019-7216 # An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php. Ekultek/CVE-2019-7216 CVE-2019-7219 # Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead. verifysecurity/CVE-2019-7219 CVE-2019-7238 # Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. mpgn/CVE-2019-7238 jas502n/CVE-2019-7238 verctor/nexus_rce_CVE-2019-7238 magicming200/CVE-2019-7238_Nexus_RCE_Tool CVE-2019-7304 # Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1. initstring/dirty_sock SecuritySi/CVE-2019-7304_DirtySock CVE-2019-7482 # Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. singletrackseeker/CVE-2019-7482 b4bay/CVE-2019-7482 CVE-2019-7609 # Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. jas502n/kibana-RCE mpgn/CVE-2019-7609 LandGrey/CVE-2019-7609 hekadan/CVE-2019-7609 rhbb/CVE-2019-7609 CVE-2019-7610 # Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. whoami0622/CVE-2019-7610 CVE-2019-7642 # D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10). xw77cve/CVE-2019-7642 CVE-2019-7839 # ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution. securifera/CVE-2019-7839 CVE-2019-8389 # A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder (with a crafted ../ payload) to the download.script endpoint. This will create a MusicPlayerArchive.zip archive that is publicly accessible and includes the content of any requested file (such as the /etc/passwd file). shawarkhanethicalhacker/CVE-2019-8389 CVE-2019-8446 # The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check. CyberTrashPanda/CVE-2019-8446 CVE-2019-8449 # The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability. mufeedvh/CVE-2019-8449 r0lh/CVE-2019-8449 CVE-2019-8451 # The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class. 0xbug/CVE-2019-8451 ianxtianxt/CVE-2019-8451 jas502n/CVE-2019-8451 h0ffayyy/Jira-CVE-2019-8451 CVE-2019-8513 # This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to execute arbitrary shell commands. genknife/cve-2019-8513 CVE-2019-8540 # A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout. maldiohead/CVE-2019-8540 CVE-2019-8565 # A race condition was addressed with additional validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to gain root privileges. genknife/cve-2019-8565 CVE-2019-8591 # A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory. jsherman212/used_sock CVE-2019-8601 # Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution. BadAccess11/CVE-2019-8601 CVE-2019-8627 # maldiohead/CVE-2019-8627 CVE-2019-8781 # A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges. A2nkF/macOS-Kernel-Exploit TrungNguyen1909/CVE-2019-8781-macOS CVE-2019-8936 # NTP through 4.2.8p12 has a NULL Pointer Dereference. snappyJack/CVE-2019-8936 CVE-2019-8942 # WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image containing PHP code in the Exif metadata. Exploitation can leverage CVE-2019-8943. brianwrf/WordPress_4.9.8_RCE_POC synacktiv/CVE-2019-8942 CVE-2019-8956 # In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the \u0026quot;sctp_sendmsg()\u0026quot; function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory. butterflyhack/CVE-2019-8956 CVE-2019-8978 # An improper authentication vulnerability can be exploited through a race condition that occurs in Ellucian Banner Web Tailor 8.8.3, 8.8.4, and 8.9 and Banner Enterprise Identity Services 8.3, 8.3.1, 8.3.2, and 8.4, in conjunction with SSO Manager. This vulnerability allows remote attackers to steal a victim's session (and cause a denial of service) by repeatedly requesting the initial Banner Web Tailor main page with the IDMSESSID cookie set to the victim's UDCID, which in the case tested is the institutional ID. During a login attempt by a victim, the attacker can leverage the race condition and will be issued the SESSID that was meant for this victim. JoshuaMulliken/CVE-2019-8978 CVE-2019-8997 # An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering maliciously crafted XML in an existing field. nxkennedy/CVE-2019-8997 CVE-2019-9153 # Improper Verification of a Cryptographic Signature in OpenPGP.js \u0026lt;=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a \u0026quot;standalone\u0026quot; or \u0026quot;timestamp\u0026quot; signature. ZenyWay/opgp-service-cve-2019-9153 CVE-2019-9184 # SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter. cved-sources/cve-2019-9184 CVE-2019-9193 # ** DISPUTED ** In PostgreSQL 9.3 through 11.2, the \u0026quot;COPY TO/FROM PROGRAM\u0026quot; function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’. skyship36/CVE-2019-9193 CVE-2019-9194 # elFinder before 2.1.48 has a command injection vulnerability in the PHP connector. cved-sources/cve-2019-9194 CVE-2019-9202 # Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues. polict/CVE-2019-9202 CVE-2019-9465 # In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-133258003 alexbakker/CVE-2019-9465 CVE-2019-9506 # The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \u0026quot;KNOB\u0026quot;) that can decrypt traffic and inject arbitrary ciphertext without the victim noticing. francozappa/knob CVE-2019-9580 # In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a \u0026quot;null\u0026quot; origin value, potentially leading to XSS. mpgn/CVE-2019-9580 CVE-2019-9596 # Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint. gerwout/CVE-2019-9596-and-CVE-2019-9597 CVE-2019-9599 # The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneous sdctl/comm/lite_auth/ requests. s4vitar/AirDroidPwner CVE-2019-9621 # Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component. k8gege/ZimbraExploit CVE-2019-9653 # NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php. grayoneday/CVE-2019-9653 CVE-2019-9670 # mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability. rek7/Zimbra-RCE attackgithub/Zimbra-RCE CVE-2019-9673 # Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI. mgrube/CVE-2019-9673 CVE-2019-9729 # In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow. HyperSine/SdoKeyCrypt-sys-local-privilege-elevation CVE-2019-9730 # Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API. jthuraisamy/CVE-2019-9730 CVE-2019-9745 # CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service (Recognition Update Client Service) via an insecure communication channel (Named Pipe). The data (JSON) sent via this channel is used to import data from CRM software using plugins (.dll files). The plugin to import data from the EXQUISE software (DatasourceExquiseExporter.dll) can be persuaded to start arbitrary programs (including batch files) that are executed using the same privileges as Recognition Update Client Service (NT AUTHORITY\\SYSTEM), thus elevating privileges. This occurs because a higher-privileged process executes scripts from a directory writable by a lower-privileged user. KPN-CISO/CVE-2019-9745 CVE-2019-9766 # Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .mp3 file. moonheadobj/CVE-2019-9766 CVE-2019-9787 # WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default configuration. This occurs because CSRF protection is mishandled, and because Search Engine Optimization of A elements is performed incorrectly, leading to XSS. The XSS results in administrative access, which allows arbitrary changes to .php files. This is related to wp-admin/includes/ajax-actions.php and wp-includes/comment.php. rkatogit/cve-2019-9787_csrf_poc PalmTreeForest/CodePath_Week_7-8 sijiahi/Wordpress_cve-2019-9787_defense CVE-2019-9810 # Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox \u0026lt; 66.0.1, Firefox ESR \u0026lt; 60.6.1, and Thunderbird \u0026lt; 60.6.1. xuechiyaobai/CVE-2019-9810-PoC 0vercl0k/CVE-2019-9810 CVE-2019-9896 # In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable. yasinyilmaz/vuln-chm-hijack CVE-2019-9978 # The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro. mpgn/CVE-2019-9978 hash3liZer/CVE-2019-9978 KTN1990/CVE-2019-9978 cved-sources/cve-2019-9978 2018 # CVE-2018-0101 # A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device. An attacker could exploit this vulnerability by sending multiple, crafted XML packets to a webvpn-configured interface on the affected system. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system, or cause a reload of the affected device. This vulnerability affects Cisco ASA Software that is running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, ASA 1000V Cloud Firewall, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4110 Security Appliance, Firepower 9300 ASA Security Module, Firepower Threat Defense Software (FTD). Cisco Bug IDs: CSCvg35618. 1337g/CVE-2018-0101-DOS-POC Cymmetria/ciscoasa_honeypot CVE-2018-0114 # A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header. zi0Black/POC-CVE-2018-0114 CVE-2018-0202 # clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400. jaychowjingjie/CVE-2018-0202 CVE-2018-0296 # A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on certain software releases that the ASA will not reload, but an attacker could view sensitive system information without authentication by using directory traversal techniques. The vulnerability is due to lack of proper input validation of the HTTP URL. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. An exploit could allow the attacker to cause a DoS condition or unauthenticated disclosure of information. This vulnerability applies to IPv4 and IPv6 HTTP traffic. This vulnerability affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software that is running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 1000V Cloud Firewall, ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4100 Series Security Appliance, Firepower 9300 ASA Security Module, FTD Virtual (FTDv). Cisco Bug IDs: CSCvi16029. milo2012/CVE-2018-0296 yassineaboukir/CVE-2018-0296 bhenner1/CVE-2018-0296 irbishop/CVE-2018-0296 qiantu88/CVE-2018-0296 CVE-2018-0708 # Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. ntkernel0/CVE-2019-0708 CVE-2018-0802 # Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \u0026quot;Microsoft Office Memory Corruption Vulnerability\u0026quot;. This CVE is unique from CVE-2018-0797 and CVE-2018-0812. zldww2011/CVE-2018-0802_POC rxwx/CVE-2018-0802 Ridter/RTF_11882_0802 denmilu/CVE-2018-0802_CVE-2017-11882 CVE-2018-0824 # A remote code execution vulnerability exists in \u0026quot;Microsoft COM for Windows\u0026quot; when it fails to properly handle serialized objects, aka \u0026quot;Microsoft COM for Windows Remote Code Execution Vulnerability.\u0026quot; This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. codewhitesec/UnmarshalPwn CVE-2018-0833 # The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka \u0026quot;SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability\u0026quot;. RealBearcat/CVE-2018-0833 CVE-2018-0886 # The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka \u0026quot;CredSSP Remote Code Execution Vulnerability\u0026quot;. preempt/credssp CVE-2018-0952 # An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka \u0026quot;Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability.\u0026quot; This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers. atredispartners/CVE-2018-0952-SystemCollector CVE-2018-1000001 # In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution. 0x00-0x00/CVE-2018-1000001 CVE-2018-1000006 # GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16. CHYbeta/CVE-2018-1000006-DEMO CVE-2018-1000030 # Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed. The vulnerability lies when multiply threads are handling large amounts of data. In both cases there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a buffer, but Thread1 is already writing to the buffer without knowing how much to write. So when a large amount of data is being processed, it is very easy to cause memory corruption using a Heap-Buffer-Overflow. As for the Use-After-Free, Thread3-\u0026gt;Malloc-\u0026gt;Thread1-\u0026gt;Free's-\u0026gt;Thread2-Re-uses-Free'd Memory. The PSRT has stated that this is not a security vulnerability due to the fact that the attacker must be able to run code, however in some situations, such as function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such the DWF feels this issue deserves a CVE. tylepr96/CVE-2018-1000030 CVE-2018-1000082 # Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the victim access the infected trigger of the CSRF any code that match the victim privledges on the server can be executed.. SECFORCE/CVE-2018-1000082-exploit CVE-2018-1000117 # Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5. 1337r00t/CVE-2018-1000117-Exploit CVE-2018-1000134 # UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty password when running in synchronous mode. commit with applied fix https://github.com/pingidentity/ldapsdk/commit/8471904a02438c03965d21367890276bc25fa5a6#diff-f6cb23b459be1ec17df1da33760087fd that can result in Ability to impersonate any valid user. This attack appear to be exploitable via Providing valid username and empty password against servers that do not do additional validation as per https://tools.ietf.org/html/rfc4513#section-5.1.1. This vulnerability appears to have been fixed in after commit 8471904a02438c03965d21367890276bc25fa5a6. dragotime/cve-2018-1000134 CVE-2018-1000140 # rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate. s0/rsyslog-librelp-CVE-2018-1000140 s0/rsyslog-librelp-CVE-2018-1000140-fixed CVE-2018-1000199 # The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f. dsfau/CVE-2018-1000199 CVE-2018-1000224 # Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padding initialization vulnerability in (De)Serialization functions (core/io/marshalls.cpp) that can result in DoS (packet of death), possible leak of uninitialized memory. This attack appear to be exploitable via A malformed packet is received over the network by a Godot application that uses built-in serialization (e.g. game server, or game client). Could be triggered by multiplayer opponent. This vulnerability appears to have been fixed in 2.1.5, 3.0.6, master branch after commit feaf03421dda0213382b51aff07bd5a96b29487b. zann1x/ITS CVE-2018-1000529 # Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8. martinfrancois/CVE-2018-1000529 CVE-2018-1000802 # Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace. tna0y/CVE-2018-1000802-PoC CVE-2018-1000861 # A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way. 1NTheKut/CVE-2019-1003000_RCE-DETECTION CVE-2018-1002105 # In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection. gravitational/cve-2018-1002105 evict/poc_CVE-2018-1002105 imlzw/Kubernetes-1.12.3-all-auto-install bgeesaman/cve-2018-1002105 mdnix/cve-2018-1002105 CVE-2018-1010 # A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka \u0026quot;Microsoft Graphics Remote Code Execution Vulnerability.\u0026quot; This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1012, CVE-2018-1013, CVE-2018-1015, CVE-2018-1016. ymgh96/Detecting-the-patch-of-CVE-2018-1010 CVE-2018-10118 # Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.admin.php. GeunSam2/CVE-2018-10118 CVE-2018-1026 # A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka \u0026quot;Microsoft Office Remote Code Execution Vulnerability.\u0026quot; This affects Microsoft Office. This CVE ID is unique from CVE-2018-1030. ymgh96/Detecting-the-CVE-2018-1026-and-its-patch CVE-2018-10299 # An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two _receivers arguments in conjunction with a large _value argument, as exploited in the wild in April 2018, aka the \u0026quot;batchOverflow\u0026quot; issue. phzietsman/batchOverflow CVE-2018-10467 # alt3kx/CVE-2018-10467 CVE-2018-10517 # In CMS Made Simple (CMSMS) through 2.2.7, the \u0026quot;module import\u0026quot; operation in the admin dashboard contains a remote code execution vulnerability, exploitable by an admin user, because an XML Package can contain base64-encoded PHP code in a data element. 0x00-0x00/CVE-2018-10517 CVE-2018-10546 # An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences. dsfau/CVE-2018-10546 CVE-2018-1056 # An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files. pollonegro/Gpon-Routers CVE-2018-10561 # An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \u0026quot;?images\u0026quot; to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device. vhackor/GPON-home-routers-Exploit CVE-2018-10562 # An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output. f3d0x0/GPON 649/Pingpon-Exploit Choudai/GPON-LOADER c0ld1/GPON_RCE ATpiu/CVE-2018-10562 CVE-2018-10583 # An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. TaharAmine/CVE-2018-10583 CVE-2018-10715 # alt3kx/CVE-2018-10715 CVE-2018-10732 # The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) because of profile pictures visibility. alt3kx/CVE-2018-10732 CVE-2018-10821 # Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel. BalvinderSingh23/Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcms_v1.3 CVE-2018-1088 # A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink. MauroEldritch/GEVAUDAN CVE-2018-10920 # Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache. shutingrz/CVE-2018-10920_PoC CVE-2018-10933 # A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. SoledaD208/CVE-2018-10933 blacknbunny/CVE-2018-10933 hook-s3c/CVE-2018-10933 kn6869610/CVE-2018-10933 leapsecurity/libssh-scanner denmilu/CVE-2018-10933_ssh trbpnd/bpnd-libssh denmilu/CVE-2018-10933-libSSH-Authentication-Bypass marco-lancini/hunt-for-cve-2018-10933 hackerhouse-opensource/cve-2018-10933 cve-2018/cve-2018-10933 jas502n/CVE-2018-10933 ninp0/cve-2018-10933_poc IDX4CKS/CVE-2018-10933_Scanner Virgula0/POC-CVE-2018-10933 shifa123/pythonprojects-CVE-2018-10933 xFreed0m/CVE-2018-10933 Bifrozt/CVE-2018-10933 r3dxpl0it/CVE-2018-10933 ivanacostarubio/libssh-scanner throwawayaccount12312312/precompiled-CVE-2018-10933 ensimag-security/CVE-2018-10933 Ad1bDaw/libSSH-bypass sambiyal/CVE-2018-10933-POC nikhil1232/LibSSH-Authentication-Bypass Kurlee/LibSSH-exploit crispy-peppers/Libssh-server-CVE-2018-10933 youkergav/CVE-2018-10933 kristyna-mlcakova/CVE-2018-10933 CVE-2018-10936 # A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the driver. This could lead to a condition where a man-in-the-middle attacker could masquerade as a trusted server by providing a certificate for the wrong host, as long as it was signed by a trusted CA. tafamace/CVE-2018-10936 CVE-2018-10949 # mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discrepancy between the \u0026quot;HTTP 404 - account is not active\u0026quot; and \u0026quot;HTTP 401 - must authenticate\u0026quot; errors. 0x00-0x00/CVE-2018-10949 CVE-2018-1111 # DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol. knqyf263/CVE-2018-1111 kkirsche/CVE-2018-1111 CVE-2018-11235 # In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs \u0026quot;git clone --recurse-submodules\u0026quot; because submodule \u0026quot;names\u0026quot; are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with \u0026quot;../\u0026quot; in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server. Rogdham/CVE-2018-11235 vmotos/CVE-2018-11235 Choihosu/cve-2018-11235 CHYbeta/CVE-2018-11235-DEMO Kiss-sh0t/CVE-2018-11235-poc H0K5/clone_and_pwn knqyf263/CVE-2018-11235 ygouzerh/CVE-2018-11235 qweraqq/CVE-2018-11235-Git-Submodule-CE jhswartz/CVE-2018-11235 AnonymKing/CVE-2018-11235 morhax/CVE-2018-11235 cchang27/CVE-2018-11235-test nthuong95/CVE-2018-11235 CVE-2018-11236 # stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution. evilmiracle/CVE-2018-11236 CVE-2018-11311 # A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials. EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password CVE-2018-1133 # An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection. darrynten/MoodleExploit M4LV0/MOODLE-3.X-Remote-Code-Execution CVE-2018-11450 # A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login portal through the URL crafted by the attacker, the attacker can insert html/javascript and thus alter/rewrite the login portal page. Siemens PLM Software TEAMCENTER V9.1.3 and newer are not affected. LucvanDonk/Siemens-Siemens-PLM-Software-TEAMCENTER-Reflected-Cross-Site-Scripting-XSS-vulnerability CVE-2018-11510 # The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the 'script' parameter. mefulton/CVE-2018-11510 CVE-2018-11517 # mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0\u0026amp;rq=0 requests to TCP port 11010. EmreOvunc/mySCADA-myPRO-7-projectID-Disclosure CVE-2018-11564 # Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will not be stripped or filtered. The user can create a link on the website pointing to \u0026quot;/storage/poc.svg\u0026quot; that will point to http://localhost/pagekit/storage/poc.svg. When a user comes along to click that link, it will trigger a XSS attack. GeunSam2/CVE-2018-11564 CVE-2018-11631 # Rondaful M1 Wristband Smart Band 1 devices allow remote attackers to send an arbitrary number of call or SMS notifications via crafted Bluetooth Low Energy (BLE) traffic. xMagass/bandexploit CVE-2018-11686 # The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php. mpgn/CVE-2018-11686 CVE-2018-11759 # The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK (mod_jk) Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via httpd, then it was possible for a specially constructed request to expose application functionality through the reverse proxy that was not intended for clients accessing the application via the reverse proxy. It was also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is some overlap between this issue and CVE-2018-1323, they are not identical. immunIT/CVE-2018-11759 Jul10l1r4/Identificador-CVE-2018-11759 CVE-2018-11761 # In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack. brianwrf/CVE-2018-11761 CVE-2018-11770 # From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs via spark-submit. However, the REST API does not use this or any other authentication mechanism, and this is not adequately documented. In this case, a user would be able to run a driver program without authenticating, but not launch executors, using the REST API. This REST API is also used by Mesos, when set up to run in cluster mode (i.e., when also running MesosClusterDispatcher), for job submission. Future versions of Spark will improve documentation on these points, and prohibit setting 'spark.authenticate.secret' when running the REST APIs, to make this clear. Future versions will also disable the REST API by default in the standalone master by changing the default value of 'spark.master.rest.enabled' to 'false'. ivanitlearning/CVE-2018-11770 CVE-2018-11776 # Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace. trbpnd/CVE-2018-11776 xfox64x/CVE-2018-11776 jiguangin/CVE-2018-11776 hook-s3c/CVE-2018-11776-Python-PoC mazen160/struts-pwn_CVE-2018-11776 bhdresh/CVE-2018-11776 knqyf263/CVE-2018-11776 Ekultek/Strutter tuxotron/cve-2018-11776-docker brianwrf/S2-057-CVE-2018-11776 649/Apache-Struts-Shodan-Exploit jezzus/CVE-2018-11776-Python-PoC cved-sources/cve-2018-11776 OzNetNerd/apche-struts-vuln-demo-cve-2018-11776 cucadili/CVE-2018-11776 LightC0der/Apache-Struts-0Day-Exploit CVE-2018-11788 # Apache Karaf provides a features deployer, which allows users to \u0026quot;hot deploy\u0026quot; a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitigation codes against XXE. This is a potential security risk as an user can inject external XML entities in Apache Karaf version prior to 4.1.7 or 4.2.2. It has been fixed in Apache Karaf 4.1.7 and 4.2.2 releases. brianwrf/CVE-2018-11788 CVE-2018-11882 # Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. jguard01/cve-2018-11882 CVE-2018-12018 # The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip value. The vulnerable remote node would be crashed by such an attack immediately, aka the EPoD (Ethereum Packet of Death) issue. k3v142/CVE-2018-12018 CVE-2018-12031 # Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware action. EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion CVE-2018-12038 # An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key. gdraperi/remote-bitlocker-encryption-report CVE-2018-12086 # Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests. kevinherron/stack-overflow-poc CVE-2018-1235 # Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege. AbsoZed/CVE-2018-1235 CVE-2018-12386 # A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR \u0026lt; 60.2.2 and Firefox \u0026lt; 62.0.3. Hydra3evil/cve-2018-12386 0xLyte/cve-2018-12386 CVE-2018-12418 # Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files. tafamace/CVE-2018-12418 CVE-2018-12463 # An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. alt3kx/CVE-2018-12463 CVE-2018-12533 # JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310. TheKalin/CVE-2018-12533 CVE-2018-12537 # In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response. tafamace/CVE-2018-12537 CVE-2018-12540 # In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet. tafamace/CVE-2018-12540 CVE-2018-1259 # Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict external reference expansion. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data's projection-based request payload binding to access arbitrary files on the system. tafamace/CVE-2018-1259 CVE-2018-12596 # Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the \u0026quot;activateuser.aspx\u0026quot; page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins). alt3kx/CVE-2018-12596 CVE-2018-12597 # alt3kx/CVE-2018-12597 CVE-2018-12598 # alt3kx/CVE-2018-12598 CVE-2018-12613 # An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the \u0026quot;$cfg['AllowArbitraryServer'] = true\u0026quot; case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the \u0026quot;$cfg['ServerDefault'] = 0\u0026quot; case (which bypasses the login requirement and runs the vulnerable code without any authentication). 0x00-0x00/CVE-2018-12613 ivanitlearning/CVE-2018-12613 eastmountyxz/CVE-2018-12613-phpMyAdmin CVE-2018-1270 # Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. CaledoniaProject/CVE-2018-1270 genxor/CVE-2018-1270_EXP tafamace/CVE-2018-1270 Venscor/CVE-2018-1270 CVE-2018-1273 # Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack. knqyf263/CVE-2018-1273 wearearima/poc-cve-2018-1273 webr0ck/poc-cve-2018-1273 cved-sources/cve-2018-1273 jas502n/cve-2018-1273 CVE-2018-12798 # Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. sharmasandeepkr/cve-2018-12798 CVE-2018-1288 # In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss. joegallagher4/CVE-2018-1288- CVE-2018-12895 # WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the wp-includes/post.php wp_delete_attachment function. The attacker must have capabilities for files and posts that are normally available only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then launch a new installation process to increase the attacker's privileges. bloom-ux/cve-2018-12895-hotfix CVE-2018-12914 # A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI. RealBearcat/CVE-2018-12914 CVE-2018-1297 # When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code. RealBearcat/CVE-2018-1297 CVE-2018-1304 # The URL pattern of \u0026quot;\u0026quot; (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected. knqyf263/CVE-2018-1304 thariyarox/tomcat_CVE-2018-1304_testing CVE-2018-1305 # Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them. RealBearcat/CVE-2018-1305 CVE-2018-1306 # The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information. JJSO12/Apache-Pluto-3.0.0\u0026ndash;CVE-2018-1306 CVE-2018-1313 # In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is successful. If the server is using a policy file, the policy file must permit the database location to be read for the attack to work. The default Derby Network Server policy file distributed with the affected releases includes a permissive policy as the default Network Server policy, which allows the attack to work. tafamace/CVE-2018-1313 CVE-2018-1324 # A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package. tafamace/CVE-2018-1324 CVE-2018-13257 # The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service (CAS) service ticket validation, enabling a phishing attack from the CAS server login page. gluxon/CVE-2018-13257 CVE-2018-1327 # The Apache Struts REST Plugin is using XStream library which is vulnerable and allow perform a DoS attack when using a malicious request with specially crafted XML payload. Upgrade to the Apache Struts version 2.5.16 and switch to an optional Jackson XML handler as described here http://struts.apache.org/plugins/rest/#custom-contenttypehandlers. Another option is to implement a custom XML handler based on the Jackson XML handler from the Apache Struts 2.5.16. RealBearcat/S2-056-XStream CVE-2018-13341 # Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts may be calculated using information accessible to those with regular user privileges. Attackers could decipher these passwords, which may allow them to execute hidden API calls and escape the CTP console sandbox environment with elevated privileges. axcheron/crestron_getsudopwd CVE-2018-1335 # From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18. SkyBlueEternal/CVE-2018-1335-EXP-GUI GEIGEI123/CVE-2018-1335-Python3 CVE-2018-13379 # An Improper Limitation of a Pathname to a Restricted Directory (\u0026quot;Path Traversal\u0026quot;) in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests. milo2012/CVE-2018-13379 jpiechowka/at-doom-fortigate 0xHunter/FortiOS-Credentials-Disclosure Blazz3/cve2018-13379-nmap-script CVE-2018-13382 # An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests. milo2012/CVE-2018-13382 CVE-2018-13410 # ** DISPUTED ** Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an untrusted party controls the -TT value, given that the entire purpose of -TT is execution of arbitrary commands. shinecome/zip CVE-2018-13784 # PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php. ambionics/prestashop-exploits CVE-2018-13864 # A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows. It allows a remote attacker to download arbitrary files from the target server via specially crafted HTTP requests. tafamace/CVE-2018-13864 CVE-2018-14 # lckJack/legacySymfony CVE-2018-14083 # LICA miniCMTS E8K(u/i/...) devices allow remote attackers to obtain sensitive information via a direct POST request for the inc/user.ini file, leading to discovery of a password hash. pudding2/CVE-2018-14083 CVE-2018-14442 # Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs. payatu/CVE-2018-14442 sharmasandeepkr/PS-2018-002\u0026mdash;CVE-2018-14442 CVE-2018-14634 # An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable. luan0ap/cve-2018-14634 CVE-2018-14665 # A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges. jas502n/CVE-2018-14665 bolonobolo/CVE-2018-14665 samueldustin/cve-2018-14665 CVE-2018-14667 # The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData. nareshmail/cve-2018-14667 zeroto01/CVE-2018-14667 r00t4dm/CVE-2018-14667 syriusbughunt/CVE-2018-14667 quandqn/cve-2018-14667 Venscor/CVE-2018-14667-poc CVE-2018-14714 # System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the \u0026quot;load_script\u0026quot; URL parameter. tin-z/CVE-2018-14714-POC CVE-2018-14729 # The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code. FoolMitAh/CVE-2018-14729 CVE-2018-14772 # Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administrator access to the web application can execute arbitrary code on the underlying system via Command Injection. spencerdodd/CVE-2018-14772 CVE-2018-14847 # MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface. BasuCert/WinboxPoC msterusky/WinboxExploit syrex1013/MikroRoot jas502n/CVE-2018-14847 th3f3n1x87/winboxPOC krnull/mikrotik-beast sinichi449/Python-MikrotikLoginExploit yukar1z0e/CVE-2018-14847 CVE-2018-15131 # An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests. 0x00-0x00/CVE-2018-15131 CVE-2018-15133 # In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in gadgetchains/Laravel/RCE/3/chain.php in phpggc. The attacker must know the application key, which normally would never occur, but could happen if the attacker previously had privileged access or successfully accomplished a previous attack. kozmic/laravel-poc-CVE-2018-15133 sKirua/Laravel-CVE-2018-15133 Prabesh01/Laravel-PHP-Unit-RCE-Auto-shell-uploader iansangaji/laravel-rce-cve-2018-15133 CVE-2018-15365 # A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable installations. An attacker must be an authenticated user in order to exploit the vulnerability. nixwizard/CVE-2018-15365 CVE-2018-15473 # OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. trimstray/massh-enum gbonacini/opensshenum Rhynorater/CVE-2018-15473-Exploit epi052/cve-2018-15473 pyperanger/CVE-2018-15473_exploit r3dxpl0it/CVE-2018-15473 JoeBlackSecurity/CrappyCode JoeBlackSecurity/SSHUsernameBruter-SSHUB cved-sources/cve-2018-15473 LINYIKAI/CVE-2018-15473-exp securemode/enumpossible trickster1103/- NHPT/SSH-account-enumeration-verification-script CaioCGH/EP4-redes CVE-2018-15499 # GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service (Race Condition and BSoD on Windows) by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine. DownWithUp/CVE-2018-15499 CVE-2018-15686 # A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239. hpcprofessional/remediate_cesa_2019_2091 CVE-2018-15727 # Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid \u0026quot;remember me\u0026quot; cookie knowing only a username of an LDAP or OAuth user. u238/grafana-CVE-2018-15727 CVE-2018-15832 # upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. JacksonKuo/Ubisoft-Uplay-Desktop-Client-63.0.5699.0 CVE-2018-15877 # The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor\u0026amp;tab=activity_tools request. cved-sources/cve-2018-15877 CVE-2018-15912 # An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove arbitrary packages and package repositories potentially containing hooks with arbitrary code, which will automatically be run as root, or remove packages vital to the system. coderobe/CVE-2018-15912-PoC CVE-2018-15961 # Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. vah13/CVE-2018-15961 cved-sources/cve-2018-15961 CVE-2018-15968 # Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. sharmasandeepkr/cve-2018-15968 CVE-2018-15982 # Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. FlatL1neAPT/CVE-2018-15982 AirEvan/CVE-2018-15982_PoC Ridter/CVE-2018-15982_EXP kphongagsorn/adobe-flash-cve2018-15982 jas502n/CVE-2018-15982_EXP_IE scanfsec/CVE-2018-15982 SyFi/CVE-2018-15982 create12138/CVE-2018-15982 CVE-2018-16119 # Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm. hdbreaker/CVE-2018-16119 CVE-2018-16135 # c0d3G33k/CVE-2018-16135 CVE-2018-16156 # In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes an exported function named ChangeUninstallString. The default install does not contain this library and therefore if any DLL with that name exists in any directory listed in the PATH variable, it can be used to escalate to SYSTEM level privilege. securifera/CVE-2018-16156-Exploit CVE-2018-16283 # The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter. cved-sources/cve-2018-16283 CVE-2018-16323 # ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data. ttffdd/XBadManners CVE-2018-16341 # mpgn/CVE-2018-16341 CVE-2018-16370 # In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team\u0026amp;m=Setting\u0026amp;a=upgrade by placing a .php file in a ZIP archive. snappyJack/CVE-2018-16370 CVE-2018-16373 # Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save. snappyJack/CVE-2018-16373 CVE-2018-16447 # Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF. security-breachlock/CVE-2018-16447 CVE-2018-16509 # An issue was discovered in Artifex Ghostscript before 9.24. Incorrect \u0026quot;restoration of privilege\u0026quot; checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the \u0026quot;pipe\u0026quot; instruction. farisv/PIL-RCE-Ghostscript-CVE-2018-16509 knqyf263/CVE-2018-16509 cved-sources/cve-2018-16509 rhpco/CVE-2018-16509 CVE-2018-16623 # Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the \u0026quot;Site options\u0026quot; in the admin panel dashboard dropdown. security-breachlock/CVE-2018-16623 CVE-2018-16624 # panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page. security-breachlock/CVE-2018-16624 CVE-2018-16625 # index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT element. security-breachlock/CVE-2018-16625 CVE-2018-16626 # index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name. security-breachlock/CVE-2018-16626 CVE-2018-16627 # panel/login in Kirby v2.5.12 allows Host header injection via the \u0026quot;forget password\u0026quot; feature. security-breachlock/CVE-2018-16627 CVE-2018-16628 # panel/login in Kirby v2.5.12 allows XSS via a blog name. security-breachlock/CVE-2018-16628 CVE-2018-16629 # panel/uploads/#elf_l1_XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element. security-breachlock/CVE-2018-16629 CVE-2018-16630 # Kirby v2.5.12 allows XSS by using the \u0026quot;site files\u0026quot; Add option to upload an SVG file. security-breachlock/CVE-2018-16630 CVE-2018-16631 # Subrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter. security-breachlock/CVE-2018-16631 CVE-2018-16632 # Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id\u0026amp;_popup=1 title parameter at admin/blog/blogpost/add/. security-breachlock/CVE-2018-16632 CVE-2018-16633 # Pluck v4.7.7 allows XSS via the admin.php?action=editpage\u0026amp;page= page title. security-breachlock/CVE-2018-16633 CVE-2018-16634 # Pluck v4.7.7 allows CSRF via admin.php?action=settings. security-breachlock/CVE-2018-16634 CVE-2018-16635 # Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php. security-breachlock/CVE-2018-16635 CVE-2018-16636 # Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter. security-breachlock/CVE-2018-16636 CVE-2018-16637 # Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI. security-breachlock/CVE-2018-16637 CVE-2018-16638 # Evolution CMS 1.4.x allows XSS via the manager/ search parameter. security-breachlock/CVE-2018-16638 CVE-2018-16639 # Typesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation. security-breachlock/CVE-2018-16639 CVE-2018-16706 # LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080. Nurdilin/CVE-2018-16706 CVE-2018-16711 # IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402088) with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for input. DownWithUp/CVE-2018-16711 CVE-2018-16712 # IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory. DownWithUp/CVE-2018-16712 CVE-2018-16713 # IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402084) with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for input, and provide output from the instruction. DownWithUp/CVE-2018-16713 CVE-2018-16763 # FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. dinhbaouit/CVE-2018-16763 SalimAlk/CVE-2018-16763- CVE-2018-16854 # A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15. danielthatcher/moodle-login-csrf CVE-2018-16858 # It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location. 4nimanegra/libreofficeExploit1 k0o97/detect-cve-2018-16858 CVE-2018-16875 # The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected. alexzorin/poc-cve-2018-16875 CVE-2018-16890 # libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow vulnerability. Using that overflow, a malicious or broken NTLM server could trick libcurl to accept a bad length + offset combination that would lead to a buffer read out-of-bounds. zjw88282740/CVE-2018-16890 CVE-2018-16987 # Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in the HTML source code. gquere/CVE-2018-16987 CVE-2018-17024 # admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an add_page action. security-breachlock/CVE-2018-17024 CVE-2018-17144 # Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash. iioch/ban-exploitable-bitcoin-nodes hikame/CVE-2018-17144_POC CVE-2018-17182 # An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations. jas502n/CVE-2018-17182 denmilu/CVE-2018-17182 denmilu/vmacache_CVE-2018-17182 CVE-2018-17207 # An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution. cved-sources/cve-2018-17207 CVE-2018-17246 # Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. mpgn/CVE-2018-17246 CVE-2018-17300 # Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table_manager/view/cu_menus section name. security-breachlock/CVE-2018-17300 CVE-2018-17301 # Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel. security-breachlock/CVE-2018-17301 CVE-2018-17302 # Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message. security-breachlock/CVE-2018-17302 CVE-2018-17418 # Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugins\\box\\filesmanager\\filesmanager.admin.php mishandles the forbidden_types variable. AlwaysHereFight/monstra_cms-3.0.4\u0026ndash;getshell CVE-2018-17431 # Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL. Fadavvi/CVE-2018-17431-PoC CVE-2018-17456 # Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive \u0026quot;git clone\u0026quot; of a superproject if a .gitmodules file has a URL field beginning with a '-' character. SeahunOh/CVE-2018-17456 matlink/CVE-2018-17456 799600966/CVE-2018-17456 AnonymKing/CVE-2018-17456 CVE-2018-17873 # An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows an attacker with adjacent network access to read the SSH Private Key and log in to the root account. Luct0r/CVE-2018-17873 CVE-2018-17961 # Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183. matlink/CVE-2018-17961 CVE-2018-18026 # IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of service or code execution attack. DownWithUp/CVE-2018-18026 CVE-2018-18368 # Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. DimopoulosElias/SEPM-EoP CVE-2018-18387 # playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse. TheeBlind/CVE-2018-18387 CVE-2018-18500 # A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird \u0026lt; 60.5, Firefox ESR \u0026lt; 60.5, and Firefox \u0026lt; 65. sophoslabs/CVE-2018-18500 CVE-2018-18714 # RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges. DownWithUp/CVE-2018-18714 CVE-2018-18852 # Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018. hook-s3c/CVE-2018-18852 andripwn/CVE-2018-18852 CVE-2018-19126 # PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload. farisv/PrestaShop-CVE-2018-19126 CVE-2018-19127 # A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cache_template/*.tpl.php file along with a \u0026quot;\u0026lt;?php function \u0026quot; substring. ab1gale/phpcms-2008-CVE-2018-19127 CVE-2018-19131 # Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors. JonathanWilbur/CVE-2018-19131 CVE-2018-19207 # The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-\u0026gt;prepare() input is mishandled, as exploited in the wild in November 2018. aeroot/WP-GDPR-Compliance-Plugin-Exploit cved-sources/cve-2018-19207 CVE-2018-19276 # OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. mpgn/CVE-2018-19276 CVE-2018-19320 # The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system. fdiskyou/CVE-2018-19320 CVE-2018-19466 # A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls. MauroEldritch/lempo CVE-2018-19487 # The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profile() function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users. Antho59/wp-jobhunt-exploit CVE-2018-19506 # Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI. security-breachlock/CVE-2018-19506 CVE-2018-19507 # CMSimple 4.7.5 has XSS via an admin's use of a ?file=config\u0026amp;action=array URI. security-breachlock/CVE-2018-19507 CVE-2018-19508 # CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles\u0026amp;subdir=userfiles/images/flags/ URI. security-breachlock/CVE-2018-19508 CVE-2018-19518 # University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \u0026quot;-oProxyCommand\u0026quot; argument. ensimag-security/CVE-2018-19518 CVE-2018-19537 # TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases. JackDoan/TP-Link-ArcherC5-RCE CVE-2018-19592 # The \u0026quot;CLink4Service\u0026quot; service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITY\\SYSTEM, leading to total system takeover, a similar issue to CVE-2018-12441. BradyDonovan/CVE-2018-19592 CVE-2018-19596 # Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506. security-breachlock/CVE-2018-19596 CVE-2018-19597 # CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798. security-breachlock/CVE-2018-19597 CVE-2018-19598 # Statamic 2.10.3 allows XSS via First Name or Last Name to the /users URI in an 'Add new user' request. security-breachlock/CVE-2018-19598 CVE-2018-19599 # Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager\u0026amp;path=uploads/ URI. NOTE: this is a discontinued product. security-breachlock/CVE-2018-19599 CVE-2018-19600 # Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin\u0026amp;act=dispModuleAdminFileBox SVG upload. security-breachlock/CVE-2018-19600 CVE-2018-19601 # Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin\u0026amp;act=dispModuleAdminFileBox SVG upload. security-breachlock/CVE-2018-19601 CVE-2018-19788 # A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command. AbsoZed/CVE-2018-19788 d4gh0s7/CVE-2018-19788 Ekultek/PoC jhlongjr/CVE-2018-19788 CVE-2018-19844 # FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. security-breachlock/CVE-2018-19844 CVE-2018-19845 # There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php \u0026quot;post-menu\u0026quot; parameter, a related issue to CVE-2018-16325. security-breachlock/CVE-2018-19845 CVE-2018-19864 # NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device. pwnhacker0x18/CVE-2018-19864 CVE-2018-19901 # No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ \u0026quot;article_title\u0026quot; parameter. security-breachlock/CVE-2018-19901 CVE-2018-19902 # No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article \u0026quot;keyword\u0026quot; parameter. security-breachlock/CVE-2018-19902 CVE-2018-19903 # Persistent XSS exists in XSLT CMS via the create/?action=items.edit\u0026amp;type=Page title field. security-breachlock/CVE-2018-19903 CVE-2018-19904 # Persistent XSS exists in XSLT CMS via the create/?action=items.edit\u0026amp;type=Page \u0026quot;body\u0026quot; field. security-breachlock/CVE-2018-19904 CVE-2018-19905 # HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter. security-breachlock/CVE-2018-19905 CVE-2018-19906 # Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter. security-breachlock/CVE-2018-19906 CVE-2018-19911 # FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_system or txtapi/bg_system) query string on TCP port 8080, as demonstrated by an api/system?calc URI. This can also be exploited via CSRF. Alternatively, the default password of works for the freeswitch account can sometimes be used. iSafeBlue/freeswitch_rce CVE-2018-19918 # CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view/cu_views URI. security-breachlock/CVE-2018-19918 CVE-2018-19919 # Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element. security-breachlock/CVE-2018-19919 CVE-2018-1999002 # A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers to send crafted HTTP requests returning the contents of any file on the Jenkins master file system that the Jenkins master has access to. wetw0rk/Exploit-Development 0xtavian/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins 0x6b7966/CVE-2018-1999002 CVE-2018-20062 # An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\\think\\Request/input\u0026amp;filter=phpinfo\u0026amp;data=1 query string. NS-Sp4ce/thinkphp5.XRce CVE-2018-20162 # Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root. stigtsp/CVE-2018-20162-digi-lr54-restricted-shell-escape CVE-2018-20165 # Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a menuitem URI. hect0rS/Reflected-XSS-on-Opentext-Portal-v7.4.4 CVE-2018-2019 # IBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 155265. attakercyebr/hack4lx_CVE-2018-2019 CVE-2018-20250 # In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path. WyAtu/CVE-2018-20250 QAX-A-Team/CVE-2018-20250 nmweizi/CVE-2018-20250-poc-winrar blunden/UNACEV2.DLL-CVE-2018-20250 easis/CVE-2018-20250-WinRAR-ACE STP5940/CVE-2018-20250 n4r1b/WinAce-POC technicaldada/hack-winrar Ektoplasma/ezwinrar arkangel-dev/CVE-2018-20250-WINRAR-ACE-GUI AeolusTF/CVE-2018-20250 joydragon/Detect-CVE-2018-20250 DANIELVISPOBLOG/WinRar_ACE_exploit_CVE-2018-20250 denmilu/CVE-2018-20250 930201676/CVE-2018-20250 eastmountyxz/CVE-2018-20250-WinRAR CVE-2018-20343 # Multiple buffer overflow vulnerabilities have been found in Ken Silverman Build Engine 1. An attacker could craft a special map file to execute arbitrary code when the map file is loaded. Alexandre-Bartel/CVE-2018-20343 CVE-2018-20434 # LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture\u0026amp;format=text\u0026amp;type=snmpwalk\u0026amp;hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling. mhaskar/CVE-2018-20434 CVE-2018-20555 # The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover. fs0c131y/CVE-2018-20555 CVE-2018-20580 # The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file. gscamelo/CVE-2018-20580 CVE-2018-20718 # In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed to use the $phpserial$a:0:{} syntax to store a preference. An attacker either needs a \u0026quot;public link\u0026quot; of a file, or access to any unprivileged user account for creation of such a link. us3r777/CVE-2018-20718 CVE-2018-2380 # SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing \u0026quot;traverse to parent directory\u0026quot; are passed through to the file APIs. erpscanteam/CVE-2018-2380 CVE-2018-2628 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). forlin/CVE-2018-2628 shengqi158/CVE-2018-2628 skydarker/CVE-2018-2628 jiansiting/weblogic-cve-2018-2628 zjxzjx/CVE-2018-2628-detect aedoo/CVE-2018-2628-MultiThreading hawk-tiger/CVE-2018-2628 9uest/CVE-2018-2628 Shadowshusky/CVE-2018-2628all shaoshore/CVE-2018-2628 tdy218/ysoserial-cve-2018-2628 s0wr0b1ndef/CVE-2018-2628 wrysunny/cve-2018-2628 jas502n/CVE-2018-2628 stevenlinfeng/CVE-2018-2628 denmilu/CVE-2018-2628 Nervous/WebLogic-RCE-exploit Lighird/CVE-2018-2628 0xMJ/CVE-2018-2628 0xn0ne/weblogicScanner CVE-2018-2636 # Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Simphony. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). erpscanteam/CVE-2018-2636 Cymmetria/micros_honeypot CVE-2018-2844 # Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). renorobert/virtualbox-cve-2018-2844 CVE-2018-2879 # Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. Note: Please refer to Doc ID \u0026lt;a href=\u0026quot;http://support.oracle.com/CSP/main/article?cmd=show\u0026amp;type=NOT\u0026amp;id=2386496.1\u0026quot;\u0026gt;My Oracle Support Note 2386496.1 for instructions on how to address this issue. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). MostafaSoliman/Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit AymanElSherif/oracle-oam-authentication-bypas-exploit redtimmy/OAMBuster CVE-2018-2893 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). anbai-inc/CVE-2018-2893 ryanInf/CVE-2018-2893 bigsizeme/CVE-2018-2893 pyn3rd/CVE-2018-2893 qianl0ng/CVE-2018-2893 jas502n/CVE-2018-2893 ianxtianxt/CVE-2018-2893 CVE-2018-2894 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). 111ddea/cve-2018-2894 LandGrey/CVE-2018-2894 jas502n/CVE-2018-2894 CVE-2018-3191 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). arongmh/CVE-2018-3191 pyn3rd/CVE-2018-3191 Libraggbond/CVE-2018-3191 jas502n/CVE-2018-3191 mackleadmire/CVE-2018-3191-Rce-Exploit CVE-2018-3245 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). pyn3rd/CVE-2018-3245 jas502n/CVE-2018-3245 ianxtianxt/CVE-2018-3245 CVE-2018-3252 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). jas502n/CVE-2018-3252 b1ueb0y/CVE-2018-3252 pyn3rd/CVE-2018-3252 CVE-2018-3260 # ionescu007/SpecuCheck CVE-2018-3295 # Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). ndureiss/e1000_vulnerability_exploit CVE-2018-3608 # A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes. ZhiyuanWang-Chengdu-Qihoo360/Trend_Micro_POC CVE-2018-3639 # Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4. tyhicks/ssbd-tools malindarathnayake/Intel-CVE-2018-3639-Mitigation_RegistryUpdate mmxsrup/CVE-2018-3639 Shuiliusheng/CVE-2018-3639-specter-v4- CVE-2018-3760 # There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately. mpgn/CVE-2018-3760 CVE-2018-3783 # A privilege escalation detected in flintcms versions \u0026lt;= 1.1.9 allows account takeover due to blind MongoDB injection in password reset. nisaruj/nosqli-flintcms CVE-2018-3810 # Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. The saveGoogleCode() function in smartgooglecode.php does not check if the current request is made by an authorized user, thus allowing any unauthenticated user to successfully update the inserted code. lucad93/CVE-2018-3810 cved-sources/cve-2018-3810 CVE-2018-3811 # SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. The saveGoogleAdWords() function in smartgooglecode.php did not use prepared statements and did not sanitize the $_POST[\u0026quot;oId\u0026quot;] variable before passing it as input into the SQL query. cved-sources/cve-2018-3811 CVE-2018-4013 # An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability. DoubleMice/cve-2018-4013 r3dxpl0it/RTSPServer-Code-Execution-Vulnerability CVE-2018-4087 # An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the \u0026quot;Core Bluetooth\u0026quot; component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. rani-i/bluetoothdPoC MTJailed/UnjailMe joedaguy/Exploit11.2 CVE-2018-4110 # An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the \u0026quot;Web App\u0026quot; component. It allows remote attackers to bypass intended restrictions on cookie persistence. bencompton/ios11-cookie-set-expire-issue CVE-2018-4121 # An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \u0026quot;WebKit\u0026quot; component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. FSecureLABS/CVE-2018-4121 denmilu/CVE-2018-4121 jezzus/CVE-2018-4121 CVE-2018-4124 # An issue was discovered in certain Apple products. iOS before 11.2.6 is affected. macOS before 10.13.3 Supplemental Update is affected. tvOS before 11.2.6 is affected. watchOS before 4.2.3 is affected. The issue involves the \u0026quot;CoreText\u0026quot; component. It allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a crafted string containing a certain Telugu character. ZecOps/TELUGU_CVE-2018-4124_POC CVE-2018-4150 # An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \u0026quot;Kernel\u0026quot; component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Jailbreaks/CVE-2018-4150 RPwnage/LovelySn0w littlelailo/incomplete-exploit-for-CVE-2018-4150-bpf-filter-poc- CVE-2018-4185 # In iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4, an information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. bazad/x18-leak CVE-2018-4193 # An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the \u0026quot;Windows Server\u0026quot; component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Synacktiv-contrib/CVE-2018-4193 CVE-2018-4233 # An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the \u0026quot;WebKit\u0026quot; component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. saelo/cve-2018-4233 CVE-2018-4241 # An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the \u0026quot;Kernel\u0026quot; component. A buffer overflow in mptcp_usr_connectx allows attackers to execute arbitrary code in a privileged context via a crafted app. 0neday/multi_path CVE-2018-4242 # An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the \u0026quot;Hypervisor\u0026quot; component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. yeonnic/Look-at-The-XNU-Through-A-Tube-CVE-2018-4242-Write-up-Translation- CVE-2018-4243 # An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the \u0026quot;Kernel\u0026quot; component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary code in a privileged context via a crafted app. Jailbreaks/empty_list CVE-2018-4248 # An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2. bazad/xpc-string-leak CVE-2018-4280 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2. bazad/launchd-portrep bazad/blanket CVE-2018-4327 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1. omerporze/brokentooth harryanon/POC-CVE-2018-4327-and-CVE-2018-4330 CVE-2018-4330 # In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling. omerporze/toothfairy CVE-2018-4331 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. bazad/gsscred-race CVE-2018-4343 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. bazad/gsscred-move-uaf CVE-2018-4407 # A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. Pa55w0rd/check_icmp_dos unixpickle/cve-2018-4407 s2339956/check_icmp_dos-CVE-2018-4407- farisv/AppleDOS WyAtu/CVE-2018-4407 zteeed/CVE-2018-4407-IOS SamDecrock/node-cve-2018-4407 r3dxpl0it/CVE-2018-4407 lucagiovagnoli/CVE-2018-4407 anonymouz4/Apple-Remote-Crash-Tool-CVE-2018-4407 soccercab/wifi zeng9t/CVE-2018-4407-iOS-exploit 5431/CVE-2018-4407 pwnhacker0x18/iOS-Kernel-Crash CVE-2018-4411 # A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14. lilang-wu/POC-CVE-2018-4411 CVE-2018-4415 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1. T1V0h/CVE-2018-4415 CVE-2018-4431 # A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2. ktiOSz/PoC_iOS12 CVE-2018-4441 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9. Cryptogenic/PS4-6.20-WebKit-Code-Execution-Exploit CVE-2018-4878 # A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018. ydl555/CVE-2018-4878- mdsecactivebreach/CVE-2018-4878 hybridious/CVE-2018-4878 vysecurity/CVE-2018-4878 anbai-inc/CVE-2018-4878 Sch01ar/CVE-2018-4878 SyFi/CVE-2018-4878 ydl555/CVE-2018-4878 B0fH/CVE-2018-4878 Yable/CVE-2018-4878 HuanWoWeiLan/SoftwareSystemSecurity-2019 CVE-2018-4901 # An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the document identity representation. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code. bigric3/CVE-2018-4901 CVE-2018-5234 # The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software. embedi/ble_norton_core CVE-2018-5711 # gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx. huzhenghui/Test-7-2-0-PHP-CVE-2018-5711 huzhenghui/Test-7-2-1-PHP-CVE-2018-5711 CVE-2018-5724 # MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi. gusrmsdlrh/Python-CVE-Code CVE-2018-5728 # Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information via a /cgi-bin/getSysStatus request, as demonstrated by the Latitude/Longitude of the ship, or satellite details. ezelf/seatel_terminals CVE-2018-5740 # \u0026quot;deny-answer-aliases\u0026quot; is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0-\u0026gt;9.8.8, 9.9.0-\u0026gt;9.9.13, 9.10.0-\u0026gt;9.10.8, 9.11.0-\u0026gt;9.11.4, 9.12.0-\u0026gt;9.12.2, 9.13.0-\u0026gt;9.13.2. sischkg/cve-2018-5740 CVE-2018-5951 # An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack. Nat-Lab/CVE-2018-5951 CVE-2018-5955 # An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI. cisp/GitStackRCE YagamiiLight/Cerberus CVE-2018-6242 # Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code. DavidBuchanan314/NXLoader reswitched/rcm-modchips switchjs/fusho CVE-2018-6376 # In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message. knqyf263/CVE-2018-6376 CVE-2018-6389 # In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times. yolabingo/wordpress-fix-cve-2018-6389 WazeHell/CVE-2018-6389 rastating/modsecurity-cve-2018-6389 knqyf263/CVE-2018-6389 JulienGadanho/cve-2018-6389-php-patcher dsfau/wordpress-CVE-2018-6389 Jetserver/CVE-2018-6389-FIX thechrono13/PoC\u0026mdash;CVE-2018-6389 BlackRouter/cve-2018-6389 alessiogilardi/PoC\u0026mdash;CVE-2018-6389 JavierOlmedo/wordpress-cve-2018-6389 m3ssap0/wordpress_cve-2018-6389 s0md3v/Shiva mudhappy/Wordpress-Hack-CVE-2018-6389 armaanpathan12345/WP-DOS-Exploit-CVE-2018-6389 ItinerisLtd/trellis-cve-2018-6389 Zazzzles/Wordpress-DOS fakedob/tvsz heisenberg-official/Wordpress-DOS-Attack-CVE-2018-6389 ianxtianxt/CVE-2018-6389 CVE-2018-6396 # SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action. JavierOlmedo/joomla-cve-2018-6396 CVE-2018-6407 # An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to /hy-cgi/devices.cgi?cmd=searchlandevice. The crash completely freezes the device. dreadlocked/ConceptronicIPCam_MultipleVulnerabilities CVE-2018-6479 # An issue was discovered on Netwave IP Camera devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to the / URI. dreadlocked/netwave-dosvulnerability CVE-2018-6518 # Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard\u0026amp;type=step3 request to /adminzone/index.php. faizzaidi/Composr-CMS-10.0.13-Cross-Site-Scripting-XSS CVE-2018-6546 # plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, executes code at a user-defined (local or SMB) path as SYSTEM when the execute_installer parameter is used in an HTTP message. This occurs without properly authenticating the user. securifera/CVE-2018-6546-Exploit YanZiShuang/CVE-2018-6546 CVE-2018-6574 # Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow \u0026quot;go get\u0026quot; remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked. acole76/cve-2018-6574 neargle/CVE-2018-6574-POC willbo4r/go-get-rce ahmetmanga/go-get-rce ahmetmanga/cve-2018-6574 michiiii/go-get-exploit kenprice/cve-2018-6574 redirected/cve-2018-6574 20matan/CVE-2018-6574-POC zur250/Zur-Go-GET-RCE-Solution mekhalleh/cve-2018-6574 veter069/go-get-rce duckzsc2/CVE-2018-6574-POC ivnnn1/CVE-2018-6574 dollyptm/cve-2018-6574 qweraqq/CVE-2018-6574 d4rkshell/go-get-rce chaosura/CVE-2018-6574 french560/ptl6574 InfoSecJack/CVE-2018-6574 asavior2/CVE-2018-6574 drset/golang frozenkp/CVE-2018-6574 kev-ho/cve-2018-6574-payload sdosis/cve-2018-6574 No1zy/CVE-2018-6574-PoC nthuong95/CVE-2018-6574 AdriVillaB/CVE-2018-6574 yitingfan/CVE-2018-6574_demo mhamed366/CVE-2018-6574 Eugene24/CVE-2018-6574 coblax/CVE-2018-6574 CVE-2018-6622 # An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation. kkamagui/napper-for-tpm CVE-2018-6643 # Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter. undefinedmode/CVE-2018-6643 CVE-2018-6789 # An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely. c0llision/exim-vuln-poc beraphin/CVE-2018-6789 synacktiv/Exim-CVE-2018-6789 martinclauss/exim-rce-cve-2018-6789 CVE-2018-6791 # An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary command execution. An example of an offending volume label is \u0026quot;$(touch b)\u0026quot; -- this will create a file called b in the home folder. rarar0/KDE_Vuln CVE-2018-6890 # Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3. pradeepjairamani/WolfCMS-XSS-POC CVE-2018-6892 # An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the \u0026quot;CloudMe Sync\u0026quot; client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution. manojcode/CloudMe-Sync-1.10.9\u0026mdash;Buffer-Overflow-SEH-DEP-Bypass manojcode/-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass CVE-2018-6905 # The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process. pradeepjairamani/TYPO3-XSS-POC CVE-2018-6961 # VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution. bokanrb/CVE-2018-6961 r3dxpl0it/CVE-2018-6961 CVE-2018-6981 # VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host. heaphopopotamus/vmxnet3Hunter CVE-2018-7171 # Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot) in the contentbase parameter to rpc/set_all. mechanico/sharingIsCaring CVE-2018-7197 # An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting (XSS) vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL. Alyssa-o-Herrera/CVE-2018-7197 CVE-2018-7211 # An issue was discovered in iDashboards 9.6b. The SSO implementation is affected by a weak obfuscation library, allowing man-in-the-middle attackers to discover credentials. c3r34lk1ll3r/CVE-2018-7211-PoC CVE-2018-7249 # An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race condition that leads to a use-after-free. When exploited, an unprivileged attacker can run arbitrary code in the kernel. Elvin9/NotSecDrv CVE-2018-7250 # An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. An uninitialized kernel pool allocation in IOCTL 0xCA002813 allows a local unprivileged attacker to leak 16 bits of uninitialized kernel PagedPool data. Elvin9/SecDrvPoolLeak CVE-2018-7284 # A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the res_pjsip_pubsub module stores the accepted formats present in the Accept headers of the request. This code did not limit the number of headers it processed, despite having a fixed limit of 32. If more than 32 Accept headers were present, the code would write outside of its memory and cause a crash. Rodrigo-D/astDoS CVE-2018-7422 # A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal. 0x00-0x00/CVE-2018-7422 CVE-2018-7489 # FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath. tafamace/CVE-2018-7489 CVE-2018-7600 # Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. g0rx/CVE-2018-7600-Drupal-RCE a2u/CVE-2018-7600 dreadlocked/Drupalgeddon2 knqyf263/CVE-2018-7600 dr-iman/CVE-2018-7600-Drupal-0day-RCE jirojo2/drupalgeddon2 dwisiswant0/CVE-2018-7600 thehappydinoa/CVE-2018-7600 sl4cky/CVE-2018-7600 sl4cky/CVE-2018-7600-Masschecker FireFart/CVE-2018-7600 pimps/CVE-2018-7600 lorddemon/drupalgeddon2 Sch01ar/CVE-2018-7600 Hestat/drupal-check fyraiga/CVE-2018-7600-drupalgeddon2-scanner Damian972/drupalgeddon-2 Jyozi/CVE-2018-7600 happynote3966/CVE-2018-7600 shellord/CVE-2018-7600-Drupal-RCE r3dxpl0it/CVE-2018-7600 cved-sources/cve-2018-7600 neal1991/drupalgeddon2 drugeddon/drupal-exploit shellord/Drupalgeddon-Mass-Exploiter zhzyker/CVE-2018-7600-Drupal-POC-EXP rabbitmask/CVE-2018-7600-Drupal7 CVE-2018-7602 # A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild. 1337g/Drupalgedon3 happynote3966/CVE-2018-7602 kastellanos/CVE-2018-7602 CVE-2018-7690 # A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access alt3kx/CVE-2018-7690 CVE-2018-7691 # A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access alt3kx/CVE-2018-7691 CVE-2018-7747 # Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a greeting message, (2) the email transaction log, or (3) an imported form. mindpr00f/CVE-2018-7747 CVE-2018-7750 # transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step. jm33-m0/CVE-2018-7750 CVE-2018-7935 # lawrenceamer/CVE-2018-7935 CVE-2018-8021 # Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation. r3dxpl0it/Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021 CVE-2018-8032 # Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services. cairuojin/CVE-2018-8032 CVE-2018-8038 # Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters. tafamace/CVE-2018-8038 CVE-2018-8039 # It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty(\u0026quot;java.protocol.handler.pkgs\u0026quot;, \u0026quot;com.sun.net.ssl.internal.www.protocol\u0026quot;);'. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old com.sun.net.ssl.HostnameVerifier interface. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an exception is thrown. However, in Apache CXF prior to 3.2.5 and 3.1.16 the exception is caught in the reflection code and not properly propagated. What this means is that if you are using the com.sun.net.ssl stack with CXF, an error with TLS hostname verification will not be thrown, leaving a CXF client subject to man-in-the-middle attacks. tafamace/CVE-2018-8039 CVE-2018-8045 # In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view. luckybool1020/CVE-2018-8045 CVE-2018-8060 # HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. This affects IOCTLs higher than 0x85FE2600 with the HWiNFO32 symbolic device name. otavioarj/SIOCtl CVE-2018-8065 # An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs. EgeBalci/CVE-2018-8065 CVE-2018-8078 # YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html. AlwaysHereFight/YZMCMSxss CVE-2018-8090 # Quick Heal Total Security 64 bit 17.00 (QHTS64.exe), (QHTSFT64.exe) - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00 (QHTS32.exe), (QHTSFT32.exe) - Version 10.0.1.38; Quick Heal Internet Security 64 bit 17.00 (QHIS64.exe), (QHISFT64.exe) - Version 10.0.0.37; Quick Heal Internet Security 32 bit 17.00 (QHIS32.exe), (QHISFT32.exe) - Version 10.0.0.37; Quick Heal AntiVirus Pro 64 bit 17.00 (QHAV64.exe), (QHAVFT64.exe) - Version 10.0.0.37; and Quick Heal AntiVirus Pro 32 bit 17.00 (QHAV32.exe), (QHAVFT32.exe) - Version 10.0.0.37 allow DLL Hijacking because of Insecure Library Loading. kernelm0de/CVE-2018-8090 CVE-2018-8108 # The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by workGroupList text. zlgxzswjy/BUI-select-xss CVE-2018-8115 # A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to properly validate input while importing a container image, aka \u0026quot;Windows Host Compute Service Shim Remote Code Execution Vulnerability.\u0026quot; This affects Windows Host Compute. aquasecurity/scan-cve-2018-8115 CVE-2018-8120 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \u0026quot;Win32k Elevation of Privilege Vulnerability.\u0026quot; This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166. bigric3/cve-2018-8120 unamer/CVE-2018-8120 ne1llee/cve-2018-8120 alpha1ab/CVE-2018-8120 areuu/CVE-2018-8120 EVOL4/CVE-2018-8120 ozkanbilge/CVE-2018-8120 qiantu88/CVE-2018-8120 Y0n0Y/cve-2018-8120-exp CVE-2018-8172 # A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka \u0026quot;Visual Studio Remote Code Execution Vulnerability.\u0026quot; This affects Microsoft Visual Studio, Expression Blend 4. SyFi/CVE-2018-8172 CVE-2018-8174 # A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka \u0026quot;Windows VBScript Engine Remote Code Execution Vulnerability.\u0026quot; This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 0x09AL/CVE-2018-8174-msf Yt1g3r/CVE-2018-8174_EXP SyFi/CVE-2018-8174 orf53975/Rig-Exploit-for-CVE-2018-8174 piotrflorczyk/cve-2018-8174_analysis denmilu/CVE-2018-8174-msf ruthlezs/ie11_vbscript_exploit CVE-2018-8208 # An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka \u0026quot;Windows Desktop Bridge Elevation of Privilege Vulnerability.\u0026quot; This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8214. kaisaryousuf/CVE-2018-8208 CVE-2018-8214 # An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka \u0026quot;Windows Desktop Bridge Elevation of Privilege Vulnerability.\u0026quot; This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8208. guwudoor/CVE-2018-8214 CVE-2018-8284 # A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka \u0026quot;.NET Framework Remote Code Injection Vulnerability.\u0026quot; This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2. quantiti/CVE-2018-8284-Sharepoint-RCE CVE-2018-8353 # A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \u0026quot;Scripting Engine Memory Corruption Vulnerability.\u0026quot; This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390. whereisr0da/CVE-2018-8353-POC CVE-2018-8389 # A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \u0026quot;Scripting Engine Memory Corruption Vulnerability.\u0026quot; This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8390. sharmasandeepkr/cve-2018-8389 CVE-2018-8414 # A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka \u0026quot;Windows Shell Remote Code Execution Vulnerability.\u0026quot; This affects Windows 10 Servers, Windows 10. whereisr0da/CVE-2018-8414-POC CVE-2018-8420 # A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka \u0026quot;MS XML Remote Code Execution Vulnerability.\u0026quot; This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. idkwim/CVE-2018-8420 CVE-2018-8440 # An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka \u0026quot;Windows ALPC Elevation of Privilege Vulnerability.\u0026quot; This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. sourceincite/CVE-2018-8440 CVE-2018-8453 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \u0026quot;Win32k Elevation of Privilege Vulnerability.\u0026quot; This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Mkv4/cve-2018-8453-exp ze0r/cve-2018-8453-exp thepwnrip/leHACK-Analysis-of-CVE-2018-8453 CVE-2018-8495 # A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka \u0026quot;Windows Shell Remote Code Execution Vulnerability.\u0026quot; This affects Windows Server 2016, Windows 10, Windows 10 Servers. whereisr0da/CVE-2018-8495-POC CVE-2018-8581 # An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka \u0026quot;Microsoft Exchange Server Elevation of Privilege Vulnerability.\u0026quot; This affects Microsoft Exchange Server. WyAtu/CVE-2018-8581 qiantu88/CVE-2018-8581 Ridter/Exchange2domain CVE-2018-8639 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \u0026quot;Win32k Elevation of Privilege Vulnerability.\u0026quot; This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641. ze0r/CVE-2018-8639-exp timwhitez/CVE-2018-8639-EXP CVE-2018-8718 # Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request. GeunSam2/CVE-2018-8718 CVE-2018-8733 # Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability. xfer0/Nagios-XI-5.2.6-9-5.3-5.4-Chained-Remote-Root-Exploit-Fixed CVE-2018-8820 # An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the \u0026quot;match\u0026quot; parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xp_cmdshell. In some cases, the authentication requirement for the attack can be met by sending the default admin credentials. hateshape/frevvomapexec CVE-2018-8897 # A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL \u0026lt; 3, the debug exception is delivered after the transfer to CPL \u0026lt; 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs. nmulasmajic/CVE-2018-8897 jiazhang0/pop-mov-ss-exploit can1357/CVE-2018-8897 nmulasmajic/syscall_exploit_CVE-2018-8897 CVE-2018-8941 # Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set Diagnostics_Entry' function in an HTTP request, related to /userfs/bin/tcapi. SECFORCE/CVE-2018-8941 CVE-2018-8943 # There is a SQL injection in the PHPSHE 1.6 userbank parameter. coolboy0816/CVE-2018-8943 CVE-2018-8970 # The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zero name length, which causes silent omission of hostname verification, and consequently allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: the LibreSSL documentation indicates that this special case is supported, but the BoringSSL documentation does not. tiran/CVE-2018-8970 CVE-2018-9059 # Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791. manojcode/easy-file-share-7.2-exploit-CVE-2018-9059 CVE-2018-9075 # For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick \u0026quot;``\u0026quot; characters in the client:password parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter. beverlymiller818/cve-2018-9075 CVE-2018-9160 # SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses. mechanico/sickrageWTF CVE-2018-9206 # Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload \u0026lt;= v9.22.0 Den1al/CVE-2018-9206 Stahlz/JQShell cved-sources/cve-2018-9206 CVE-2018-9207 # Arbitrary file upload in jQuery Upload File \u0026lt;= 4.0.2 cved-sources/cve-2018-9207 CVE-2018-9208 # Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut \u0026lt;= v1.1Beta cved-sources/cve-2018-9208 CVE-2018-9276 # An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios. wildkindcc/CVE-2018-9276 CVE-2018-9375 # IOActive/AOSP-ExploitUserDictionary CVE-2018-9411 # tamirzb/CVE-2018-9411 CVE-2018-9468 # IOActive/AOSP-DownloadProviderHijacker CVE-2018-9493 # In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111085900 IOActive/AOSP-DownloadProviderDbDumper CVE-2018-9539 # In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-113027383 tamirzb/CVE-2018-9539 CVE-2018-9546 # IOActive/AOSP-DownloadProviderHeadersDumper CVE-2018-9948 # This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of typed arrays. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5380. manojcode/Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 orangepirate/cve-2018-9948-9958-exp CVE-2018-9950 # This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5413. sharmasandeepkr/PS-2017-13\u0026mdash;CVE-2018-9950 CVE-2018-9951 # This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of CPDF_Object objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5414. sharmasandeepkr/cve-2018-9951 CVE-2018-9958 # This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Text Annotations. When setting the point attribute, the process does not properly validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5620. t3rabyt3/CVE-2018-9958\u0026ndash;Exploit CVE-2018-9995 # TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a \u0026quot;Cookie: uid=admin\u0026quot; header, as demonstrated by a device.rsp?opt=user\u0026amp;cmd=list request that provides credentials within JSON data in a response. ezelf/CVE-2018-9995_dvr_credentials zzh217/CVE-2018-9995_Batch_scanning_exp Huangkey/CVE-2018-9995_check gwolfs/CVE-2018-9995-ModifiedByGwolfs shacojx/cve-2018-9995 Cyb0r9/DVR-Exploiter codeholic2k18/CVE-2018-9995 TateYdq/CVE-2018-9995-ModifiedByGwolfs ABIZCHI/CVE-2018-9995_dvr_credentials IHA114/CVE-2018-9995_dvr_credentials likaifeng0/CVE-2018-9995_dvr_credentials-dev_tool b510/CVE-2018-9995-POC keyw0rds/HTC g5q2/cve-2018-9995 2017 # CVE-2017-0038 # gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap memory via a crafted EMF file, as demonstrated by an EMR_SETDIBITSTODEVICE record with modified Device Independent Bitmap (DIB) dimensions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3216, CVE-2016-3219, and/or CVE-2016-3220. k0keoyo/CVE-2017-0038-EXP-C-JS CVE-2017-0065 # Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \u0026quot;Microsoft Browser Information Disclosure Vulnerability.\u0026quot; This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0011, CVE-2017-0017, and CVE-2017-0068. Dankirk/cve-2017-0065 CVE-2017-0075 # Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka \u0026quot;Hyper-V Remote Code Execution Vulnerability.\u0026quot; This vulnerability is different from that described in CVE-2017-0109. 4B5F5F4B/HyperV CVE-2017-0106 # Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \u0026quot;Microsoft Office Memory Corruption Vulnerability.\u0026quot; ryhanson/CVE-2017-0106 CVE-2017-0108 # The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \u0026quot;Graphics Component Remote Code Execution Vulnerability.\u0026quot; This vulnerability is different from that described in CVE-2017-0014. homjxi0e/CVE-2017-0108 CVE-2017-0143 # The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \u0026quot;Windows SMB Remote Code Execution Vulnerability.\u0026quot; This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. valarauco/wannafind CVE-2017-0144 # The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \u0026quot;Windows SMB Remote Code Execution Vulnerability.\u0026quot; This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. peterpt/eternal_scanner kimocoder/eternalblue CVE-2017-0145 # The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \u0026quot;Windows SMB Remote Code Execution Vulnerability.\u0026quot; This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148. MelonSmasher/chef_tissues CVE-2017-0199 # Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \u0026quot;Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API.\u0026quot; ryhanson/CVE-2017-0199 SyFi/cve-2017-0199 bhdresh/CVE-2017-0199 NotAwful/CVE-2017-0199-Fix haibara3839/CVE-2017-0199-master Exploit-install/CVE-2017-0199 zakybstrd21215/PoC-CVE-2017-0199 n1shant-sinha/CVE-2017-0199 kn0wm4d/htattack joke998/Cve-2017-0199 joke998/Cve-2017-0199- r0otshell/Microsoft-Word-CVE-2017-0199- viethdgit/CVE-2017-0199 nicpenning/RTF-Cleaner bloomer1016/2017-11-17-Maldoc-Using-CVE-2017-0199 jacobsoo/RTF-Cleaner denmilu/CVE-2017-0199 CVE-2017-0204 # Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Protected View via a specially crafted document, aka \u0026quot;Microsoft Office Security Feature Bypass Vulnerability.\u0026quot; ryhanson/CVE-2017-0204 CVE-2017-0213 # Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \u0026quot;Windows COM Elevation of Privilege Vulnerability\u0026quot;. This CVE ID is unique from CVE-2017-0214. shaheemirza/CVE-2017-0213- zcgonvh/CVE-2017-0213 billa3283/CVE-2017-0213 denmilu/CVE-2017-0213 jbooz1/CVE-2017-0213 eonrickity/CVE-2017-0213 Jos675/CVE-2017-0213-Exploit CVE-2017-0248 # Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka \u0026quot;.NET Security Feature Bypass Vulnerability.\u0026quot; rubenmamo/CVE-2017-0248-Test CVE-2017-0261 # Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \u0026quot;Office Remote Code Execution Vulnerability\u0026quot;. This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281. kcufId/eps-CVE-2017-0261 CVE-2017-0263 # The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \u0026quot;Win32k Elevation of Privilege Vulnerability.\u0026quot; R06otMD5/cve-2017-0263-poc CVE-2017-0290 # The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka \u0026quot;Microsoft Malware Protection Engine Remote Code Execution Vulnerability.\u0026quot; homjxi0e/CVE-2017-0290- CVE-2017-0411 # An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33042690. lulusudoku/PoC CVE-2017-0478 # A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33718716. JiounDai/CVE-2017-0478 denmilu/CVE-2017-0478 CVE-2017-0541 # A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34031018. JiounDai/CVE-2017-0541 denmilu/CVE-2017-0541 CVE-2017-0554 # An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946. lanrat/tethr CVE-2017-0564 # An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34276203. guoygang/CVE-2017-0564-ION-PoC CVE-2017-0781 # A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105. ojasookert/CVE-2017-0781 marcinguy/android712-blueborne CVE-2017-0785 # A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698. ojasookert/CVE-2017-0785 aymankhalfatni/CVE-2017-0785 Alfa100001/-CVE-2017-0785-BlueBorne-PoC Android013/CVE-2017-0785 Hackerscript/BlueBorne-CVE-2017-0785 pieterbork/blueborne sigbitsadmin/diff SigBitsLabs/diff RavSS/Bluetooth-Crash-CVE-2017-0785 CVE-2017-0806 # An elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62998805. michalbednarski/ReparcelBug CVE-2017-0807 # An elevation of privilege vulnerability in the Android framework (ui framework). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35056974. kpatsakis/PoC_CVE-2017-0807 CVE-2017-1000000 # smythtech/DWF-CVE-2017-1000000 CVE-2017-1000083 # backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a \u0026quot;--\u0026quot; command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename. matlink/evince-cve-2017-1000083 matlink/cve-2017-1000083-atril-nautilus CVE-2017-1000112 # Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. However in between two send() calls, the append path can be switched from UFO to non-UFO one, which leads to a memory corruption. In case UFO packet lengths exceeds MTU, copy = maxfraglen - skb-\u0026gt;len becomes negative on the non-UFO path and the branch to allocate new skb is taken. This triggers fragmentation and computation of fraggap = skb_prev-\u0026gt;len - maxfraglen. Fraggap can exceed MTU, causing copy = datalen - transhdrlen - fraggap to become negative. Subsequently skb_copy_and_csum_bits() writes out-of-bounds. A similar issue is present in IPv6 code. The bug was introduced in e89e9cf539a2 (\u0026quot;[IPv4/IPv6]: UFO Scatter-gather approach\u0026quot;) on Oct 18 2005. hikame/docker_escape_pwn ol0273st-s/CVE-2017-1000112-Adpated CVE-2017-1000117 # A malicious third-party can give a crafted \u0026quot;ssh://...\u0026quot; URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running \u0026quot;git clone --recurse-submodules\u0026quot; to trigger the vulnerability. timwr/CVE-2017-1000117 GrahamMThomas/test-git-vuln_CVE-2017-1000117 Manouchehri/CVE-2017-1000117 thelastbyte/CVE-2017-1000117 alilangtest/CVE-2017-1000117 VulApps/CVE-2017-1000117 greymd/CVE-2017-1000117 shogo82148/Fix-CVE-2017-1000117 sasairc/CVE-2017-1000117_wasawasa Shadow5523/CVE-2017-1000117-test bells17/CVE-2017-1000117 ieee0824/CVE-2017-1000117 rootclay/CVE-2017-1000117 ieee0824/CVE-2017-1000117-sl takehaya/CVE-2017-1000117 ikmski/CVE-2017-1000117 nkoneko/CVE-2017-1000117 chenzhuo0618/test siling2017/CVE-2017-1000117 Q2h1Cg/CVE-2017-1000117 cved-sources/cve-2017-1000117 leezp/CVE-2017-1000117 AnonymKing/CVE-2017-1000117 CVE-2017-1000250 # All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests. olav-st/CVE-2017-1000250-PoC CVE-2017-1000251 # The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space. hayzamjs/Blueborne-CVE-2017-1000251 chmod750/blueborne tlatkdgus1/blueborne-CVE-2017-1000251 own2pwn/blueborne-CVE-2017-1000251-POC marcinguy/blueborne-CVE-2017-1000251 CVE-2017-1000253 # Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm-\u0026gt;mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm-\u0026gt;mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm-\u0026gt;mmap_base into the are that is supposed to be the \u0026quot;gap\u0026quot; between the stack and the binary. sagiesec/PIE-Stack-Clash-CVE-2017-1000253 CVE-2017-1000353 # Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java `SignedObject` object to the Jenkins CLI, that would be deserialized using a new `ObjectInputStream`, bypassing the existing blacklist-based protection mechanism. We're fixing this issue by adding `SignedObject` to the blacklist. We're also backporting the new HTTP CLI protocol from Jenkins 2.54 to LTS 2.46.2, and deprecating the remoting-based (i.e. Java serialization) CLI protocol, disabling it by default. vulhub/CVE-2017-1000353 CVE-2017-1000367 # Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution. c0d3z3r0/sudo-CVE-2017-1000367 homjxi0e/CVE-2017-1000367 pucerpocok/sudo_exploit CVE-2017-1000405 # The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original \u0026quot;Dirty cow\u0026quot; because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp. bindecy/HugeDirtyCowPOC CVE-2017-1000475 # FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges. lajarajorge/CVE-2017-1000475 CVE-2017-1000486 # Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution pimps/CVE-2017-1000486 mogwailabs/CVE-2017-1000486 cved-sources/cve-2017-1000486 CVE-2017-1000499 # phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc. Villaquiranm/5MMISSI-CVE-2017-1000499 CVE-2017-1002101 # In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem. bgeesaman/subpath-exploit CVE-2017-10235 # Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.7 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H). fundacion-sadosky/vbox_cve_2017_10235 CVE-2017-10271 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). 1337g/CVE-2017-10271 s3xy/CVE-2017-10271 ZH3FENG/PoCs-Weblogic_2017_10271 c0mmand3rOpSec/CVE-2017-10271 Luffin/CVE-2017-10271 cjjduck/weblogic_wls_wsat_rce kkirsche/CVE-2017-10271 pssss/CVE-2017-10271 SuperHacker-liuan/cve-2017-10271-poc bmcculley/CVE-2017-10271 RealBearcat/Oracle-WebLogic-CVE-2017-10271 Sch01ar/CVE-2017-10271 Cymmetria/weblogic_honeypot JackyTsuuuy/weblogic_wls_rce_poc-exp s0wr0b1ndef/Oracle-WebLogic-WLS-WSAT lonehand/Oracle-WebLogic-CVE-2017-10271-master shack2/javaserializetools nhwuxiaojun/CVE-2017-10271 ETOCheney/JavaDeserialization cved-sources/cve-2017-10271 XHSecurity/Oracle-WebLogic-CVE-2017-10271 kaidb/Weblogic_Wsat_RCE SkyBlueEternal/CNVD-C-2019-48814-CNNVD-201904-961 Yuusuke4/WebLogic_CNVD_C_2019_48814 7kbstorm/WebLogic_CNVD_C2019_48814 ianxtianxt/-CVE-2017-10271- testwc/CVE-2017-10271 CVE-2017-10352 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H). bigsizeme/weblogic-XMLDecoder CVE-2017-10366 # Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PT PeopleTools. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). blazeinfosec/CVE-2017-10366_peoplesoft CVE-2017-10617 # The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N). gteissier/CVE-2017-10617 CVE-2017-10661 # Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing. GeneBlue/CVE-2017-10661_POC CVE-2017-10797 # n4xh4ck5/CVE-2017-10797 CVE-2017-10952 # This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the saveAs JavaScript function. The issue results from the lack of proper validation of user-supplied data, which can lead to writing arbitrary files into attacker controlled locations. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4518. afbase/CVE-2017-10952 CVE-2017-11176 # The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact. DoubleMice/cve-2017-11176 HckEX/CVE-2017-11176 leonardo1101/cve-2017-11176 c3r34lk1ll3r/CVE-2017-11176 CVE-2017-11317 # Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code. bao7uo/RAU_crypto CVE-2017-11427 # OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers. CHYbeta/CVE-2017-11427-DEMO CVE-2017-11503 # PHPMailer 5.2.23 has XSS in the \u0026quot;From Email Address\u0026quot; and \u0026quot;To Email Address\u0026quot; fields of code_generator.php. wizardafric/download CVE-2017-11519 # passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511. vakzz/tplink-CVE-2017-11519 CVE-2017-11610 # The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups. ivanitlearning/CVE-2017-11610 CVE-2017-11611 # Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the file name in a \u0026quot;create-file-popup\u0026quot; action, and the directory name in a \u0026quot;create-directory-popup\u0026quot; action, in the HTTP POST method to the \u0026quot;/plugin/file_manager/\u0026quot; script (aka an /admin/plugin/file_manager/browse// URI). faizzaidi/Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc CVE-2017-11774 # Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka \u0026quot;Microsoft Outlook Security Feature Bypass Vulnerability.\u0026quot; devcoinfet/SniperRoost CVE-2017-11783 # Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles calls to Advanced Local Procedure Call (ALPC), aka \u0026quot;Windows Elevation of Privilege Vulnerability\u0026quot;. Sheisback/CVE-2017-11783 CVE-2017-11816 # The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka \u0026quot;Windows GDI Information Disclosure Vulnerability\u0026quot;. lr3800/CVE-2017-11816 CVE-2017-11826 # Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory. thatskriptkid/CVE-2017-11826 CVE-2017-11882 # Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \u0026quot;Microsoft Office Memory Corruption Vulnerability\u0026quot;. This CVE ID is unique from CVE-2017-11884. starnightcyber/exploits zhouat/cve-2017-11882 embedi/CVE-2017-11882 Ridter/CVE-2017-11882 BlackMathIT/2017-11882_Generator unamer/CVE-2017-11882 0x09AL/CVE-2017-11882-metasploit HZachev/ABC starnightcyber/CVE-2017-11882 Grey-Li/CVE-2017-11882 legendsec/CVE-2017-11882-for-Kali CSC-pentest/cve-2017-11882 Shadowshusky/CVE-2017-11882- rxwx/CVE-2018-0802 Ridter/RTF_11882_0802 denmilu/CVE-2017-11882 denmilu/CVE-2018-0802_CVE-2017-11882 bloomer1016/CVE-2017-11882-Possible-Remcos-Malspam ChaitanyaHaritash/CVE-2017-11882 qy1202/https-github.com-Ridter-CVE-2017-11882- j0lama/CVE-2017-11882 R0fM1a/IDB_Share chanbin/CVE-2017-11882 littlebin404/CVE-2017-11882 ekgg/Overflow-Demo-CVE-2017-11882 CVE-2017-11907 # Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka \u0026quot;Scripting Engine Memory Corruption Vulnerability\u0026quot;. This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. re4lity/CVE-2017-11907 CVE-2017-12149 # In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data. sevck/CVE-2017-12149 yunxu1/jboss-_CVE-2017-12149 1337g/CVE-2017-12149 jreppiks/CVE-2017-12149 CVE-2017-12426 # GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import. sm-paul-schuette/CVE-2017-12426 CVE-2017-12542 # A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found. skelsec/CVE-2017-12542 sk1dish/ilo4-rce-vuln-scanner CVE-2017-12611 # In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack. brianwrf/S2-053-CVE-2017-12611 CVE-2017-12615 # When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server. breaktoprotect/CVE-2017-12615 mefulton/cve-2017-12615 zi0Black/POC-CVE-2017-12615-or-CVE-2017-12717 RealBearcat/CVE-2017-12615 wsg00d/cve-2017-12615 1337g/CVE-2017-12615 Shellkeys/CVE-2017-12615 cved-sources/cve-2017-12615 ianxtianxt/CVE-2017-12615 CVE-2017-12617 # When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server. cyberheartmi9/CVE-2017-12617 devcoinfet/CVE-2017-12617 qiantu88/CVE-2017-12617 ygouzerh/CVE-2017-12617 CVE-2017-12624 # Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack. From Apache CXF 3.2.1 and 3.1.14, message attachment headers that are greater than 300 characters will be rejected by default. This value is configurable via the property \u0026quot;attachment-max-header-size\u0026quot;. tafamace/CVE-2017-12624 CVE-2017-12635 # Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit _users documents with duplicate keys for 'roles' used for access control within the database, including the special case '_admin' role, that denotes administrative users. In combination with CVE-2017-12636 (Remote Code Execution), this can be used to give non-admin users access to arbitrary shell commands on the server as the database system user. The JSON parser differences result in behaviour that if two 'roles' keys are available in the JSON, the second one will be used for authorising the document write, but the first 'roles' key is used for subsequent authorization for the newly created user. By design, users can not assign themselves roles. The vulnerability allows non-admin users to give themselves admin privileges. assalielmehdi/CVE-2017-12635 CVE-2017-12636 # CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet. moayadalmalat/CVE-2017-12636 F1uffyGoat/F1uffyCouchDB RedTeamWing/CVE-2017-12636 CVE-2017-12792 # Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) linkname, (2) url, or (3) title parameter in an add action to linksmanage.php. ZZS2017/cve-2017-12792 CVE-2017-12852 # The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack. BT123/numpy-1.13.1 CVE-2017-12943 # D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password. aymankhalfatni/D-Link CVE-2017-12945 # Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root. aress31/cve-2017-12945 CVE-2017-13089 # The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. r1b/CVE-2017-13089 mzeyong/CVE-2017-13089 CVE-2017-13156 # An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847. xyzAsian/Janus-CVE-2017-13156 caxmd/CVE-2017-13156 giacomoferretti/janus-toolkit CVE-2017-13253 # In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71389378. tamirzb/CVE-2017-13253 CVE-2017-13672 # QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update. DavidBuchanan314/CVE-2017-13672 CVE-2017-13868 # An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \u0026quot;Kernel\u0026quot; component. It allows attackers to bypass intended memory-read restrictions via a crafted app. bazad/ctl_ctloutput-leak CVE-2017-13872 # An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the \u0026quot;Directory Utility\u0026quot; component. It allows attackers to obtain administrator access without a password via certain interactions involving entry of the root user name. giovannidispoto/CVE-2017-13872-Patch CVE-2017-14105 # HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at HiveManager/tomcat/webapps/hm/domains/$yourtenant/maps (it will be exposed at the web interface). theguly/CVE-2017-14105 CVE-2017-14262 # On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with that hash in the szUserPasswd parameter. zzz66686/CVE-2017-14262 CVE-2017-14263 # Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user account to fully control the device. zzz66686/CVE-2017-14263 CVE-2017-14322 # The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value. joesmithjaffa/CVE-2017-14322 CVE-2017-14491 # Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. YIHSUEHTsai/dnsmasq-2.4.1-fix-CVE-2017-14491 CVE-2017-14493 # Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request. pupiles/bof-dnsmasq-cve-2017-14493 CVE-2017-14719 # Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components. PalmTreeForest/CodePath_Week_7-8 CVE-2017-14948 # Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution. badnack/d_link_880_bug CVE-2017-15120 # An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service. shutingrz/CVE-2017-15120_PoC CVE-2017-15277 # ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette. tacticthreat/ImageMagick-CVE-2017-15277 CVE-2017-15303 # In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an ioctl 0x9C402430 call to the kernel-mode driver (e.g., cpuz141_x64.sys for version 1.41). hfiref0x/Stryker CVE-2017-15361 # The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS. lva/Infineon-CVE-2017-15361 titanous/rocacheck jnpuskar/RocaCmTest nsacyber/Detect-CVE-2017-15361-TPM 0xxon/zeek-plugin-roca 0xxon/roca CVE-2017-15394 # Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension. sudosammy/CVE-2017-15394 CVE-2017-15708 # In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by injecting specially crafted serialized objects. And the presence of Apache Commons Collections 3.2.1 (commons-collections-3.2.1.jar) or previous versions in Synapse distribution makes this exploitable. To mitigate the issue, we need to limit RMI access to trusted users only. Further upgrading to 3.0.1 version will eliminate the risk of having said Commons Collection version. In Synapse 3.0.1, Commons Collection has been updated to 3.2.2 version. RealBearcat/CVE-2017-15708 CVE-2017-15715 # In Apache httpd 2.4.0 to 2.4.29, the expression specified in \u0026lt;FilesMatch\u0026gt; could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename. whisp1830/CVE-2017-15715 CVE-2017-15944 # Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface. xxnbyy/CVE-2017-15944-POC surajraghuvanshi/PaloAltoRceDetectionAndExploit CVE-2017-16082 # A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) Connecting to an untrusted database and executing a query which returns results where any of the column names are malicious. nulldreams/CVE-2017-16082 CVE-2017-16088 # The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox. Flyy-yu/CVE-2017-16088 CVE-2017-16245 # AOCorsaire/CVE-2017-16245 CVE-2017-1635 # IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243. emcalv/tivoli-poc CVE-2017-16524 # Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/ directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attackers to read the web-interface credentials via a request for the cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw URI. realistic-security/CVE-2017-16524 CVE-2017-16567 # Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers to inject arbitrary web script or HTML via a \u0026quot;favorite.\u0026quot; dewankpant/CVE-2017-16567 CVE-2017-16568 # Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers to inject arbitrary web script or HTML via a radio URL. dewankpant/CVE-2017-16568 CVE-2017-16744 # A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials. GainSec/CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara CVE-2017-16778 # An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency (DTMF) tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an access grant. However, due to incorrect access control, an attacker could inject it via the speaker unit to perform an access grant to gain unauthorized access, as demonstrated by a loud DTMF tone representing '1' and a long '#' (697 Hz and 1209 Hz, followed by 941 Hz and 1477 Hz). breaktoprotect/CVE-2017-16778-Intercom-DTMF-Injection CVE-2017-16806 # The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal. rickoooooo/ulteriusExploit CVE-2017-16943 # The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands. beraphin/CVE-2017-16943 CVE-2017-16995 # The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension. RealBearcat/CVE-2017-16995 Al1ex/CVE-2017-16995 gugronnier/CVE-2017-16995 senyuuri/cve-2017-16995 vnik5287/CVE-2017-16995 littlebin404/CVE-2017-16995 CVE-2017-16997 # elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the \u0026quot;./\u0026quot; directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution. Xiami2012/CVE-2017-16997-poc CVE-2017-17099 # There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under the Windows SYSTEM account. wetw0rk/Exploit-Development CVE-2017-17215 # Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code. 1337g/CVE-2017-17215 CVE-2017-17309 # Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication. exploit-labs/huawei_hg255s_exploit CVE-2017-17485 # FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath. RealBearcat/Jackson-CVE-2017-17485 tafamace/CVE-2017-17485 x7iaob/cve-2017-17485 CVE-2017-17562 # Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0. 1337g/CVE-2017-17562 ivanitlearning/CVE-2017-17562 crispy-peppers/Goahead-CVE-2017-17562 CVE-2017-17692 # Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property. lr3800/CVE-2017-17692 CVE-2017-18044 # A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvault service does not properly validate the input of an incoming string before passing it to CreateProcess. As a result, a specially crafted message can inject commands that will be executed on the target operating system. Exploitation of this vulnerability does not require authentication and can lead to SYSTEM level privilege on any system running the cvd daemon. This is a different vulnerability than CVE-2017-3195. securifera/CVE-2017-18044-Exploit CVE-2017-18345 # The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager\u0026amp;controller=details\u0026amp;task=download\u0026amp;path=configuration.php request. Luth1er/CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD CVE-2017-18486 # Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user. Kc57/JitBit_Helpdesk_Auth_Bypass CVE-2017-18635 # An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name. ShielderSec/CVE-2017-18635 CVE-2017-2368 # An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the \u0026quot;Contacts\u0026quot; component. It allows remote attackers to cause a denial of service (application crash) via a crafted contact card. vincedes3/CVE-2017-2368 CVE-2017-2370 # An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the \u0026quot;Kernel\u0026quot; component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app. maximehip/extra_recipe JackBro/extra_recipe Rootkitsmm/extra_recipe-iOS-10.2 Peterpan0927/CVE-2017-2370 CVE-2017-2388 # An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \u0026quot;IOFireWireFamily\u0026quot; component. It allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app. bazad/IOFireWireFamily-null-deref CVE-2017-2636 # Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline. alexzorin/cve-2017-2636-el CVE-2017-2666 # It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own. tafamace/CVE-2017-2666 CVE-2017-2671 # The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call. homjxi0e/CVE-2017-2671 CVE-2017-2751 # A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014. BaderSZ/CVE-2017-2751 CVE-2017-2793 # An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability. r0otshell/Detection-for-CVE-2017-2793 CVE-2017-3000 # Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure. dangokyo/CVE-2017-3000 CVE-2017-3066 # Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution. codewhitesec/ColdFusionPwn cucadili/CVE-2017-3066 CVE-2017-3078 # Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution. homjxi0e/CVE-2017-3078 CVE-2017-3143 # An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0-\u0026gt;9.8.8, 9.9.0-\u0026gt;9.9.10-P1, 9.10.0-\u0026gt;9.10.5-P1, 9.11.0-\u0026gt;9.11.1-P1, 9.9.3-S1-\u0026gt;9.9.10-S2, 9.10.5-S1-\u0026gt;9.10.5-S2. saaph/CVE-2017-3143 CVE-2017-3241 # Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). xfei3/CVE-2017-3241-POC CVE-2017-3248 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0 and 12.2.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS v3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). ianxtianxt/CVE-2017-3248 0xn0ne/weblogicScanner CVE-2017-3506 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N). ianxtianxt/CVE-2017-3506 CVE-2017-3599 # Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \u0026quot;exploitable\u0026quot; vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet. SECFORCE/CVE-2017-3599 CVE-2017-3730 # In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack. guidovranken/CVE-2017-3730 ymmah/OpenSSL-CVE-2017-3730 CVE-2017-3881 # A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893. artkond/cisco-rce homjxi0e/CVE-2017-3881-exploit-cisco- homjxi0e/CVE-2017-3881-Cisco zakybstrd21215/PoC-CVE-2017-3881 1337g/CVE-2017-3881 CVE-2017-4490 # homjxi0e/CVE-2017-4490- homjxi0e/CVE-2017-4490-install-Script-Python-in-Terminal- CVE-2017-4878 # brianwrf/CVE-2017-4878-Samples CVE-2017-4971 # An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings. cved-sources/cve-2017-4971 CVE-2017-5005 # Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LC_UNIXTHREAD.cmdsize field in a Mach-O file that is mishandled during a Security Scan (aka Custom Scan) operation. payatu/QuickHeal CVE-2017-5007 # Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Ang-YC/CVE-2017-5007 CVE-2017-5123 # FloatingGuy/CVE-2017-5123 0x5068656e6f6c/CVE-2017-5123 Synacktiv-contrib/exploiting-cve-2017-5123 teawater/CVE-2017-5123 CVE-2017-5124 # Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page. Bo0oM/CVE-2017-5124 CVE-2017-5223 # An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base directory is provided, it resolves to /, meaning that relative image URLs get treated as absolute local file paths and added as attachments. To form a remote vulnerability, the msgHTML method must be called, passed an unfiltered, user-supplied HTML document, and must not set a base directory. cscli/CVE-2017-5223 CVE-2017-5415 # An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by \u0026quot;blob:\u0026quot; as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox \u0026lt; 52. 649/CVE-2017-5415 CVE-2017-5487 # wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request. teambugsbunny/wpUsersScan R3K1NG/wpUsersScan GeunSam2/CVE-2017-5487 patilkr/wp-CVE-2017-5487-exploit CVE-2017-5633 # Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs. cardangi/Exploit-CVE-2017-5633 CVE-2017-5638 # The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string. PolarisLab/S2-045 Flyteas/Struts2-045-Exp bongbongco/cve-2017-5638 jas502n/S2-045-EXP-POC-TOOLS mthbernardes/strutszeiro xsscx/cve-2017-5638 immunio/apache-struts2-CVE-2017-5638 Masahiro-Yamada/OgnlContentTypeRejectorValve aljazceru/CVE-2017-5638-Apache-Struts2 sjitech/test_struts2_vulnerability_CVE-2017-5638 jrrombaldo/CVE-2017-5638 random-robbie/CVE-2017-5638 initconf/CVE-2017-5638_struts mazen160/struts-pwn ret2jazzy/Struts-Apache-ExploitPack lolwaleet/ExpStruts oktavianto/CVE-2017-5638-Apache-Struts2 jrrdev/cve-2017-5638 opt9/Strutshock falcon-lnhg/StrutsShell bhagdave/CVE-2017-5638 jas502n/st2-046-poc KarzsGHR/S2-046_S2-045_POC gsfish/S2-Reaper mcassano/cve-2017-5638 opt9/Strutscli tahmed11/strutsy payatu/CVE-2017-5638 Aasron/Struts2-045-Exp SpiderMate/Stutsfi jpacora/Struts2Shell NyaMeeEain/Apache-Struts AndreasKl/CVE-2017-5638 riyazwalikar/struts-rce-cve-2017-5638 homjxi0e/CVE-2017-5638 eeehit/CVE-2017-5638 r0otshell/Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner r0otshell/Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638 R4v3nBl4ck/Apache-Struts-2-CVE-2017-5638-Exploit- Xhendos/CVE-2017-5638 TamiiLambrado/Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner RealBearcat/S2-045 invisiblethreat/strutser lizhi16/CVE-2017-5638 donaldashdown/Common-Vulnerability-and-Exploit grant100/cybersecurity-struts2 cafnet/apache-struts-v2-CVE-2017-5638 0x00-0x00/CVE-2017-5638 m3ssap0/struts2_cve-2017-5638 Greynad/struts2-jakarta-inject ggolawski/struts-rce win3zz/CVE-2017-5638 leandrocamposcardoso/CVE-2017-5638-Mass-Exploit Iletee/struts2-rce andypitcher/check_struts un4ckn0wl3z/CVE-2017-5638 colorblindpentester/CVE-2017-5638 injcristianrojas/cve-2017-5638 CVE-2017-5645 # In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code. pimps/CVE-2017-5645 CVE-2017-5689 # An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT). CerberusSecurity/CVE-2017-5689 x1sec/amthoneypot Bijaye/intel_amt_bypass embedi/amt_auth_bypass_poc CVE-2017-5693 # Firmware in the Intel Puma 5, 6, and 7 Series might experience resource depletion or timeout, which allows a network attacker to create a denial of service via crafted network traffic. nallar/Puma6Fail CVE-2017-5715 # Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. opsxcq/exploit-cve-2017-5715 mathse/meltdown-spectre-bios-list GregAskew/SpeculativeExecutionAssessment dmo2118/retpoline-audit CVE-2017-5721 # Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory. embedi/smm_usbrt_poc CVE-2017-5753 # Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. Eugnis/spectre-attack EdwardOwusuAdjei/Spectre-PoC poilynx/spectre-attack-example xsscx/cve-2017-5753 pedrolucasoliva/spectre-attack-demo ixtal23/spectreScope CVE-2017-5754 # Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. ionescu007/SpecuCheck raphaelsc/Am-I-affected-by-Meltdown Viralmaniar/In-Spectre-Meltdown speecyy/Am-I-affected-by-Meltdown zzado/Meltdown jdmulloy/meltdown-aws-scanner CVE-2017-5792 # A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. RealBearcat/HPE-iMC-7.3-RMI-Java-Deserialization CVE-2017-6008 # A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to escalate privileges via a malformed IOCTL call. cbayet/Exploit-CVE-2017-6008 CVE-2017-6074 # The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call. node1392/Linux-Kernel-Vulnerability CVE-2017-6079 # The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006. MostafaSoliman/CVE-2017-6079-Blind-Command-Injection-In-Edgewater-Edgemarc-Devices-Exploit CVE-2017-6090 # Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/. jlk/exploit-CVE-2017-6090 CVE-2017-6206 # D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Information Disclosure attacks via unspecified vectors. varangamin/CVE-2017-6206 CVE-2017-6370 # TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields. faizzaidi/TYPO3-v7.6.15-Unencrypted-Login-Request CVE-2017-6558 # iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file. GemGeorge/iBall-UTStar-CVEChecker CVE-2017-6640 # A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges. The vulnerability exists because the affected software has a default user account that has a default, static password. The user account is created automatically when the software is installed. An attacker could exploit this vulnerability by connecting remotely to an affected system and logging in to the affected software by using the credentials for this default user account. A successful exploit could allow the attacker to use this default user account to log in to the affected software and gain access to the administrative console of a DCNM server. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd95346. hemp3l/CVE-2017-6640-POC CVE-2017-6736 # The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.2 through 3.17 contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP: Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. Cisco Bug IDs: CSCve57697. GarnetSunset/CiscoSpectreTakeover GarnetSunset/CiscoIOSSNMPToolkit CVE-2017-6913 # Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag. gquere/CVE-2017-6913 CVE-2017-6971 # AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862. patrickfreed/nfsen-exploit KeyStrOke95/nfsen_1.3.7_CVE-2017-6971 CVE-2017-7038 # A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the \u0026quot;WebKit\u0026quot; component. ansjdnakjdnajkd/CVE-2017-7038 CVE-2017-7047 # An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \u0026quot;libxpc\u0026quot; component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. JosephShenton/Triple_Fetch-Kernel-Creds q1f3/Triple_fetch CVE-2017-7061 # An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \u0026quot;WebKit\u0026quot; component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. TheLoneHaxor/jailbreakme103 CVE-2017-7089 # An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the \u0026quot;WebKit\u0026quot; component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that is mishandled during parent-tab processing. Bo0oM/CVE-2017-7089 aymankhalfatni/Safari_Mac CVE-2017-7092 # An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \u0026quot;WebKit\u0026quot; component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. xuechiyaobai/CVE-2017-7092-PoC CVE-2017-7173 # An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \u0026quot;Kernel\u0026quot; component. It allows attackers to bypass intended memory-read restrictions via a crafted app. bazad/sysctl_coalition_get_pid_list-dos CVE-2017-7184 # The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52. rockl/cve-2017-7184 rockl/cve-2017-7184-bak CVE-2017-7188 # Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse. faizzaidi/Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC CVE-2017-7269 # Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with \u0026quot;If: \u0026lt;http://\u0026quot; in a PROPFIND request, as exploited in the wild in July or August 2016. eliuha/webdav_exploit lcatro/CVE-2017-7269-Echo-PoC caicai1355/CVE-2017-7269-exploit M1a0rz/CVE-2017-7269 whiteHat001/cve-2017-7269picture zcgonvh/cve-2017-7269 jrrombaldo/CVE-2017-7269 g0rx/iis6-exploit-2017-CVE-2017-7269 slimpagey/IIS_6.0_WebDAV_Ruby homjxi0e/cve-2017-7269 xiaovpn/CVE-2017-7269 zcgonvh/cve-2017-7269-tool mirrorblack/CVE-2017-7269 Al1ex/CVE-2017-7269 CVE-2017-7374 # Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be freed prematurely. ww9210/cve-2017-7374 CVE-2017-7472 # The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls. homjxi0e/CVE-2017-7472 CVE-2017-7494 # Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it. betab0t/cve-2017-7494 homjxi0e/CVE-2017-7494 opsxcq/exploit-CVE-2017-7494 Waffles-2/SambaCry brianwrf/SambaHunter joxeankoret/CVE-2017-7494 Zer0d0y/Samba-CVE-2017-7494 incredible1yu/CVE-2017-7494 cved-sources/cve-2017-7494 john-80/cve-2017-7494 CVE-2017-7525 # A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. SecureSkyTechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095 RealBearcat/S2-055 JavanXD/Demo-Exploit-Jackson-RCE 47bwy/CVE-2017-7525 BassinD/jackson-RCE Dannners/jackson-deserialization-2017-7525 Ingenuity-Fainting-Goats/CVE-2017-7525-Jackson-Deserialization-Lab CVE-2017-7529 # Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. liusec/CVE-2017-7529 en0f/CVE-2017-7529_PoC cved-sources/cve-2017-7529 mpalonso/ferni MaxSecurity/CVE-2017-7529-POC CVE-2017-7648 # Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation. notmot/CVE-2017-7648. CVE-2017-7679 # In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header. snknritr/CVE-2017-7679-in-python CVE-2017-7912 # Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication. homjxi0e/CVE-2017-7912_Sneak CVE-2017-7921 # An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information. JrDw0/CVE-2017-7921-EXP CVE-2017-7998 # Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) printer name when adding a printer in the admin panel or (2) username parameter to webapp/users/user_reg.jsp. homjxi0e/CVE-2017-7998 CVE-2017-8046 # Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code. Soontao/CVE-2017-8046-DEMO sj/spring-data-rest-CVE-2017-8046 m3ssap0/SpringBreakVulnerableApp m3ssap0/spring-break_cve-2017-8046 FixYourFace/SpringBreakPoC jkutner/spring-break-cve-2017-8046 bkhablenko/CVE-2017-8046 cved-sources/cve-2017-8046 jsotiro/VulnerableSpringDataRest CVE-2017-8295 # WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be resent, leading to transmission of the reset key to a mailbox on an attacker-controlled SMTP server. This is related to problematic use of the SERVER_NAME variable in wp-includes/pluggable.php in conjunction with the PHP mail function. Exploitation is not achievable in all cases because it requires at least one of the following: (1) the attacker can prevent the victim from receiving any e-mail messages for an extended period of time (such as 5 days), (2) the victim's e-mail system sends an autoresponse containing the original message, or (3) the victim manually composes a reply containing the original message. homjxi0e/CVE-2017-8295-WordPress-4.7.4\u0026mdash;Unauthorized-Password-Reset alash3al/wp-allowed-hosts cyberheartmi9/CVE-2017-8295 CVE-2017-8382 # admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts. faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc CVE-2017-8464 # Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka \u0026quot;LNK Remote Code Execution Vulnerability.\u0026quot; Elm0D/CVE-2017-8464 3gstudent/CVE-2017-8464-EXP Securitykid/CVE-2017-8464-exp-generator X-Vector/usbhijacking xssfile/CVE-2017-8464-EXP CVE-2017-8465 # Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka \u0026quot;Win32k Elevation of Privilege Vulnerability.\u0026quot; This CVE ID is unique from CVE-2017-8468. nghiadt1098/CVE-2017-8465 CVE-2017-8529 # Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory, aka \u0026quot;Microsoft Browser Information Disclosure Vulnerability\u0026quot;. Lynggaard91/windows2016fixCVE-2017-8529 sfitpro/cve-2017-8529 CVE-2017-8543 # Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka \u0026quot;Windows Search Remote Code Execution Vulnerability\u0026quot;. americanhanko/windows-security-cve-2017-8543 CVE-2017-8570 # Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \u0026quot;Microsoft Office Remote Code Execution Vulnerability\u0026quot;. This CVE ID is unique from CVE-2017-0243. temesgeny/ppsx-file-generator rxwx/CVE-2017-8570 MaxSecurity/Office-CVE-2017-8570 SwordSheath/CVE-2017-8570 Drac0nids/CVE-2017-8570 930201676/CVE-2017-8570 CVE-2017-8625 # Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka \u0026quot;Internet Explorer Security Feature Bypass Vulnerability\u0026quot;. homjxi0e/CVE-2017-8625_Bypass_UMCI CVE-2017-8641 # Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render when handling objects in memory, aka \u0026quot;Scripting Engine Memory Corruption Vulnerability\u0026quot;. This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. homjxi0e/CVE-2017-8641_chakra_Js_GlobalObject CVE-2017-8759 # Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \u0026quot;.NET Framework Remote Code Execution Vulnerability.\u0026quot; Voulnet/CVE-2017-8759-Exploit-sample nccgroup/CVE-2017-8759 vysecurity/CVE-2017-8759 BasuCert/CVE-2017-8759 tahisaad6/CVE-2017-8759-Exploit-sample2 homjxi0e/CVE-2017-8759_-SOAP_WSDL bhdresh/CVE-2017-8759 Lz1y/CVE-2017-8759 JonasUliana/CVE-2017-8759 Securitykid/CVE-2017-8759 ashr/CVE-2017-8759-exploits l0n3rs/CVE-2017-8759 ChaitanyaHaritash/CVE-2017-8759 smashinu/CVE-2017-8759Expoit adeljck/CVE-2017-8759 zhengkook/CVE-2017-8759 CVE-2017-8760 # An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier/1000@/index.html with the auth_params parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads, e.g., URL encoding. Voraka/cve-2017-8760 CVE-2017-8779 # rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb. drbothen/GO-RPCBOMB CVE-2017-8802 # Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the \u0026quot;Show Snippet\u0026quot; functionality. ozzi-/Zimbra-CVE-2017-8802-Hotifx CVE-2017-8809 # api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability. motikan2010/CVE-2017-8809_MediaWiki_RFD CVE-2017-8890 # The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call. beraphin/CVE-2017-8890 thinkycx/CVE-2017-8890 7043mcgeep/cve-2017-8890-msf CVE-2017-8917 # SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors. brianwrf/Joomla3.7-SQLi-CVE-2017-8917 stefanlucas/Exploit-Joomla cved-sources/cve-2017-8917 CVE-2017-9097 # In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC150 devices through 1.40.0, WS200 devices through 3.30.4, EC250 devices through 1.40.0, and other products, an LFI vulnerability allows a remote attacker to read or modify files through a path traversal technique, as demonstrated by reading the password file, or using the template parameter to cgi-bin/write.cgi to write to an arbitrary file. ezelf/AntiWeb_testing-Suite CVE-2017-9101 # import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file. jasperla/CVE-2017-9101 CVE-2017-9248 # Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading to a MachineKey leak, arbitrary file uploads or downloads, XSS, or ASP.NET ViewState compromise. bao7uo/dp_crypto capt-meelo/Telewreck ictnamanh/CVE-2017-9248 shacojx/dp CVE-2017-9417 # Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the \u0026quot;Broadpwn\u0026quot; issue. mailinneberg/Broadpwn CVE-2017-9430 # Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv[0]. An example threat model is a web application that launches dnstracer with an untrusted name string. homjxi0e/CVE-2017-9430 j0lama/Dnstracer-1.9-Fix CVE-2017-9476 # The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); and Arris TG1682G (eMTA\u0026amp;DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices makes it easy for remote attackers to determine the hidden SSID and passphrase for a Home Security Wi-Fi network. wiire-a/CVE-2017-9476 CVE-2017-9506 # The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF). random-robbie/Jira-Scan pwn1sher/jira-ssrf CVE-2017-9544 # There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code. adenkiewicz/CVE-2017-9544 CVE-2017-9554 # An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors. rfcl/Synology-DiskStation-User-Enumeration-CVE-2017-9554- CVE-2017-9606 # Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks. Houl777/CVE-2017-9606 CVE-2017-9609 # Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the map_language parameter to backend/pages/lang_settings.php. faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc CVE-2017-9779 # OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 \u0026quot;but with much less impact.\u0026quot; homjxi0e/CVE-2017-9779 CVE-2017-9791 # The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage. IanSmith123/s2-048 dragoneeg/Struts2-048 xfer0/CVE-2017-9791 CVE-2017-9798 # Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c. nitrado/CVE-2017-9798 pabloec20/optionsbleed l0n3rs/CVE-2017-9798 brokensound77/OptionsBleed-POC-Scanner CVE-2017-9805 # The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads. luc10/struts-rce-cve-2017-9805 hahwul/struts2-rce-cve-2017-9805-ruby mazen160/struts-pwn_CVE-2017-9805 Lone-Ranger/apache-struts-pwn_CVE-2017-9805 RealBearcat/S2-052 0x00-0x00/-CVE-2017-9805 chrisjd20/cve-2017-9805.py UbuntuStrike/struts_rest_rce_fuzz-CVE-2017-9805- UbuntuStrike/CVE-2017-9805_Struts_Fuzz_N_Sploit thevivekkryadav/CVE-2017-9805-Exploit CVE-2017-9830 # Remote Code Execution is possible in Code42 CrashPlan 5.4.x via the org.apache.commons.ssl.rmi.DateRMI Java class, because (upon instantiation) it creates an RMI server that listens on a TCP port and deserializes objects sent by TCP clients. securifera/CVE-2017-9830 CVE-2017-9841 # Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a \u0026quot;\u0026lt;?php \u0026quot; substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI. mbrasile/CVE-2017-9841 CVE-2017-98505 # mike-williams/Struts2Vuln CVE-2017-9934 # Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability. xyringe/CVE-2017-9934 CVE-2017-9999 # homjxi0e/CVE-2017-9999_bypassing_General_Firefox 2016 # CVE-2016-0034 # Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka \u0026quot;Silverlight Runtime Remote Code Execution Vulnerability.\u0026quot; DiamondHunters/CVE-2016-0034-Decompile CVE-2016-0040 # The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka \u0026quot;Windows Elevation of Privilege Vulnerability.\u0026quot; Rootkitsmm/cve-2016-0040 de7ec7ed/CVE-2016-0040 CVE-2016-0049 # Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not properly validate password changes, which allows remote attackers to bypass authentication by deploying a crafted Key Distribution Center (KDC) and then performing a sign-in action, aka \u0026quot;Windows Kerberos Security Feature Bypass.\u0026quot; JackOfMostTrades/bluebox CVE-2016-0051 # The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \u0026quot;WebDAV Elevation of Privilege Vulnerability.\u0026quot; koczkatamas/CVE-2016-0051 hexx0r/CVE-2016-0051 ganrann/CVE-2016-0051 CVE-2016-0095 # The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \u0026quot;Win32k Elevation of Privilege Vulnerability,\u0026quot; a different vulnerability than CVE-2016-0093, CVE-2016-0094, and CVE-2016-0096. 4M4Z4/cve-2016-0095-x64 CVE-2016-0099 # The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka \u0026quot;Secondary Logon Elevation of Privilege Vulnerability.\u0026quot; zcgonvh/MS16-032 CVE-2016-010033 # zi0Black/CVE-2016-010033-010045 CVE-2016-0189 # The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \u0026quot;Scripting Engine Memory Corruption Vulnerability,\u0026quot; a different vulnerability than CVE-2016-0187. theori-io/cve-2016-0189 deamwork/MS16-051-poc CVE-2016-0199 # Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \u0026quot;Internet Explorer Memory Corruption Vulnerability,\u0026quot; a different vulnerability than CVE-2016-0200 and CVE-2016-3211. LeoonZHANG/CVE-2016-0199 CVE-2016-0638 # Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service. 0xn0ne/weblogicScanner CVE-2016-0701 # The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file. luanjampa/cve-2016-0701 CVE-2016-0728 # The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands. idl3r/cve-2016-0728 kennetham/cve_2016_0728 nardholio/cve-2016-0728 googleweb/CVE-2016-0728 MagicPwn/CVE-2016-0728-Check neuschaefer/cve-2016-0728-testbed bittorrent3389/cve-2016-0728 sibilleg/exploit_cve-2016-0728 hal0taso/CVE-2016-0728 sugarvillela/CVE CVE-2016-0752 # Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. forced-request/rails-rce-cve-2016-0752 dachidahu/CVE-2016-0752 CVE-2016-0792 # Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando. jpiechowka/jenkins-cve-2016-0792 s0wr0b1ndef/java-deserialization-exploits CVE-2016-0793 # Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a request that contains (a) lowercase or (b) \u0026quot;meaningless\u0026quot; characters. tafamace/CVE-2016-0793 CVE-2016-0801 # The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029. abdsec/CVE-2016-0801 zsaurus/CVE-2016-0801-test CVE-2016-0805 # The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204. hulovebin/cve-2016-0805 CVE-2016-0846 # libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider the heap size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26877992. secmob/CVE-2016-0846 b0b0505/CVE-2016-0846-PoC CVE-2016-0974 # Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026amp; Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984. Fullmetal5/FlashHax CVE-2016-10033 # The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \\\u0026quot; (backslash double quote) in a crafted Sender property. opsxcq/exploit-CVE-2016-10033 Zenexer/safeshell GeneralTesler/CVE-2016-10033 chipironcin/CVE-2016-10033 Bajunan/CVE-2016-10033 qwertyuiop12138/CVE-2016-10033 liusec/WP-CVE-2016-10033 pedro823/cve-2016-10033-45 awidardi/opsxcq-cve-2016-10033 0x00-0x00/CVE-2016-10033 cved-sources/cve-2016-10033 CVE-2016-10034 # The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \\\u0026quot; (backslash double quote) in a crafted e-mail address. heikipikker/exploit-CVE-2016-10034 CVE-2016-10277 # An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33840490. alephsecurity/initroot leosol/initroot CVE-2016-10709 # pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php. wetw0rk/Exploit-Development CVE-2016-10761 # Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack. ISSAPolska/CVE-2016-10761 CVE-2016-1240 # The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out. Naramsim/Offensive mhe18/CVE_Project CVE-2016-1287 # Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019. jgajek/killasa NetSPI/asa_tools CVE-2016-1494 # The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack. matthiasbe/secuimag3a CVE-2016-1542 # The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure. patriknordlen/bladelogic_bmc-cve-2016-1542 bao7uo/bmc_bladelogic CVE-2016-1555 # (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands. ide0x90/cve-2016-1555 CVE-2016-1734 # AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted USB device. Manouchehri/CVE-2016-1734 CVE-2016-1757 # Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app. gdbinit/mach_race CVE-2016-1764 # The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL. moloch\u0026ndash;/cve-2016-1764 CVE-2016-1825 # IOHIDFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. bazad/physmem CVE-2016-1827 # The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1828, CVE-2016-1829, and CVE-2016-1830. bazad/flow_divert-heap-overflow CVE-2016-1828 # The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1829, and CVE-2016-1830. bazad/rootsh CVE-2016-2098 # Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. hderms/dh-CVE_2016_2098 CyberDefenseInstitute/PoC_CVE-2016-2098_Rails42 Alejandro-MartinG/rails-PoC-CVE-2016-2098 0x00-0x00/CVE-2016-2098 its-arun/CVE-2016-2098 3rg1s/CVE-2016-2098 CVE-2016-2107 # The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169. FiloSottile/CVE-2016-2107 tmiklas/docker-cve-2016-2107 CVE-2016-2118 # The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka \u0026quot;BADLOCK.\u0026quot; nickanderson/cfengine-CVE-2016-2118 CVE-2016-2173 # org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code. HaToan/CVE-2016-2173 CVE-2016-2233 # Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message. fath0218/CVE-2016-2233 CVE-2016-2334 # Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image. icewall/CVE-2016-2334 CVE-2016-2402 # OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate. ikoz/cert-pinning-flaw-poc ikoz/certPinningVulnerableOkHttp CVE-2016-2431 # The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 24968809. laginimaineb/cve-2016-2431 laginimaineb/ExtractKeyMaster CVE-2016-2434 # The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090. jianqiangzhao/CVE-2016-2434 CVE-2016-2468 # The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted application, aka internal bug 27475454. gitcollect/CVE-2016-2468 CVE-2016-2569 # Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header. amit-raut/CVE-2016-2569 CVE-2016-2776 # buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query. KosukeShimofuji/CVE-2016-2776 infobyte/CVE-2016-2776 CVE-2016-2783 # Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames. iknowjason/spb CVE-2016-3088 # The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. VVzv/CVE-2016-3088 CVE-2016-3113 # Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML. 0xEmanuel/CVE-2016-3113 CVE-2016-3141 # Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element. peternguyen93/CVE-2016-3141 CVE-2016-3308 # The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka \u0026quot;Win32k Elevation of Privilege Vulnerability,\u0026quot; a different vulnerability than CVE-2016-3309, CVE-2016-3310, and CVE-2016-3311. 55-AA/CVE-2016-3308 CVE-2016-3309 # The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka \u0026quot;Win32k Elevation of Privilege Vulnerability,\u0026quot; a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311. siberas/CVE-2016-3309_Reloaded CVE-2016-3714 # The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \u0026quot;ImageTragick.\u0026quot; jackdpeterson/imagick_secure_puppet tommiionfire/CVE-2016-3714 chusiang/CVE-2016-3714.ansible.role jpeanut/ImageTragick-CVE-2016-3714-RShell Hood3dRob1n/CVE-2016-3714 HRSkraps/CVE-2016-3714 CVE-2016-3749 # server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930. nirdev/CVE-2016-3749-PoC CVE-2016-3955 # The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet. pqsec/uboatdemo CVE-2016-3957 # The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryption_key. sj/web2py-e94946d-CVE-2016-3957 CVE-2016-3959 # The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries. alexmullins/dsa CVE-2016-3962 # Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request. securifera/CVE-2016-3962-Exploit CVE-2016-4010 # Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data. brianwrf/Magento-CVE-2016-4010 CVE-2016-4117 # Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. amit-raut/CVE-2016-4117-Report hybridious/CVE-2016-4117 CVE-2016-4438 # The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression. jason3e7/CVE-2016-4438 tafamace/CVE-2016-4438 CVE-2016-4463 # Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD. arntsonl/CVE-2016-4463 CVE-2016-4622 # WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624. saelo/jscpwn hdbreaker/WebKit-CVE-2016-4622 CVE-2016-4631 # ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF file. hansnielsen/tiffdisabler CVE-2016-4655 # The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. jndok/PegasusX Cryptiiiic/skybreak CVE-2016-4657 # WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Mimoja/CVE-2016-4657-NintendoSwitch Traiver/CVE-2016-4657-Switch-Browser-Binary iDaN5x/Switcheroo vigneshyaadav27/webkit-vulnerability CVE-2016-4669 # An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the \u0026quot;Kernel\u0026quot; component. It allows local users to execute arbitrary code in a privileged context or cause a denial of service (MIG code mishandling and system crash) via unspecified vectors. i-o-s/CVE-2016-4669 CVE-2016-4845 # Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware before 2.04 allows remote attackers to hijack the authentication of arbitrary users for requests that delete content. kaito834/cve-2016-4845_csrf CVE-2016-4861 # The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation. KosukeShimofuji/CVE-2016-4861 CVE-2016-4971 # GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource. BlueCocoa/CVE-2016-4971 mbadanoiu/CVE-2016-4971 CVE-2016-4977 # When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type. GEIGEI123/CVE-2016-4977-POC CVE-2016-5195 # Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \u0026quot;Dirty COW.\u0026quot; KosukeShimofuji/CVE-2016-5195 ASRTeam/CVE-2016-5195 timwr/CVE-2016-5195 xlucas/dirtycow.cr istenrot/centos-dirty-cow-ansible pgporada/ansible-role-cve sideeffect42/DirtyCOWTester scumjr/dirtycow-vdso gbonacini/CVE-2016-5195 DavidBuchanan314/cowroot aishee/scan-dirtycow oleg-fiksel/ansible_CVE-2016-5195_check ldenevi/CVE-2016-5195 whu-enjoy/CVE-2016-5195 ndobson/inspec_CVE-2016-5195 linhlt247/DirtyCOW_CVE-2016-5195 sribaba/android-CVE-2016-5195 esc0rtd3w/org.cowpoop.moooooo nu11secur1ty/Protect-CVE-2016-5195-DirtyCow hyln9/VIKIROOT droidvoider/dirtycow-replacer FloridSleeves/os-experiment-4 arbll/dirtycow titanhp/Dirty-COW-CVE-2016-5195-Testing acidburnmi/CVE-2016-5195-master xpcmdshell/derpyc0w Brucetg/DirtyCow-EXP jas502n/CVE-2016-5195 imust6226/dirtcow CVE-2016-5345 # Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows local users to gain privileges via a crafted application, aka Android internal bug 32639452 and Qualcomm internal bug CR1079713. NickStephens/cve-2016-5345 CVE-2016-5639 # Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter. xfox64x/CVE-2016-5639 CVE-2016-5640 # Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter. vpnguy-zz/CrestCrack xfox64x/CVE-2016-5640 CVE-2016-5696 # net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack. Gnoxter/mountain_goat violentshell/rover jduck/challack bplinux/chackd nogoegst/grill CVE-2016-5699 # CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. bunseokbot/CVE-2016-5699-poc shajinzheng/cve-2016-5699-jinzheng-sha CVE-2016-5734 # phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote attackers to execute arbitrary PHP code via a crafted string, as demonstrated by the table search-and-replace implementation. KosukeShimofuji/CVE-2016-5734 CVE-2016-6187 # The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor setprocattr hook. vnik5287/cve-2016-6187-poc CVE-2016-6210 # sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. justlce/CVE-2016-6210-Exploit CVE-2016-6271 # The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by leveraging a missing HVI check on DHPart2 packet reception. gteissier/CVE-2016-6271 CVE-2016-6317 # Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain \u0026quot;[nil]\u0026quot; values, a related issue to CVE-2012-2660, CVE-2012-2694, and CVE-2013-0155. kavgan/vuln_test_repo_public_ruby_gemfile_cve-2016-6317 CVE-2016-6366 # Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON. RiskSense-Ops/CVE-2016-6366 CVE-2016-6515 # The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string. opsxcq/exploit-CVE-2016-6515 cved-sources/cve-2016-6515 CVE-2016-6516 # Race condition in the ioctl_file_dedupe_range function in fs/ioctl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (heap-based buffer overflow) or possibly gain privileges by changing a certain count value, aka a \u0026quot;double fetch\u0026quot; vulnerability. wpengfei/CVE-2016-6516-exploit CVE-2016-6584 # ViralSecurityGroup/KNOXout CVE-2016-6662 # Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15. konstantin-kelemen/mysqld_safe-CVE-2016-6662-patch meersjo/ansible-mysql-cve-2016-6662 KosukeShimofuji/CVE-2016-6662 Ashrafdev/MySQL-Remote-Root-Code-Execution boompig/cve-2016-6662 MAYASEVEN/CVE-2016-6662 CVE-2016-6663 # Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table. firebroo/CVE-2016-6663 CVE-2016-6754 # A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937. secmob/BadKernel CVE-2016-6798 # In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks in all scripts which use this method to validate user input, potentially allowing an attacker to read sensitive data on the filesystem, perform same-site-request-forgery (SSRF), port-scanning behind the firewall or DoS the application. tafamace/CVE-2016-6798 CVE-2016-6801 # Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header. TSNGL21/CVE-2016-6801 CVE-2016-7117 # Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing. KosukeShimofuji/CVE-2016-7117 CVE-2016-7190 # The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \u0026quot;Scripting Engine Memory Corruption Vulnerability,\u0026quot; a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7194. 0xcl/cve-2016-7190 CVE-2016-7200 # The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \u0026quot;Scripting Engine Memory Corruption Vulnerability,\u0026quot; a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243. theori-io/chakra-2016-11 CVE-2016-7255 # The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \u0026quot;Win32k Elevation of Privilege Vulnerability.\u0026quot; heh3/CVE-2016-7255 FSecureLABS/CVE-2016-7255 homjxi0e/CVE-2016-7255 yuvatia/page-table-exploitation bbolmin/cve-2016-7255_x86_x64 CVE-2016-7434 # The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query. opsxcq/exploit-CVE-2016-7434 shekkbuilder/CVE-2016-7434 cved-sources/cve-2016-7434 CVE-2016-7608 # An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the \u0026quot;IOFireWireFamily\u0026quot; component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors. bazad/IOFireWireFamily-overflow CVE-2016-7855 # Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016. swagatbora90/CheckFlashPlayerVersion CVE-2016-8007 # Authentication bypass vulnerability in McAfee Host Intrusion Prevention Services (HIPS) 8.0 Patch 7 and earlier allows authenticated users to manipulate the product's registry keys via specific conditions. dmaasland/mcafee-hip-CVE-2016-8007 CVE-2016-8016 # Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to obtain the existence of unauthorized files on the system via a URL parameter. opsxcq/exploit-CVE-2016-8016-25 CVE-2016-8367 # An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all versions, Magelis STO5xx and STU Small panels, all versions, Magelis XBT GH Advanced Hand-held Panels, all versions, Magelis XBT GK Advanced Touchscreen Panels with Keyboard, all versions, Magelis XBT GT Advanced Touchscreen Panels, all versions, and Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe). An attacker can open multiple connections to a targeted web server and keep connections open preventing new connections from being made, rendering the web server unavailable during an attack. 0xICF/PanelShock CVE-2016-8462 # An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: N/A. Android ID: A-32510383. CunningLogic/PixelDump_CVE-2016-8462 CVE-2016-8467 # An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service (device interoperability: completely permanent or requiring re-flashing the entire operating system). Product: Android. Versions: N/A. Android ID: A-30308784. roeeh/bootmodechecker CVE-2016-8610 # A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients. cujanovic/CVE-2016-8610-PoC CVE-2016-8636 # Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the \u0026quot;RDMA protocol over infiniband\u0026quot; (aka Soft RoCE) technology. jigerjain/Integer-Overflow-test CVE-2016-8655 # Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions. scarvell/cve-2016-8655 LakshmiDesai/CVE-2016-8655 KosukeShimofuji/CVE-2016-8655 agkunkle/chocobo martinmullins/CVE-2016-8655_Android CVE-2016-8735 # Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types. ianxtianxt/CVE-2016-8735 CVE-2016-8740 # The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to cause a denial of service (memory consumption) via crafted CONTINUATION frames in an HTTP/2 request. lcfpadilha/mac0352-ep4 CVE-2016-8776 # Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account. maviroxz/CVE-2016-8776 CVE-2016-8858 # ** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that \u0026quot;OpenSSH upstream does not consider this as a security issue.\u0026quot; dag-erling/kexkill CVE-2016-8869 # The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site. sunsunza2009/Joomla-3.4.4-3.6.4_CVE-2016-8869_and_CVE-2016-8870 rustyJ4ck/JoomlaCVE20168869 cved-sources/cve-2016-8869 CVE-2016-8870 # The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting. cved-sources/cve-2016-8870 CVE-2016-9066 # A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird \u0026lt; 45.5, Firefox ESR \u0026lt; 45.5, and Firefox \u0026lt; 50. saelo/foxpwn CVE-2016-9079 # A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u0026lt; 50.0.2, Firefox ESR \u0026lt; 45.5.1, and Thunderbird \u0026lt; 45.5.1. LakshmiDesai/CVE-2016-9079 dangokyo/CVE-2016-9079 CVE-2016-9192 # A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225). serializingme/cve-2016-9192 CVE-2016-9244 # A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well. EgeBalci/Ticketbleed glestel/minion-ticket-bleed-plugin CVE-2016-9838 # An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user's account and reset the user's group mappings, username, and password, as demonstrated by submitting a form that targets the `registration.register` task. cved-sources/cve-2016-9838 CVE-2016-9920 # steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute arbitrary code via a modified HTTP request that sends a crafted e-mail message. t0kx/exploit-CVE-2016-9920 2015 # CVE-2015-0006 # The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not perform mutual authentication to determine a domain connection, which allows remote attackers to trigger an unintended permissive configuration by spoofing DNS and LDAP responses on a local network, aka \u0026quot;NLA Security Feature Bypass Vulnerability.\u0026quot; bugch3ck/imposter CVE-2015-0057 # win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka \u0026quot;Win32k Elevation of Privilege Vulnerability.\u0026quot; 55-AA/CVE-2015-0057 CVE-2015-0072 # Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a redirect, and an eval of a WindowProxy object, aka \u0026quot;Universal XSS (UXSS).\u0026quot; dbellavista/uxss-poc CVE-2015-0204 # The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the \u0026quot;FREAK\u0026quot; issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations. felmoltor/FreakVulnChecker scottjpack/Freak-Scanner AbhishekGhosh/FREAK-Attack-CVE-2015-0204-Testing-Script niccoX/patch-openssl-CVE-2014-0291_CVE-2015-0204 CVE-2015-0231 # Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142. 3xp10it/php_cve-2014-8142_cve-2015-0231 CVE-2015-0235 # Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka \u0026quot;GHOST.\u0026quot; fser/ghost-checker mikesplain/CVE-2015-0235-cookbook aaronfay/CVE-2015-0235-test piyokango/ghost LyricalSecurity/GHOSTCHECK-cve-2015-0235 mholzinger/CVE-2015-0235_GHOST adherzog/ansible-CVE-2015-0235-GHOST favoretti/lenny-libc6 nickanderson/cfengine-CVE_2015_0235 koudaiii-archives/cookbook-update-glibc F88/ghostbusters15 JustDenisYT/ghosttester tobyzxj/CVE-2015-0235 makelinux/CVE-2015-0235-workaround arm13/ghost_exploit alanmeyer/CVE-glibc r0otshell/CVE-2015-0235 chayim/GHOSTCHECK-cve-2015-0235 CVE-2015-0313 # Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322. SecurityObscurity/cve-2015-0313 CVE-2015-0345 # Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. BishopFox/coldfusion-10-11-xss CVE-2015-0568 # Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call. betalphafai/CVE-2015-0568 CVE-2015-0816 # Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as demonstrated by the resource: URL associated with PDF.js. Afudadi/Firefox-35-37-Exploit CVE-2015-1130 # The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. Shmoopi/RootPipe-Demo sideeffect42/RootPipeTester CVE-2015-1140 # Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors. kpwn/vpwn CVE-2015-1157 # CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message. perillamint/CVE-2015-1157 CVE-2015-1318 # The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container). ScottyBauer/CVE-2015-1318 CVE-2015-1427 # The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script. t0kx/exploit-CVE-2015-1427 cved-sources/cve-2015-1427 CVE-2015-1474 # Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denial of service (memory corruption) via vectors that trigger a large number of (1) file descriptors or (2) integer values. p1gl3t/CVE-2015-1474_poc CVE-2015-1528 # Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of service (Binder heap memory corruption) via a crafted application, aka internal bug 19334482. secmob/PoCForCVE-2015-1528 kanpol/PoCForCVE-2015-1528 CVE-2015-1538 # Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496. oguzhantopgul/cve-2015-1538-1 renjithsasidharan/cve-2015-1538-1 jduck/cve-2015-1538-1 marZiiw/Stagefright_CVE-2015-1538-1 niranjanshr13/Stagefright-cve-2015-1538-1 CVE-2015-1560 # SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0) allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php. Iansus/Centreon-CVE-2015-1560_1561 CVE-2015-1579 # Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734. paralelo14/WordPressMassExploiter paralelo14/CVE-2015-1579 CVE-2015-1592 # Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors. lightsey/cve-2015-1592 CVE-2015-1635 # HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka \u0026quot;HTTP.sys Remote Code Execution Vulnerability.\u0026quot; xPaw/HTTPsys Zx7ffa4512-Python/Project-CVE-2015-1635 technion/erlvulnscan wiredaem0n/chk-ms15-034 1337r00t/Remove-IIS-RIIS bongbongco/MS15-034 aedoo/CVE-2015-1635-POC limkokhole/CVE-2015-1635 CVE-2015-1641 # Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka \u0026quot;Microsoft Office Memory Corruption Vulnerability.\u0026quot; Cyberclues/rtf_exploit_extractor CVE-2015-1701 # Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka \u0026quot;Win32k Elevation of Privilege Vulnerability.\u0026quot; hfiref0x/CVE-2015-1701 CVE-2015-1805 # The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an \u0026quot;I/O vector array overrun.\u0026quot; panyu6325/CVE-2015-1805 dosomder/iovyroot FloatingGuy/cve-2015-1805 mobilelinux/iovy_root_research CVE-2015-1855 # verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters. vpereira/CVE-2015-1855 CVE-2015-2080 # The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak. BizarreNULL/CVE-2015-2080 CVE-2015-2153 # The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU). arntsonl/CVE-2015-2153 CVE-2015-2208 # The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter. ptantiku/cve-2015-2208 CVE-2015-2231 # rednaga/adups-get-super-serial CVE-2015-2291 # (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call. Tare05/Intel-CVE-2015-2291 CVE-2015-2315 # Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the target parameter in a reminder_popup action to the default URI. weidongl74/cve-2015-2315-report CVE-2015-2546 # The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka \u0026quot;Win32k Memory Corruption Elevation of Privilege Vulnerability,\u0026quot; a different vulnerability than CVE-2015-2511, CVE-2015-2517, and CVE-2015-2518. k0keoyo/CVE-2015-2546-Exploit CVE-2015-2794 # The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. styx00/DNN_CVE-2015-2794 wilsc0w/CVE-2015-2794-finder CVE-2015-2900 # The AddUserFinding add_userfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted packet on port 8190. securifera/CVE-2015-2900-Exploit CVE-2015-2925 # The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a \u0026quot;double-chroot attack.\u0026quot; Kagami/docker_cve-2015-2925 CVE-2015-3043 # Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042. whitehairman/Exploit CVE-2015-3073 # Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, and CVE-2015-3074. reigningshells/CVE-2015-3073 CVE-2015-3152 # Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a \u0026quot;BACKRONYM\u0026quot; attack. duo-labs/mysslstrip CVE-2015-3224 # request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelisted_ips protection mechanism via a crafted request. 0x00-0x00/CVE-2015-3224 0xEval/cve-2015-3224 CVE-2015-3306 # The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. chcx/cpx_proftpd nootropics/propane t0kx/exploit-CVE-2015-3306 davidtavarez/CVE-2015-3306 cved-sources/cve-2015-3306 hackarada/cve-2015-3306 CVE-2015-3337 # Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors. jas502n/CVE-2015-3337 CVE-2015-3456 # The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM. vincentbernat/cve-2015-3456 MauroEldritch/venom CVE-2015-3636 # The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect. betalphafai/cve-2015-3636_crash askk/libping_unhash_exploit_POC ludongxu/cve-2015-3636 fi01/CVE-2015-3636 android-rooting-tools/libpingpong_exploit debugfan/rattle_root a7vinx/CVE-2015-3636 CVE-2015-3825 # roeeh/conscryptchecker CVE-2015-3837 # The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization, which allows attackers to execute arbitrary code via an application that sends a crafted Intent, aka internal bug 21437603. itibs/IsildursBane CVE-2015-3839 # The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process crash). mabin004/cve-2015-3839_PoC CVE-2015-3864 # Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824. pwnaccelerator/stagefright-cve-2015-3864 eudemonics/scaredycat HenryVHuang/CVE-2015-3864 CVE-2015-4495 # The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015. vincd/CVE-2015-4495 CVE-2015-4852 # The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product. roo7break/serialator AndersonSingh/serialization-vulnerability-scanner CVE-2015-4870 # Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser. OsandaMalith/CVE-2015-4870 CVE-2015-5119 # Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015. jvazquez-r7/CVE-2015-5119 portcullislabs/CVE-2015-5119_walkthrough dangokyo/CVE-2015-5119 CVE-2015-5195 # ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation. theglife214/CVE-2015-5195 CVE-2015-5254 # Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object. jas502n/CVE-2015-5254 CVE-2015-5290 # A Denial of Service vulnerability exists in ircd-ratbox 3.0.9 in the MONITOR Command Handler. skyhighwings/CVE-2015-5290 CVE-2015-5374 # A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions \u0026lt; V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions \u0026lt; V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions \u0026lt; V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions \u0026lt; V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions \u0026lt; 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device. can/CVE-2015-5374-DoS-PoC CVE-2015-5454 # Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item. security-breachlock/CVE-2015-5454 CVE-2015-5477 # named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. robertdavidgraham/cve-2015-5477 elceef/tkeypoc hmlio/vaas-cve-2015-5477 knqyf263/cve-2015-5477 ilanyu/cve-2015-5477 denmilu/ShareDoc_cve-2015-5477 CVE-2015-5602 # sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \u0026quot;/home/*/*/file.txt.\u0026quot; t0kx/privesc-CVE-2015-5602 cved-sources/cve-2015-5602 CVE-2015-5932 # The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified \u0026quot;type confusion\u0026quot; during Mach task processing. jndok/tpwn-bis CVE-2015-5995 # Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header. shaheemirza/TendaSpill CVE-2015-6086 # Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \u0026quot;Internet Explorer Information Disclosure Vulnerability.\u0026quot; payatu/CVE-2015-6086 CVE-2015-6095 # Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles password changes, which allows physically proximate attackers to bypass authentication, and conduct decryption attacks against certain BitLocker configurations, by connecting to an unintended Key Distribution Center (KDC), aka \u0026quot;Windows Kerberos Security Feature Bypass.\u0026quot; JackOfMostTrades/bluebox CVE-2015-6132 # Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \u0026quot;Windows Library Loading Remote Code Execution Vulnerability.\u0026quot; hexx0r/CVE-2015-6132 CVE-2015-6357 # The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code, via a crafted certificate, aka Bug ID CSCuw06444. mattimustang/firepwner CVE-2015-6576 # Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource. CallMeJonas/CVE-2015-6576 CVE-2015-6606 # The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786. michaelroland/omapi-cve-2015-6606-exploit CVE-2015-6612 # libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted application, aka internal bug 23540426. secmob/CVE-2015-6612 flankerhqd/cve-2015-6612poc-forM CVE-2015-6620 # libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bugs 24123723 and 24445127. flankerhqd/CVE-2015-6620-POC flankerhqd/mediacodecoob CVE-2015-6637 # The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013. betalphafai/CVE-2015-6637 CVE-2015-6639 # The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875. laginimaineb/cve-2015-6639 laginimaineb/ExtractKeyMaster CVE-2015-6640 # The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service (vma list corruption) via a crafted application, aka internal bug 20017123. betalphafai/CVE-2015-6640 CVE-2015-6835 # The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content. ockeghem/CVE-2015-6835-checker CVE-2015-6967 # Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/my_image/image.php. VanTekken/CVE-2015-6967 CVE-2015-7214 # Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs. llamakko/CVE-2015-7214 CVE-2015-7297 # SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858. CCrashBandicot/ContentHistory CVE-2015-7501 # Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. ianxtianxt/CVE-2015-7501 CVE-2015-7545 # The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule. avuserow/bug-free-chainsaw CVE-2015-7547 # Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing \u0026quot;dual A/AAAA DNS queries\u0026quot; and the libnss_dns.so.2 NSS module. fjserna/CVE-2015-7547 cakuzo/CVE-2015-7547 t0r0t0r0/CVE-2015-7547 JustDenisYT/glibc-patcher rexifiles/rex-sec-glibc babykillerblack/CVE-2015-7547 jgajek/cve-2015-7547 eSentire/cve-2015-7547-public bluebluelan/CVE-2015-7547-proj-master miracle03/CVE-2015-7547-master CVE-2015-7755 # Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 allows remote attackers to obtain administrative access by entering an unspecified password during a (1) SSH or (2) TELNET session. hdm/juniper-cve-2015-7755 cinno/CVE-2015-7755-POC CVE-2015-7808 # The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments. Prajithp/CVE-2015-7808 CVE-2015-8088 # Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application. Pray3r/CVE-2015-8088 CVE-2015-8103 # The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the \u0026quot;Groovy variant in 'ysoserial'\u0026quot;. cved-sources/cve-2015-8103 CVE-2015-8277 # Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode (a) 0x107 or (b) 0x10a. securifera/CVE-2015-8277-Exploit CVE-2015-8299 # Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet. kernoelpanic/CVE-2015-8299 CVE-2015-8543 # The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application. bittorrent3389/CVE-2015-8543_for_SLE12SP1 CVE-2015-8562 # Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015. ZaleHack/joomla_rce_CVE-2015-8562 RobinHoutevelts/Joomla-CVE-2015-8562-PHP-POC atcasanova/cve-2015-8562-exploit thejackerz/scanner-exploit-joomla-CVE-2015-8562 paralelo14/CVE-2015-8562 VoidSec/Joomla_CVE-2015-8562 xnorkl/Joomla_Payload CVE-2015-8651 # Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK \u0026amp; Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors. Gitlabpro/The-analysis-of-the-cve-2015-8651 CVE-2015-8660 # The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application. whu-enjoy/CVE-2015-8660 CVE-2015-8710 # The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment. Karm/CVE-2015-8710 CVE-2015-9251 # jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. halkichi0308/CVE-2015-9251 2014 # CVE-2014-0038 # The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter. saelo/cve-2014-0038 CVE-2014-0050 # MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions. jrrdev/cve-2014-0050 CVE-2014-0094 # The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to \u0026quot;manipulate\u0026quot; the ClassLoader via the class parameter, which is passed to the getClass method. HasegawaTadamitsu/CVE-2014-0094-test-program-for-struts1 CVE-2014-0114 # Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to \u0026quot;manipulate\u0026quot; the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1. rgielen/struts1filter ricedu/struts1-patch anob3it/strutt-cve-2014-0114 CVE-2014-0130 # Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request. omarkurt/cve-2014-0130 CVE-2014-0160 # The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug. FiloSottile/Heartbleed titanous/heartbleeder DominikTo/bleed cyphar/heartthreader jdauphant/patch-openssl-CVE-2014-0160 musalbas/heartbleed-masstest obayesshelton/CVE-2014-0160-Scanner Lekensteyn/pacemaker isgroup-srl/openmagic fb1h2s/CVE-2014-0160 roganartu/heartbleedchecker-chrome zouguangxian/heartbleed sensepost/heartbleed-poc proactiveRISK/heartbleed-extention amerine/coronary 0x90/CVE-2014-0160 ice-security88/CVE-2014-0160 waqasjamal-zz/HeartBleed-Vulnerability-Checker siddolo/knockbleed sammyfung/openssl-heartbleed-fix a0726h77/heartbleed-test hreese/heartbleed-dtls wwwiretap/bleeding_onions idkqh7/heatbleeding GeeksXtreme/ssl-heartbleed.nse xlucas/heartbleed indiw0rm/-Heartbleed- einaros/heartbleed-tools mozilla-services/Heartbleed yryz/heartbleed.js DisK0nn3cT/MaltegoHeartbleed OffensivePython/HeartLeak vortextube/ssl_scanner mpgn/heartbleed-PoC xanas/heartbleed.py iSCInc/heartbleed marstornado/cve-2014-0160-Yunfeng-Jiang hmlio/vaas-cve-2014-0160 hybridus/heartbleedscanner Xyl2k/CVE-2014-0160-Chrome-Plugin kaosV20/Heartexploit caiqiqi/OpenSSL-HeartBleed-CVE-2014-0160-PoC Saymeis/HeartBleed cved-sources/cve-2014-0160 cheese-hub/heartbleed artofscripting/cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS cldme/heartbleed-bug hack3r-0m/heartbleed_fix_updated CVE-2014-0166 # The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie. Ettack/POC-CVE-2014-0166 CVE-2014-0195 # The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment. ricedu/CVE-2014-0195 CVE-2014-0196 # The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \u0026quot;LECHO \u0026amp; !OPOST\u0026quot; case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings. SunRain/CVE-2014-0196 tempbottle/CVE-2014-0196 CVE-2014-0224 # OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \u0026quot;CCS Injection\u0026quot; vulnerability. Tripwire/OpenSSL-CCS-Inject-Test iph0n3/CVE-2014-0224 droptables/ccs-eval ssllabs/openssl-ccs-cve-2014-0224 secretnonempty/CVE-2014-0224 CVE-2014-0291 # niccoX/patch-openssl-CVE-2014-0291_CVE-2015-0204 CVE-2014-0521 # Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X do not properly implement JavaScript APIs, which allows remote attackers to obtain sensitive information via a crafted PDF document. molnarg/cve-2014-0521 CVE-2014-0816 # Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown vectors. tandasat/CVE-2014-0816 CVE-2014-0993 # Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file. helpsystems/Embarcadero-Workaround CVE-2014-10069 # Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the um_auth_account_password field. Manouchehri/hitron-cfg-decrypter CVE-2014-1266 # The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step. landonf/Testability-CVE-2014-1266 linusyang/SSLPatch gabrielg/CVE-2014-1266-poc CVE-2014-1303 # Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Liang Chen during a Pwn2Own competition at CanSecWest 2014. RKX1209/CVE-2014-1303 CVE-2014-1322 # The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it easier for local users to bypass the ASLR protection mechanism by reading an unspecified attribute of the object. raymondpittman/IPC-Memory-Mac-OSX-Exploit CVE-2014-1447 # Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent. tagatac/libvirt-CVE-2014-1447 CVE-2014-160 # menrcom/CVE-2014-160 GitMirar/heartbleed_exploit CVE-2014-1677 # Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information. tihmstar/freePW_tc7200Eploit CVE-2014-1773 # Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \u0026quot;Internet Explorer Memory Corruption Vulnerability,\u0026quot; a different vulnerability than CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775. day6reak/CVE-2014-1773 CVE-2014-2064 # The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts. Naramsim/Offensive CVE-2014-2323 # SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname. cirocosta/lighty-sqlinj-demo CVE-2014-2324 # Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname. sp4c30x1/uc_httpd_exploit CVE-2014-2630 # Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors. redtimmy/perf-exploiter CVE-2014-2734 # ** DISPUTED ** The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operations. NOTE: this issue has been disputed by the Ruby OpenSSL team and third parties, who state that the original demonstration PoC contains errors and redundant or unnecessarily-complex code that does not appear to be related to a demonstration of the issue. As of 20140502, CVE is not aware of any public comment by the original researcher. gdisneyleugers/CVE-2014-2734 adrienthebo/cve-2014-2734 CVE-2014-3120 # The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine. jeffgeiger/es_inject echohtp/ElasticSearch-CVE-2014-3120 CVE-2014-3153 # The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification. timwr/CVE-2014-3153 android-rooting-tools/libfutex_exploit geekben/towelroot lieanu/CVE-2014-3153 zerodavinci/CVE-2014-3153-exploit c3c/CVE-2014-3153 dangtunguyen/TowelRoot CVE-2014-3341 # The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616. ehabhussein/snmpvlan CVE-2014-3466 # Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message. azet/CVE-2014-3466_PoC CVE-2014-3566 # The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \u0026quot;POODLE\u0026quot; issue. mikesplain/CVE-2014-3566-poodle-cookbook stdevel/poodle_protector ashmastaflash/mangy-beast mpgn/poodle-PoC CVE-2014-3625 # Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling. ilmila/springcss-cve-2014-3625 gforresu/SpringPathTraversal CVE-2014-3704 # The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys. happynote3966/CVE-2014-3704 CVE-2014-4014 # The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root. vnik5287/cve-2014-4014-privesc CVE-2014-4076 # Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka \u0026quot;TCP/IP Elevation of Privilege Vulnerability.\u0026quot; fungoshacks/CVE-2014-4076 CVE-2014-4109 # Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \u0026quot;Internet Explorer Memory Corruption Vulnerability,\u0026quot; a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4110, and CVE-2014-4111. day6reak/CVE-2014-4109 CVE-2014-4113 # win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka \u0026quot;Win32k.sys Elevation of Privilege Vulnerability.\u0026quot; johnjohnsp1/CVE-2014-4113 nsxz/Exploit-CVE-2014-4113 sam-b/CVE-2014-4113 CVE-2014-4140 # Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \u0026quot;Internet Explorer ASLR Bypass Vulnerability.\u0026quot; day6reak/CVE-2014-4140 CVE-2014-4210 # Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services. NoneNotNull/SSRFX 0xn0ne/weblogicScanner CVE-2014-4321 # android-rooting-tools/libmsm_vfe_read_exploit CVE-2014-4322 # drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application. retme7/CVE-2014-4322_poc laginimaineb/cve-2014-4322 askk/CVE-2014-4322_adaptation koozxcv/CVE-2014-4322 CVE-2014-4323 # The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application. marcograss/cve-2014-4323 CVE-2014-4377 # Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. feliam/CVE-2014-4377 davidmurray/CVE-2014-4377 CVE-2014-4378 # CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted PDF document. feliam/CVE-2014-4378 CVE-2014-4481 # Integer overflow in CoreGraphics in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. feliam/CVE-2014-4481 CVE-2014-4511 # Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/. michaelsss1/gitlist-RCE CVE-2014-4671 # Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK \u0026amp; Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. cph/rabl-old CVE-2014-4699 # The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls. vnik5287/cve-2014-4699-ptrace CVE-2014-4936 # The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable. 0x3a/CVE-2014-4936 CVE-2014-4943 # The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket. redes-2015/l2tp-socket-bug CVE-2014-5284 # host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which allows local users to modify access restrictions in hosts.deny and gain root privileges by creating the temporary files before automatic IP blocking is performed. mbadanoiu/CVE-2014-5284 CVE-2014-6271 # GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \u0026quot;ShellShock.\u0026quot; NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix. dlitz/bash-cve-2014-6271-fixes npm/ansible-bashpocalypse ryancnelson/patched-bash-4.3 jblaine/cookbook-bash-CVE-2014-6271 rrreeeyyy/cve-2014-6271-spec scottjpack/shellshock_scanner Anklebiter87/Cgi-bin_bash_Reverse justzx2011/bash-up mattclegg/CVE-2014-6271 ilismal/Nessus_CVE-2014-6271_check RainMak3r/Rainstorm gabemarshall/shocknaww woltage/CVE-2014-6271 ariarijp/vagrant-shellshock themson/shellshock securusglobal/BadBash villadora/CVE-2014-6271 APSL/salt-shellshock teedeedubya/bash-fix-exploit internero/debian-lenny-bash_3.2.52-cve-2014-6271 pwnGuy/shellshock-shell vonnyfly/shellshock_crawler u20024804/bash-3.2-fixed-CVE-2014-6271 u20024804/bash-4.2-fixed-CVE-2014-6271 u20024804/bash-4.3-fixed-CVE-2014-6271 francisck/shellshock-cgi proclnas/ShellShock-CGI-Scan sch3m4/RIS ryeyao/CVE-2014-6271_Test cj1324/CGIShell renanvicente/puppet-shellshock indiandragon/Shellshock-Vulnerability-Scan ramnes/pyshellshock akiraaisha/shellshocker-python kelleykong/cve-2014-6271-mengjia-kong huanlu/cve-2014-6271-huan-lu sunnyjiang/shellshocker-android P0cL4bs/ShellShock-CGI-Scan hmlio/vaas-cve-2014-6271 opsxcq/exploit-CVE-2014-6271 Pilou-Pilou/docker_CVE-2014-6271. zalalov/CVE-2014-6271 0x00-0x00/CVE-2014-6271 kowshik-sundararajan/CVE-2014-6271 w4fz5uck5/ShockZaum-CVE-2014-6271 Aruthw/CVE-2014-6271 cved-sources/cve-2014-6271 shawntns/exploit-CVE-2014-6271 Sindadziy/cve-2014-6271 wenyu1999/bash-shellshock Sindayifu/CVE-2019-14287-CVE-2014-6271 Any3ite/CVE-2014-6271 somhm-solutions/Shell-Shock CVE-2014-6287 # The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action. roughiz/cve-2014-6287.py CVE-2014-6332 # OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka \u0026quot;Windows OLE Automation Array Remote Code Execution Vulnerability.\u0026quot; MarkoArmitage/metasploit-framework tjjh89017/cve-2014-6332 mourr/CVE-2014-6332 CVE-2014-6577 # Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the original researcher's claim that this is an XML external entity (XXE) vulnerability in the XML parser, which allows attackers to conduct internal port scanning, perform SSRF attacks, or cause a denial of service via a crafted (1) http: or (2) ftp: URI. SecurityArtWork/oracle-xxe-sqli CVE-2014-6598 # Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications Applications 3.x, 4.x, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Signaling - DPI. KPN-CISO/DRA_writeup CVE-2014-7169 # GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271. chef-boneyard/bash-shellshock gina-alaska/bash-cve-2014-7169-cookbook CVE-2014-7236 # Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome. m0nad/CVE-2014-7236_Exploit CVE-2014-7911 # luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0.0 does not verify that deserialization will result in an object that met the requirements for serialization, which allows attackers to execute arbitrary code via a crafted finalize method for a serialized object in an ArrayMap Parcel within an intent sent to system_service, as demonstrated by the finalize method of android.os.BinderProxy, aka Bug 15874291. retme7/CVE-2014-7911_poc ele7enxxh/CVE-2014-7911 heeeeen/CVE-2014-7911poc GeneBlue/cve-2014-7911-exp koozxcv/CVE-2014-7911 koozxcv/CVE-2014-7911-CVE-2014-4322_get_root_privilege mabin004/cve-2014-7911 CytQ/CVE-2014-7911_poc CVE-2014-7920 # mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921. laginimaineb/cve-2014-7920-7921 Vinc3nt4H/cve-2014-7920-7921_update CVE-2014-8110 # Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. tafamace/CVE-2014-8110 CVE-2014-8142 # Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019. 3xp10it/php_cve-2014-8142_cve-2015-0231 CVE-2014-8244 # Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request. JollyJumbuckk/LinksysLeaks CVE-2014-8609 # The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Android before 5.0.0 does not properly create a PendingIntent, which allows attackers to use the SYSTEM uid for broadcasting an intent with arbitrary component, action, or category information via a third-party authenticator in a crafted application, aka Bug 17356824. locisvv/Vulnerable-CVE-2014-8609 CVE-2014-8682 # Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary SQL commands via the q parameter to (1) api/v1/repos/search, which is not properly handled in models/repo.go, or (2) api/v1/users/search, which is not properly handled in models/user.go. nihal1306/gogs CVE-2014-8729 # inso-/TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878 CVE-2014-8757 # LG On-Screen Phone (OSP) before 4.3.010 allows remote attackers to bypass authorization via a crafted request. irsl/lgosp-poc CVE-2014-9016 # The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request. c0r3dump3d/wp_drupal_timing_attack Primus27/WordPress-Long-Password-Denial-of-Service CVE-2014-9222 # AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the \u0026quot;Misfortune Cookie\u0026quot; vulnerability. BenChaliah/MIPS-CVE-2014-9222 CVE-2014-9295 # Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function. MacMiniVault/NTPUpdateSnowLeopard CVE-2014-9301 # Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter. ottimo/burp-alfresco-referer-proxy-cve-2014-9301 CVE-2014-9322 # arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space. RKX1209/CVE-2014-9322 CVE-2014-9390 # Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine; libgit2; Egit; and JGit allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem. mmetince/CVE-2014-9390 hakatashi/CVE-2014-9390 CVE-2014-9707 # EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (heap-based buffer overflow and crash), or possibly execute arbitrary code via a crafted URI. zhw-01/cve-2014-9707 2013 # CVE-2013-0156 # active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion. terracatta/name_reverser heroku/heroku-CVE-2013-0156 josal/crack-0.1.8-fixed bsodmike/rails-exploit-cve-2013-0156 R3dKn33/CVE-2013-0156 CVE-2013-0229 # The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read. lochiiconnectivity/vulnupnp CVE-2013-0269 # The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka \u0026quot;Unsafe Object Creation Vulnerability.\u0026quot; heroku/heroku-CVE-2013-0269 CVE-2013-0333 # lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL injection attacks, or bypass authentication via crafted data that triggers unsafe decoding, a different vulnerability than CVE-2013-0156. heroku/heroku-CVE-2013-0333 CVE-2013-1081 # Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter. steponequit/CVE-2013-1081 CVE-2013-1300 # win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka \u0026quot;Win32k Memory Allocation Vulnerability.\u0026quot; Meatballs1/cve-2013-1300 CVE-2013-1488 # The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, \u0026quot;improper toString calls,\u0026quot; and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013. v-p-b/buherablog-cve-2013-1488 CVE-2013-1491 # The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013. guhe120/CVE20131491-JIT CVE-2013-1690 # Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location. vlad902/annotated-fbi-tbb-exploit CVE-2013-1775 # sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch. bekhzod0725/perl-CVE-2013-1775 CVE-2013-1965 # Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect. cinno/CVE-2013-1965 CVE-2013-2028 # The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow. danghvu/nginx-1.4.0 kitctf/nginxpwn tachibana51/CVE-2013-2028-x64-bypass-ssp-and-pie-PoC CVE-2013-2072 # Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap. bl4ck5un/cve-2013-2072 CVE-2013-2094 # The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call. realtalk/cve-2013-2094 hiikezoe/libperf_event_exploit Pashkela/CVE-2013-2094 tarunyadav/fix-cve-2013-2094 timhsutw/cve-2013-2094 vnik5287/CVE-2013-2094 CVE-2013-2186 # The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance. GrrrDog/ACEDcup SPlayer1248/Payload_CVE_2013_2186 SPlayer1248/CVE_2013_2186 CVE-2013-2217 # cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. Osirium/suds CVE-2013-225 # ninj4c0d3r/ShellEvil CVE-2013-2595 # The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, enables MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl calls for an unrestricted mmap interface, which allows attackers to gain privileges via a crafted application. fi01/libmsm_cameraconfig_exploit CVE-2013-2596 # Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program. hiikezoe/libfb_mem_exploit CVE-2013-2597 # Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument. fi01/libmsm_acdb_exploit CVE-2013-2729 # Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727. feliam/CVE-2013-2729 CVE-2013-2730 # Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2733. feliam/CVE-2013-2730 CVE-2013-2842 # Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets. 173210/spider CVE-2013-2977 # Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1 on Linux, allows remote attackers to execute arbitrary code via a malformed PNG image in a previewed e-mail message, aka SPR NPEI96K82Q. lagartojuancho/CVE-2013-2977 CVE-2013-3319 # The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128. integrity-sa/cve-2013-3319 CVE-2013-3651 # LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC_CheckError.php and data/class/SC_FormParam.php. motikan2010/CVE-2013-3651 CVE-2013-3664 # Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue. lagartojuancho/CVE-2013-3664_MAC lagartojuancho/CVE-2013-3664_BMP CVE-2013-4002 # XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names. tafamace/CVE-2013-4002 CVE-2013-4175 # MySecureShell 1.31 has a Local Denial of Service Vulnerability hartwork/mysecureshell-issues CVE-2013-4348 # The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation. bl4ck5un/cve-2013-4348 CVE-2013-4378 # Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header. theratpack/grails-javamelody-sample-app CVE-2013-4434 # Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames. styx00/Dropbear_CVE-2013-4434 CVE-2013-4784 # The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password. alexoslabs/ipmitest CVE-2013-5065 # NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013. Friarfukd/RobbinHood CVE-2013-5211 # The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013. dani87/ntpscanner suedadam/ntpscanner sepehrdaddev/ntpdos CVE-2013-5664 # Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908. phusion/rails-cve-2012-5664-test CVE-2013-5842 # Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850. guhe120/CVE-2013-5842 CVE-2013-6117 # Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777. milo2012/CVE-2013-6117 CVE-2013-6282 # The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013. fi01/libput_user_exploit fi01/libget_user_exploit jeboo/bypasslkm timwr/CVE-2013-6282 CVE-2013-6375 # Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an \u0026quot;inverted boolean parameter.\u0026quot; bl4ck5un/cve-2013-6375 CVE-2013-6668 # Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. sdneon/CveTest CVE-2013-6987 # Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before 4.3-3810 Update 3 allow remote attackers to read, write, and delete arbitrary files via a .. (dot dot) in the (1) path parameter to file_delete.cgi or (2) folder_path parameter to file_share.cgi in webapi/FileStation/; (3) dlink parameter to fbdownload/; or unspecified parameters to (4) html5_upload.cgi, (5) file_download.cgi, (6) file_sharing.cgi, (7) file_MVCP.cgi, or (8) file_rename.cgi in webapi/FileStation/. Sciota/CVE-2013-6987 2012 # CVE-2012-0003 # Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka \u0026quot;MIDI Remote Code Execution Vulnerability.\u0026quot; k0keoyo/CVE-2012-0003_eXP CVE-2012-0056 # The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/\u0026lt;pid\u0026gt;/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper. srclib/CVE-2012-0056 pythonone/CVE-2012-0056 CVE-2012-0152 # The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka \u0026quot;Terminal Server Denial of Service Vulnerability.\u0026quot; rutvijjethwa/RDP_jammer CVE-2012-1675 # The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by performing a remote registration of a database (1) instance or (2) service name that already exists, then conducting a man-in-the-middle (MITM) attack to hijack database connections, aka \u0026quot;TNS Poison.\u0026quot; bongbongco/CVE-2012-1675 CVE-2012-1723 # Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. EthanNJC/CVE-2012-1723 CVE-2012-1823 # sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case. drone789/CVE-2012-1823 gamamaru6005/oscp_scripts-1 noondi/metasploitable2 CVE-2012-1876 # Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka \u0026quot;Col Element Remote Code Execution Vulnerability,\u0026quot; as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. WizardVan/CVE-2012-1876 CVE-2012-1889 # Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. whu-enjoy/CVE-2012-1889 l-iberty/cve-2012-1889 CVE-2012-2122 # sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value. Avinza/CVE-2012-2122-scanner CVE-2012-2688 # Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an \u0026quot;overflow.\u0026quot; shelld3v/CVE-2012-2688 CVE-2012-3137 # The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to conduct brute force password guessing attacks, aka \u0026quot;stealth password cracking vulnerability.\u0026quot; hantwister/o5logon-fetch r1-/cve-2012-3137 CVE-2012-3153 # Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the PARSEQUERY function allows remote attackers to obtain database credentials via reports/rwservlet/parsequery, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3152 to execute arbitrary code by uploading a .jsp file. Mekanismen/pwnacle-fusion CVE-2012-3716 # CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write or read) via a crafted text glyph. d4rkcat/killosx CVE-2012-4220 # diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via an application that uses crafted arguments in a local diagchar_ioctl call. hiikezoe/diaggetroot poliva/root-zte-open CVE-2012-4431 # org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier. Michael-Main/CVE-2012-4431 CVE-2012-4681 # Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \u0026quot;reflection with a trusted immediate caller\u0026quot; to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class. benjholla/CVE-2012-4681-Armoring ZH3FENG/PoCs-CVE_2012_4681 CVE-2012-4792 # Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012. WizardVan/CVE-2012-4792 CVE-2012-4929 # The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a \u0026quot;CRIME\u0026quot; attack. mpgn/CRIME-poc CVE-2012-5106 # Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a PUT command. war4uthor/CVE-2012-5106 CVE-2012-5575 # Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka \u0026quot;XML Encryption backwards compatibility attack.\u0026quot; tafamace/CVE-2012-5575 CVE-2012-5613 # ** DISPUTED ** MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this issue, stating that this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: it could be argued that this should not be included in CVE because it is a configuration issue. Hood3dRob1n/MySQL-Fu.rb w4fz5uck5/UDFPwn-CVE-2012-5613 CVE-2012-5664 # phusion/rails-cve-2012-5664-test CVE-2012-5958 # Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction. lochiiconnectivity/vulnupnp CVE-2012-5960 # Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet. finn79426/CVE-2012-5960-PoC CVE-2012-6066 # freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c. bongbongco/CVE-2012-6066 CVE-2012-6636 # The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in an application targeted to API level 16 or earlier, a related issue to CVE-2013-4710. xckevin/AndroidWebviewInjectDemo 2011 # CVE-2011-0228 # The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an arbitrary domain. jan0/isslfix CVE-2011-1237 # Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other \u0026quot;Vulnerability Type 1\u0026quot; CVEs listed in MS11-034, aka \u0026quot;Win32k Use After Free Vulnerability.\u0026quot; BrunoPujos/CVE-2011-1237 CVE-2011-1473 # ** DISPUTED ** OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment. c826/bash-tls-reneg-attack zjt674449039/cve-2011-1473 CVE-2011-1475 # The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to \u0026quot;a mix-up of responses for requests from different users.\u0026quot; samaujs/CVE-2011-1475 CVE-2011-1485 # Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID. Pashkela/CVE-2011-1485 CVE-2011-1571 # Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. noobpk/CVE-2011-1571 CVE-2011-1575 # The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a \u0026quot;plaintext command injection\u0026quot; attack, a similar issue to CVE-2011-0411. masamoon/cve-2011-1575-poc CVE-2011-1720 # The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method. nbeguier/postfix_exploit CVE-2011-1974 # NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka \u0026quot;NDISTAPI Elevation of Privilege Vulnerability.\u0026quot; hittlle/CVE-2011-1974-PoC CVE-2011-2461 # Cross-site scripting (XSS) vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains. ikkisoft/ParrotNG u-maxx/magento-swf-patched-CVE-2011-2461 edmondscommerce/CVE-2011-2461_Magento_Patch CVE-2011-2894 # Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untrusted code by (1) serializing a java.lang.Proxy instance and using InvocationHandler, or (2) accessing internal AOP interfaces, as demonstrated using deserialization of a DefaultListableBeanFactory instance to execute arbitrary commands via the java.lang.Runtime class. pwntester/SpringBreaker CVE-2011-3026 # Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation. argp/cve-2011-3026-firefox CVE-2011-3192 # The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086. tkisason/KillApachePy limkokhole/CVE-2011-3192 stcmjp/cve-2011-3192 CVE-2011-3368 # The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. SECFORCE/CVE-2011-3368 colorblindpentester/CVE-2011-3368 CVE-2011-3389 # The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \u0026quot;BEAST\u0026quot; attack. mpgn/BEAST-PoC CVE-2011-3556 # Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557. sk4la/cve_2011_3556 CVE-2011-3872 # Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof a Puppet master via a man-in-the-middle (MITM) attack against an agent that uses an alternate DNS name for the master, aka \u0026quot;AltNames Vulnerability.\u0026quot; puppetlabs/puppetlabs-cve20113872 CVE-2011-4107 # The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack. SECFORCE/CVE-2011-4107 CVE-2011-4862 # Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011. hdbreaker/GO-CVE-2011-4862 lol-fi/cve-2011-4862 kpawar2410/CVE-2011-4862 CVE-2011-4872 # Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class. Chiggins/CVE-2011-4872 CVE-2011-4905 # Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests. Michael-Main/CVE-2011-4905 CVE-2011-4919 # mpack 1.6 has information disclosure via eavesdropping on mails sent by other users hartwork/mpacktrafficripper 2010 # CVE-2010-0426 # sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory. t0kx/privesc-CVE-2010-0426 cved-sources/cve-2010-0426 CVE-2010-0738 # The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method. ChristianPapathanasiou/jboss-autopwn gitcollect/jboss-autopwn CVE-2010-1205 # Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row. mk219533/CVE-2010-1205 CVE-2010-1411 # Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow. MAVProxyUser/httpfuzz-robomiller CVE-2010-2075 # UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands. M4LV0/UnrealIRCd-3.2.8.1-RCE CVE-2010-3332 # Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka \u0026quot;ASP.NET Padding Oracle Vulnerability.\u0026quot; bongbongco/MS10-070 CVE-2010-3333 # Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka \u0026quot;RTF Stack Buffer Overflow Vulnerability.\u0026quot; whiteHat001/cve-2010-3333 CVE-2010-3437 # Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call. huang-emily/CVE-2010-3437 CVE-2010-3490 # Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files via a .. (dot dot) in the usersnum parameter to admin/config.php, as demonstrated by creating a .php file under the web root. moayadalmalat/CVE-2010-3490 CVE-2010-3600 # Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that this issue involves an exposed JSP script that accepts XML uploads in conjunction with NULL bytes in an unspecified parameter that allow execution of arbitrary code. LAITRUNGMINHDUC/CVE-2010-3600-PythonHackOracle11gR2 CVE-2010-3847 # elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory. magisterquis/cve-2010-3847 CVE-2010-3904 # The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls. redhatkaty/-cve-2010-3904-report CVE-2010-3971 # Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a self-referential @import rule in a stylesheet, aka \u0026quot;CSS Memory Corruption Vulnerability.\u0026quot; nektra/CVE-2010-3971-hotpatch CVE-2010-4221 # Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server. M31MOTH/cve-2010-4221 CVE-2010-4258 # The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call. johnreginald/CVE-2010-4258 CVE-2010-4476 # The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308. grzegorzblaszczyk/CVE-2010-4476-check CVE-2010-4669 # The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package. quinn-samuel-perry/CVE-2010-4669 CVE-2010-4804 # The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/. thomascannon/android-cve-2010-4804 CVE-2010-5327 # Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template. Michael-Main/CVE-2010-5327 2009 # CVE-2009-0473 # Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. akbarq/CVE-2009-0473 CVE-2009-0689 # Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number. Fullmetal5/str2hax CVE-2009-1151 # Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action. minervais/pocs CVE-2009-1244 # Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916. piotrbania/vmware_exploit_pack_CVE-2009-1244 CVE-2009-1324 # Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file. war4uthor/CVE-2009-1324 CVE-2009-1330 # Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file. adenkiewicz/CVE-2009-1330 war4uthor/CVE-2009-1330 exploitwritter/CVE-2009-1330_EasyRMToMp3Converter CVE-2009-1437 # Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408. HanseSecure/CVE-2009-1437 CVE-2009-1904 # The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type. NZKoz/bigdecimal-segfault-fix CVE-2009-2692 # The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket. jdvalentini/CVE-2009-2692 CVE-2009-2698 # The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket. xiaoxiaoleo/CVE-2009-2698 CVE-2009-3103 # Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an \u0026amp; (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka \u0026quot;SMBv2 Negotiation Vulnerability.\u0026quot; NOTE: some of these details are obtained from third party information. mazding/ms09050 CVE-2009-4092 # Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords. xiaoyu-iid/Simplog-Exploit CVE-2009-4118 # The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running. alt3kx/CVE-2009-4118 CVE-2009-4137 # The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cookies before calling the unserialize function, which allows remote attackers to execute arbitrary code or upload arbitrary files via vectors related to the __destruct function in the Piwik_Config class; php://filter URIs; the __destruct functions in Zend Framework, as demonstrated by the Zend_Log destructor; the shutdown functions in Zend Framework, as demonstrated by the Zend_Log_Writer_Mail class; the render function in the Piwik_View class; Smarty templates; and the _eval function in Smarty. Alexeyan/CVE-2009-4137 CVE-2009-4660 # Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660. war4uthor/CVE-2009-4660 CVE-2009-5147 # DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names. vpereira/CVE-2009-5147 zhangyongbo100/-Ruby-dl-handle.c-CVE-2009-5147- 2008 # CVE-2008-0128 # The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. ngyanch/4062-1 CVE-2008-0166 # OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys. g0tmi1k/debian-ssh avarx/vulnkeys nu11secur1ty/debian-ssh CVE-2008-0228 # Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators. SpiderLabs/TWSL2011-007_iOS_code_workaround CVE-2008-1611 # Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request. Axua/CVE-2008-1611 CVE-2008-1613 # SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter. SECFORCE/CVE-2008-1613 CVE-2008-2938 # Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version. Naramsim/Offensive CVE-2008-4250 # The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka \u0026quot;Server Service Vulnerability.\u0026quot; thunderstrike9090/Conflicker_analysis_scripts CVE-2008-4609 # The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress. marcelki/sockstress CVE-2008-4654 # Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value. bongbongco/CVE-2008-4654 KernelErr/VLC-CVE-2008-4654-Exploit CVE-2008-5416 # Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka \u0026quot;SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability.\u0026quot; SECFORCE/CVE-2008-5416 CVE-2008-6827 # The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a \u0026quot;Shatter\u0026quot; style attack on the \u0026quot;command prompt\u0026quot; hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function. alt3kx/CVE-2008-6827 CVE-2008-6970 # SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter. KyomaHooin/CVE-2008-6970 CVE-2008-7220 # Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make \u0026quot;cross-site ajax requests\u0026quot; via unknown vectors. followboy1999/CVE-2008-7220 2007 # CVE-2007-0038 # Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred. Axua/CVE-2007-0038 CVE-2007-0843 # The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information. z3APA3A/spydir CVE-2007-1567 # Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors, as demonstrated by warftp_165.tar by Immunity. NOTE: this might be the same issue as CVE-1999-0256, CVE-2000-0131, or CVE-2006-2171, but due to Immunity's lack of details, this cannot be certain. war4uthor/CVE-2007-1567 CVE-2007-2447 # The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \u0026quot;username map script\u0026quot; smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management. noondi/metasploitable2 amriunix/CVE-2007-2447 b1fair/smb_usermap Unam3dd/exploit_smb_usermap_script JoseBarrios/CVE-2007-2447 3x1t1um/CVE-2007-2447 CVE-2007-3830 # Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter. alt3kx/CVE-2007-3830 CVE-2007-3831 # PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. alt3kx/CVE-2007-3831 CVE-2007-4607 # Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15. joeyrideout/CVE-2007-4607 CVE-2007-5036 # Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the \u0026quot;files filter.\u0026quot; alt3kx/CVE-2007-5036 CVE-2007-6638 # March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz. alt3kx/CVE-2007-6638 2006 # CVE-2006-1236 # Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010. Axua/CVE-2006-1236 CVE-2006-3592 # Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to execute arbitrary commands with elevated privileges via unspecified vectors, involving \u0026quot;certain CLI commands,\u0026quot; aka bug CSCse11005. adenkiewicz/CVE-2006-3592 CVE-2006-3747 # Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules. spinfoo/CVE-2006-3747 CVE-2006-4777 # Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446. Mario1234/js-driveby-download-CVE-2006-4777 CVE-2006-4814 # The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock. tagatac/linux-CVE-2006-4814 CVE-2006-6184 # Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long filename in a (1) GET or (2) PUT command. shauntdergrigorian/cve-2006-6184 b03902043/CVE-2006-6184 2005 # CVE-2005-1125 # Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed. tagatac/libsafe-CVE-2005-1125 CVE-2005-2428 # Lotus Domino R5 and R6 WebMail, with \u0026quot;Generate HTML for all fields\u0026quot; enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696. schwankner/CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit 2004 # CVE-2004-0558 # The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port. fibonascii/CVE-2004-0558 CVE-2004-1561 # Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers. ivanitlearning/CVE-2004-1561 CVE-2004-1769 # The \u0026quot;Allow cPanel users to reset their password via email\u0026quot; feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass. sinkaroid/shiguresh CVE-2004-2167 # Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand. uzzzval/cve-2004-2167 CVE-2004-2271 # Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. kkirsche/CVE-2004-2271 PercussiveElbow/CVE-2004-2271-MiniShare-1.4.1-Buffer-Overflow war4uthor/CVE-2004-2271 pwncone/CVE-2004-2271-MiniShare-1.4.1-BOF CVE-2004-2549 # Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow. alt3kx/CVE-2004-2549 2003 # CVE-2003-0222 # Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a \u0026quot;CREATE DATABASE LINK\u0026quot; query containing a connect string with a long USING parameter. phamthanhsang280477/CVE-2003-0222 CVE-2003-0264 # Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server. adenkiewicz/CVE-2003-0264 fyoderxx/slmail-exploit war4uthor/CVE-2003-0264 pwncone/CVE-2003-0264-SLmail-5.5 2002 # CVE-2002-0200 # Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. alt3kx/CVE-2002-0200 CVE-2002-0201 # Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow. alt3kx/CVE-2002-0201 CVE-2002-0288 # Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request. alt3kx/CVE-2002-0288 CVE-2002-0289 # Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request. alt3kx/CVE-2002-0289 CVE-2002-0346 # Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi. alt3kx/CVE-2002-0346 CVE-2002-0347 # Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request. alt3kx/CVE-2002-0347 CVE-2002-0348 # service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument. alt3kx/CVE-2002-0348 CVE-2002-0448 # Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many \u0026quot;C:/\u0026quot; sequences. alt3kx/CVE-2002-0448 CVE-2002-0740 # Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument. alt3kx/CVE-2002-0740 CVE-2002-0991 # Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters. alt3kx/CVE-2002-0991 2001 # CVE-2001-0680 # Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a \u0026quot;dot dot\u0026quot; attack in a LIST (ls) command. alt3kx/CVE-2001-0680 CVE-2001-0758 # Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via \u0026quot;CWD ...\u0026quot; command. alt3kx/CVE-2001-0758 CVE-2001-0931 # Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET. alt3kx/CVE-2001-0931 CVE-2001-0932 # Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command. alt3kx/CVE-2001-0932 CVE-2001-0933 # Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. \u0026quot;ls C:\u0026quot;. alt3kx/CVE-2001-0933 CVE-2001-0934 # Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname. alt3kx/CVE-2001-0934 CVE-2001-1442 # Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the \u0026quot;news\u0026quot; group to gain privileges via a long -c command line argument. alt3kx/CVE-2001-1442 2000 # CVE-2000-0170 # Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. mike182/exploit CVE-2000-0979 # File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the \u0026quot;Share Level Password\u0026quot; vulnerability. Z6543/CVE-2000-0979 1999 # CVE-1999-0532 # websecnl/Bulk_CVE-1999-0532_Scanner ","date":"May 21, 2020","externalUrl":null,"permalink":"/2020/05/21/poc-in-github/","section":"Blog","summary":"PoC in GitHub # 2020 # CVE-2020-0022 # In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715 marcinguy/CVE-2020-0022 leommxj/cve-2020-0022 CVE-2020-0041 # In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel bluefrostsecurity/CVE-2020-0041 CVE-2020-0069 # In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754 R0rt1z2/AutomatedRoot TheRealJunior/mtk-su-reverse-cve-2020-0069 yanglingxi1993/CVE-2020-0069 quarkslab/CVE-2020-0069_poc CVE-2020-0551 # Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html bitdefender/lvi-lfb-attack-poc CVE-2020-0557 # Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access. hessandrew/CVE-2020-0557_INTEL-SA-00338 CVE-2020-0568 # Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access. hessandrew/CVE-2020-0568_INTEL-SA-00344 CVE-2020-0601 # A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'. nissan-sudo/CVE-2020-0601 0xxon/cve-2020-0601 SherlockSec/CVE-2020-0601 JPurrier/CVE-2020-0601 0xxon/cve-2020-0601-plugin ollypwn/CurveBall kudelskisecurity/chainoffools RrUZi/Awesome-CVE-2020-0601 BleepSec/CVE-2020-0601 apmunch/CVE-2020-0601 saleemrashid/badecparams 0xxon/cve-2020-0601-utils Doug-Moody/Windows10_Cumulative_Updates_PowerShell MarkusZehnle/CVE-2020-0601 YoannDqr/CVE-2020-0601 thimelp/cve-2020-0601-Perl dlee35/curveball_lua IIICTECH/-CVE-2020-0601-ECC—EXPLOIT cosmicifint/CVE-2020-0601 gentilkiwi/curveball Hans-MartinHannibalLauridsen/CurveBall apodlosky/PoC_CurveBall ioncodes/Curveball amlweems/gringotts aloswoya/CVE-2020-0601 talbeerysec/CurveBallDetection david4599/CurveballCertTool eastmountyxz/CVE-2020-0601-EXP eastmountyxz/CVE-2018-20250-WinRAR gremwell/cve-2020-0601_poc bsides-rijeka/meetup-2-curveball TechHexagon/CVE-2020-0601-spoofkey ShayNehmad/twoplustwo CVE-2020-0609 # A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610. 2d4d/rdg_scanner_cve-2020-0609 ollypwn/BlueGate MalwareTech/RDGScanner Bechsen/CVE-2020-0609 ioncodes/BlueGate CVE-2020-0618 # A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'. euphrat1ca/CVE-2020-0618 wortell/cve-2020-0618 CVE-2020-0624 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0642. james0x40/CVE-2020-0624 CVE-2020-0668 # An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672. itm4n/SysTracingPoc RedCursorSecurityConsulting/CVE-2020-0668 Nan3r/CVE-2020-0668 CVE-2020-0674 # A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767. binaryfigments/CVE-2020-0674 CVE-2020-0683 # An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686. padovah4ck/CVE-2020-0683 CVE-2020-0688 # A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'. random-robbie/cve-2020-0688 Jumbo-WJB/CVE-2020-0688 Ridter/cve-2020-0688 Yt1g3r/CVE-2020-0688_EXP righter83/CVE-2020-0688 truongtn/cve-2020-0688 onSec-fr/CVE-2020-0688-Scanner youncyb/CVE-2020-0688 zcgonvh/CVE-2020-0688 justin-p/PSForgot2kEyXCHANGE cert-lv/CVE-2020-0688 ravinacademy/CVE-2020-0688 mahyarx/Exploit_CVE-2020-0688 ktpdpro/CVE-2020-0688 CVE-2020-0692 # An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. githubassets/CVE-2020-0692 CVE-2020-0728 # An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'. irsl/CVE-2020-0728 CVE-2020-0753 # An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754. afang5472/CVE-2020-0753-and-CVE-2020-0754 VikasVarshney/CVE-2020-0753-and-CVE-2020-0754 CVE-2020-0796 # A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'. Aekras1a/CVE-2020-0796-PoC technion/DisableSMBCompression T13nn3s/CVE-2020-0796 ollypwn/SMBGhost joaozietolie/CVE-2020-0796-Checker pr4jwal/CVE-2020-0796 ButrintKomoni/cve-2020-0796 dickens88/cve-2020-0796-scanner kn6869610/CVE-2020-0796 awareseven/eternalghosttest weidutech/CVE-2020-0796-PoC OfJAAH/CVE-2020-0796 xax007/CVE-2020-0796-Scanner Dhoomralochana/Scanners-for-CVE-2020-0796-Testing UraSecTeam/smbee 0xtobu/CVE-2020-0796 netscylla/SMBGhost eerykitty/CVE-2020-0796-PoC wneessen/SMBCompScan ioncodes/SMBGhost laolisafe/CVE-2020-0796 gabimarti/SMBScanner Almorabea/SMBGhost-WorkaroundApplier IAreKyleW00t/SMBGhosts vysecurity/CVE-2020-0796 marcinguy/CVE-2020-0796 plorinquer/cve-2020-0796 BinaryShadow94/SMBv3.1.1-scan—CVE-2020-0796 x1n5h3n/SMBGhost wsfengfan/CVE-2020-0796 miraizeroday/CVE-2020-0796 GuoKerS/aioScan_CVE-2020-0796 jiansiting/CVE-2020-0796-Scanner maxpl0it/Unauthenticated-CVE-2020-0796-PoC ran-sama/CVE-2020-0796 sujitawake/smbghost julixsalas/CVE-2020-0796 insightglacier/SMBGhost_Crash_Poc 5l1v3r1/CVE-2020-0796-PoC-and-Scan cory-zajicek/CVE-2020-0796-DoS tripledd/cve-2020-0796-vuln danigargu/CVE-2020-0796 ZecOps/CVE-2020-0796-LPE-POC TinToSer/CVE-2020-0796-LPE f1tz/CVE-2020-0796-LPE-EXP tango-j/CVE-2020-0796 jiansiting/CVE-2020-0796 eastmountyxz/CVE-2020-0796-SMB LabDookhtegan/CVE-2020-0796-EXP Rvn0xsy/CVE_2020_0796_CNA 0xeb-bp/cve-2020-0796 intelliroot-tech/cve-2020-0796-Scanner thelostworldFree/CVE-2020-0796 syadg123/CVE-2020-0796 section-c/CVE-2020-0796 CVE-2020-0798 # An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0814, CVE-2020-0842, CVE-2020-0843. githubassets/CVE-2020-0798 CVE-2020-0814 # An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0779, CVE-2020-0798, CVE-2020-0842, CVE-2020-0843. klinix5/CVE-2020-0814 CVE-2020-0883 # A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881. githubassets/CVE-2020-0883 thelostworldFree/CVE-2020-0883 syadg123/CVE-2020-0883 CVE-2020-0905 # An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'. githubassets/CVE-2020-0905 CVE-2020-0910 # A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. inetshell/CVE-2020-0910 CVE-2020-0976 # A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0975, CVE-2020-0977. ericzhong2010/GUI-Check-CVE-2020-0976 CVE-2020-10199 # Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). zhzyker/exphub wsfengfan/CVE-2020-10199-10204 jas502n/CVE-2020-10199 magicming200/CVE-2020-10199_CVE-2020-10204 zhzyker/CVE-2020-10199_POC-EXP CVE-2020-10204 # Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. duolaoa333/CVE-2020-10204 CVE-2020-10238 # An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potential attack vectors. HoangKien1020/CVE-2020-10238 CVE-2020-10239 # An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows access for non-superadmin users. HoangKien1020/CVE-2020-10239 CVE-2020-10551 # QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\\SYSTEM by writing a malicious executable to the location of TsService. seqred-s-a/CVE-2020-10551 CVE-2020-10558 # The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notifications, along with other miscellaneous functions from the main screen. nuzzl/CVE-2020-10558 CVE-2020-10560 # An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php. LucidUnicorn/CVE-2020-10560-Key-Recovery kevthehermit/CVE-2020-10560 CVE-2020-10663 # The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent. rails-lts/json_cve_2020_10663 CVE-2020-10673 # FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus). 0nise/CVE-2020-10673 CVE-2020-11107 # An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution. S1lkys/CVE-2020-11107 andripwn/CVE-2020-11107 CVE-2020-11539 # An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any authentication or signature verification. Thus, any attacker can control a parameter of the device. the-girl-who-lived/CVE-2020-11539 CVE-2020-11650 # An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent. weinull/CVE-2020-11650 CVE-2020-11651 # An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions. chef-cft/salt-vulnerabilities CVE-2020-11890 # An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration. HoangKien1020/CVE-2020-11890 CVE-2020-12078 # An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address to the global discovery settings (internally called exclude_ip). This exclude_ip value is passed to the exec function in the discoveries_helper.php file (inside the all_ip_list function) without being filtered, which means that the attacker can provide a payload instead of a valid IP address. mhaskar/CVE-2020-12078 CVE-2020-12112 # BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion. tchenu/CVE-2020-12112 CVE-2020-12122 # FULLSHADE/CVE-2020-12122 CVE-2020-1611 # A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1. Ibonok/CVE-2020-1611 CVE-2020-1938 # When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations. 0nise/CVE-2020-1938 xindongzhuaizhuai/CVE-2020-1938 nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC Kit4y/CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner laolisafe/CVE-2020-1938 DaemonShao/CVE-2020-1938 sv3nbeast/CVE-2020-1938-Tomact-file_include-file_read fairyming/CVE-2020-1938 dacade/cve-2020-1938 woaiqiukui/CVE-2020-1938TomcatAjpScanner fatal0/tomcat-cve-2020-1938-check ze0r/GhostCat-LFI-exp delsadan/CNVD-2020-10487-Bulk-verification 00theway/Ghostcat-CNVD-2020-10487 shaunmclernon/ghostcat-verification Zaziki1337/Ghostcat-CVE-2020-1938 w4fz5uck5/CVE-2020-1938-Clean-Version syncxx/CVE-2020-1938-Tool ZhengHaoCHeng/CNVD-2020-10487 CVE-2020-1947 # In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE. Imanfeng/CVE-2020-1947 jas502n/CVE-2020-1947 wsfengfan/CVE-2020-1947 shadowsock5/ShardingSphere_CVE-2020-1947 CVE-2020-1958 # When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with Druid. They are still subject to role-based authorization checks, if configured. Callers of Druid APIs can also retrieve any LDAP attribute values of users that exist on the LDAP server, so long as that information is visible to the Druid server. This information disclosure does not require the caller itself to be a valid LDAP user. ggolawski/CVE-2020-1958 CVE-2020-1967 # Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the \"signature_algorithms_cert\" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f). irsl/CVE-2020-1967 CVE-2020-2333 # section-c/CVE-2020-2333 CVE-2020-2546 # Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - JavaEE). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). hktalent/CVE_2020_2546 CVE-2020-2551 # Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). 0xn0ne/weblogicScanner jas502n/CVE-2020-2551 hktalent/CVE-2020-2551 0nise/CVE-2020-2551 Y4er/CVE-2020-2551 Gspider7/rmi-iiop cnsimo/CVE-2020-2551 fa1c0n1/test-poc-weblogic CVE-2020-2555 # Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Hu3sky/CVE-2020-2555 wsfengfan/CVE-2020-2555 0nise/CVE-2020-2555 Y4er/CVE-2020-2555 Maskhe/cve-2020-2555 CVE-2020-2655 # Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N). RUB-NDS/CVE-2020-2655-DemoServer CVE-2020-3766 # Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation. hessandrew/CVE-2020-3766_APSB20-12 CVE-2020-3833 # An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing. c0d3G33k/Safari-Address-Bar-Spoof-CVE-2020-3833- CVE-2020-3952 # Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls. commandermoon/CVE-2020-3952 frustreated/CVE-2020-3952 guardicore/vmware_vcenter_cve_2020_3952 gelim/CVE-2020-3952 Fa1c0n35/vmware_vcenter_cve_2020_3952 CVE-2020-4276 # IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector. X-Force ID: 175984. mekoko/CVE-2020-4276 CVE-2020-5236 # Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like \"Bad-header: xxxxxxxxxxxxxxx\\x10\" is received, it will cause the regular expression engine to catastrophically backtrack causing the process to use 100% CPU time and blocking any other interactions. This allows an attacker to send a single request with an invalid header and take the service offline. This issue was introduced in version 1.4.2 when the regular expression was updated to attempt to match the behaviour required by errata associated with RFC7230. The regular expression that is used to validate incoming headers has been updated in version 1.4.3, it is recommended that people upgrade to the new version of Waitress as soon as possible. motikan2010/CVE-2020-5236 CVE-2020-5250 # In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change all information of all accounts. The problem is patched in version 1.7.6.4. drkbcn/lblfixer_cve2020_5250 CVE-2020-5254 # In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue. dpmdpm2/CVE-2020-5254 CVE-2020-5260 # Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external \"credential helper\" programs to store and retrieve passwords or other credentials from secure storage provided by the operating system. Specially-crafted URLs that contain an encoded newline can inject unintended values into the credential helper protocol stream, causing the credential helper to retrieve the password for one server (e.g., good.example.com) for an HTTP request being made to another server (e.g., evil.example.com), resulting in credentials for the former being sent to the latter. There are no restrictions on the relationship between the two, meaning that an attacker can craft a URL that will present stored credentials for any host to a host of their choosing. The vulnerability can be triggered by feeding a malicious URL to git clone. However, the affected URLs look rather suspicious; the likely vector would be through systems which automatically clone URLs not visible to the user, such as Git submodules, or package systems built around Git. The problem has been patched in the versions published on April 14th, 2020, going back to v2.17.x. Anyone wishing to backport the change further can do so by applying commit 9a6bbee (the full release includes extra checks for git fsck, but that commit is sufficient to protect clients against the vulnerability). The patched versions are: 2.17.4, 2.18.3, 2.19.4, 2.20.3, 2.21.2, 2.22.3, 2.23.2, 2.24.2, 2.25.3, 2.26.1. brompwnie/cve-2020-5260 Asgavar/CVE-2020-5260 sv3nbeast/CVE-2020-5260 CVE-2020-5267 # In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2. GUI/legacy-rails-CVE-2020-5267-patch CVE-2020-5398 # In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input. motikan2010/CVE-2020-5398 CVE-2020-5509 # PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image. FULLSHADE/CVE-2020-5509 CVE-2020-5844 # index.php?sec=godmode/extensions\u0026sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742_FIX_PERL2020. TheCyberGeek/CVE-2020-5844 CVE-2020-6418 # Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. ChoKyuWon/CVE-2020-6418 CVE-2020-6650 # UPS companion software v1.05 \u0026 Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates available. This results in arbitrary code execution on the machine where software is installed. RavSS/Eaton-UPS-Companion-Exploit CVE-2020-6861 # ph4r05/ledger-app-monero-1.42-vuln CVE-2020-6888 # section-c/CVE-2020-6888 CVE-2020-72381 # jdordonezn/CVE-2020-72381 CVE-2020-7246 # A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by leveraging a path traversal vulnerability in the users['photop_preview'] delete photo feature, allowing bypass of .htaccess protection. NOTE: this issue exists because of an incomplete fix for CVE-2015-3884. lnxcrew/CVE-2020-7246 CVE-2020-7247 # smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the \"uncommented\" default configuration. The issue exists because of an incorrect return value upon failure of input validation. FiroSolutions/cve-2020-7247-exploit superzerosec/cve-2020-7247 r0lh/CVE-2020-7247 CVE-2020-7471 # Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitably crafted delimiter to a contrib.postgres.aggregates.StringAgg instance, it was possible to break escaping and inject malicious SQL. Saferman/CVE-2020-7471 secoba/DjVul_StringAgg SNCKER/CVE-2020-7471 CVE-2020-7799 # An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -\u003e Settings -\u003e Email Templates) or themes (Home -\u003e Settings -\u003e Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates. Pikaqi/cve-2020-7799 ianxtianxt/CVE-2020-7799 CVE-2020-7931 # In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authorized_keys file. Patches are available for various versions between 5.11.8 and 6.16.0. The issue exists because use of the DefaultObjectWrapper class makes certain Java functions accessible to a template. gquere/CVE-2020-7931 CVE-2020-7961 # Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS). mzer0one/CVE-2020-7961-POC Thisisfarhadzadeh/CVE-2020-7961-payloads wcxxxxx/CVE-2020-7961 CVE-2020-7980 # Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed. Xh4H/Satellian-CVE-2020-7980 CVE-2020-8012 # CA Unified Infrastructure Management (Nimsoft/UIM) 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code. wetw0rk/Exploit-Development CVE-2020-8417 # The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu. vulncrate/wp-codesnippets-cve-2020-8417 waleweewe12/CVE-2020-8417 CVE-2020-8515 # DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1. imjdl/CVE-2020-8515-PoC truerandom/nmap_draytek_rce CVE-2020-8597 # eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. marcinguy/CVE-2020-8597 mentalburden/MrsEAPers WinMin/CVE-2020-8597 CVE-2020-8809 # Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by modifying the contents of gurux.fi/obis/files.xml and gurux.fi/updates/updates.xml. Then, the attacker can modify the contents of downloaded files. In the case of add-ins (if the user is using those), this will lead to code execution. In case of OBIS codes (which the user is always using as they are needed to communicate with the energy meters), this can lead to code execution when combined with CVE-2020-8810. seqred-s-a/gxdlmsdirector-cve CVE-2020-8813 # graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege. mhaskar/CVE-2020-8813 CVE-2020-8825 # index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS. hacky1997/CVE-2020-8825 CVE-2020-8840 # FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter. jas502n/CVE-2020-8840 Wfzsec/FastJson1.2.62-RCE fairyming/CVE-2020-8840 0nise/CVE-2020-8840 CVE-2020-88888 # tdcoming/CVE-2020-88888 CVE-2020-8950 # The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\\AMD\\PPC\\upload and then creating a symbolic link in %PROGRAMDATA%\\AMD\\PPC\\temp that points to an arbitrary folder with an arbitrary file name. sailay1996/amd_eop_poc CVE-2020-9008 # Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor. kyletimmermans/blackboard-xss CVE-2020-9038 # Joplin through 1.0.184 allows Arbitrary File Read via XSS. JavierOlmedo/CVE-2020-9038 CVE-2020-9375 # TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field. thewhiteh4t/cve-2020-9375 CVE-2020-9380 # IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script. migueltarga/CVE-2020-9380 CVE-2020-9442 # OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\\OpenVPN Connect\\drivers\\tap\\amd64\\win10, which allows local users to gain privileges by copying a malicious drvstore.dll there. hessandrew/CVE-2020-9442 CVE-2020-9453 # FULLSHADE/CVE-2020-9453_-_CVE-2020-9014 CVE-2020-9460 # Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable. Guilherme-Rubert/CVE-2020-9460 CVE-2020-9461 # Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable. Guilherme-Rubert/CVE-2020-9461 CVE-2020-9547 # FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap). fairyming/CVE-2020-9547 CVE-2020-9548 # FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core). fairyming/CVE-2020-9548 CVE-2020-9758 # An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from unauthenticated to user-level access, leading to full account takeover. The attack fetches multiple credentials because they are stored in the database (stored XSS). This affects the mobile/chat URI via the lgn and psswrd parameters. ari034/CVE-2020-9758 CVE-2020-9768 # A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2. An application may be able to execute arbitrary code with system privileges. MrKris99/CVE-2020-9768 CVE-2020-9781 # The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user may grant website permissions to a site they didn't intend to. c0d3G33k/Safari-Video-Permission-Spoof-CVE-2020-9781 CVE-2020-98989 # tdcoming/CVE-2020-98989 CVE-2020-9999 # tdcoming/CVE-2020-9999 CVE-2020-99999999 # tdcoming/CVE-2020-99999999 2019 # CVE-2019-0053 # Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects the telnet client — accessible from the CLI or shell — in Junos OS. Inbound telnet services are not affected by this issue. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D237, 15.1X53-D496, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S11, 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. dreamsmasher/inetutils-CVE-2019-0053-Patched-PKGBUILD CVE-2019-0192 # In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side. mpgn/CVE-2019-0192 Rapidsafeguard/Solr-RCE-CVE-2019-0192 CVE-2019-0193 # In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true. xConsoIe/CVE-2019-0193 jas502n/CVE-2019-0193 1135/solr_exploit jaychouzzk/CVE-2019-0193-exp CVE-2019-0211 # In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected. ozkanbilge/Apache-Exploit-2019 CVE-2019-0227 # A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue. ianxtianxt/cve-2019-0227 CVE-2019-0232 # When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/). pyn3rd/CVE-2019-0232 jas502n/CVE-2019-0232 CherishHair/CVE-2019-0232-EXP setrus/CVE-2019-0232 CVE-2019-0539 # A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka \"Chakra Scripting Engine Memory Corruption Vulnerability.\" This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568. 0x43434343/CVE-2019-0539 CVE-2019-0604 # A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594. linhlhq/CVE-2019-0604 denmilu/CVE-2019-0604_sharepoint_CVE k8gege/CVE-2019-0604 m5050/CVE-2019-0604 boxhg/CVE-2019-0604 CVE-2019-0678 # An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'. c0d3G33k/CVE-2019-0678 CVE-2019-0708 # A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'. hook-s3c/CVE-2019-0708-poc SherlockSec/CVE-2019-0708 yetiddbb/CVE-2019-0708-PoC p0p0p0/CVE-2019-0708-exploit rockmelodies/CVE-2019-0708-Exploit matengfei000/CVE-2019-0708 xiyangzuishuai/Dark-Network-CVE-2019-0708 temp-user-2014/CVE-2019-0708 areusecure/CVE-2019-0708 pry0cc/cve-2019-0708-2 sbkcbig/CVE-2019-0708-EXPloit sbkcbig/CVE-2019-0708-EXPloit-3389 YSheldon/MS_T120 k8gege/CVE-2019-0708 hotdog777714/RDS_CVE-2019-0708 jiansiting/CVE-2019-0708 NullByteSuiteDevs/CVE-2019-0708 heaphopopotamus/CVE-2019-0708 thugcrowd/CVE-2019-0708 omaidf/CVE-2019-0708-PoC blacksunwen/CVE-2019-0708 infenet/CVE-2019-0708 n0auth/CVE-2019-0708 gildaaa/CVE-2019-0708 sbkcbig/CVE-2019-0708-Poc-exploit HackerJ0e/CVE-2019-0708 syriusbughunt/CVE-2019-0708 Barry-McCockiner/CVE-2019-0708 ShadowBrokers-ExploitLeak/CVE-2019-0708 shumtheone/CVE-2019-0708 safly/CVE-2019-0708 Jaky5155/cve-2019-0708-exp fourtwizzy/CVE-2019-0708-Check-Device-Patch-Status 303sec/CVE-2019-0708 f8al/CVE-2019-0708-POC blockchainguard/CVE-2019-0708 haoge8090/CVE-2019-0708 branbot1000/CVE-2019-0708 yushiro/CVE-2019-0708 bilawalzardaer/CVE-2019-0708 skyshell20082008/CVE-2019-0708-PoC-Hitting-Path ttsite/CVE-2019-0708- ttsite/CVE-2019-0708 biggerwing/CVE-2019-0708-poc n1xbyte/CVE-2019-0708 freeide/CVE-2019-0708 edvacco/CVE-2019-0708-POC pry0cc/BlueKeepTracker zjw88282740/CVE-2019-0708-win7 zerosum0x0/CVE-2019-0708 herhe/CVE-2019-0708poc l9c/rdp0708scanner major203/cve-2019-0708-scan SugiB3o/Check-vuln-CVE-2019-0708 gobysec/CVE-2019-0708 adalenv/CVE-2019-0708-Tool smallFunction/CVE-2019-0708-POC freeide/CVE-2019-0708-PoC-Exploit robertdavidgraham/rdpscan closethe/CVE-2019-0708-POC krivegasa/Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit Rostelecom-CERT/bluekeepscan Leoid/CVE-2019-0708 ht0Ruial/CVE-2019-0708Poc-BatchScanning oneoy/BlueKeep infiniti-team/CVE-2019-0708 haishanzheng/CVE-2019-0708-generate-hosts Ekultek/BlueKeep UraSecTeam/CVE-2019-0708 Gh0st0ne/rdpscan-BlueKeep algo7/bluekeep_CVE-2019-0708_poc_to_exploit JasonLOU/CVE-2019-0708 shun-gg/CVE-2019-0708 AdministratorGithub/CVE-2019-0708 umarfarook882/CVE-2019-0708 HynekPetrak/detect_bluekeep.py Wileysec/CVE-2019-0708-Batch-Blue-Screen Pa55w0rd/CVE-2019-0708 at0mik/CVE-2019-0708-PoC cream492/CVE-2019-0708-Msf– wdfcc/CVE-2019-0708 cvencoder/cve-2019-0708 ze0r/CVE-2019-0708-exp mekhalleh/cve-2019-0708 cve-2019-0708-poc/cve-2019-0708 andripwn/CVE-2019-0708 0xeb-bp/bluekeep ntkernel0/CVE-2019-0708 dorkerdevil/Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708- turingcompl33t/bluekeep fade-vivida/CVE-2019-0708-test skommando/CVE-2019-0708 RickGeex/msf-module-CVE-2019-0708 wqsemc/CVE-2019-0708 mai-lang-chai/CVE-2019-0708-RCE Micr067/CVE-2019-0708RDP-MSF adkinguzi/CVE-2019-0708-BlueKeep FrostsaberX/CVE-2019-0708 qinggegeya/CVE-2019-0708-EXP-MSF- distance-vector/CVE-2019-0708 0xFlag/CVE-2019-0708-test 1aa87148377/CVE-2019-0708 coolboy4me/cve-2019-0708_bluekeep_rce Cyb0r9/ispy shishibabyq/CVE-2019-0708 pwnhacker0x18/Wincrash R4v3nG/CVE-2019-0708-DOS ulisesrc/-2-CVE-2019-0708 worawit/CVE-2019-0708 cbwang505/CVE-2019-0708-EXP-Windows eastmountyxz/CVE-2019-0708-Windows JSec1337/Scanner-CVE-2019-0708 wanghuohuobutailao/cve-2019-0708 CVE-2019-0709 # A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0620, CVE-2019-0722. YHZX2013/CVE-2019-0709 qq431169079/CVE-2019-0709 CVE-2019-0768 # A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow requests that should otherwise be ignored, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0761. ruthlezs/ie11_vbscript_exploit CVE-2019-0785 # A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'. Jaky5155/CVE-2019-0785 CVE-2019-0803 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859. ExpLife0011/CVE-2019-0803 CVE-2019-0808 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797. ze0r/cve-2019-0808-poc rakesh143/CVE-2019-0808 exodusintel/CVE-2019-0808 CVE-2019-0841 # An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836. rogue-kdc/CVE-2019-0841 denmilu/CVE-2019-0841 0x00-0x00/CVE-2019-0841-BYPASS CVE-2019-0859 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803. Sheisback/CVE-2019-0859-1day-Exploit CVE-2019-0888 # A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory, aka 'ActiveX Data Objects (ADO) Remote Code Execution Vulnerability'. sophoslabs/CVE-2019-0888 CVE-2019-0986 # An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'. padovah4ck/CVE-2019-0986 CVE-2019-10008 # Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ login attempt within a different browser tab. FlameOfIgnis/CVE-2019-10008 CVE-2019-1002101 # The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. The untar function can both create and follow symbolic links. The issue is resolved in kubectl v1.11.9, v1.12.7, v1.13.5, and v1.14.0. brompwnie/CVE-2019-1002101-Helpers CVE-2019-1003000 # A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM. wetw0rk/Exploit-Development adamyordan/cve-2019-1003000-jenkins-rce-poc 0xtavian/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins 1NTheKut/CVE-2019-1003000_RCE-DETECTION CVE-2019-10086 # In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean. evilangelplus/CVE-2019-10086 CVE-2019-10092 # In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed. motikan2010/CVE-2019-10092_Docker CVE-2019-1010054 # Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls. chaizeg/CSRF-breach CVE-2019-1010298 # Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (kernel). The component is: optee_os. The fixed version is: 3.4.0 and later. RKX1209/CVE-2019-1010298 CVE-2019-10149 # A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution. bananaphones/exim-rce-quickfix cowbe0x004/eximrce-CVE-2019-10149 MNEMO-CERT/PoC–CVE-2019-10149_Exim aishee/CVE-2019-10149-quick AzizMea/CVE-2019-10149-privilege-escalation Brets0150/StickyExim ChrissHack/exim.exp darsigovrustam/CVE-2019-10149 Diefunction/CVE-2019-10149 CVE-2019-10207 # A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash. butterflyhack/CVE-2019-10207 CVE-2019-10392 # Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection. jas502n/CVE-2019-10392 ftk-sostupid/CVE-2019-10392_EXP CVE-2019-1040 # A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'. Ridter/CVE-2019-1040 lazaars/UltraRealy_with_CVE-2019-1040 fox-it/cve-2019-1040-scanner wzxmt/CVE-2019-1040 CVE-2019-10475 # A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin. vesche/CVE-2019-10475 CVE-2019-1064 # An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. RythmStick/CVE-2019-1064 0x00-0x00/CVE-2019-1064 attackgithub/CVE-2019-1064 CVE-2019-10678 # Domoticz before 4.10579 neglects to categorize \\n and \\r as insecure argument options. cved-sources/cve-2019-10678 CVE-2019-10685 # A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0. alt3kx/CVE-2019-10685 CVE-2019-1069 # An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations, aka 'Task Scheduler Elevation of Privilege Vulnerability'. S3cur3Th1sSh1t/SharpPolarBear CVE-2019-10708 # S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter. stavhaygn/CVE-2019-10708 CVE-2019-10758 # mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment. masahiro331/CVE-2019-10758 lp008/CVE-2019-10758 CVE-2019-10869 # Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php (aka upload/submit page) name and tmp_name parameters. KTN1990/CVE-2019-10869 CVE-2019-10915 # A vulnerability has been identified in TIA Administrator (All versions \u003c V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. jiansiting/CVE-2019-10915 CVE-2019-1096 # An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. ze0r/cve-2019-1096-poc CVE-2019-10999 # The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute arbitrary code by providing a long string in the WEPEncryption parameter when requesting wireless.htm. Vulnerable devices include DCS-5009L (1.08.11 and below), DCS-5010L (1.14.09 and below), DCS-5020L (1.15.12 and below), DCS-5025L (1.03.07 and below), DCS-5030L (1.04.10 and below), DCS-930L (2.16.01 and below), DCS-931L (1.14.11 and below), DCS-932L (2.17.01 and below), DCS-933L (1.14.11 and below), and DCS-934L (1.05.04 and below). fuzzywalls/CVE-2019-10999 CVE-2019-11043 # In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution. neex/phuip-fpizdam B1gd0g/CVE-2019-11043 tinker-li/CVE-2019-11043 jas502n/CVE-2019-11043 AleWong/PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043- ianxtianxt/CVE-2019-11043 fairyming/CVE-2019-11043 akamajoris/CVE-2019-11043-Docker theMiddleBlue/CVE-2019-11043 shadow-horse/cve-2019-11043 huowen/CVE-2019-11043 ypereirareis/docker-CVE-2019-11043 MRdoulestar/CVE-2019-11043 0th3rs-Security-Team/CVE-2019-11043 k8gege/CVE-2019-11043 moniik/CVE-2019-11043_env scgs66/CVE-2019-11043 CVE-2019-11061 # A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). tim124058/ASUS-SmartHome-Exploit CVE-2019-11076 # Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request. livehybrid/poc-cribl-rce CVE-2019-1108 # An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desktop Protocol Client Information Disclosure Vulnerability'. Lanph3re/cve-2019-1108 CVE-2019-11157 # Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access. zkenjar/v0ltpwn CVE-2019-11223 # An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension. AngelCtulhu/CVE-2019-11223 CVE-2019-1125 # An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071, CVE-2019-1073. bitdefender/swapgs-attack-poc CVE-2019-1132 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. Vlad-tri/CVE-2019-1132 petercc/CVE-2019-1132 CVE-2019-11358 # jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. bitnesswise/jquery-prototype-pollution-fix CVE-2019-11477 # Jonathan Looney discovered that the TCP_SKB_CB(skb)-\u003etcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff. sasqwatch/cve-2019-11477-poc CVE-2019-11510 # In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability . projectzeroindia/CVE-2019-11510 ladyleet1337/Pulse imjdl/CVE-2019-11510-poc es0/CVE-2019-11510_poc r00tpgp/http-pulse_ssl_vpn.nse jas502n/CVE-2019-11510-1 jason3e7/CVE-2019-11510 BishopFox/pwn-pulse aqhmal/pulsexploit cisagov/check-your-pulse CVE-2019-11523 # Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption is done. Attackers can fully interact with the device: for example, send the \"open door\" command, download the users list (which includes RFID codes and passcodes in cleartext), or update/create users. The same attack can be executed on a local network and over the internet (if the device is exposed on a public IP address). wizlab-it/anviz-m3-rfid-cve-2019-11523-poc CVE-2019-11539 # In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands. 0xDezzy/CVE-2019-11539 CVE-2019-11580 # Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits remote code execution on systems running a vulnerable version of Crowd or Crowd Data Center. All versions of Crowd from version 2.1.0 before 3.0.5 (the fixed version for 3.0.x), from version 3.1.0 before 3.1.6 (the fixed version for 3.1.x), from version 3.2.0 before 3.2.8 (the fixed version for 3.2.x), from version 3.3.0 before 3.3.5 (the fixed version for 3.3.x), and from version 3.4.0 before 3.4.4 (the fixed version for 3.4.x) are affected by this vulnerability. jas502n/CVE-2019-11580 shelld3v/CVE-2019-11580 CVE-2019-11581 # There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and Data Center from 4.4.0 before 7.6.14, from 7.7.0 before 7.13.5, from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability. jas502n/CVE-2019-11581 kobs0N/CVE-2019-11581 CVE-2019-11687 # An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b. The preamble of a DICOM file that complies with this specification can contain the header for an executable file, such as Portable Executable (PE) malware. This space is left unspecified so that dual-purpose files can be created. (For example, dual-purpose TIFF/DICOM files are used in digital whole slide imaging for applications in medicine.) To exploit this vulnerability, someone must execute a maliciously crafted file that is encoded in the DICOM Part 10 File Format. PE/DICOM files are executable even with the .dcm file extension. Anti-malware configurations at healthcare facilities often ignore medical imagery. Also, anti-malware tools and business processes could violate regulatory frameworks (such as HIPAA) when processing suspicious DICOM files. kosmokato/bad-dicom CVE-2019-11707 # A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR \u003c 60.7.1, Firefox \u003c 67.0.3, and Thunderbird \u003c 60.7.2. vigneshsrao/CVE-2019-11707 tunnelshade/cve-2019-11707 CVE-2019-11708 # Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR \u003c 60.7.2, Firefox \u003c 67.0.4, and Thunderbird \u003c 60.7.2. 0vercl0k/CVE-2019-11708 CVE-2019-11730 # A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and they may uploaded to a server. It was demonstrated that in combination with a popular Android messaging app, if a malicious HTML attachment is sent to a user and they opened that attachment in Firefox, due to that app's predictable pattern for locally-saved file names, it is possible to read attachments the victim received from other correspondents. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8. alidnf/CVE-2019-11730 CVE-2019-1181 # A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1182, CVE-2019-1222, CVE-2019-1226. major203/cve-2019-1181 CVE-2019-11881 # A vulnerability exists in Rancher 2.1.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit phishing sites with scare tactics, e.g., displaying a \"This version of Rancher is outdated, please visit https://malicious.rancher.site/upgrading\" message. MauroEldritch/VanCleef CVE-2019-11931 # A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100. kasif-dekel/whatsapp-rce-patched nop-team/CVE-2019-11931 CVE-2019-11932 # A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image. dorkerdevil/CVE-2019-11932 KeepWannabe/WhatsRCE awakened1712/CVE-2019-11932 TulungagungCyberLink/CVE-2019-11932 infiniteLoopers/CVE-2019-11932 alexanderstonec/CVE-2019-11932 valbrux/CVE-2019-11932-SupportApp fastmo/CVE-2019-11932 mRanonyMousTZ/CVE-2019-11932-whatsApp-exploit SmoZy92/CVE-2019-11932 dashtic172/https-github.com-awakened171 Err0r-ICA/WhatsPayloadRCE CVE-2019-12086 # A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation. codeplutos/CVE-2019-12086-jackson-databind-file-read CVE-2019-1215 # An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303. bluefrostsecurity/CVE-2019-1215 CVE-2019-12169 # ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a \"..\" pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component. fuzzlove/ATutor-2.2.4-Language-Exploit CVE-2019-12170 # ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload.php (aka backup) component. This may result in remote command execution. An attacker can use the instructor account to fully compromise the system using a crafted backup ZIP archive. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. fuzzlove/ATutor-Instructor-Backup-Arbitrary-File CVE-2019-1218 # A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages, aka 'Outlook iOS Spoofing Vulnerability'. d0gukank/CVE-2019-1218 CVE-2019-12180 # An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5. When opening a project, the Groovy \"Load Script\" is automatically executed. This allows an attacker to execute arbitrary Groovy Language code (Java scripting language) on the victim machine by inducing it to open a malicious Project. The same issue is present in the \"Save Script\" function, which is executed automatically when saving a project. 0x-nope/CVE-2019-12180 CVE-2019-12181 # A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. guywhataguy/CVE-2019-12181 CVE-2019-12185 # eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. fuzzlove/eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE CVE-2019-12189 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field. falconz/CVE-2019-12189 tuyenhva/CVE-2019-12189 CVE-2019-12190 # XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or filename parameter. tuyenhva/CVE-2019-12190 CVE-2019-12252 # In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution\u0026mode=E-Mail\u0026notifyTo=SOLFORWARD\u0026id= substring. tuyenhva/CVE-2019-12252 CVE-2019-12255 # Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. sud0woodo/Urgent11-Suricata-LUA-scripts CVE-2019-12272 # In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability. HACHp1/LuCI_RCE_exp roguedream/lede-17.01.3 CVE-2019-12314 # Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI. ras313/CVE-2019-12314 CVE-2019-12384 # FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible. jas502n/CVE-2019-12384 MagicZer0/Jackson_RCE-CVE-2019-12384 CVE-2019-12409 # The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and exposed on RMI_PORT (default=18983), without any authentication. If this port is opened for inbound traffic in your firewall, then anyone with network access to your Solr nodes will be able to access JMX, which may in turn allow them to upload malicious code for execution on the Solr server. jas502n/CVE-2019-12409 CVE-2019-12453 # In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation. undefinedmode/CVE-2019-12453 CVE-2019-12460 # Web Port 1.19.1 allows XSS via the /access/setup type parameter. EmreOvunc/WebPort-v1.19.1-Reflected-XSS CVE-2019-12475 # In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation. undefinedmode/CVE-2019-12475 CVE-2019-12476 # An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus before 5.0.6 allows an attacker with physical access to gain a shell with SYSTEM privileges via the restricted thick client browser. The attack uses a long sequence of crafted keyboard input. 0katz/CVE-2019-12476 CVE-2019-1253 # An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303. rogue-kdc/CVE-2019-1253 denmilu/CVE-2019-1253 padovah4ck/CVE-2019-1253 sgabe/CVE-2019-1253 CVE-2019-12538 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do search field. tarantula-team/CVE-2019-12538 CVE-2019-12541 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter. tarantula-team/CVE-2019-12541 CVE-2019-12542 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do userConfigID parameter. tarantula-team/CVE-2019-12542 CVE-2019-12543 # An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the PurchaseRequest.do serviceRequestId parameter. tarantula-team/CVE-2019-12543 CVE-2019-12562 # Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to the server, etc. Successful exploitation occurs when an admin user visits a notification page with stored cross-site scripting. MAYASEVEN/CVE-2019-12562 CVE-2019-12586 # The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP method completion or failure, which allows attackers in radio range to cause a denial of service (crash) via a crafted message. Matheus-Garbelini/esp32_esp8266_attacks CVE-2019-12594 # DOSBox 0.74-2 has Incorrect Access Control. Alexandre-Bartel/CVE-2019-12594 CVE-2019-12735 # getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim. pcy190/ace-vim-neovim oldthree3/CVE-2019-12735-VIM-NEOVIM CVE-2019-12750 # Symantec Endpoint Protection, prior to 14.2 RU1 \u0026 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.1.7491.7002), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. v-p-b/cve-2019-12750 CVE-2019-12796 # PeterUpfold/CVE-2019-12796 CVE-2019-12815 # An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306. KTN1990/CVE-2019-12815 CVE-2019-12836 # The Bobronix JEditor editor before 3.0.6 for Jira allows an attacker to add a URL/Link (to an existing issue) that can cause forgery of a request to an out-of-origin domain. This in turn may allow for a forged request that can be invoked in the context of an authenticated user, leading to stealing of session tokens and account takeover. 9lyph/CVE-2019-12836 CVE-2019-12840 # In Webmin through 1.910, any user authorized to the \"Package Updates\" module can execute arbitrary commands with root privileges via the data parameter to update.cgi. bkaraceylan/CVE-2019-12840_POC KrE80r/webmin_cve-2019-12840_poc CVE-2019-12889 # An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. A user with local access to only the Windows logon screen can escalate their privileges to NT AUTHORITY\\System. An attacker would need local access to the machine for a successful exploit. The attacker must disconnect the computer from the local network / WAN and connect it to an internet facing access point / network. At that point, the attacker can execute the password-reset functionality, which will expose a web browser. Browsing to a site that calls local Windows system functions (e.g., file upload) will expose the local file system. From there an attacker can launch a privileged command shell. nulsect0r/CVE-2019-12889 CVE-2019-12890 # RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create admin users via a con.automationframework users insert_one call. EthicalHackingCOP/CVE-2019-12890 CVE-2019-12949 # In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button on a phishing page, an attacker can leverage XSS to upload arbitrary executable code, via diag_command.php and rrd_fetch_json.php (timePeriod parameter), to a server. Then, the remote attacker can run any command with root privileges on that server. tarantula-team/CVE-2019-12949 CVE-2019-12999 # Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control. lightninglabs/chanleakcheck CVE-2019-13000 # Eclair through 0.3 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states \"it is beta-quality software and don't put too much money in it.\" ACINQ/detection-tool-cve-2019-13000 CVE-2019-13024 # Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value \"init_script\"-\"Monitoring Engine Binary\" in main.get.php to insert a arbitrary command into the database, and execute it by calling the vulnerable page www/include/configuration/configGenerate/xml/generateFiles.php (which passes the inserted value to the database to shell_exec without sanitizing it, allowing one to execute system arbitrary commands). mhaskar/CVE-2019-13024 get-get-get-get/Centreon-RCE CVE-2019-13025 # Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST (HTTP) request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable modem. x1tan/CVE-2019-13025 CVE-2019-13027 # Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter. IckoGZ/CVE-2019-13027 CVE-2019-13051 # Pi-Hole 4.3 allows Command Injection. pr0tean/CVE-2019-13051 CVE-2019-13063 # Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page. This will result in file disclosure (i.e., being able to pull any file from the remote victim application). This can be used to steal and obtain sensitive config and other files. This can result in complete compromise of the application. The script parameter is vulnerable to directory traversal and both local and remote file inclusion. 0x6b7966/CVE-2019-13063-POC CVE-2019-13086 # core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter. lingchuL/CVE_POC_test CVE-2019-13101 # An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page. halencarjunior/dlkploit600 CVE-2019-13115 # In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855. CSSProject/libssh2-Exploit CVE-2019-13143 # An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3. With the user ID, user name, and the lock's MAC address, anyone can unbind the existing owner of the lock, and bind themselves instead. This leads to complete takeover of the lock. The user ID, name, and MAC address are trivially obtained from APIs found within the Android or iOS application. With only the MAC address of the lock, any attacker can transfer ownership of the lock from the current user, over to the attacker's account. Thus rendering the lock completely inaccessible to the current user. securelayer7/pwnfb50 CVE-2019-1315 # An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342. Mayter/CVE-2019-1315 CVE-2019-13272 # In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments. jas502n/CVE-2019-13272 Cyc1eC/CVE-2019-13272 bigbigliang-malwarebenchmark/cve-2019-13272 oneoy/CVE-2019-13272 Huandtx/CVE-2019-13272 polosec/CVE-2019-13272 sumedhaDharmasena/-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272 CVE-2019-13361 # Smanos W100 1.0.0 devices have Insecure Permissions, exploitable by an attacker on the same Wi-Fi network. lodi-g/CVE-2019-13361 CVE-2019-13403 # Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information. B3Bo1d/CVE-2019-13403 CVE-2019-13404 # ** DISPUTED ** The MSI installer for Python through 2.7.16 on Windows defaults to the C:\\Python27 directory, which makes it easier for local users to deploy Trojan horse code. (This also affects old 3.x releases before 3.5.) NOTE: the vendor's position is that it is the user's responsibility to ensure C:\\Python27 access control or choose a different directory, because backwards compatibility requires that C:\\Python27 remain the default for 2.7.x. alidnf/CVE-2019-13404 CVE-2019-13496 # One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response. FurqanKhan1/CVE-2019-13496 CVE-2019-13497 # One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests. FurqanKhan1/CVE-2019-13497 CVE-2019-13498 # One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4. FurqanKhan1/CVE-2019-13498 CVE-2019-13504 # There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2. hazedic/fuzzenv-exiv2 CVE-2019-13574 # In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command. masahiro331/CVE-2019-13574 CVE-2019-1367 # A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221. mandarenmanman/CVE-2019-1367 CVE-2019-13720 # Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. cve-2019-13720/cve-2019-13720 ChoKyuWon/CVE-2019-13720 CVE-2019-1385 # An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'. klinix5/CVE-2019-1385 CVE-2019-1388 # An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'. jas502n/CVE-2019-1388 jaychouzzk/CVE-2019-1388 sv3nbeast/CVE-2019-1388 CVE-2019-13956 # Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH4_0df5_language=en to 4gH4_0df5_language=en'.phpinfo().'; (if the random prefix 4gH4_0df5_ were used). rhbb/CVE-2019-13956 CVE-2019-1402 # An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Information Disclosure Vulnerability'. lauxjpn/CorruptQueryAccessWorkaround CVE-2019-14040 # Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150, SXR1130 tamirzb/CVE-2019-14040 CVE-2019-14041 # During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130 tamirzb/CVE-2019-14041 CVE-2019-1405 # An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. apt69/COMahawk CVE-2019-14079 # Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leading to kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8953, QCA6574AU, QCS605, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SM8150, SXR1130 parallelbeings/CVE-2019-14079 CVE-2019-14205 # A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php. security-kma/EXPLOITING-CVE-2019-14205 CVE-2019-1422 # An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1420, CVE-2019-1423. ze0r/cve-2019-1422 CVE-2019-14220 # An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine (VM) to enable Android apps to run on Windows or MacOS. Bug is in a local arbitrary file read through a system service call. The impacted method runs with System admin privilege and if given the file name as parameter returns you the content of file. A malicious app using the affected method can then read the content of any system file which it is not authorized to read seqred-s-a/cve-2019-14220 CVE-2019-14267 # PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled. snappyJack/pdfresurrect_CVE-2019-14267 CVE-2019-14287 # In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command. FauxFaux/sudo-cve-2019-14287 CashWilliams/CVE-2019-14287-demo n0w4n/CVE-2019-14287 gurneesh/CVE-2019-14287-write-up shellvhack/Sudo-Security-Bypass-CVE-2019-14287 Janette88/cve-2019-14287sudoexp huang919/cve-2019-14287-PPT wenyu1999/sudo- Sindadziy/cve-2019-14287 Sindayifu/CVE-2019-14287-CVE-2014-6271 Unam3dd/sudo-vulnerability-CVE-2019-14287 CMNatic/Dockerized-CVE-2019-14287 CVE-2019-14314 # A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php. imthoe/CVE-2019-14314 CVE-2019-14319 # The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic. MelroyB/CVE-2019-14319 CVE-2019-14326 # An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and ssh (ports 22 and 23) with root privileges in the emulated Android system. This can be exploited by remote attackers to gain full access to the device, or by malicious apps installed inside the emulator to perform privilege escalation from a normal user to root (unlike with standard methods of getting root privileges on Android - e.g., the SuperSu program - the user is not asked for consent). There is no authentication performed - access to a root shell is given upon a successful connection. NOTE: although this was originally published with a slightly different CVE ID number, the correct ID for this Andy vulnerability has always been CVE-2019-14326. seqred-s-a/cve-2019-14326 CVE-2019-14339 # The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key. 0x48piraj/CVE-2019-14339 CVE-2019-14439 # A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath. jas502n/CVE-2019-14439 CVE-2019-14514 # An issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating system inside the MEmu emulator contains a /system/bin/systemd binary that is run with root privileges on startup (this is unrelated to Red Hat's systemd init program, and is a closed-source proprietary tool that seems to be developed by Microvirt). This program opens TCP port 21509, presumably to receive installation-related commands from the host OS. Because everything after the installer:uninstall command is concatenated directly into a system() call, it is possible to execute arbitrary commands by supplying shell metacharacters. seqred-s-a/cve-2019-14514 CVE-2019-14529 # OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php. Wezery/CVE-2019-14529 CVE-2019-14530 # An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (that is readable by the user www-data) from server storage. If the requested file is writable for the www-data user and the directory /var/www/openemr/sites/default/documents/cqm_qrda/ exists, it will be deleted from server. Wezery/CVE-2019-14530 CVE-2019-14537 # YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass. Wocanilo/CVE-2019-14537 CVE-2019-14540 # A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig. LeadroyaL/cve-2019-14540-exploit CVE-2019-1458 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. piotrflorczyk/cve-2019-1458_POC unamer/CVE-2019-1458 CVE-2019-14615 # Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access. HE-Wenjian/iGPU-Leak CVE-2019-14745 # In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in executables. xooxo/CVE-2019-14745 CVE-2019-14751 # NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction. mssalvatore/CVE-2019-14751_PoC CVE-2019-1476 # An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483. sgabe/CVE-2019-1476 CVE-2019-14830 # Fr3d-/moodle-token-stealer CVE-2019-14912 # An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie. Wocanilo/adaPwn CVE-2019-15029 # FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command. mhaskar/CVE-2019-15029 CVE-2019-15053 # The \"HTML Include and replace macro\" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element. l0nax/CVE-2019-15053 CVE-2019-15107 # An issue was discovered in Webmin \u003c=1.920. The parameter old in password_change.cgi contains a command injection vulnerability. jas502n/CVE-2019-15107 HACHp1/webmin_docker_and_exp ketlerd/CVE-2019-15107 AdministratorGithub/CVE-2019-15107 Pichuuuuu/CVE-2019-15107 Rayferrufino/Make-and-Break AleWong/WebminRCE-EXP-CVE-2019-15107- ianxtianxt/CVE-2019-15107 hannob/webminex ChakoMoonFish/webmin_CVE-2019-15107 CVE-2019-15120 # The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode. h3llraiser/CVE-2019-15120 CVE-2019-15126 # An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503. 0x13enny/kr00k hexway/r00kie-kr00kie akabe1/kr00ker mustafasevim/kr00k-vulnerability CVE-2019-15224 # The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions \u003c=1.6.9 and \u003e=1.6.14 are unaffected. chef-cft/inspec_cve_2019_15224 CVE-2019-15233 # The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie. l0nax/CVE-2019-15233 CVE-2019-15511 # An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is installed. All GOG Galaxy versions before 1.2.60 and all corresponding versions of GOG Galaxy 2.0 Beta are affected. adenkiewicz/CVE-2019-15511 CVE-2019-15642 # rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states \"RPC can be used to run any command or modify any file on a server, which is why access to it must not be granted to un-trusted Webmin users.\" jas502n/CVE-2019-15642 CVE-2019-1579 # Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code. securifera/CVE-2019-1579 CVE-2019-15802 # An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware hashes and encrypts passwords using a hardcoded cryptographic key in sal_util_str_encrypt() in libsal.so.0.0. The parameters (salt, IV, and key data) are used to encrypt and decrypt all passwords using AES256 in CBC mode. With the parameters known, all previously encrypted passwords can be decrypted. This includes the passwords that are part of configuration backups or otherwise embedded as part of the firmware. jasperla/CVE-2019-15802 CVE-2019-15846 # Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash. synacktiv/Exim-CVE-2019-15846 CVE-2019-15858 # admin/includes/class.import.snippet.php in the \"Woody ad snippets\" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution. GeneralEG/CVE-2019-15858 CVE-2019-15972 # A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates SQL values. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to modify values on or return values from the underlying database. FSecureLABS/Cisco-UCM-SQLi-Scripts CVE-2019-16097 # core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend and allow user to do self-registration. Fixed version: v1.7.6 v1.8.3. v.1.9.0. Workaround without applying the fix: configure Harbor to use non-DB authentication backend such as LDAP. evilAdan0s/CVE-2019-16097 rockmelodies/CVE-2019-16097-batch ianxtianxt/CVE-2019-16097 dacade/cve-2019-16097 theLSA/harbor-give-me-admin luckybool1020/CVE-2019-16097 CVE-2019-16098 # The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code. Barakat/CVE-2019-16098 CVE-2019-16278 # Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. jas502n/CVE-2019-16278 imjdl/CVE-2019-16278-PoC ianxtianxt/CVE-2019-16278 darkerego/Nostromo_Python3 AnubisSec/CVE-2019-16278 rptucker/CVE-2019-16278-Nostromo_1.9.6-RCE Kr0ff/cve-2019-16278 NHPT/CVE-2019-16278 Unam3dd/nostromo_1_9_6_rce keshiba/cve-2019-16278 CVE-2019-16279 # A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request. ianxtianxt/CVE-2019-16279 CVE-2019-16394 # SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers. SilentVoid13/Silent_CVE_2019_16394 CVE-2019-16405 # Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings. CVE-2019-16405 and CVE-2019-17501 are similar to one another and may be the same. TheCyberGeek/CVE-2019-16405.rb CVE-2019-1652 # A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious HTTP POST requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux shell as root. Cisco has released firmware updates that address this vulnerability. 0x27/CiscoRV320Dump CVE-2019-1653 # A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability. dubfr33/CVE-2019-1653 shaheemirza/CiscoSpill CVE-2019-16662 # An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution. mhaskar/CVE-2019-16662 CVE-2019-16663 # An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution. mhaskar/CVE-2019-16663 CVE-2019-16692 # phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used. kkirsche/CVE-2019-16692 CVE-2019-16724 # File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331. FULLSHADE/OSCE CVE-2019-16759 # vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request. Frint0/mass-pwn-vbulletin M0sterHxck/CVE-2019-16759-Vbulletin-rce-exploit r00tpgp/http-vuln-CVE-2019-16759 jas502n/CVE-2019-16759 FarjaalAhmad/CVE-2019-16759 andripwn/pwn-vbulletin psychoxploit/vbull CVE-2019-16784 # In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in \"onefile\" mode is launched by a privileged user (at least more than the current one) which have his \"TempPath\" resolving to a world writable directory. This is the case for example if the software is launched as a service or as a scheduled task using a system account (TempPath will be C:\\Windows\\Temp). In order to be exploitable the software has to be (re)started after the attacker launch the exploit program, so for a service launched at startup, a service restart is needed (e.g. after a crash or an upgrade). AlterSolutions/PyInstallerPrivEsc CVE-2019-16889 # Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs. grampae/meep CVE-2019-16920 # Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a \"PingTest\" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825. pwnhacker0x18/CVE-2019-16920-MassPwn3r CVE-2019-16941 # NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used with a modified XML document. This occurs in Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java. An attack could start with an XML document that was originally created by DumpFunctionPatternInfoScript but then directly modified by an attacker (for example, to make a java.lang.Runtime.exec call). purpleracc00n/CVE-2019-16941 CVE-2019-17080 # mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports. Andhrimnirr/Mintinstall-object-injection CVE-2019-17124 # Kramer VIAware 2.5.0719.1034 has Incorrect Access Control. hessandrew/CVE-2019-17124 CVE-2019-17221 # PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page.open() function of the webpage module, which loads a specified URL and calls a given callback. An attacker can supply a specially crafted HTML file, as user input, that allows reading arbitrary files on the filesystem. For example, if page.render() is the function callback, this generates a PDF or an image of the targeted file. NOTE: this product is no longer developed. h4ckologic/CVE-2019-17221 CVE-2019-17234 # includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion. administra1tor/CVE-2019-17234-Wordpress-DirStroyer CVE-2019-17424 # A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file. guywhataguy/CVE-2019-17424 CVE-2019-17427 # In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors. RealLinkers/CVE-2019-17427 CVE-2019-17495 # A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that \u003cstyle\u003e@import within the JSON data was a functional attack method. SecT0uch/CVE-2019-17495-test CVE-2019-17525 # The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks. huzaifahussain98/CVE-2019-17525 CVE-2019-17558 # Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting `params.resource.loader.enabled` by defining a response writer with that setting set to `true`. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is `trusted` (has been uploaded by an authenticated user). SDNDTeam/CVE-2019-17558_Solr_Vul_Tool CVE-2019-17564 # Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue affected Apache Dubbo 2.7.0 to 2.7.4, 2.6.0 to 2.6.7, and all 2.5.x versions. r00t4dm/CVE-2019-17564 Jaky5155/CVE-2019-17564 Hu3sky/CVE-2019-17564 Exploit-3389/CVE-2019-17564 Dor-Tumarkin/CVE-2019-17564-FastJson-Gadget fairyming/CVE-2019-17564 CVE-2019-17570 # An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maintained and this issue will not be fixed. r00t4dm/CVE-2019-17570 orangecertcc/xmlrpc-common-deserialization CVE-2019-17571 # Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17. shadow-horse/CVE-2019-17571 CVE-2019-17596 # Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates. pquerna/poc-dsa-verify-CVE-2019-17596 CVE-2019-17625 # There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron, such as an exec of OS commands within the onerror attribute of an IMG element. Ekultek/CVE-2019-17625 CVE-2019-17633 # For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of an arbitrary Che workspace. Che with no authentication and no TLS is not usually deployed on a public network but is often used for local installations (e.g. on personal laptops). In that case, even if the Che API is not exposed externally, some javascript running in the local browser is able to send requests to it. mgrube/CVE-2019-17633 CVE-2019-17658 # An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executable service path. Ibonok/CVE-2019-17658 CVE-2019-17671 # In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled. rhbb/CVE-2019-17671 CVE-2019-1821 # A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system. k8gege/CiscoExploit CVE-2019-18371 # An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC CVE-2019-18418 # clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management. Andhrimnirr/ClonOS-WEB-control-panel-multi-vulnerability CVE-2019-18426 # A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message. PerimeterX/CVE-2019-18426 CVE-2019-18634 # In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c. Plazmaz/CVE-2019-18634 saleemrashid/sudo-cve-2019-18634 N1et/CVE-2019-18634 jeandelboux/CVE-2019-18634 CVE-2019-18873 # FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET request. When the admin visits user information under \"User Manager\" in the control panel, the payload will execute. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. The problem is in admsession.php and admuser.php. fuzzlove/FUDforum-XSS-RCE CVE-2019-18885 # fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices-\u003edevices is mishandled within find_device, aka CID-09ba3bc9dd15. bobfuzzer/CVE-2019-18885 CVE-2019-18890 # A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query. RealLinkers/CVE-2019-18890 CVE-2019-18935 # Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote code execution. (As of 2020.1.114, a default setting prevents the exploit. In 2019.3.1023, but not earlier versions, a non-default setting can prevent exploitation.) bao7uo/RAU_crypto noperator/CVE-2019-18935 CVE-2019-19012 # An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression. ManhNDd/CVE-2019-19012 tarantula-team/CVE-2019-19012 CVE-2019-19033 # Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password. ricardojoserf/CVE-2019-19033 CVE-2019-19203 # An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. ManhNDd/CVE-2019-19203 tarantula-team/CVE-2019-19203 CVE-2019-19204 # An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. ManhNDd/CVE-2019-19204 tarantula-team/CVE-2019-19204 CVE-2019-19231 # An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges. hessandrew/CVE-2019-19231 CVE-2019-19268 # TheCyberGeek/CVE-2019-19268 CVE-2019-19315 # NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \\\\.\\mailslot\\nlsX86ccMailslot mailslot. monoxgas/mailorder CVE-2019-19356 # Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing. shadowgatt/CVE-2019-19356 qq1515406085/CVE-2019-19356 CVE-2019-19369 # TheCyberGeek/CVE-2019-19369 CVE-2019-19383 # freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled). m0rph-1/CVE-2019-19383 CVE-2019-19511 # jra89/CVE-2019-19511 CVE-2019-19550 # Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. underprotection/CVE-2019-19550 CVE-2019-19576 # class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions. jra89/CVE-2019-19576 CVE-2019-19633 # jra89/CVE-2019-19633 CVE-2019-19634 # class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576. jra89/CVE-2019-19634 CVE-2019-19651 # jra89/CVE-2019-19651 CVE-2019-19652 # jra89/CVE-2019-19652 CVE-2019-19653 # jra89/CVE-2019-19653 CVE-2019-19654 # jra89/CVE-2019-19654 CVE-2019-19658 # jra89/CVE-2019-19658 CVE-2019-19699 # There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. To exploit the vulnerability, someone must have Admin access to the Centreon Web Interface and create a custom main.php?p=60803\u0026type=3 command. The user must then set the Pollers Post-Restart Command to this previously created command via the main.php?p=60901\u0026o=c\u0026server_id=1 URI. This is triggered via an export of the Poller Configuration. SpengeSec/CVE-2019-19699 CVE-2019-19732 # translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir_0 and/or sSortDir_0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. jra89/CVE-2019-19732 CVE-2019-19733 # _get_all_file_server_paths.ajax.php (aka get_all_file_server_paths.ajax.php) in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the fileIds parameter on the page, which would allow an attacker to input HTML or execute scripts on the site, aka XSS. jra89/CVE-2019-19733 CVE-2019-19734 # _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. jra89/CVE-2019-19734 CVE-2019-19735 # class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set the password within a few hours by bruteforcing. jra89/CVE-2019-19735 CVE-2019-19738 # log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow an attacker to input HTML or execute scripts on the site, aka XSS. jra89/CVE-2019-19738 CVE-2019-19781 # An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. mekoko/CVE-2019-19781 projectzeroindia/CVE-2019-19781 trustedsec/cve-2019-19781 cisagov/check-cve-2019-19781 jas502n/CVE-2019-19781 ianxtianxt/CVE-2019-19781 mpgn/CVE-2019-19781 oways/CVE-2019-19781 becrevex/Citrix_CVE-2019-19781 unknowndevice64/Exploits_CVE-2019-19781 bufsnake/CVE-2019-19781 x1sec/citrixmash_scanner Jabo-SCO/Shitrix-CVE-2019-19781 x1sec/CVE-2019-19781 hollerith/CVE-2019-19781 aqhmal/CVE-2019-19781 MalwareTech/CitrixHoneypot mekhalleh/citrix_dir_traversal_rce zenturacp/cve-2019-19781-web zgelici/CVE-2019-19781-Checker digitalshadows/CVE-2019-19781_IOCs onSec-fr/CVE-2019-19781-Forensic DanielWep/CVE-NetScalerFileSystemCheck Castaldio86/Detect-CVE-2019-19781 j81blog/ADC-19781 clm123321/Citrix_CVE-2019-19781 b510/CVE-2019-19781 redscan/CVE-2019-19781 DIVD-NL/Citrix-CVE-2019-19781 ynsmroztas/citrix.sh digitalgangst/massCitrix fireeye/ioc-scanner-CVE-2019-19781 citrix/ioc-scanner-CVE-2019-19781 x1sec/citrix-honeypot L4r1k/CitrixNetscalerAnalysis Azeemering/CVE-2019-19781-DFIR-Notes 0xams/citrixvulncheck RaulCalvoLaorden/CVE-2019-19781 nmanzi/webcvescanner darren646/CVE-2019-19781POC CVE-2019-19844 # Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token for the matched user account. (One mitigation in the new releases is to send password reset tokens only to the registered user email address.) ryu22e/django_cve_2019_19844_poc andripwn/django_cve201919844 0xsha/CVE_2019_19844 CVE-2019-1987 # In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-118143775. marcinguy/android-7-9-png-bug CVE-2019-19871 # VDISEC/CVE-2019-19871-AuditGuide CVE-2019-19905 # NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own configuration files. dpmdpm2/CVE-2019-19905 CVE-2019-19943 # The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free. m0rph-1/CVE-2019-19943 CVE-2019-20059 # payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values from the sSortDir_0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. NOTE: this issue exists because of an incomplete fix for CVE-2019-19732. jra89/CVE-2019-20059 CVE-2019-20085 # TVT NVMS-1000 devices allow GET /.. Directory Traversal AleDiBen/NVMS1000-Exploit CVE-2019-20197 # In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account. lp008/CVE-2019-20197 jas502n/CVE-2019-20197 CVE-2019-20224 # netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?operation/netflow/nf_live_view request. This issue has been fixed in Pandora FMS 7.0 NG 742. mhaskar/CVE-2019-20224 CVE-2019-20326 # A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file. Fysac/CVE-2019-20326 CVE-2019-2107 # In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130024844. marcinguy/CVE-2019-2107 infiniteLoopers/CVE-2019-2107 CVE-2019-2196 # In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-135269143 IOActive/AOSP-DownloadProviderDbDumperSQLiLimit CVE-2019-2198 # In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-135270103 IOActive/AOSP-DownloadProviderDbDumperSQLiWhere CVE-2019-2215 # A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095 timwr/CVE-2019-2215 addhaloka/CVE-2019-2215 kangtastic/cve-2019-2215 marcinguy/CVE-2019-2215 LIznzn/CVE-2019-2215 DimitriFourny/cve-2019-2215 c0n71nu3/android-kernel-exploitation-ashfaq-CVE-2019-2215 CVE-2019-2525 # Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N). Phantomn/VirtualBox_CVE-2019-2525-CVE-2019-2548 wotmd/VirtualBox-6.0.0-Exploit-1-day CVE-2019-2615 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). chiaifan/CVE-2019-2615 CVE-2019-2618 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N). pyn3rd/CVE-2019-2618 jas502n/cve-2019-2618 wsfengfan/CVE-2019-2618- dr0op/WeblogicScan he1dan/cve-2019-2618 ianxtianxt/cve-2019-2618 0xn0ne/weblogicScanner zhzyker/exphub CVE-2019-2725 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). shack2/javaserializetools SkyBlueEternal/CNVD-C-2019-48814-CNNVD-201904-961 iceMatcha/CNTA-2019-0014xCVE-2019-2725 lasensio/cve-2019-2725 davidmthomsen/CVE-2019-2725 leerina/CVE-2019-2725 zhusx110/cve-2019-2725 lufeirider/CVE-2019-2725 CVCLabs/cve-2019-2725 TopScrew/CVE-2019-2725 welove88888/CVE-2019-2725 jiansiting/CVE-2019-2725 kerlingcode/CVE-2019-2725 black-mirror/Weblogic pimps/CVE-2019-2725 ianxtianxt/CVE-2019-2725 GEIGEI123/CVE-2019-2725-POC GGyao/weblogic_2019_2725_wls_batch CVE-2019-2729 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). waffl3ss/CVE-2019-2729 ruthlezs/CVE-2019-2729-Exploit CVE-2019-2888 # Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). 21superman/weblogic_cve-2019-2888 jas502n/CVE-2019-2888 CVE-2019-2890 # Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). ZO1RO/CVE-2019-2890 Ky0-HVA/CVE-2019-2890 SukaraLin/CVE-2019-2890 jas502n/CVE-2019-2890 ianxtianxt/CVE-2019-2890 CVE-2019-3010 # Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). chaizeg/privilege-escalation-breach CVE-2019-3394 # There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a page is able to exploit this issue to read arbitrary file on the server under \u003cinstall-directory\u003e/confluence/WEB-INF directory, which may contain configuration files used for integrating with other services, which could potentially leak credentials or other sensitive information such as LDAP credentials. The LDAP credential will be potentially leaked only if the Confluence server is configured to use LDAP as user repository. All versions of Confluence Server from 6.1.0 before 6.6.16 (the fixed version for 6.6.x), from 6.7.0 before 6.13.7 (the fixed version for 6.13.x), and from 6.14.0 before 6.15.8 (the fixed version for 6.15.x) are affected by this vulnerability. jas502n/CVE-2019-3394 CVE-2019-3396 # The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection. dothanthitiendiettiende/CVE-2019-3396 x-f1v3/CVE-2019-3396 shadowsock5/CVE-2019-3396 Yt1g3r/CVE-2019-3396_EXP jas502n/CVE-2019-3396 pyn3rd/CVE-2019-3396 s1xg0d/CVE-2019-3396 quanpt103/CVE-2019-3396 vntest11/confluence_CVE-2019-3396 tanw923/test1 skommando/CVE-2019-3396-confluence-poc JonathanZhou348/CVE-2019-3396TEST am6539/CVE-2019-3396 W2Ning/CVE-2019-3396 CVE-2019-3398 # Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluence Server from 2.0.0 before 6.6.13 (the fixed version for 6.6.x), from 6.7.0 before 6.12.4 (the fixed version for 6.12.x), from 6.13.0 before 6.13.4 (the fixed version for 6.13.x), from 6.14.0 before 6.14.3 (the fixed version for 6.14.x), and from 6.15.0 before 6.15.2 are affected by this vulnerability. superevr/cve-2019-3398 CVE-2019-3462 # Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine. tonejito/check_CVE-2019-3462 atilacastro/update-apt-package CVE-2019-3663 # Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details funoverip/mcafee_atd_CVE-2019-3663 CVE-2019-3719 # Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables via SupportAssist client from attacker hosted sites. jiansiting/CVE-2019-3719 CVE-2019-3778 # Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the \"redirect_uri\" parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and uses the DefaultRedirectResolver in the AuthorizationEndpoint. This vulnerability does not expose applications that: Act in the role of an Authorization Server and uses a different RedirectResolver implementation other than DefaultRedirectResolver, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient). BBB-man/CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection CVE-2019-3799 # Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack. mpgn/CVE-2019-3799 CVE-2019-3847 # A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the \"login as other users\" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf. danielthatcher/moodle-login-csrf CVE-2019-3929 # The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root. xfox64x/CVE-2019-3929 CVE-2019-48814 # wucj001/cve-2019-48814 CVE-2019-5010 # An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability. JonathanWilbur/CVE-2019-5010 CVE-2019-5096 # An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A specially crafted HTTP request can lead to a use-after-free condition during the processing of this request that can be used to corrupt heap structures that could lead to full code execution. The request can be unauthenticated in the form of GET or POST requests, and does not require the requested resource to exist on the server. papinnon/CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit CVE-2019-5418 # There is a File Content Disclosure vulnerability in Action View \u003c5.2.2.1, \u003c5.1.6.2, \u003c5.0.7.2, \u003c4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed. mpgn/CVE-2019-5418 omarkurt/CVE-2019-5418 brompwnie/CVE-2019-5418-Scanner mpgn/Rails-doubletap-RCE takeokunn/CVE-2019-5418 Bad3r/RailroadBandit ztgrace/CVE-2019-5418-Rails3 random-robbie/CVE-2019-5418 CVE-2019-5420 # A remote code execution vulnerability in development mode Rails \u003c5.2.2.1, \u003c6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit. knqyf263/CVE-2019-5420 cved-sources/cve-2019-5420 CVE-2019-5475 # The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability. jaychouzzk/CVE-2019-5475-Nexus-Repository-Manager- rabbitmask/CVE-2019-5475-EXP CVE-2019-5489 # The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. mmxsrup/CVE-2019-5489 CVE-2019-5624 # Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Zip import function of Metasploit. Exploiting this vulnerability can allow an attacker to execute arbitrary code in Metasploit at the privilege level of the user running Metasploit. This issue affects: Rapid7 Metasploit Framework version 4.14.0 and prior versions. VoidSec/CVE-2019-5624 CVE-2019-5630 # A Cross-Site Request Forgery (CSRF) vulnerability was found in Rapid7 Nexpose InsightVM Security Console versions 6.5.0 through 6.5.68. This issue allows attackers to exploit CSRF vulnerabilities on API endpoints using Flash to circumvent a cross-domain pre-flight OPTIONS request. rbeede/CVE-2019-5630 CVE-2019-5700 # NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields of the boot image, which may lead to code execution, denial of service, escalation of privileges, and information disclosure. oscardagrach/CVE-2019-5700 CVE-2019-5736 # runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe. q3k/cve-2019-5736-poc Frichetten/CVE-2019-5736-PoC jas502n/CVE-2019-5736 denmilu/CVE-2019-5736 denmilu/cve-2019-5736-poc agppp/cve-2019-5736-poc Matthew-Stacks/cve-2019-5736 ebdecastro/poc-cve-2019-5736 twistlock/RunC-CVE-2019-5736 k-onishi/CVE-2019-5736-PoC k-onishi/CVE-2019-5736-PoC-0 zyriuse75/CVE-2019-5736-PoC stillan00b/CVE-2019-5736 milloni/cve-2019-5736-exp 13paulmurith/Docker-Runc-Exploit RyanNgWH/CVE-2019-5736-POC Lee-SungYoung/cve-2019-5736-study chosam2/cve-2019-5736-poc epsteina16/Docker-Escape-Miner GiverOfGifts/CVE-2019-5736-Custom-Runtime Billith/CVE-2019-5736-PoC CVE-2019-5786 # Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. exodusintel/CVE-2019-5786 CVE-2019-5825 # Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. timwr/CVE-2019-5825 CVE-2019-5893 # Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter. EmreOvunc/OpenSource-ERP-SQL-Injection CVE-2019-6203 # A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic. qingxp9/CVE-2019-6203-PoC CVE-2019-6207 # An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout. dothanthitiendiettiende/CVE-2019-6207 maldiohead/CVE-2019-6207 DimitriFourny/cve-2019-6207 CVE-2019-6225 # A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges. fatgrass/OsirisJailbreak12 TrungNguyen1909/CVE-2019-6225-macOS raystyle/jailbreak-iOS12 CVE-2019-6249 # An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/index.php?load=admins\u0026act=edit_info\u0026act_type=add. NMTech0x90/CVE-2019-6249_Hucart-cms CVE-2019-6260 # The ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware implement Advanced High-performance Bus (AHB) bridges, which allow arbitrary read and write access to the BMC's physical address space from the host (or from the network in unusual cases where the BMC console uart is attached to a serial concentrator). This CVE applies to the specific cases of iLPC2AHB bridge Pt I, iLPC2AHB bridge Pt II, PCIe VGA P2A bridge, DMA from/to arbitrary BMC memory via X-DMA, UART-based SoC Debug interface, LPC2AHB bridge, PCIe BMC P2A bridge, and Watchdog setup. amboar/cve-2019-6260 CVE-2019-6263 # An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings allowed stored XSS. praveensutar/CVE-2019-6263-Joomla-POC CVE-2019-6329 # HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328. ManhNDd/CVE-2019-6329 CVE-2019-6340 # Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows PATCH or POST requests, or the site has another web services module enabled, like JSON:API in Drupal 8, or Services or RESTful Web Services in Drupal 7. (Note: The Drupal 7 Services module itself does not require an update at this time, but you should apply other contributed updates associated with this advisory if Services is in use.) g0rx/Drupal-SA-CORE-2019-003 knqyf263/CVE-2019-6340 DevDungeon/CVE-2019-6340-Drupal-8.6.9-REST-Auth-Bypass oways/CVE-2019-6340 cved-sources/cve-2019-6340 d1vious/cve-2019-6340-bits jas502n/CVE-2019-6340 CVE-2019-6440 # Zemana AntiMalware before 3.0.658 Beta mishandles update logic. hexnone/CVE-2019-6440 CVE-2019-6446 # ** DISPUTED ** An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources. RayScri/CVE-2019-6446 CVE-2019-6447 # The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unauthenticated application/json data over HTTP. fs0c131y/ESFileExplorerOpenPortVuln CVE-2019-6453 # mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable). proofofcalc/cve-2019-6453-poc andripwn/mIRC-CVE-2019-6453 CVE-2019-6467 # A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-\u003e 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch. knqyf263/CVE-2019-6467 CVE-2019-6487 # TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field. afang5472/TP-Link-WDR-Router-Command-injection_POC CVE-2019-6690 # python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a \"CWE-20: Improper Input Validation\" issue affecting the affect functionality component. stigtsp/CVE-2019-6690-python-gnupg-vulnerability brianwrf/CVE-2019-6690 CVE-2019-6715 # pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data. random-robbie/cve-2019-6715 CVE-2019-7216 # An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php. Ekultek/CVE-2019-7216 CVE-2019-7219 # Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead. verifysecurity/CVE-2019-7219 CVE-2019-7238 # Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. mpgn/CVE-2019-7238 jas502n/CVE-2019-7238 verctor/nexus_rce_CVE-2019-7238 magicming200/CVE-2019-7238_Nexus_RCE_Tool CVE-2019-7304 # Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1. initstring/dirty_sock SecuritySi/CVE-2019-7304_DirtySock CVE-2019-7482 # Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. singletrackseeker/CVE-2019-7482 b4bay/CVE-2019-7482 CVE-2019-7609 # Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. jas502n/kibana-RCE mpgn/CVE-2019-7609 LandGrey/CVE-2019-7609 hekadan/CVE-2019-7609 rhbb/CVE-2019-7609 CVE-2019-7610 # Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. whoami0622/CVE-2019-7610 CVE-2019-7642 # D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10). xw77cve/CVE-2019-7642 CVE-2019-7839 # ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution. securifera/CVE-2019-7839 CVE-2019-8389 # A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder (with a crafted ../ payload) to the download.script endpoint. This will create a MusicPlayerArchive.zip archive that is publicly accessible and includes the content of any requested file (such as the /etc/passwd file). shawarkhanethicalhacker/CVE-2019-8389 CVE-2019-8446 # The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check. CyberTrashPanda/CVE-2019-8446 CVE-2019-8449 # The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability. mufeedvh/CVE-2019-8449 r0lh/CVE-2019-8449 CVE-2019-8451 # The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class. 0xbug/CVE-2019-8451 ianxtianxt/CVE-2019-8451 jas502n/CVE-2019-8451 h0ffayyy/Jira-CVE-2019-8451 CVE-2019-8513 # This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to execute arbitrary shell commands. genknife/cve-2019-8513 CVE-2019-8540 # A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout. maldiohead/CVE-2019-8540 CVE-2019-8565 # A race condition was addressed with additional validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to gain root privileges. genknife/cve-2019-8565 CVE-2019-8591 # A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory. jsherman212/used_sock CVE-2019-8601 # Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution. BadAccess11/CVE-2019-8601 CVE-2019-8627 # maldiohead/CVE-2019-8627 CVE-2019-8781 # A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges. A2nkF/macOS-Kernel-Exploit TrungNguyen1909/CVE-2019-8781-macOS CVE-2019-8936 # NTP through 4.2.8p12 has a NULL Pointer Dereference. snappyJack/CVE-2019-8936 CVE-2019-8942 # WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image containing PHP code in the Exif metadata. Exploitation can leverage CVE-2019-8943. brianwrf/WordPress_4.9.8_RCE_POC synacktiv/CVE-2019-8942 CVE-2019-8956 # In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the \"sctp_sendmsg()\" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory. butterflyhack/CVE-2019-8956 CVE-2019-8978 # An improper authentication vulnerability can be exploited through a race condition that occurs in Ellucian Banner Web Tailor 8.8.3, 8.8.4, and 8.9 and Banner Enterprise Identity Services 8.3, 8.3.1, 8.3.2, and 8.4, in conjunction with SSO Manager. This vulnerability allows remote attackers to steal a victim's session (and cause a denial of service) by repeatedly requesting the initial Banner Web Tailor main page with the IDMSESSID cookie set to the victim's UDCID, which in the case tested is the institutional ID. During a login attempt by a victim, the attacker can leverage the race condition and will be issued the SESSID that was meant for this victim. JoshuaMulliken/CVE-2019-8978 CVE-2019-8997 # An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering maliciously crafted XML in an existing field. nxkennedy/CVE-2019-8997 CVE-2019-9153 # Improper Verification of a Cryptographic Signature in OpenPGP.js \u003c=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a \"standalone\" or \"timestamp\" signature. ZenyWay/opgp-service-cve-2019-9153 CVE-2019-9184 # SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter. cved-sources/cve-2019-9184 CVE-2019-9193 # ** DISPUTED ** In PostgreSQL 9.3 through 11.2, the \"COPY TO/FROM PROGRAM\" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’. skyship36/CVE-2019-9193 CVE-2019-9194 # elFinder before 2.1.48 has a command injection vulnerability in the PHP connector. cved-sources/cve-2019-9194 CVE-2019-9202 # Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues. polict/CVE-2019-9202 CVE-2019-9465 # In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-133258003 alexbakker/CVE-2019-9465 CVE-2019-9506 # The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \"KNOB\") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing. francozappa/knob CVE-2019-9580 # In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a \"null\" origin value, potentially leading to XSS. mpgn/CVE-2019-9580 CVE-2019-9596 # Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint. gerwout/CVE-2019-9596-and-CVE-2019-9597 CVE-2019-9599 # The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneous sdctl/comm/lite_auth/ requests. s4vitar/AirDroidPwner CVE-2019-9621 # Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component. k8gege/ZimbraExploit CVE-2019-9653 # NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php. grayoneday/CVE-2019-9653 CVE-2019-9670 # mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability. rek7/Zimbra-RCE attackgithub/Zimbra-RCE CVE-2019-9673 # Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI. mgrube/CVE-2019-9673 CVE-2019-9729 # In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow. HyperSine/SdoKeyCrypt-sys-local-privilege-elevation CVE-2019-9730 # Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API. jthuraisamy/CVE-2019-9730 CVE-2019-9745 # CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service (Recognition Update Client Service) via an insecure communication channel (Named Pipe). The data (JSON) sent via this channel is used to import data from CRM software using plugins (.dll files). The plugin to import data from the EXQUISE software (DatasourceExquiseExporter.dll) can be persuaded to start arbitrary programs (including batch files) that are executed using the same privileges as Recognition Update Client Service (NT AUTHORITY\\SYSTEM), thus elevating privileges. This occurs because a higher-privileged process executes scripts from a directory writable by a lower-privileged user. KPN-CISO/CVE-2019-9745 CVE-2019-9766 # Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .mp3 file. moonheadobj/CVE-2019-9766 CVE-2019-9787 # WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default configuration. This occurs because CSRF protection is mishandled, and because Search Engine Optimization of A elements is performed incorrectly, leading to XSS. The XSS results in administrative access, which allows arbitrary changes to .php files. This is related to wp-admin/includes/ajax-actions.php and wp-includes/comment.php. rkatogit/cve-2019-9787_csrf_poc PalmTreeForest/CodePath_Week_7-8 sijiahi/Wordpress_cve-2019-9787_defense CVE-2019-9810 # Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox \u003c 66.0.1, Firefox ESR \u003c 60.6.1, and Thunderbird \u003c 60.6.1. xuechiyaobai/CVE-2019-9810-PoC 0vercl0k/CVE-2019-9810 CVE-2019-9896 # In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable. yasinyilmaz/vuln-chm-hijack CVE-2019-9978 # The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro. mpgn/CVE-2019-9978 hash3liZer/CVE-2019-9978 KTN1990/CVE-2019-9978 cved-sources/cve-2019-9978 2018 # CVE-2018-0101 # A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device. An attacker could exploit this vulnerability by sending multiple, crafted XML packets to a webvpn-configured interface on the affected system. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system, or cause a reload of the affected device. This vulnerability affects Cisco ASA Software that is running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, ASA 1000V Cloud Firewall, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4110 Security Appliance, Firepower 9300 ASA Security Module, Firepower Threat Defense Software (FTD). Cisco Bug IDs: CSCvg35618. 1337g/CVE-2018-0101-DOS-POC Cymmetria/ciscoasa_honeypot CVE-2018-0114 # A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header. zi0Black/POC-CVE-2018-0114 CVE-2018-0202 # clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400. jaychowjingjie/CVE-2018-0202 CVE-2018-0296 # A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on certain software releases that the ASA will not reload, but an attacker could view sensitive system information without authentication by using directory traversal techniques. The vulnerability is due to lack of proper input validation of the HTTP URL. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. An exploit could allow the attacker to cause a DoS condition or unauthenticated disclosure of information. This vulnerability applies to IPv4 and IPv6 HTTP traffic. This vulnerability affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software that is running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 1000V Cloud Firewall, ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4100 Series Security Appliance, Firepower 9300 ASA Security Module, FTD Virtual (FTDv). Cisco Bug IDs: CSCvi16029. milo2012/CVE-2018-0296 yassineaboukir/CVE-2018-0296 bhenner1/CVE-2018-0296 irbishop/CVE-2018-0296 qiantu88/CVE-2018-0296 CVE-2018-0708 # Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. ntkernel0/CVE-2019-0708 CVE-2018-0802 # Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812. zldww2011/CVE-2018-0802_POC rxwx/CVE-2018-0802 Ridter/RTF_11882_0802 denmilu/CVE-2018-0802_CVE-2017-11882 CVE-2018-0824 # A remote code execution vulnerability exists in \"Microsoft COM for Windows\" when it fails to properly handle serialized objects, aka \"Microsoft COM for Windows Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. codewhitesec/UnmarshalPwn CVE-2018-0833 # The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka \"SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability\". RealBearcat/CVE-2018-0833 CVE-2018-0886 # The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka \"CredSSP Remote Code Execution Vulnerability\". preempt/credssp CVE-2018-0952 # An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka \"Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers. atredispartners/CVE-2018-0952-SystemCollector CVE-2018-1000001 # In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution. 0x00-0x00/CVE-2018-1000001 CVE-2018-1000006 # GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16. CHYbeta/CVE-2018-1000006-DEMO CVE-2018-1000030 # Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed. The vulnerability lies when multiply threads are handling large amounts of data. In both cases there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a buffer, but Thread1 is already writing to the buffer without knowing how much to write. So when a large amount of data is being processed, it is very easy to cause memory corruption using a Heap-Buffer-Overflow. As for the Use-After-Free, Thread3-\u003eMalloc-\u003eThread1-\u003eFree's-\u003eThread2-Re-uses-Free'd Memory. The PSRT has stated that this is not a security vulnerability due to the fact that the attacker must be able to run code, however in some situations, such as function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such the DWF feels this issue deserves a CVE. tylepr96/CVE-2018-1000030 CVE-2018-1000082 # Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the victim access the infected trigger of the CSRF any code that match the victim privledges on the server can be executed.. SECFORCE/CVE-2018-1000082-exploit CVE-2018-1000117 # Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5. 1337r00t/CVE-2018-1000117-Exploit CVE-2018-1000134 # UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty password when running in synchronous mode. commit with applied fix https://github.com/pingidentity/ldapsdk/commit/8471904a02438c03965d21367890276bc25fa5a6#diff-f6cb23b459be1ec17df1da33760087fd that can result in Ability to impersonate any valid user. This attack appear to be exploitable via Providing valid username and empty password against servers that do not do additional validation as per https://tools.ietf.org/html/rfc4513#section-5.1.1. This vulnerability appears to have been fixed in after commit 8471904a02438c03965d21367890276bc25fa5a6. dragotime/cve-2018-1000134 CVE-2018-1000140 # rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate. s0/rsyslog-librelp-CVE-2018-1000140 s0/rsyslog-librelp-CVE-2018-1000140-fixed CVE-2018-1000199 # The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f. dsfau/CVE-2018-1000199 CVE-2018-1000224 # Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padding initialization vulnerability in (De)Serialization functions (core/io/marshalls.cpp) that can result in DoS (packet of death), possible leak of uninitialized memory. This attack appear to be exploitable via A malformed packet is received over the network by a Godot application that uses built-in serialization (e.g. game server, or game client). Could be triggered by multiplayer opponent. This vulnerability appears to have been fixed in 2.1.5, 3.0.6, master branch after commit feaf03421dda0213382b51aff07bd5a96b29487b. zann1x/ITS CVE-2018-1000529 # Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8. martinfrancois/CVE-2018-1000529 CVE-2018-1000802 # Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace. tna0y/CVE-2018-1000802-PoC CVE-2018-1000861 # A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way. 1NTheKut/CVE-2019-1003000_RCE-DETECTION CVE-2018-1002105 # In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection. gravitational/cve-2018-1002105 evict/poc_CVE-2018-1002105 imlzw/Kubernetes-1.12.3-all-auto-install bgeesaman/cve-2018-1002105 mdnix/cve-2018-1002105 CVE-2018-1010 # A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka \"Microsoft Graphics Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1012, CVE-2018-1013, CVE-2018-1015, CVE-2018-1016. ymgh96/Detecting-the-patch-of-CVE-2018-1010 CVE-2018-10118 # Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.admin.php. GeunSam2/CVE-2018-10118 CVE-2018-1026 # A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability.\" This affects Microsoft Office. This CVE ID is unique from CVE-2018-1030. ymgh96/Detecting-the-CVE-2018-1026-and-its-patch CVE-2018-10299 # An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two _receivers arguments in conjunction with a large _value argument, as exploited in the wild in April 2018, aka the \"batchOverflow\" issue. phzietsman/batchOverflow CVE-2018-10467 # alt3kx/CVE-2018-10467 CVE-2018-10517 # In CMS Made Simple (CMSMS) through 2.2.7, the \"module import\" operation in the admin dashboard contains a remote code execution vulnerability, exploitable by an admin user, because an XML Package can contain base64-encoded PHP code in a data element. 0x00-0x00/CVE-2018-10517 CVE-2018-10546 # An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences. dsfau/CVE-2018-10546 CVE-2018-1056 # An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files. pollonegro/Gpon-Routers CVE-2018-10561 # An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending \"?images\" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device. vhackor/GPON-home-routers-Exploit CVE-2018-10562 # An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output. f3d0x0/GPON 649/Pingpon-Exploit Choudai/GPON-LOADER c0ld1/GPON_RCE ATpiu/CVE-2018-10562 CVE-2018-10583 # An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. TaharAmine/CVE-2018-10583 CVE-2018-10715 # alt3kx/CVE-2018-10715 CVE-2018-10732 # The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) because of profile pictures visibility. alt3kx/CVE-2018-10732 CVE-2018-10821 # Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel. BalvinderSingh23/Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcms_v1.3 CVE-2018-1088 # A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink. MauroEldritch/GEVAUDAN CVE-2018-10920 # Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache. shutingrz/CVE-2018-10920_PoC CVE-2018-10933 # A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. SoledaD208/CVE-2018-10933 blacknbunny/CVE-2018-10933 hook-s3c/CVE-2018-10933 kn6869610/CVE-2018-10933 leapsecurity/libssh-scanner denmilu/CVE-2018-10933_ssh trbpnd/bpnd-libssh denmilu/CVE-2018-10933-libSSH-Authentication-Bypass marco-lancini/hunt-for-cve-2018-10933 hackerhouse-opensource/cve-2018-10933 cve-2018/cve-2018-10933 jas502n/CVE-2018-10933 ninp0/cve-2018-10933_poc IDX4CKS/CVE-2018-10933_Scanner Virgula0/POC-CVE-2018-10933 shifa123/pythonprojects-CVE-2018-10933 xFreed0m/CVE-2018-10933 Bifrozt/CVE-2018-10933 r3dxpl0it/CVE-2018-10933 ivanacostarubio/libssh-scanner throwawayaccount12312312/precompiled-CVE-2018-10933 ensimag-security/CVE-2018-10933 Ad1bDaw/libSSH-bypass sambiyal/CVE-2018-10933-POC nikhil1232/LibSSH-Authentication-Bypass Kurlee/LibSSH-exploit crispy-peppers/Libssh-server-CVE-2018-10933 youkergav/CVE-2018-10933 kristyna-mlcakova/CVE-2018-10933 CVE-2018-10936 # A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the driver. This could lead to a condition where a man-in-the-middle attacker could masquerade as a trusted server by providing a certificate for the wrong host, as long as it was signed by a trusted CA. tafamace/CVE-2018-10936 CVE-2018-10949 # mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discrepancy between the \"HTTP 404 - account is not active\" and \"HTTP 401 - must authenticate\" errors. 0x00-0x00/CVE-2018-10949 CVE-2018-1111 # DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol. knqyf263/CVE-2018-1111 kkirsche/CVE-2018-1111 CVE-2018-11235 # In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs \"git clone --recurse-submodules\" because submodule \"names\" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with \"../\" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server. Rogdham/CVE-2018-11235 vmotos/CVE-2018-11235 Choihosu/cve-2018-11235 CHYbeta/CVE-2018-11235-DEMO Kiss-sh0t/CVE-2018-11235-poc H0K5/clone_and_pwn knqyf263/CVE-2018-11235 ygouzerh/CVE-2018-11235 qweraqq/CVE-2018-11235-Git-Submodule-CE jhswartz/CVE-2018-11235 AnonymKing/CVE-2018-11235 morhax/CVE-2018-11235 cchang27/CVE-2018-11235-test nthuong95/CVE-2018-11235 CVE-2018-11236 # stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution. evilmiracle/CVE-2018-11236 CVE-2018-11311 # A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials. EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password CVE-2018-1133 # An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection. darrynten/MoodleExploit M4LV0/MOODLE-3.X-Remote-Code-Execution CVE-2018-11450 # A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login portal through the URL crafted by the attacker, the attacker can insert html/javascript and thus alter/rewrite the login portal page. Siemens PLM Software TEAMCENTER V9.1.3 and newer are not affected. LucvanDonk/Siemens-Siemens-PLM-Software-TEAMCENTER-Reflected-Cross-Site-Scripting-XSS-vulnerability CVE-2018-11510 # The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the 'script' parameter. mefulton/CVE-2018-11510 CVE-2018-11517 # mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0\u0026rq=0 requests to TCP port 11010. EmreOvunc/mySCADA-myPRO-7-projectID-Disclosure CVE-2018-11564 # Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will not be stripped or filtered. The user can create a link on the website pointing to \"/storage/poc.svg\" that will point to http://localhost/pagekit/storage/poc.svg. When a user comes along to click that link, it will trigger a XSS attack. GeunSam2/CVE-2018-11564 CVE-2018-11631 # Rondaful M1 Wristband Smart Band 1 devices allow remote attackers to send an arbitrary number of call or SMS notifications via crafted Bluetooth Low Energy (BLE) traffic. xMagass/bandexploit CVE-2018-11686 # The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php. mpgn/CVE-2018-11686 CVE-2018-11759 # The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK (mod_jk) Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via httpd, then it was possible for a specially constructed request to expose application functionality through the reverse proxy that was not intended for clients accessing the application via the reverse proxy. It was also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is some overlap between this issue and CVE-2018-1323, they are not identical. immunIT/CVE-2018-11759 Jul10l1r4/Identificador-CVE-2018-11759 CVE-2018-11761 # In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack. brianwrf/CVE-2018-11761 CVE-2018-11770 # From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs via spark-submit. However, the REST API does not use this or any other authentication mechanism, and this is not adequately documented. In this case, a user would be able to run a driver program without authenticating, but not launch executors, using the REST API. This REST API is also used by Mesos, when set up to run in cluster mode (i.e., when also running MesosClusterDispatcher), for job submission. Future versions of Spark will improve documentation on these points, and prohibit setting 'spark.authenticate.secret' when running the REST APIs, to make this clear. Future versions will also disable the REST API by default in the standalone master by changing the default value of 'spark.master.rest.enabled' to 'false'. ivanitlearning/CVE-2018-11770 CVE-2018-11776 # Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace. trbpnd/CVE-2018-11776 xfox64x/CVE-2018-11776 jiguangin/CVE-2018-11776 hook-s3c/CVE-2018-11776-Python-PoC mazen160/struts-pwn_CVE-2018-11776 bhdresh/CVE-2018-11776 knqyf263/CVE-2018-11776 Ekultek/Strutter tuxotron/cve-2018-11776-docker brianwrf/S2-057-CVE-2018-11776 649/Apache-Struts-Shodan-Exploit jezzus/CVE-2018-11776-Python-PoC cved-sources/cve-2018-11776 OzNetNerd/apche-struts-vuln-demo-cve-2018-11776 cucadili/CVE-2018-11776 LightC0der/Apache-Struts-0Day-Exploit CVE-2018-11788 # Apache Karaf provides a features deployer, which allows users to \"hot deploy\" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitigation codes against XXE. This is a potential security risk as an user can inject external XML entities in Apache Karaf version prior to 4.1.7 or 4.2.2. It has been fixed in Apache Karaf 4.1.7 and 4.2.2 releases. brianwrf/CVE-2018-11788 CVE-2018-11882 # Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660. jguard01/cve-2018-11882 CVE-2018-12018 # The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip value. The vulnerable remote node would be crashed by such an attack immediately, aka the EPoD (Ethereum Packet of Death) issue. k3v142/CVE-2018-12018 CVE-2018-12031 # Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware action. EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion CVE-2018-12038 # An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key. gdraperi/remote-bitlocker-encryption-report CVE-2018-12086 # Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests. kevinherron/stack-overflow-poc CVE-2018-1235 # Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege. AbsoZed/CVE-2018-1235 CVE-2018-12386 # A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR \u003c 60.2.2 and Firefox \u003c 62.0.3. Hydra3evil/cve-2018-12386 0xLyte/cve-2018-12386 CVE-2018-12418 # Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files. tafamace/CVE-2018-12418 CVE-2018-12463 # An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. alt3kx/CVE-2018-12463 CVE-2018-12533 # JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310. TheKalin/CVE-2018-12533 CVE-2018-12537 # In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response. tafamace/CVE-2018-12537 CVE-2018-12540 # In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet. tafamace/CVE-2018-12540 CVE-2018-1259 # Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict external reference expansion. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data's projection-based request payload binding to access arbitrary files on the system. tafamace/CVE-2018-1259 CVE-2018-12596 # Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the \"activateuser.aspx\" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins). alt3kx/CVE-2018-12596 CVE-2018-12597 # alt3kx/CVE-2018-12597 CVE-2018-12598 # alt3kx/CVE-2018-12598 CVE-2018-12613 # An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the \"$cfg['AllowArbitraryServer'] = true\" case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the \"$cfg['ServerDefault'] = 0\" case (which bypasses the login requirement and runs the vulnerable code without any authentication). 0x00-0x00/CVE-2018-12613 ivanitlearning/CVE-2018-12613 eastmountyxz/CVE-2018-12613-phpMyAdmin CVE-2018-1270 # Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. CaledoniaProject/CVE-2018-1270 genxor/CVE-2018-1270_EXP tafamace/CVE-2018-1270 Venscor/CVE-2018-1270 CVE-2018-1273 # Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack. knqyf263/CVE-2018-1273 wearearima/poc-cve-2018-1273 webr0ck/poc-cve-2018-1273 cved-sources/cve-2018-1273 jas502n/cve-2018-1273 CVE-2018-12798 # Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. sharmasandeepkr/cve-2018-12798 CVE-2018-1288 # In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss. joegallagher4/CVE-2018-1288- CVE-2018-12895 # WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the wp-includes/post.php wp_delete_attachment function. The attacker must have capabilities for files and posts that are normally available only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then launch a new installation process to increase the attacker's privileges. bloom-ux/cve-2018-12895-hotfix CVE-2018-12914 # A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI. RealBearcat/CVE-2018-12914 CVE-2018-1297 # When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code. RealBearcat/CVE-2018-1297 CVE-2018-1304 # The URL pattern of \"\" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected. knqyf263/CVE-2018-1304 thariyarox/tomcat_CVE-2018-1304_testing CVE-2018-1305 # Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them. RealBearcat/CVE-2018-1305 CVE-2018-1306 # The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information. JJSO12/Apache-Pluto-3.0.0–CVE-2018-1306 CVE-2018-1313 # In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is successful. If the server is using a policy file, the policy file must permit the database location to be read for the attack to work. The default Derby Network Server policy file distributed with the affected releases includes a permissive policy as the default Network Server policy, which allows the attack to work. tafamace/CVE-2018-1313 CVE-2018-1324 # A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package. tafamace/CVE-2018-1324 CVE-2018-13257 # The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service (CAS) service ticket validation, enabling a phishing attack from the CAS server login page. gluxon/CVE-2018-13257 CVE-2018-1327 # The Apache Struts REST Plugin is using XStream library which is vulnerable and allow perform a DoS attack when using a malicious request with specially crafted XML payload. Upgrade to the Apache Struts version 2.5.16 and switch to an optional Jackson XML handler as described here http://struts.apache.org/plugins/rest/#custom-contenttypehandlers. Another option is to implement a custom XML handler based on the Jackson XML handler from the Apache Struts 2.5.16. RealBearcat/S2-056-XStream CVE-2018-13341 # Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts may be calculated using information accessible to those with regular user privileges. Attackers could decipher these passwords, which may allow them to execute hidden API calls and escape the CTP console sandbox environment with elevated privileges. axcheron/crestron_getsudopwd CVE-2018-1335 # From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18. SkyBlueEternal/CVE-2018-1335-EXP-GUI GEIGEI123/CVE-2018-1335-Python3 CVE-2018-13379 # An Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests. milo2012/CVE-2018-13379 jpiechowka/at-doom-fortigate 0xHunter/FortiOS-Credentials-Disclosure Blazz3/cve2018-13379-nmap-script CVE-2018-13382 # An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests. milo2012/CVE-2018-13382 CVE-2018-13410 # ** DISPUTED ** Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an untrusted party controls the -TT value, given that the entire purpose of -TT is execution of arbitrary commands. shinecome/zip CVE-2018-13784 # PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php. ambionics/prestashop-exploits CVE-2018-13864 # A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows. It allows a remote attacker to download arbitrary files from the target server via specially crafted HTTP requests. tafamace/CVE-2018-13864 CVE-2018-14 # lckJack/legacySymfony CVE-2018-14083 # LICA miniCMTS E8K(u/i/...) devices allow remote attackers to obtain sensitive information via a direct POST request for the inc/user.ini file, leading to discovery of a password hash. pudding2/CVE-2018-14083 CVE-2018-14442 # Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs. payatu/CVE-2018-14442 sharmasandeepkr/PS-2018-002—CVE-2018-14442 CVE-2018-14634 # An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable. luan0ap/cve-2018-14634 CVE-2018-14665 # A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges. jas502n/CVE-2018-14665 bolonobolo/CVE-2018-14665 samueldustin/cve-2018-14665 CVE-2018-14667 # The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData. nareshmail/cve-2018-14667 zeroto01/CVE-2018-14667 r00t4dm/CVE-2018-14667 syriusbughunt/CVE-2018-14667 quandqn/cve-2018-14667 Venscor/CVE-2018-14667-poc CVE-2018-14714 # System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the \"load_script\" URL parameter. tin-z/CVE-2018-14714-POC CVE-2018-14729 # The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code. FoolMitAh/CVE-2018-14729 CVE-2018-14772 # Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administrator access to the web application can execute arbitrary code on the underlying system via Command Injection. spencerdodd/CVE-2018-14772 CVE-2018-14847 # MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface. BasuCert/WinboxPoC msterusky/WinboxExploit syrex1013/MikroRoot jas502n/CVE-2018-14847 th3f3n1x87/winboxPOC krnull/mikrotik-beast sinichi449/Python-MikrotikLoginExploit yukar1z0e/CVE-2018-14847 CVE-2018-15131 # An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests. 0x00-0x00/CVE-2018-15131 CVE-2018-15133 # In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in gadgetchains/Laravel/RCE/3/chain.php in phpggc. The attacker must know the application key, which normally would never occur, but could happen if the attacker previously had privileged access or successfully accomplished a previous attack. kozmic/laravel-poc-CVE-2018-15133 sKirua/Laravel-CVE-2018-15133 Prabesh01/Laravel-PHP-Unit-RCE-Auto-shell-uploader iansangaji/laravel-rce-cve-2018-15133 CVE-2018-15365 # A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable installations. An attacker must be an authenticated user in order to exploit the vulnerability. nixwizard/CVE-2018-15365 CVE-2018-15473 # OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. trimstray/massh-enum gbonacini/opensshenum Rhynorater/CVE-2018-15473-Exploit epi052/cve-2018-15473 pyperanger/CVE-2018-15473_exploit r3dxpl0it/CVE-2018-15473 JoeBlackSecurity/CrappyCode JoeBlackSecurity/SSHUsernameBruter-SSHUB cved-sources/cve-2018-15473 LINYIKAI/CVE-2018-15473-exp securemode/enumpossible trickster1103/- NHPT/SSH-account-enumeration-verification-script CaioCGH/EP4-redes CVE-2018-15499 # GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service (Race Condition and BSoD on Windows) by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine. DownWithUp/CVE-2018-15499 CVE-2018-15686 # A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239. hpcprofessional/remediate_cesa_2019_2091 CVE-2018-15727 # Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid \"remember me\" cookie knowing only a username of an LDAP or OAuth user. u238/grafana-CVE-2018-15727 CVE-2018-15832 # upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. JacksonKuo/Ubisoft-Uplay-Desktop-Client-63.0.5699.0 CVE-2018-15877 # The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor\u0026tab=activity_tools request. cved-sources/cve-2018-15877 CVE-2018-15912 # An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove arbitrary packages and package repositories potentially containing hooks with arbitrary code, which will automatically be run as root, or remove packages vital to the system. coderobe/CVE-2018-15912-PoC CVE-2018-15961 # Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. vah13/CVE-2018-15961 cved-sources/cve-2018-15961 CVE-2018-15968 # Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. sharmasandeepkr/cve-2018-15968 CVE-2018-15982 # Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. FlatL1neAPT/CVE-2018-15982 AirEvan/CVE-2018-15982_PoC Ridter/CVE-2018-15982_EXP kphongagsorn/adobe-flash-cve2018-15982 jas502n/CVE-2018-15982_EXP_IE scanfsec/CVE-2018-15982 SyFi/CVE-2018-15982 create12138/CVE-2018-15982 CVE-2018-16119 # Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code via a malicious MediaServer request to /userRpm/MediaServerFoldersCfgRpm.htm. hdbreaker/CVE-2018-16119 CVE-2018-16135 # c0d3G33k/CVE-2018-16135 CVE-2018-16156 # In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes an exported function named ChangeUninstallString. The default install does not contain this library and therefore if any DLL with that name exists in any directory listed in the PATH variable, it can be used to escalate to SYSTEM level privilege. securifera/CVE-2018-16156-Exploit CVE-2018-16283 # The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter. cved-sources/cve-2018-16283 CVE-2018-16323 # ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data. ttffdd/XBadManners CVE-2018-16341 # mpgn/CVE-2018-16341 CVE-2018-16370 # In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team\u0026m=Setting\u0026a=upgrade by placing a .php file in a ZIP archive. snappyJack/CVE-2018-16370 CVE-2018-16373 # Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save. snappyJack/CVE-2018-16373 CVE-2018-16447 # Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF. security-breachlock/CVE-2018-16447 CVE-2018-16509 # An issue was discovered in Artifex Ghostscript before 9.24. Incorrect \"restoration of privilege\" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the \"pipe\" instruction. farisv/PIL-RCE-Ghostscript-CVE-2018-16509 knqyf263/CVE-2018-16509 cved-sources/cve-2018-16509 rhpco/CVE-2018-16509 CVE-2018-16623 # Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the \"Site options\" in the admin panel dashboard dropdown. security-breachlock/CVE-2018-16623 CVE-2018-16624 # panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page. security-breachlock/CVE-2018-16624 CVE-2018-16625 # index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT element. security-breachlock/CVE-2018-16625 CVE-2018-16626 # index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name. security-breachlock/CVE-2018-16626 CVE-2018-16627 # panel/login in Kirby v2.5.12 allows Host header injection via the \"forget password\" feature. security-breachlock/CVE-2018-16627 CVE-2018-16628 # panel/login in Kirby v2.5.12 allows XSS via a blog name. security-breachlock/CVE-2018-16628 CVE-2018-16629 # panel/uploads/#elf_l1_XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element. security-breachlock/CVE-2018-16629 CVE-2018-16630 # Kirby v2.5.12 allows XSS by using the \"site files\" Add option to upload an SVG file. security-breachlock/CVE-2018-16630 CVE-2018-16631 # Subrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter. security-breachlock/CVE-2018-16631 CVE-2018-16632 # Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id\u0026_popup=1 title parameter at admin/blog/blogpost/add/. security-breachlock/CVE-2018-16632 CVE-2018-16633 # Pluck v4.7.7 allows XSS via the admin.php?action=editpage\u0026page= page title. security-breachlock/CVE-2018-16633 CVE-2018-16634 # Pluck v4.7.7 allows CSRF via admin.php?action=settings. security-breachlock/CVE-2018-16634 CVE-2018-16635 # Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php. security-breachlock/CVE-2018-16635 CVE-2018-16636 # Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter. security-breachlock/CVE-2018-16636 CVE-2018-16637 # Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI. security-breachlock/CVE-2018-16637 CVE-2018-16638 # Evolution CMS 1.4.x allows XSS via the manager/ search parameter. security-breachlock/CVE-2018-16638 CVE-2018-16639 # Typesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation. security-breachlock/CVE-2018-16639 CVE-2018-16706 # LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080. Nurdilin/CVE-2018-16706 CVE-2018-16711 # IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402088) with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for input. DownWithUp/CVE-2018-16711 CVE-2018-16712 # IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory. DownWithUp/CVE-2018-16712 CVE-2018-16713 # IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402084) with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for input, and provide output from the instruction. DownWithUp/CVE-2018-16713 CVE-2018-16763 # FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. dinhbaouit/CVE-2018-16763 SalimAlk/CVE-2018-16763- CVE-2018-16854 # A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15. danielthatcher/moodle-login-csrf CVE-2018-16858 # It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location. 4nimanegra/libreofficeExploit1 k0o97/detect-cve-2018-16858 CVE-2018-16875 # The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected. alexzorin/poc-cve-2018-16875 CVE-2018-16890 # libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow vulnerability. Using that overflow, a malicious or broken NTLM server could trick libcurl to accept a bad length + offset combination that would lead to a buffer read out-of-bounds. zjw88282740/CVE-2018-16890 CVE-2018-16987 # Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in the HTML source code. gquere/CVE-2018-16987 CVE-2018-17024 # admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an add_page action. security-breachlock/CVE-2018-17024 CVE-2018-17144 # Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash. iioch/ban-exploitable-bitcoin-nodes hikame/CVE-2018-17144_POC CVE-2018-17182 # An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations. jas502n/CVE-2018-17182 denmilu/CVE-2018-17182 denmilu/vmacache_CVE-2018-17182 CVE-2018-17207 # An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution. cved-sources/cve-2018-17207 CVE-2018-17246 # Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. mpgn/CVE-2018-17246 CVE-2018-17300 # Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table_manager/view/cu_menus section name. security-breachlock/CVE-2018-17300 CVE-2018-17301 # Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel. security-breachlock/CVE-2018-17301 CVE-2018-17302 # Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message. security-breachlock/CVE-2018-17302 CVE-2018-17418 # Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugins\\box\\filesmanager\\filesmanager.admin.php mishandles the forbidden_types variable. AlwaysHereFight/monstra_cms-3.0.4–getshell CVE-2018-17431 # Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL. Fadavvi/CVE-2018-17431-PoC CVE-2018-17456 # Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive \"git clone\" of a superproject if a .gitmodules file has a URL field beginning with a '-' character. SeahunOh/CVE-2018-17456 matlink/CVE-2018-17456 799600966/CVE-2018-17456 AnonymKing/CVE-2018-17456 CVE-2018-17873 # An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows an attacker with adjacent network access to read the SSH Private Key and log in to the root account. Luct0r/CVE-2018-17873 CVE-2018-17961 # Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183. matlink/CVE-2018-17961 CVE-2018-18026 # IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of service or code execution attack. DownWithUp/CVE-2018-18026 CVE-2018-18368 # Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. DimopoulosElias/SEPM-EoP CVE-2018-18387 # playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse. TheeBlind/CVE-2018-18387 CVE-2018-18500 # A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.5, Firefox ESR \u003c 60.5, and Firefox \u003c 65. sophoslabs/CVE-2018-18500 CVE-2018-18714 # RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges. DownWithUp/CVE-2018-18714 CVE-2018-18852 # Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018. hook-s3c/CVE-2018-18852 andripwn/CVE-2018-18852 CVE-2018-19126 # PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload. farisv/PrestaShop-CVE-2018-19126 CVE-2018-19127 # A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cache_template/*.tpl.php file along with a \"\u003c?php function \" substring. ab1gale/phpcms-2008-CVE-2018-19127 CVE-2018-19131 # Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors. JonathanWilbur/CVE-2018-19131 CVE-2018-19207 # The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-\u003eprepare() input is mishandled, as exploited in the wild in November 2018. aeroot/WP-GDPR-Compliance-Plugin-Exploit cved-sources/cve-2018-19207 CVE-2018-19276 # OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. mpgn/CVE-2018-19276 CVE-2018-19320 # The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system. fdiskyou/CVE-2018-19320 CVE-2018-19466 # A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls. MauroEldritch/lempo CVE-2018-19487 # The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profile() function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users. Antho59/wp-jobhunt-exploit CVE-2018-19506 # Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI. security-breachlock/CVE-2018-19506 CVE-2018-19507 # CMSimple 4.7.5 has XSS via an admin's use of a ?file=config\u0026action=array URI. security-breachlock/CVE-2018-19507 CVE-2018-19508 # CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles\u0026subdir=userfiles/images/flags/ URI. security-breachlock/CVE-2018-19508 CVE-2018-19518 # University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument. ensimag-security/CVE-2018-19518 CVE-2018-19537 # TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases. JackDoan/TP-Link-ArcherC5-RCE CVE-2018-19592 # The \"CLink4Service\" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITY\\SYSTEM, leading to total system takeover, a similar issue to CVE-2018-12441. BradyDonovan/CVE-2018-19592 CVE-2018-19596 # Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506. security-breachlock/CVE-2018-19596 CVE-2018-19597 # CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798. security-breachlock/CVE-2018-19597 CVE-2018-19598 # Statamic 2.10.3 allows XSS via First Name or Last Name to the /users URI in an 'Add new user' request. security-breachlock/CVE-2018-19598 CVE-2018-19599 # Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager\u0026path=uploads/ URI. NOTE: this is a discontinued product. security-breachlock/CVE-2018-19599 CVE-2018-19600 # Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin\u0026act=dispModuleAdminFileBox SVG upload. security-breachlock/CVE-2018-19600 CVE-2018-19601 # Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin\u0026act=dispModuleAdminFileBox SVG upload. security-breachlock/CVE-2018-19601 CVE-2018-19788 # A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command. AbsoZed/CVE-2018-19788 d4gh0s7/CVE-2018-19788 Ekultek/PoC jhlongjr/CVE-2018-19788 CVE-2018-19844 # FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319. security-breachlock/CVE-2018-19844 CVE-2018-19845 # There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php \"post-menu\" parameter, a related issue to CVE-2018-16325. security-breachlock/CVE-2018-19845 CVE-2018-19864 # NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow), resulting in ability to read camera feeds or reconfigure the device. pwnhacker0x18/CVE-2018-19864 CVE-2018-19901 # No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ \"article_title\" parameter. security-breachlock/CVE-2018-19901 CVE-2018-19902 # No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article \"keyword\" parameter. security-breachlock/CVE-2018-19902 CVE-2018-19903 # Persistent XSS exists in XSLT CMS via the create/?action=items.edit\u0026type=Page title field. security-breachlock/CVE-2018-19903 CVE-2018-19904 # Persistent XSS exists in XSLT CMS via the create/?action=items.edit\u0026type=Page \"body\" field. security-breachlock/CVE-2018-19904 CVE-2018-19905 # HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter. security-breachlock/CVE-2018-19905 CVE-2018-19906 # Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter. security-breachlock/CVE-2018-19906 CVE-2018-19911 # FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_system or txtapi/bg_system) query string on TCP port 8080, as demonstrated by an api/system?calc URI. This can also be exploited via CSRF. Alternatively, the default password of works for the freeswitch account can sometimes be used. iSafeBlue/freeswitch_rce CVE-2018-19918 # CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view/cu_views URI. security-breachlock/CVE-2018-19918 CVE-2018-19919 # Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element. security-breachlock/CVE-2018-19919 CVE-2018-1999002 # A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers to send crafted HTTP requests returning the contents of any file on the Jenkins master file system that the Jenkins master has access to. wetw0rk/Exploit-Development 0xtavian/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins 0x6b7966/CVE-2018-1999002 CVE-2018-20062 # An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\\think\\Request/input\u0026filter=phpinfo\u0026data=1 query string. NS-Sp4ce/thinkphp5.XRce CVE-2018-20162 # Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root. stigtsp/CVE-2018-20162-digi-lr54-restricted-shell-escape CVE-2018-20165 # Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a menuitem URI. hect0rS/Reflected-XSS-on-Opentext-Portal-v7.4.4 CVE-2018-2019 # IBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 155265. attakercyebr/hack4lx_CVE-2018-2019 CVE-2018-20250 # In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path. WyAtu/CVE-2018-20250 QAX-A-Team/CVE-2018-20250 nmweizi/CVE-2018-20250-poc-winrar blunden/UNACEV2.DLL-CVE-2018-20250 easis/CVE-2018-20250-WinRAR-ACE STP5940/CVE-2018-20250 n4r1b/WinAce-POC technicaldada/hack-winrar Ektoplasma/ezwinrar arkangel-dev/CVE-2018-20250-WINRAR-ACE-GUI AeolusTF/CVE-2018-20250 joydragon/Detect-CVE-2018-20250 DANIELVISPOBLOG/WinRar_ACE_exploit_CVE-2018-20250 denmilu/CVE-2018-20250 930201676/CVE-2018-20250 eastmountyxz/CVE-2018-20250-WinRAR CVE-2018-20343 # Multiple buffer overflow vulnerabilities have been found in Ken Silverman Build Engine 1. An attacker could craft a special map file to execute arbitrary code when the map file is loaded. Alexandre-Bartel/CVE-2018-20343 CVE-2018-20434 # LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture\u0026format=text\u0026type=snmpwalk\u0026hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling. mhaskar/CVE-2018-20434 CVE-2018-20555 # The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover. fs0c131y/CVE-2018-20555 CVE-2018-20580 # The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file. gscamelo/CVE-2018-20580 CVE-2018-20718 # In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed to use the $phpserial$a:0:{} syntax to store a preference. An attacker either needs a \"public link\" of a file, or access to any unprivileged user account for creation of such a link. us3r777/CVE-2018-20718 CVE-2018-2380 # SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing \"traverse to parent directory\" are passed through to the file APIs. erpscanteam/CVE-2018-2380 CVE-2018-2628 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). forlin/CVE-2018-2628 shengqi158/CVE-2018-2628 skydarker/CVE-2018-2628 jiansiting/weblogic-cve-2018-2628 zjxzjx/CVE-2018-2628-detect aedoo/CVE-2018-2628-MultiThreading hawk-tiger/CVE-2018-2628 9uest/CVE-2018-2628 Shadowshusky/CVE-2018-2628all shaoshore/CVE-2018-2628 tdy218/ysoserial-cve-2018-2628 s0wr0b1ndef/CVE-2018-2628 wrysunny/cve-2018-2628 jas502n/CVE-2018-2628 stevenlinfeng/CVE-2018-2628 denmilu/CVE-2018-2628 Nervous/WebLogic-RCE-exploit Lighird/CVE-2018-2628 0xMJ/CVE-2018-2628 0xn0ne/weblogicScanner CVE-2018-2636 # Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security). Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Simphony. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). erpscanteam/CVE-2018-2636 Cymmetria/micros_honeypot CVE-2018-2844 # Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). renorobert/virtualbox-cve-2018-2844 CVE-2018-2879 # Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. Note: Please refer to Doc ID \u003ca href=\"http://support.oracle.com/CSP/main/article?cmd=show\u0026type=NOT\u0026id=2386496.1\"\u003eMy Oracle Support Note 2386496.1 for instructions on how to address this issue. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). MostafaSoliman/Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit AymanElSherif/oracle-oam-authentication-bypas-exploit redtimmy/OAMBuster CVE-2018-2893 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). anbai-inc/CVE-2018-2893 ryanInf/CVE-2018-2893 bigsizeme/CVE-2018-2893 pyn3rd/CVE-2018-2893 qianl0ng/CVE-2018-2893 jas502n/CVE-2018-2893 ianxtianxt/CVE-2018-2893 CVE-2018-2894 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). 111ddea/cve-2018-2894 LandGrey/CVE-2018-2894 jas502n/CVE-2018-2894 CVE-2018-3191 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). arongmh/CVE-2018-3191 pyn3rd/CVE-2018-3191 Libraggbond/CVE-2018-3191 jas502n/CVE-2018-3191 mackleadmire/CVE-2018-3191-Rce-Exploit CVE-2018-3245 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). pyn3rd/CVE-2018-3245 jas502n/CVE-2018-3245 ianxtianxt/CVE-2018-3245 CVE-2018-3252 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). jas502n/CVE-2018-3252 b1ueb0y/CVE-2018-3252 pyn3rd/CVE-2018-3252 CVE-2018-3260 # ionescu007/SpecuCheck CVE-2018-3295 # Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). ndureiss/e1000_vulnerability_exploit CVE-2018-3608 # A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes. ZhiyuanWang-Chengdu-Qihoo360/Trend_Micro_POC CVE-2018-3639 # Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4. tyhicks/ssbd-tools malindarathnayake/Intel-CVE-2018-3639-Mitigation_RegistryUpdate mmxsrup/CVE-2018-3639 Shuiliusheng/CVE-2018-3639-specter-v4- CVE-2018-3760 # There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately. mpgn/CVE-2018-3760 CVE-2018-3783 # A privilege escalation detected in flintcms versions \u003c= 1.1.9 allows account takeover due to blind MongoDB injection in password reset. nisaruj/nosqli-flintcms CVE-2018-3810 # Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. The saveGoogleCode() function in smartgooglecode.php does not check if the current request is made by an authorized user, thus allowing any unauthenticated user to successfully update the inserted code. lucad93/CVE-2018-3810 cved-sources/cve-2018-3810 CVE-2018-3811 # SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. The saveGoogleAdWords() function in smartgooglecode.php did not use prepared statements and did not sanitize the $_POST[\"oId\"] variable before passing it as input into the SQL query. cved-sources/cve-2018-3811 CVE-2018-4013 # An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability. DoubleMice/cve-2018-4013 r3dxpl0it/RTSPServer-Code-Execution-Vulnerability CVE-2018-4087 # An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the \"Core Bluetooth\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. rani-i/bluetoothdPoC MTJailed/UnjailMe joedaguy/Exploit11.2 CVE-2018-4110 # An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the \"Web App\" component. It allows remote attackers to bypass intended restrictions on cookie persistence. bencompton/ios11-cookie-set-expire-issue CVE-2018-4121 # An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. FSecureLABS/CVE-2018-4121 denmilu/CVE-2018-4121 jezzus/CVE-2018-4121 CVE-2018-4124 # An issue was discovered in certain Apple products. iOS before 11.2.6 is affected. macOS before 10.13.3 Supplemental Update is affected. tvOS before 11.2.6 is affected. watchOS before 4.2.3 is affected. The issue involves the \"CoreText\" component. It allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a crafted string containing a certain Telugu character. ZecOps/TELUGU_CVE-2018-4124_POC CVE-2018-4150 # An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Jailbreaks/CVE-2018-4150 RPwnage/LovelySn0w littlelailo/incomplete-exploit-for-CVE-2018-4150-bpf-filter-poc- CVE-2018-4185 # In iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4, an information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. bazad/x18-leak CVE-2018-4193 # An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the \"Windows Server\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Synacktiv-contrib/CVE-2018-4193 CVE-2018-4233 # An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. saelo/cve-2018-4233 CVE-2018-4241 # An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the \"Kernel\" component. A buffer overflow in mptcp_usr_connectx allows attackers to execute arbitrary code in a privileged context via a crafted app. 0neday/multi_path CVE-2018-4242 # An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the \"Hypervisor\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. yeonnic/Look-at-The-XNU-Through-A-Tube-CVE-2018-4242-Write-up-Translation- CVE-2018-4243 # An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the \"Kernel\" component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary code in a privileged context via a crafted app. Jailbreaks/empty_list CVE-2018-4248 # An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2. bazad/xpc-string-leak CVE-2018-4280 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2. bazad/launchd-portrep bazad/blanket CVE-2018-4327 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1. omerporze/brokentooth harryanon/POC-CVE-2018-4327-and-CVE-2018-4330 CVE-2018-4330 # In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling. omerporze/toothfairy CVE-2018-4331 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. bazad/gsscred-race CVE-2018-4343 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. bazad/gsscred-move-uaf CVE-2018-4407 # A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. Pa55w0rd/check_icmp_dos unixpickle/cve-2018-4407 s2339956/check_icmp_dos-CVE-2018-4407- farisv/AppleDOS WyAtu/CVE-2018-4407 zteeed/CVE-2018-4407-IOS SamDecrock/node-cve-2018-4407 r3dxpl0it/CVE-2018-4407 lucagiovagnoli/CVE-2018-4407 anonymouz4/Apple-Remote-Crash-Tool-CVE-2018-4407 soccercab/wifi zeng9t/CVE-2018-4407-iOS-exploit 5431/CVE-2018-4407 pwnhacker0x18/iOS-Kernel-Crash CVE-2018-4411 # A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14. lilang-wu/POC-CVE-2018-4411 CVE-2018-4415 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1. T1V0h/CVE-2018-4415 CVE-2018-4431 # A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2. ktiOSz/PoC_iOS12 CVE-2018-4441 # A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9. Cryptogenic/PS4-6.20-WebKit-Code-Execution-Exploit CVE-2018-4878 # A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018. ydl555/CVE-2018-4878- mdsecactivebreach/CVE-2018-4878 hybridious/CVE-2018-4878 vysecurity/CVE-2018-4878 anbai-inc/CVE-2018-4878 Sch01ar/CVE-2018-4878 SyFi/CVE-2018-4878 ydl555/CVE-2018-4878 B0fH/CVE-2018-4878 Yable/CVE-2018-4878 HuanWoWeiLan/SoftwareSystemSecurity-2019 CVE-2018-4901 # An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the document identity representation. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code. bigric3/CVE-2018-4901 CVE-2018-5234 # The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software. embedi/ble_norton_core CVE-2018-5711 # gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx. huzhenghui/Test-7-2-0-PHP-CVE-2018-5711 huzhenghui/Test-7-2-1-PHP-CVE-2018-5711 CVE-2018-5724 # MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi. gusrmsdlrh/Python-CVE-Code CVE-2018-5728 # Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information via a /cgi-bin/getSysStatus request, as demonstrated by the Latitude/Longitude of the ship, or satellite details. ezelf/seatel_terminals CVE-2018-5740 # \"deny-answer-aliases\" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0-\u003e9.8.8, 9.9.0-\u003e9.9.13, 9.10.0-\u003e9.10.8, 9.11.0-\u003e9.11.4, 9.12.0-\u003e9.12.2, 9.13.0-\u003e9.13.2. sischkg/cve-2018-5740 CVE-2018-5951 # An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack. Nat-Lab/CVE-2018-5951 CVE-2018-5955 # An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI. cisp/GitStackRCE YagamiiLight/Cerberus CVE-2018-6242 # Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code. DavidBuchanan314/NXLoader reswitched/rcm-modchips switchjs/fusho CVE-2018-6376 # In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message. knqyf263/CVE-2018-6376 CVE-2018-6389 # In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times. yolabingo/wordpress-fix-cve-2018-6389 WazeHell/CVE-2018-6389 rastating/modsecurity-cve-2018-6389 knqyf263/CVE-2018-6389 JulienGadanho/cve-2018-6389-php-patcher dsfau/wordpress-CVE-2018-6389 Jetserver/CVE-2018-6389-FIX thechrono13/PoC—CVE-2018-6389 BlackRouter/cve-2018-6389 alessiogilardi/PoC—CVE-2018-6389 JavierOlmedo/wordpress-cve-2018-6389 m3ssap0/wordpress_cve-2018-6389 s0md3v/Shiva mudhappy/Wordpress-Hack-CVE-2018-6389 armaanpathan12345/WP-DOS-Exploit-CVE-2018-6389 ItinerisLtd/trellis-cve-2018-6389 Zazzzles/Wordpress-DOS fakedob/tvsz heisenberg-official/Wordpress-DOS-Attack-CVE-2018-6389 ianxtianxt/CVE-2018-6389 CVE-2018-6396 # SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action. JavierOlmedo/joomla-cve-2018-6396 CVE-2018-6407 # An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to /hy-cgi/devices.cgi?cmd=searchlandevice. The crash completely freezes the device. dreadlocked/ConceptronicIPCam_MultipleVulnerabilities CVE-2018-6479 # An issue was discovered on Netwave IP Camera devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to the / URI. dreadlocked/netwave-dosvulnerability CVE-2018-6518 # Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard\u0026type=step3 request to /adminzone/index.php. faizzaidi/Composr-CMS-10.0.13-Cross-Site-Scripting-XSS CVE-2018-6546 # plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, executes code at a user-defined (local or SMB) path as SYSTEM when the execute_installer parameter is used in an HTTP message. This occurs without properly authenticating the user. securifera/CVE-2018-6546-Exploit YanZiShuang/CVE-2018-6546 CVE-2018-6574 # Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow \"go get\" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked. acole76/cve-2018-6574 neargle/CVE-2018-6574-POC willbo4r/go-get-rce ahmetmanga/go-get-rce ahmetmanga/cve-2018-6574 michiiii/go-get-exploit kenprice/cve-2018-6574 redirected/cve-2018-6574 20matan/CVE-2018-6574-POC zur250/Zur-Go-GET-RCE-Solution mekhalleh/cve-2018-6574 veter069/go-get-rce duckzsc2/CVE-2018-6574-POC ivnnn1/CVE-2018-6574 dollyptm/cve-2018-6574 qweraqq/CVE-2018-6574 d4rkshell/go-get-rce chaosura/CVE-2018-6574 french560/ptl6574 InfoSecJack/CVE-2018-6574 asavior2/CVE-2018-6574 drset/golang frozenkp/CVE-2018-6574 kev-ho/cve-2018-6574-payload sdosis/cve-2018-6574 No1zy/CVE-2018-6574-PoC nthuong95/CVE-2018-6574 AdriVillaB/CVE-2018-6574 yitingfan/CVE-2018-6574_demo mhamed366/CVE-2018-6574 Eugene24/CVE-2018-6574 coblax/CVE-2018-6574 CVE-2018-6622 # An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation. kkamagui/napper-for-tpm CVE-2018-6643 # Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter. undefinedmode/CVE-2018-6643 CVE-2018-6789 # An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely. c0llision/exim-vuln-poc beraphin/CVE-2018-6789 synacktiv/Exim-CVE-2018-6789 martinclauss/exim-rce-cve-2018-6789 CVE-2018-6791 # An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary command execution. An example of an offending volume label is \"$(touch b)\" -- this will create a file called b in the home folder. rarar0/KDE_Vuln CVE-2018-6890 # Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3. pradeepjairamani/WolfCMS-XSS-POC CVE-2018-6892 # An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the \"CloudMe Sync\" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution. manojcode/CloudMe-Sync-1.10.9—Buffer-Overflow-SEH-DEP-Bypass manojcode/-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass CVE-2018-6905 # The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process. pradeepjairamani/TYPO3-XSS-POC CVE-2018-6961 # VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution. bokanrb/CVE-2018-6961 r3dxpl0it/CVE-2018-6961 CVE-2018-6981 # VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host. heaphopopotamus/vmxnet3Hunter CVE-2018-7171 # Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot) in the contentbase parameter to rpc/set_all. mechanico/sharingIsCaring CVE-2018-7197 # An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting (XSS) vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL. Alyssa-o-Herrera/CVE-2018-7197 CVE-2018-7211 # An issue was discovered in iDashboards 9.6b. The SSO implementation is affected by a weak obfuscation library, allowing man-in-the-middle attackers to discover credentials. c3r34lk1ll3r/CVE-2018-7211-PoC CVE-2018-7249 # An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race condition that leads to a use-after-free. When exploited, an unprivileged attacker can run arbitrary code in the kernel. Elvin9/NotSecDrv CVE-2018-7250 # An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. An uninitialized kernel pool allocation in IOCTL 0xCA002813 allows a local unprivileged attacker to leak 16 bits of uninitialized kernel PagedPool data. Elvin9/SecDrvPoolLeak CVE-2018-7284 # A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the res_pjsip_pubsub module stores the accepted formats present in the Accept headers of the request. This code did not limit the number of headers it processed, despite having a fixed limit of 32. If more than 32 Accept headers were present, the code would write outside of its memory and cause a crash. Rodrigo-D/astDoS CVE-2018-7422 # A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal. 0x00-0x00/CVE-2018-7422 CVE-2018-7489 # FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath. tafamace/CVE-2018-7489 CVE-2018-7600 # Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. g0rx/CVE-2018-7600-Drupal-RCE a2u/CVE-2018-7600 dreadlocked/Drupalgeddon2 knqyf263/CVE-2018-7600 dr-iman/CVE-2018-7600-Drupal-0day-RCE jirojo2/drupalgeddon2 dwisiswant0/CVE-2018-7600 thehappydinoa/CVE-2018-7600 sl4cky/CVE-2018-7600 sl4cky/CVE-2018-7600-Masschecker FireFart/CVE-2018-7600 pimps/CVE-2018-7600 lorddemon/drupalgeddon2 Sch01ar/CVE-2018-7600 Hestat/drupal-check fyraiga/CVE-2018-7600-drupalgeddon2-scanner Damian972/drupalgeddon-2 Jyozi/CVE-2018-7600 happynote3966/CVE-2018-7600 shellord/CVE-2018-7600-Drupal-RCE r3dxpl0it/CVE-2018-7600 cved-sources/cve-2018-7600 neal1991/drupalgeddon2 drugeddon/drupal-exploit shellord/Drupalgeddon-Mass-Exploiter zhzyker/CVE-2018-7600-Drupal-POC-EXP rabbitmask/CVE-2018-7600-Drupal7 CVE-2018-7602 # A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild. 1337g/Drupalgedon3 happynote3966/CVE-2018-7602 kastellanos/CVE-2018-7602 CVE-2018-7690 # A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access alt3kx/CVE-2018-7690 CVE-2018-7691 # A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access alt3kx/CVE-2018-7691 CVE-2018-7747 # Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a greeting message, (2) the email transaction log, or (3) an imported form. mindpr00f/CVE-2018-7747 CVE-2018-7750 # transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step. jm33-m0/CVE-2018-7750 CVE-2018-7935 # lawrenceamer/CVE-2018-7935 CVE-2018-8021 # Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation. r3dxpl0it/Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021 CVE-2018-8032 # Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services. cairuojin/CVE-2018-8032 CVE-2018-8038 # Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters. tafamace/CVE-2018-8038 CVE-2018-8039 # It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty(\"java.protocol.handler.pkgs\", \"com.sun.net.ssl.internal.www.protocol\");'. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old com.sun.net.ssl.HostnameVerifier interface. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an exception is thrown. However, in Apache CXF prior to 3.2.5 and 3.1.16 the exception is caught in the reflection code and not properly propagated. What this means is that if you are using the com.sun.net.ssl stack with CXF, an error with TLS hostname verification will not be thrown, leaving a CXF client subject to man-in-the-middle attacks. tafamace/CVE-2018-8039 CVE-2018-8045 # In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view. luckybool1020/CVE-2018-8045 CVE-2018-8060 # HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. This affects IOCTLs higher than 0x85FE2600 with the HWiNFO32 symbolic device name. otavioarj/SIOCtl CVE-2018-8065 # An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly sending a variety of HTTP requests with long HTTP header values or long URIs. EgeBalci/CVE-2018-8065 CVE-2018-8078 # YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html. AlwaysHereFight/YZMCMSxss CVE-2018-8090 # Quick Heal Total Security 64 bit 17.00 (QHTS64.exe), (QHTSFT64.exe) - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00 (QHTS32.exe), (QHTSFT32.exe) - Version 10.0.1.38; Quick Heal Internet Security 64 bit 17.00 (QHIS64.exe), (QHISFT64.exe) - Version 10.0.0.37; Quick Heal Internet Security 32 bit 17.00 (QHIS32.exe), (QHISFT32.exe) - Version 10.0.0.37; Quick Heal AntiVirus Pro 64 bit 17.00 (QHAV64.exe), (QHAVFT64.exe) - Version 10.0.0.37; and Quick Heal AntiVirus Pro 32 bit 17.00 (QHAV32.exe), (QHAVFT32.exe) - Version 10.0.0.37 allow DLL Hijacking because of Insecure Library Loading. kernelm0de/CVE-2018-8090 CVE-2018-8108 # The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by workGroupList text. zlgxzswjy/BUI-select-xss CVE-2018-8115 # A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to properly validate input while importing a container image, aka \"Windows Host Compute Service Shim Remote Code Execution Vulnerability.\" This affects Windows Host Compute. aquasecurity/scan-cve-2018-8115 CVE-2018-8120 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166. bigric3/cve-2018-8120 unamer/CVE-2018-8120 ne1llee/cve-2018-8120 alpha1ab/CVE-2018-8120 areuu/CVE-2018-8120 EVOL4/CVE-2018-8120 ozkanbilge/CVE-2018-8120 qiantu88/CVE-2018-8120 Y0n0Y/cve-2018-8120-exp CVE-2018-8172 # A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka \"Visual Studio Remote Code Execution Vulnerability.\" This affects Microsoft Visual Studio, Expression Blend 4. SyFi/CVE-2018-8172 CVE-2018-8174 # A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka \"Windows VBScript Engine Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 0x09AL/CVE-2018-8174-msf Yt1g3r/CVE-2018-8174_EXP SyFi/CVE-2018-8174 orf53975/Rig-Exploit-for-CVE-2018-8174 piotrflorczyk/cve-2018-8174_analysis denmilu/CVE-2018-8174-msf ruthlezs/ie11_vbscript_exploit CVE-2018-8208 # An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka \"Windows Desktop Bridge Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8214. kaisaryousuf/CVE-2018-8208 CVE-2018-8214 # An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka \"Windows Desktop Bridge Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8208. guwudoor/CVE-2018-8214 CVE-2018-8284 # A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka \".NET Framework Remote Code Injection Vulnerability.\" This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2. quantiti/CVE-2018-8284-Sharepoint-RCE CVE-2018-8353 # A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390. whereisr0da/CVE-2018-8353-POC CVE-2018-8389 # A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8390. sharmasandeepkr/cve-2018-8389 CVE-2018-8414 # A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka \"Windows Shell Remote Code Execution Vulnerability.\" This affects Windows 10 Servers, Windows 10. whereisr0da/CVE-2018-8414-POC CVE-2018-8420 # A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka \"MS XML Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. idkwim/CVE-2018-8420 CVE-2018-8440 # An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka \"Windows ALPC Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. sourceincite/CVE-2018-8440 CVE-2018-8453 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Mkv4/cve-2018-8453-exp ze0r/cve-2018-8453-exp thepwnrip/leHACK-Analysis-of-CVE-2018-8453 CVE-2018-8495 # A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka \"Windows Shell Remote Code Execution Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers. whereisr0da/CVE-2018-8495-POC CVE-2018-8581 # An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka \"Microsoft Exchange Server Elevation of Privilege Vulnerability.\" This affects Microsoft Exchange Server. WyAtu/CVE-2018-8581 qiantu88/CVE-2018-8581 Ridter/Exchange2domain CVE-2018-8639 # An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641. ze0r/CVE-2018-8639-exp timwhitez/CVE-2018-8639-EXP CVE-2018-8718 # Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request. GeunSam2/CVE-2018-8718 CVE-2018-8733 # Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability. xfer0/Nagios-XI-5.2.6-9-5.3-5.4-Chained-Remote-Root-Exploit-Fixed CVE-2018-8820 # An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the \"match\" parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xp_cmdshell. In some cases, the authentication requirement for the attack can be met by sending the default admin credentials. hateshape/frevvomapexec CVE-2018-8897 # A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL \u003c 3, the debug exception is delivered after the transfer to CPL \u003c 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs. nmulasmajic/CVE-2018-8897 jiazhang0/pop-mov-ss-exploit can1357/CVE-2018-8897 nmulasmajic/syscall_exploit_CVE-2018-8897 CVE-2018-8941 # Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set Diagnostics_Entry' function in an HTTP request, related to /userfs/bin/tcapi. SECFORCE/CVE-2018-8941 CVE-2018-8943 # There is a SQL injection in the PHPSHE 1.6 userbank parameter. coolboy0816/CVE-2018-8943 CVE-2018-8970 # The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zero name length, which causes silent omission of hostname verification, and consequently allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: the LibreSSL documentation indicates that this special case is supported, but the BoringSSL documentation does not. tiran/CVE-2018-8970 CVE-2018-9059 # Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791. manojcode/easy-file-share-7.2-exploit-CVE-2018-9059 CVE-2018-9075 # For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick \"``\" characters in the client:password parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter. beverlymiller818/cve-2018-9075 CVE-2018-9160 # SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses. mechanico/sickrageWTF CVE-2018-9206 # Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload \u003c= v9.22.0 Den1al/CVE-2018-9206 Stahlz/JQShell cved-sources/cve-2018-9206 CVE-2018-9207 # Arbitrary file upload in jQuery Upload File \u003c= 4.0.2 cved-sources/cve-2018-9207 CVE-2018-9208 # Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut \u003c= v1.1Beta cved-sources/cve-2018-9208 CVE-2018-9276 # An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability (both on the server and on devices) by sending malformed parameters in sensor or notification management scenarios. wildkindcc/CVE-2018-9276 CVE-2018-9375 # IOActive/AOSP-ExploitUserDictionary CVE-2018-9411 # tamirzb/CVE-2018-9411 CVE-2018-9468 # IOActive/AOSP-DownloadProviderHijacker CVE-2018-9493 # In the content provider of the download manager, there is a possible SQL injection due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111085900 IOActive/AOSP-DownloadProviderDbDumper CVE-2018-9539 # In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-113027383 tamirzb/CVE-2018-9539 CVE-2018-9546 # IOActive/AOSP-DownloadProviderHeadersDumper CVE-2018-9948 # This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of typed arrays. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5380. manojcode/Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 orangepirate/cve-2018-9948-9958-exp CVE-2018-9950 # This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF documents. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-5413. sharmasandeepkr/PS-2017-13—CVE-2018-9950 CVE-2018-9951 # This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of CPDF_Object objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5414. sharmasandeepkr/cve-2018-9951 CVE-2018-9958 # This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Text Annotations. When setting the point attribute, the process does not properly validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5620. t3rabyt3/CVE-2018-9958–Exploit CVE-2018-9995 # TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a \"Cookie: uid=admin\" header, as demonstrated by a device.rsp?opt=user\u0026cmd=list request that provides credentials within JSON data in a response. ezelf/CVE-2018-9995_dvr_credentials zzh217/CVE-2018-9995_Batch_scanning_exp Huangkey/CVE-2018-9995_check gwolfs/CVE-2018-9995-ModifiedByGwolfs shacojx/cve-2018-9995 Cyb0r9/DVR-Exploiter codeholic2k18/CVE-2018-9995 TateYdq/CVE-2018-9995-ModifiedByGwolfs ABIZCHI/CVE-2018-9995_dvr_credentials IHA114/CVE-2018-9995_dvr_credentials likaifeng0/CVE-2018-9995_dvr_credentials-dev_tool b510/CVE-2018-9995-POC keyw0rds/HTC g5q2/cve-2018-9995 2017 # CVE-2017-0038 # gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap memory via a crafted EMF file, as demonstrated by an EMR_SETDIBITSTODEVICE record with modified Device Independent Bitmap (DIB) dimensions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3216, CVE-2016-3219, and/or CVE-2016-3220. k0keoyo/CVE-2017-0038-EXP-C-JS CVE-2017-0065 # Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Microsoft Browser Information Disclosure Vulnerability.\" This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0011, CVE-2017-0017, and CVE-2017-0068. Dankirk/cve-2017-0065 CVE-2017-0075 # Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka \"Hyper-V Remote Code Execution Vulnerability.\" This vulnerability is different from that described in CVE-2017-0109. 4B5F5F4B/HyperV CVE-2017-0106 # Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\" ryhanson/CVE-2017-0106 CVE-2017-0108 # The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka \"Graphics Component Remote Code Execution Vulnerability.\" This vulnerability is different from that described in CVE-2017-0014. homjxi0e/CVE-2017-0108 CVE-2017-0143 # The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. valarauco/wannafind CVE-2017-0144 # The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148. peterpt/eternal_scanner kimocoder/eternalblue CVE-2017-0145 # The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148. MelonSmasher/chef_tissues CVE-2017-0199 # Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API.\" ryhanson/CVE-2017-0199 SyFi/cve-2017-0199 bhdresh/CVE-2017-0199 NotAwful/CVE-2017-0199-Fix haibara3839/CVE-2017-0199-master Exploit-install/CVE-2017-0199 zakybstrd21215/PoC-CVE-2017-0199 n1shant-sinha/CVE-2017-0199 kn0wm4d/htattack joke998/Cve-2017-0199 joke998/Cve-2017-0199- r0otshell/Microsoft-Word-CVE-2017-0199- viethdgit/CVE-2017-0199 nicpenning/RTF-Cleaner bloomer1016/2017-11-17-Maldoc-Using-CVE-2017-0199 jacobsoo/RTF-Cleaner denmilu/CVE-2017-0199 CVE-2017-0204 # Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Protected View via a specially crafted document, aka \"Microsoft Office Security Feature Bypass Vulnerability.\" ryhanson/CVE-2017-0204 CVE-2017-0213 # Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \"Windows COM Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-0214. shaheemirza/CVE-2017-0213- zcgonvh/CVE-2017-0213 billa3283/CVE-2017-0213 denmilu/CVE-2017-0213 jbooz1/CVE-2017-0213 eonrickity/CVE-2017-0213 Jos675/CVE-2017-0213-Exploit CVE-2017-0248 # Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka \".NET Security Feature Bypass Vulnerability.\" rubenmamo/CVE-2017-0248-Test CVE-2017-0261 # Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281. kcufId/eps-CVE-2017-0261 CVE-2017-0263 # The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" R06otMD5/cve-2017-0263-poc CVE-2017-0290 # The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka \"Microsoft Malware Protection Engine Remote Code Execution Vulnerability.\" homjxi0e/CVE-2017-0290- CVE-2017-0411 # An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33042690. lulusudoku/PoC CVE-2017-0478 # A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33718716. JiounDai/CVE-2017-0478 denmilu/CVE-2017-0478 CVE-2017-0541 # A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34031018. JiounDai/CVE-2017-0541 denmilu/CVE-2017-0541 CVE-2017-0554 # An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946. lanrat/tethr CVE-2017-0564 # An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34276203. guoygang/CVE-2017-0564-ION-PoC CVE-2017-0781 # A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105. ojasookert/CVE-2017-0781 marcinguy/android712-blueborne CVE-2017-0785 # A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698. ojasookert/CVE-2017-0785 aymankhalfatni/CVE-2017-0785 Alfa100001/-CVE-2017-0785-BlueBorne-PoC Android013/CVE-2017-0785 Hackerscript/BlueBorne-CVE-2017-0785 pieterbork/blueborne sigbitsadmin/diff SigBitsLabs/diff RavSS/Bluetooth-Crash-CVE-2017-0785 CVE-2017-0806 # An elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62998805. michalbednarski/ReparcelBug CVE-2017-0807 # An elevation of privilege vulnerability in the Android framework (ui framework). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35056974. kpatsakis/PoC_CVE-2017-0807 CVE-2017-1000000 # smythtech/DWF-CVE-2017-1000000 CVE-2017-1000083 # backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a \"--\" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename. matlink/evince-cve-2017-1000083 matlink/cve-2017-1000083-atril-nautilus CVE-2017-1000112 # Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. However in between two send() calls, the append path can be switched from UFO to non-UFO one, which leads to a memory corruption. In case UFO packet lengths exceeds MTU, copy = maxfraglen - skb-\u003elen becomes negative on the non-UFO path and the branch to allocate new skb is taken. This triggers fragmentation and computation of fraggap = skb_prev-\u003elen - maxfraglen. Fraggap can exceed MTU, causing copy = datalen - transhdrlen - fraggap to become negative. Subsequently skb_copy_and_csum_bits() writes out-of-bounds. A similar issue is present in IPv6 code. The bug was introduced in e89e9cf539a2 (\"[IPv4/IPv6]: UFO Scatter-gather approach\") on Oct 18 2005. hikame/docker_escape_pwn ol0273st-s/CVE-2017-1000112-Adpated CVE-2017-1000117 # A malicious third-party can give a crafted \"ssh://...\" URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running \"git clone --recurse-submodules\" to trigger the vulnerability. timwr/CVE-2017-1000117 GrahamMThomas/test-git-vuln_CVE-2017-1000117 Manouchehri/CVE-2017-1000117 thelastbyte/CVE-2017-1000117 alilangtest/CVE-2017-1000117 VulApps/CVE-2017-1000117 greymd/CVE-2017-1000117 shogo82148/Fix-CVE-2017-1000117 sasairc/CVE-2017-1000117_wasawasa Shadow5523/CVE-2017-1000117-test bells17/CVE-2017-1000117 ieee0824/CVE-2017-1000117 rootclay/CVE-2017-1000117 ieee0824/CVE-2017-1000117-sl takehaya/CVE-2017-1000117 ikmski/CVE-2017-1000117 nkoneko/CVE-2017-1000117 chenzhuo0618/test siling2017/CVE-2017-1000117 Q2h1Cg/CVE-2017-1000117 cved-sources/cve-2017-1000117 leezp/CVE-2017-1000117 AnonymKing/CVE-2017-1000117 CVE-2017-1000250 # All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests. olav-st/CVE-2017-1000250-PoC CVE-2017-1000251 # The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space. hayzamjs/Blueborne-CVE-2017-1000251 chmod750/blueborne tlatkdgus1/blueborne-CVE-2017-1000251 own2pwn/blueborne-CVE-2017-1000251-POC marcinguy/blueborne-CVE-2017-1000251 CVE-2017-1000253 # Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm-\u003emmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm-\u003emmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm-\u003emmap_base into the are that is supposed to be the \"gap\" between the stack and the binary. sagiesec/PIE-Stack-Clash-CVE-2017-1000253 CVE-2017-1000353 # Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java `SignedObject` object to the Jenkins CLI, that would be deserialized using a new `ObjectInputStream`, bypassing the existing blacklist-based protection mechanism. We're fixing this issue by adding `SignedObject` to the blacklist. We're also backporting the new HTTP CLI protocol from Jenkins 2.54 to LTS 2.46.2, and deprecating the remoting-based (i.e. Java serialization) CLI protocol, disabling it by default. vulhub/CVE-2017-1000353 CVE-2017-1000367 # Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution. c0d3z3r0/sudo-CVE-2017-1000367 homjxi0e/CVE-2017-1000367 pucerpocok/sudo_exploit CVE-2017-1000405 # The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original \"Dirty cow\" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp. bindecy/HugeDirtyCowPOC CVE-2017-1000475 # FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges. lajarajorge/CVE-2017-1000475 CVE-2017-1000486 # Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution pimps/CVE-2017-1000486 mogwailabs/CVE-2017-1000486 cved-sources/cve-2017-1000486 CVE-2017-1000499 # phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc. Villaquiranm/5MMISSI-CVE-2017-1000499 CVE-2017-1002101 # In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem. bgeesaman/subpath-exploit CVE-2017-10235 # Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.7 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H). fundacion-sadosky/vbox_cve_2017_10235 CVE-2017-10271 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). 1337g/CVE-2017-10271 s3xy/CVE-2017-10271 ZH3FENG/PoCs-Weblogic_2017_10271 c0mmand3rOpSec/CVE-2017-10271 Luffin/CVE-2017-10271 cjjduck/weblogic_wls_wsat_rce kkirsche/CVE-2017-10271 pssss/CVE-2017-10271 SuperHacker-liuan/cve-2017-10271-poc bmcculley/CVE-2017-10271 RealBearcat/Oracle-WebLogic-CVE-2017-10271 Sch01ar/CVE-2017-10271 Cymmetria/weblogic_honeypot JackyTsuuuy/weblogic_wls_rce_poc-exp s0wr0b1ndef/Oracle-WebLogic-WLS-WSAT lonehand/Oracle-WebLogic-CVE-2017-10271-master shack2/javaserializetools nhwuxiaojun/CVE-2017-10271 ETOCheney/JavaDeserialization cved-sources/cve-2017-10271 XHSecurity/Oracle-WebLogic-CVE-2017-10271 kaidb/Weblogic_Wsat_RCE SkyBlueEternal/CNVD-C-2019-48814-CNNVD-201904-961 Yuusuke4/WebLogic_CNVD_C_2019_48814 7kbstorm/WebLogic_CNVD_C2019_48814 ianxtianxt/-CVE-2017-10271- testwc/CVE-2017-10271 CVE-2017-10352 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H). bigsizeme/weblogic-XMLDecoder CVE-2017-10366 # Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PT PeopleTools. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). blazeinfosec/CVE-2017-10366_peoplesoft CVE-2017-10617 # The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N). gteissier/CVE-2017-10617 CVE-2017-10661 # Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing. GeneBlue/CVE-2017-10661_POC CVE-2017-10797 # n4xh4ck5/CVE-2017-10797 CVE-2017-10952 # This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the saveAs JavaScript function. The issue results from the lack of proper validation of user-supplied data, which can lead to writing arbitrary files into attacker controlled locations. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-4518. afbase/CVE-2017-10952 CVE-2017-11176 # The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact. DoubleMice/cve-2017-11176 HckEX/CVE-2017-11176 leonardo1101/cve-2017-11176 c3r34lk1ll3r/CVE-2017-11176 CVE-2017-11317 # Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code. bao7uo/RAU_crypto CVE-2017-11427 # OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers. CHYbeta/CVE-2017-11427-DEMO CVE-2017-11503 # PHPMailer 5.2.23 has XSS in the \"From Email Address\" and \"To Email Address\" fields of code_generator.php. wizardafric/download CVE-2017-11519 # passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511. vakzz/tplink-CVE-2017-11519 CVE-2017-11610 # The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups. ivanitlearning/CVE-2017-11610 CVE-2017-11611 # Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the file name in a \"create-file-popup\" action, and the directory name in a \"create-directory-popup\" action, in the HTTP POST method to the \"/plugin/file_manager/\" script (aka an /admin/plugin/file_manager/browse// URI). faizzaidi/Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc CVE-2017-11774 # Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka \"Microsoft Outlook Security Feature Bypass Vulnerability.\" devcoinfet/SniperRoost CVE-2017-11783 # Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles calls to Advanced Local Procedure Call (ALPC), aka \"Windows Elevation of Privilege Vulnerability\". Sheisback/CVE-2017-11783 CVE-2017-11816 # The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability in the way it handles objects in memory, aka \"Windows GDI Information Disclosure Vulnerability\". lr3800/CVE-2017-11816 CVE-2017-11826 # Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory. thatskriptkid/CVE-2017-11826 CVE-2017-11882 # Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11884. starnightcyber/exploits zhouat/cve-2017-11882 embedi/CVE-2017-11882 Ridter/CVE-2017-11882 BlackMathIT/2017-11882_Generator unamer/CVE-2017-11882 0x09AL/CVE-2017-11882-metasploit HZachev/ABC starnightcyber/CVE-2017-11882 Grey-Li/CVE-2017-11882 legendsec/CVE-2017-11882-for-Kali CSC-pentest/cve-2017-11882 Shadowshusky/CVE-2017-11882- rxwx/CVE-2018-0802 Ridter/RTF_11882_0802 denmilu/CVE-2017-11882 denmilu/CVE-2018-0802_CVE-2017-11882 bloomer1016/CVE-2017-11882-Possible-Remcos-Malspam ChaitanyaHaritash/CVE-2017-11882 qy1202/https-github.com-Ridter-CVE-2017-11882- j0lama/CVE-2017-11882 R0fM1a/IDB_Share chanbin/CVE-2017-11882 littlebin404/CVE-2017-11882 ekgg/Overflow-Demo-CVE-2017-11882 CVE-2017-11907 # Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. re4lity/CVE-2017-11907 CVE-2017-12149 # In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data. sevck/CVE-2017-12149 yunxu1/jboss-_CVE-2017-12149 1337g/CVE-2017-12149 jreppiks/CVE-2017-12149 CVE-2017-12426 # GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import. sm-paul-schuette/CVE-2017-12426 CVE-2017-12542 # A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found. skelsec/CVE-2017-12542 sk1dish/ilo4-rce-vuln-scanner CVE-2017-12611 # In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack. brianwrf/S2-053-CVE-2017-12611 CVE-2017-12615 # When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server. breaktoprotect/CVE-2017-12615 mefulton/cve-2017-12615 zi0Black/POC-CVE-2017-12615-or-CVE-2017-12717 RealBearcat/CVE-2017-12615 wsg00d/cve-2017-12615 1337g/CVE-2017-12615 Shellkeys/CVE-2017-12615 cved-sources/cve-2017-12615 ianxtianxt/CVE-2017-12615 CVE-2017-12617 # When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server. cyberheartmi9/CVE-2017-12617 devcoinfet/CVE-2017-12617 qiantu88/CVE-2017-12617 ygouzerh/CVE-2017-12617 CVE-2017-12624 # Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack. From Apache CXF 3.2.1 and 3.1.14, message attachment headers that are greater than 300 characters will be rejected by default. This value is configurable via the property \"attachment-max-header-size\". tafamace/CVE-2017-12624 CVE-2017-12635 # Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit _users documents with duplicate keys for 'roles' used for access control within the database, including the special case '_admin' role, that denotes administrative users. In combination with CVE-2017-12636 (Remote Code Execution), this can be used to give non-admin users access to arbitrary shell commands on the server as the database system user. The JSON parser differences result in behaviour that if two 'roles' keys are available in the JSON, the second one will be used for authorising the document write, but the first 'roles' key is used for subsequent authorization for the newly created user. By design, users can not assign themselves roles. The vulnerability allows non-admin users to give themselves admin privileges. assalielmehdi/CVE-2017-12635 CVE-2017-12636 # CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet. moayadalmalat/CVE-2017-12636 F1uffyGoat/F1uffyCouchDB RedTeamWing/CVE-2017-12636 CVE-2017-12792 # Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) linkname, (2) url, or (3) title parameter in an add action to linksmanage.php. ZZS2017/cve-2017-12792 CVE-2017-12852 # The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack. BT123/numpy-1.13.1 CVE-2017-12943 # D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password. aymankhalfatni/D-Link CVE-2017-12945 # Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root. aress31/cve-2017-12945 CVE-2017-13089 # The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. r1b/CVE-2017-13089 mzeyong/CVE-2017-13089 CVE-2017-13156 # An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847. xyzAsian/Janus-CVE-2017-13156 caxmd/CVE-2017-13156 giacomoferretti/janus-toolkit CVE-2017-13253 # In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71389378. tamirzb/CVE-2017-13253 CVE-2017-13672 # QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update. DavidBuchanan314/CVE-2017-13672 CVE-2017-13868 # An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app. bazad/ctl_ctloutput-leak CVE-2017-13872 # An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the \"Directory Utility\" component. It allows attackers to obtain administrator access without a password via certain interactions involving entry of the root user name. giovannidispoto/CVE-2017-13872-Patch CVE-2017-14105 # HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at HiveManager/tomcat/webapps/hm/domains/$yourtenant/maps (it will be exposed at the web interface). theguly/CVE-2017-14105 CVE-2017-14262 # On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with that hash in the szUserPasswd parameter. zzz66686/CVE-2017-14262 CVE-2017-14263 # Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user account to fully control the device. zzz66686/CVE-2017-14263 CVE-2017-14322 # The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value. joesmithjaffa/CVE-2017-14322 CVE-2017-14491 # Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. YIHSUEHTsai/dnsmasq-2.4.1-fix-CVE-2017-14491 CVE-2017-14493 # Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request. pupiles/bof-dnsmasq-cve-2017-14493 CVE-2017-14719 # Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components. PalmTreeForest/CodePath_Week_7-8 CVE-2017-14948 # Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution. badnack/d_link_880_bug CVE-2017-15120 # An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service. shutingrz/CVE-2017-15120_PoC CVE-2017-15277 # ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette. tacticthreat/ImageMagick-CVE-2017-15277 CVE-2017-15303 # In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an ioctl 0x9C402430 call to the kernel-mode driver (e.g., cpuz141_x64.sys for version 1.41). hfiref0x/Stryker CVE-2017-15361 # The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS. lva/Infineon-CVE-2017-15361 titanous/rocacheck jnpuskar/RocaCmTest nsacyber/Detect-CVE-2017-15361-TPM 0xxon/zeek-plugin-roca 0xxon/roca CVE-2017-15394 # Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension. sudosammy/CVE-2017-15394 CVE-2017-15708 # In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by injecting specially crafted serialized objects. And the presence of Apache Commons Collections 3.2.1 (commons-collections-3.2.1.jar) or previous versions in Synapse distribution makes this exploitable. To mitigate the issue, we need to limit RMI access to trusted users only. Further upgrading to 3.0.1 version will eliminate the risk of having said Commons Collection version. In Synapse 3.0.1, Commons Collection has been updated to 3.2.2 version. RealBearcat/CVE-2017-15708 CVE-2017-15715 # In Apache httpd 2.4.0 to 2.4.29, the expression specified in \u003cFilesMatch\u003e could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename. whisp1830/CVE-2017-15715 CVE-2017-15944 # Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface. xxnbyy/CVE-2017-15944-POC surajraghuvanshi/PaloAltoRceDetectionAndExploit CVE-2017-16082 # A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) Connecting to an untrusted database and executing a query which returns results where any of the column names are malicious. nulldreams/CVE-2017-16082 CVE-2017-16088 # The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox. Flyy-yu/CVE-2017-16088 CVE-2017-16245 # AOCorsaire/CVE-2017-16245 CVE-2017-1635 # IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 133243. emcalv/tivoli-poc CVE-2017-16524 # Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/ directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attackers to read the web-interface credentials via a request for the cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw URI. realistic-security/CVE-2017-16524 CVE-2017-16567 # Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers to inject arbitrary web script or HTML via a \"favorite.\" dewankpant/CVE-2017-16567 CVE-2017-16568 # Cross-site scripting (XSS) vulnerability in Logitech Media Server 7.9.0 allows remote attackers to inject arbitrary web script or HTML via a radio URL. dewankpant/CVE-2017-16568 CVE-2017-16744 # A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials. GainSec/CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara CVE-2017-16778 # An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency (DTMF) tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an access grant. However, due to incorrect access control, an attacker could inject it via the speaker unit to perform an access grant to gain unauthorized access, as demonstrated by a loud DTMF tone representing '1' and a long '#' (697 Hz and 1209 Hz, followed by 941 Hz and 1477 Hz). breaktoprotect/CVE-2017-16778-Intercom-DTMF-Injection CVE-2017-16806 # The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal. rickoooooo/ulteriusExploit CVE-2017-16943 # The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands. beraphin/CVE-2017-16943 CVE-2017-16995 # The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension. RealBearcat/CVE-2017-16995 Al1ex/CVE-2017-16995 gugronnier/CVE-2017-16995 senyuuri/cve-2017-16995 vnik5287/CVE-2017-16995 littlebin404/CVE-2017-16995 CVE-2017-16997 # elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the \"./\" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution. Xiami2012/CVE-2017-16997-poc CVE-2017-17099 # There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under the Windows SYSTEM account. wetw0rk/Exploit-Development CVE-2017-17215 # Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code. 1337g/CVE-2017-17215 CVE-2017-17309 # Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication. exploit-labs/huawei_hg255s_exploit CVE-2017-17485 # FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath. RealBearcat/Jackson-CVE-2017-17485 tafamace/CVE-2017-17485 x7iaob/cve-2017-17485 CVE-2017-17562 # Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0. 1337g/CVE-2017-17562 ivanitlearning/CVE-2017-17562 crispy-peppers/Goahead-CVE-2017-17562 CVE-2017-17692 # Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property. lr3800/CVE-2017-17692 CVE-2017-18044 # A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvault service does not properly validate the input of an incoming string before passing it to CreateProcess. As a result, a specially crafted message can inject commands that will be executed on the target operating system. Exploitation of this vulnerability does not require authentication and can lead to SYSTEM level privilege on any system running the cvd daemon. This is a different vulnerability than CVE-2017-3195. securifera/CVE-2017-18044-Exploit CVE-2017-18345 # The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager\u0026controller=details\u0026task=download\u0026path=configuration.php request. Luth1er/CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD CVE-2017-18486 # Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote authentication. The shared secret can be used to escalate privileges by forging new tokens for any user. These tokens can be used to automatically log in as the affected user. Kc57/JitBit_Helpdesk_Auth_Bypass CVE-2017-18635 # An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name. ShielderSec/CVE-2017-18635 CVE-2017-2368 # An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the \"Contacts\" component. It allows remote attackers to cause a denial of service (application crash) via a crafted contact card. vincedes3/CVE-2017-2368 CVE-2017-2370 # An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the \"Kernel\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app. maximehip/extra_recipe JackBro/extra_recipe Rootkitsmm/extra_recipe-iOS-10.2 Peterpan0927/CVE-2017-2370 CVE-2017-2388 # An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"IOFireWireFamily\" component. It allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app. bazad/IOFireWireFamily-null-deref CVE-2017-2636 # Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline. alexzorin/cve-2017-2636-el CVE-2017-2666 # It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own. tafamace/CVE-2017-2666 CVE-2017-2671 # The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call. homjxi0e/CVE-2017-2671 CVE-2017-2751 # A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. This applies to consumer notebooks launched in early 2014. BaderSZ/CVE-2017-2751 CVE-2017-2793 # An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability. r0otshell/Detection-for-CVE-2017-2793 CVE-2017-3000 # Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure. dangokyo/CVE-2017-3000 CVE-2017-3066 # Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution. codewhitesec/ColdFusionPwn cucadili/CVE-2017-3066 CVE-2017-3078 # Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution. homjxi0e/CVE-2017-3078 CVE-2017-3143 # An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0-\u003e9.8.8, 9.9.0-\u003e9.9.10-P1, 9.10.0-\u003e9.10.5-P1, 9.11.0-\u003e9.11.1-P1, 9.9.3-S1-\u003e9.9.10-S2, 9.10.5-S1-\u003e9.10.5-S2. saaph/CVE-2017-3143 CVE-2017-3241 # Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). xfei3/CVE-2017-3241-POC CVE-2017-3248 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0 and 12.2.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS v3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). ianxtianxt/CVE-2017-3248 0xn0ne/weblogicScanner CVE-2017-3506 # Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N). ianxtianxt/CVE-2017-3506 CVE-2017-3599 # Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily \"exploitable\" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet. SECFORCE/CVE-2017-3599 CVE-2017-3730 # In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack. guidovranken/CVE-2017-3730 ymmah/OpenSSL-CVE-2017-3730 CVE-2017-3881 # A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893. artkond/cisco-rce homjxi0e/CVE-2017-3881-exploit-cisco- homjxi0e/CVE-2017-3881-Cisco zakybstrd21215/PoC-CVE-2017-3881 1337g/CVE-2017-3881 CVE-2017-4490 # homjxi0e/CVE-2017-4490- homjxi0e/CVE-2017-4490-install-Script-Python-in-Terminal- CVE-2017-4878 # brianwrf/CVE-2017-4878-Samples CVE-2017-4971 # An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings. cved-sources/cve-2017-4971 CVE-2017-5005 # Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LC_UNIXTHREAD.cmdsize field in a Mach-O file that is mishandled during a Security Scan (aka Custom Scan) operation. payatu/QuickHeal CVE-2017-5007 # Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Ang-YC/CVE-2017-5007 CVE-2017-5123 # FloatingGuy/CVE-2017-5123 0x5068656e6f6c/CVE-2017-5123 Synacktiv-contrib/exploiting-cve-2017-5123 teawater/CVE-2017-5123 CVE-2017-5124 # Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page. Bo0oM/CVE-2017-5124 CVE-2017-5223 # An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base directory is provided, it resolves to /, meaning that relative image URLs get treated as absolute local file paths and added as attachments. To form a remote vulnerability, the msgHTML method must be called, passed an unfiltered, user-supplied HTML document, and must not set a base directory. cscli/CVE-2017-5223 CVE-2017-5415 # An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by \"blob:\" as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox \u003c 52. 649/CVE-2017-5415 CVE-2017-5487 # wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request. teambugsbunny/wpUsersScan R3K1NG/wpUsersScan GeunSam2/CVE-2017-5487 patilkr/wp-CVE-2017-5487-exploit CVE-2017-5633 # Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs. cardangi/Exploit-CVE-2017-5633 CVE-2017-5638 # The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string. PolarisLab/S2-045 Flyteas/Struts2-045-Exp bongbongco/cve-2017-5638 jas502n/S2-045-EXP-POC-TOOLS mthbernardes/strutszeiro xsscx/cve-2017-5638 immunio/apache-struts2-CVE-2017-5638 Masahiro-Yamada/OgnlContentTypeRejectorValve aljazceru/CVE-2017-5638-Apache-Struts2 sjitech/test_struts2_vulnerability_CVE-2017-5638 jrrombaldo/CVE-2017-5638 random-robbie/CVE-2017-5638 initconf/CVE-2017-5638_struts mazen160/struts-pwn ret2jazzy/Struts-Apache-ExploitPack lolwaleet/ExpStruts oktavianto/CVE-2017-5638-Apache-Struts2 jrrdev/cve-2017-5638 opt9/Strutshock falcon-lnhg/StrutsShell bhagdave/CVE-2017-5638 jas502n/st2-046-poc KarzsGHR/S2-046_S2-045_POC gsfish/S2-Reaper mcassano/cve-2017-5638 opt9/Strutscli tahmed11/strutsy payatu/CVE-2017-5638 Aasron/Struts2-045-Exp SpiderMate/Stutsfi jpacora/Struts2Shell NyaMeeEain/Apache-Struts AndreasKl/CVE-2017-5638 riyazwalikar/struts-rce-cve-2017-5638 homjxi0e/CVE-2017-5638 eeehit/CVE-2017-5638 r0otshell/Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner r0otshell/Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638 R4v3nBl4ck/Apache-Struts-2-CVE-2017-5638-Exploit- Xhendos/CVE-2017-5638 TamiiLambrado/Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner RealBearcat/S2-045 invisiblethreat/strutser lizhi16/CVE-2017-5638 donaldashdown/Common-Vulnerability-and-Exploit grant100/cybersecurity-struts2 cafnet/apache-struts-v2-CVE-2017-5638 0x00-0x00/CVE-2017-5638 m3ssap0/struts2_cve-2017-5638 Greynad/struts2-jakarta-inject ggolawski/struts-rce win3zz/CVE-2017-5638 leandrocamposcardoso/CVE-2017-5638-Mass-Exploit Iletee/struts2-rce andypitcher/check_struts un4ckn0wl3z/CVE-2017-5638 colorblindpentester/CVE-2017-5638 injcristianrojas/cve-2017-5638 CVE-2017-5645 # In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code. pimps/CVE-2017-5645 CVE-2017-5689 # An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT). CerberusSecurity/CVE-2017-5689 x1sec/amthoneypot Bijaye/intel_amt_bypass embedi/amt_auth_bypass_poc CVE-2017-5693 # Firmware in the Intel Puma 5, 6, and 7 Series might experience resource depletion or timeout, which allows a network attacker to create a denial of service via crafted network traffic. nallar/Puma6Fail CVE-2017-5715 # Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. opsxcq/exploit-cve-2017-5715 mathse/meltdown-spectre-bios-list GregAskew/SpeculativeExecutionAssessment dmo2118/retpoline-audit CVE-2017-5721 # Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory. embedi/smm_usbrt_poc CVE-2017-5753 # Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. Eugnis/spectre-attack EdwardOwusuAdjei/Spectre-PoC poilynx/spectre-attack-example xsscx/cve-2017-5753 pedrolucasoliva/spectre-attack-demo ixtal23/spectreScope CVE-2017-5754 # Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. ionescu007/SpecuCheck raphaelsc/Am-I-affected-by-Meltdown Viralmaniar/In-Spectre-Meltdown speecyy/Am-I-affected-by-Meltdown zzado/Meltdown jdmulloy/meltdown-aws-scanner CVE-2017-5792 # A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. RealBearcat/HPE-iMC-7.3-RMI-Java-Deserialization CVE-2017-6008 # A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to escalate privileges via a malformed IOCTL call. cbayet/Exploit-CVE-2017-6008 CVE-2017-6074 # The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call. node1392/Linux-Kernel-Vulnerability CVE-2017-6079 # The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006. MostafaSoliman/CVE-2017-6079-Blind-Command-Injection-In-Edgewater-Edgemarc-Devices-Exploit CVE-2017-6090 # Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/. jlk/exploit-CVE-2017-6090 CVE-2017-6206 # D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Information Disclosure attacks via unspecified vectors. varangamin/CVE-2017-6206 CVE-2017-6370 # TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields. faizzaidi/TYPO3-v7.6.15-Unencrypted-Login-Request CVE-2017-6558 # iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file. GemGeorge/iBall-UTStar-CVEChecker CVE-2017-6640 # A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges. The vulnerability exists because the affected software has a default user account that has a default, static password. The user account is created automatically when the software is installed. An attacker could exploit this vulnerability by connecting remotely to an affected system and logging in to the affected software by using the credentials for this default user account. A successful exploit could allow the attacker to use this default user account to log in to the affected software and gain access to the administrative console of a DCNM server. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd95346. hemp3l/CVE-2017-6640-POC CVE-2017-6736 # The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.2 through 3.17 contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP: Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. Cisco Bug IDs: CSCve57697. GarnetSunset/CiscoSpectreTakeover GarnetSunset/CiscoIOSSNMPToolkit CVE-2017-6913 # Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag. gquere/CVE-2017-6913 CVE-2017-6971 # AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862. patrickfreed/nfsen-exploit KeyStrOke95/nfsen_1.3.7_CVE-2017-6971 CVE-2017-7038 # A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. ansjdnakjdnajkd/CVE-2017-7038 CVE-2017-7047 # An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \"libxpc\" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. JosephShenton/Triple_Fetch-Kernel-Creds q1f3/Triple_fetch CVE-2017-7061 # An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. TheLoneHaxor/jailbreakme103 CVE-2017-7089 # An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that is mishandled during parent-tab processing. Bo0oM/CVE-2017-7089 aymankhalfatni/Safari_Mac CVE-2017-7092 # An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. xuechiyaobai/CVE-2017-7092-PoC CVE-2017-7173 # An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \"Kernel\" component. It allows attackers to bypass intended memory-read restrictions via a crafted app. bazad/sysctl_coalition_get_pid_list-dos CVE-2017-7184 # The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52. rockl/cve-2017-7184 rockl/cve-2017-7184-bak CVE-2017-7188 # Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse. faizzaidi/Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC CVE-2017-7269 # Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with \"If: \u003chttp://\" in a PROPFIND request, as exploited in the wild in July or August 2016. eliuha/webdav_exploit lcatro/CVE-2017-7269-Echo-PoC caicai1355/CVE-2017-7269-exploit M1a0rz/CVE-2017-7269 whiteHat001/cve-2017-7269picture zcgonvh/cve-2017-7269 jrrombaldo/CVE-2017-7269 g0rx/iis6-exploit-2017-CVE-2017-7269 slimpagey/IIS_6.0_WebDAV_Ruby homjxi0e/cve-2017-7269 xiaovpn/CVE-2017-7269 zcgonvh/cve-2017-7269-tool mirrorblack/CVE-2017-7269 Al1ex/CVE-2017-7269 CVE-2017-7374 # Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be freed prematurely. ww9210/cve-2017-7374 CVE-2017-7472 # The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls. homjxi0e/CVE-2017-7472 CVE-2017-7494 # Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it. betab0t/cve-2017-7494 homjxi0e/CVE-2017-7494 opsxcq/exploit-CVE-2017-7494 Waffles-2/SambaCry brianwrf/SambaHunter joxeankoret/CVE-2017-7494 Zer0d0y/Samba-CVE-2017-7494 incredible1yu/CVE-2017-7494 cved-sources/cve-2017-7494 john-80/cve-2017-7494 CVE-2017-7525 # A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. SecureSkyTechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095 RealBearcat/S2-055 JavanXD/Demo-Exploit-Jackson-RCE 47bwy/CVE-2017-7525 BassinD/jackson-RCE Dannners/jackson-deserialization-2017-7525 Ingenuity-Fainting-Goats/CVE-2017-7525-Jackson-Deserialization-Lab CVE-2017-7529 # Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. liusec/CVE-2017-7529 en0f/CVE-2017-7529_PoC cved-sources/cve-2017-7529 mpalonso/ferni MaxSecurity/CVE-2017-7529-POC CVE-2017-7648 # Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation. notmot/CVE-2017-7648. CVE-2017-7679 # In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header. snknritr/CVE-2017-7679-in-python CVE-2017-7912 # Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication. homjxi0e/CVE-2017-7912_Sneak CVE-2017-7921 # An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information. JrDw0/CVE-2017-7921-EXP CVE-2017-7998 # Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) printer name when adding a printer in the admin panel or (2) username parameter to webapp/users/user_reg.jsp. homjxi0e/CVE-2017-7998 CVE-2017-8046 # Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code. Soontao/CVE-2017-8046-DEMO sj/spring-data-rest-CVE-2017-8046 m3ssap0/SpringBreakVulnerableApp m3ssap0/spring-break_cve-2017-8046 FixYourFace/SpringBreakPoC jkutner/spring-break-cve-2017-8046 bkhablenko/CVE-2017-8046 cved-sources/cve-2017-8046 jsotiro/VulnerableSpringDataRest CVE-2017-8295 # WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be resent, leading to transmission of the reset key to a mailbox on an attacker-controlled SMTP server. This is related to problematic use of the SERVER_NAME variable in wp-includes/pluggable.php in conjunction with the PHP mail function. Exploitation is not achievable in all cases because it requires at least one of the following: (1) the attacker can prevent the victim from receiving any e-mail messages for an extended period of time (such as 5 days), (2) the victim's e-mail system sends an autoresponse containing the original message, or (3) the victim manually composes a reply containing the original message. homjxi0e/CVE-2017-8295-WordPress-4.7.4—Unauthorized-Password-Reset alash3al/wp-allowed-hosts cyberheartmi9/CVE-2017-8295 CVE-2017-8382 # admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts. faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc CVE-2017-8464 # Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka \"LNK Remote Code Execution Vulnerability.\" Elm0D/CVE-2017-8464 3gstudent/CVE-2017-8464-EXP Securitykid/CVE-2017-8464-exp-generator X-Vector/usbhijacking xssfile/CVE-2017-8464-EXP CVE-2017-8465 # Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This CVE ID is unique from CVE-2017-8468. nghiadt1098/CVE-2017-8465 CVE-2017-8529 # Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory, aka \"Microsoft Browser Information Disclosure Vulnerability\". Lynggaard91/windows2016fixCVE-2017-8529 sfitpro/cve-2017-8529 CVE-2017-8543 # Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka \"Windows Search Remote Code Execution Vulnerability\". americanhanko/windows-security-cve-2017-8543 CVE-2017-8570 # Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0243. temesgeny/ppsx-file-generator rxwx/CVE-2017-8570 MaxSecurity/Office-CVE-2017-8570 SwordSheath/CVE-2017-8570 Drac0nids/CVE-2017-8570 930201676/CVE-2017-8570 CVE-2017-8625 # Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka \"Internet Explorer Security Feature Bypass Vulnerability\". homjxi0e/CVE-2017-8625_Bypass_UMCI CVE-2017-8641 # Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render when handling objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability\". This CVE ID is unique from CVE-2017-8634, CVE-2017-8635, CVE-2017-8636, CVE-2017-8638, CVE-2017-8639, CVE-2017-8640, CVE-2017-8645, CVE-2017-8646, CVE-2017-8647, CVE-2017-8655, CVE-2017-8656, CVE-2017-8657, CVE-2017-8670, CVE-2017-8671, CVE-2017-8672, and CVE-2017-8674. homjxi0e/CVE-2017-8641_chakra_Js_GlobalObject CVE-2017-8759 # Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka \".NET Framework Remote Code Execution Vulnerability.\" Voulnet/CVE-2017-8759-Exploit-sample nccgroup/CVE-2017-8759 vysecurity/CVE-2017-8759 BasuCert/CVE-2017-8759 tahisaad6/CVE-2017-8759-Exploit-sample2 homjxi0e/CVE-2017-8759_-SOAP_WSDL bhdresh/CVE-2017-8759 Lz1y/CVE-2017-8759 JonasUliana/CVE-2017-8759 Securitykid/CVE-2017-8759 ashr/CVE-2017-8759-exploits l0n3rs/CVE-2017-8759 ChaitanyaHaritash/CVE-2017-8759 smashinu/CVE-2017-8759Expoit adeljck/CVE-2017-8759 zhengkook/CVE-2017-8759 CVE-2017-8760 # An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier/1000@/index.html with the auth_params parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads, e.g., URL encoding. Voraka/cve-2017-8760 CVE-2017-8779 # rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb. drbothen/GO-RPCBOMB CVE-2017-8802 # Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the \"Show Snippet\" functionality. ozzi-/Zimbra-CVE-2017-8802-Hotifx CVE-2017-8809 # api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability. motikan2010/CVE-2017-8809_MediaWiki_RFD CVE-2017-8890 # The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call. beraphin/CVE-2017-8890 thinkycx/CVE-2017-8890 7043mcgeep/cve-2017-8890-msf CVE-2017-8917 # SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors. brianwrf/Joomla3.7-SQLi-CVE-2017-8917 stefanlucas/Exploit-Joomla cved-sources/cve-2017-8917 CVE-2017-9097 # In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC150 devices through 1.40.0, WS200 devices through 3.30.4, EC250 devices through 1.40.0, and other products, an LFI vulnerability allows a remote attacker to read or modify files through a path traversal technique, as demonstrated by reading the password file, or using the template parameter to cgi-bin/write.cgi to write to an arbitrary file. ezelf/AntiWeb_testing-Suite CVE-2017-9101 # import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header and PHP code in the name of a file. jasperla/CVE-2017-9101 CVE-2017-9248 # Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading to a MachineKey leak, arbitrary file uploads or downloads, XSS, or ASP.NET ViewState compromise. bao7uo/dp_crypto capt-meelo/Telewreck ictnamanh/CVE-2017-9248 shacojx/dp CVE-2017-9417 # Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the \"Broadpwn\" issue. mailinneberg/Broadpwn CVE-2017-9430 # Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv[0]. An example threat model is a web application that launches dnstracer with an untrusted name string. homjxi0e/CVE-2017-9430 j0lama/Dnstracer-1.9-Fix CVE-2017-9476 # The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); and Arris TG1682G (eMTA\u0026DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices makes it easy for remote attackers to determine the hidden SSID and passphrase for a Home Security Wi-Fi network. wiire-a/CVE-2017-9476 CVE-2017-9506 # The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF). random-robbie/Jira-Scan pwn1sher/jira-ssrf CVE-2017-9544 # There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code. adenkiewicz/CVE-2017-9544 CVE-2017-9554 # An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors. rfcl/Synology-DiskStation-User-Enumeration-CVE-2017-9554- CVE-2017-9606 # Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks. Houl777/CVE-2017-9606 CVE-2017-9609 # Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the map_language parameter to backend/pages/lang_settings.php. faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc CVE-2017-9779 # OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 \"but with much less impact.\" homjxi0e/CVE-2017-9779 CVE-2017-9791 # The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage. IanSmith123/s2-048 dragoneeg/Struts2-048 xfer0/CVE-2017-9791 CVE-2017-9798 # Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c. nitrado/CVE-2017-9798 pabloec20/optionsbleed l0n3rs/CVE-2017-9798 brokensound77/OptionsBleed-POC-Scanner CVE-2017-9805 # The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads. luc10/struts-rce-cve-2017-9805 hahwul/struts2-rce-cve-2017-9805-ruby mazen160/struts-pwn_CVE-2017-9805 Lone-Ranger/apache-struts-pwn_CVE-2017-9805 RealBearcat/S2-052 0x00-0x00/-CVE-2017-9805 chrisjd20/cve-2017-9805.py UbuntuStrike/struts_rest_rce_fuzz-CVE-2017-9805- UbuntuStrike/CVE-2017-9805_Struts_Fuzz_N_Sploit thevivekkryadav/CVE-2017-9805-Exploit CVE-2017-9830 # Remote Code Execution is possible in Code42 CrashPlan 5.4.x via the org.apache.commons.ssl.rmi.DateRMI Java class, because (upon instantiation) it creates an RMI server that listens on a TCP port and deserializes objects sent by TCP clients. securifera/CVE-2017-9830 CVE-2017-9841 # Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a \"\u003c?php \" substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI. mbrasile/CVE-2017-9841 CVE-2017-98505 # mike-williams/Struts2Vuln CVE-2017-9934 # Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability. xyringe/CVE-2017-9934 CVE-2017-9999 # homjxi0e/CVE-2017-9999_bypassing_General_Firefox 2016 # CVE-2016-0034 # Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka \"Silverlight Runtime Remote Code Execution Vulnerability.\" DiamondHunters/CVE-2016-0034-Decompile CVE-2016-0040 # The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka \"Windows Elevation of Privilege Vulnerability.\" Rootkitsmm/cve-2016-0040 de7ec7ed/CVE-2016-0040 CVE-2016-0049 # Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not properly validate password changes, which allows remote attackers to bypass authentication by deploying a crafted Key Distribution Center (KDC) and then performing a sign-in action, aka \"Windows Kerberos Security Feature Bypass.\" JackOfMostTrades/bluebox CVE-2016-0051 # The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \"WebDAV Elevation of Privilege Vulnerability.\" koczkatamas/CVE-2016-0051 hexx0r/CVE-2016-0051 ganrann/CVE-2016-0051 CVE-2016-0095 # The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-0093, CVE-2016-0094, and CVE-2016-0096. 4M4Z4/cve-2016-0095-x64 CVE-2016-0099 # The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka \"Secondary Logon Elevation of Privilege Vulnerability.\" zcgonvh/MS16-032 CVE-2016-010033 # zi0Black/CVE-2016-010033-010045 CVE-2016-0189 # The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-0187. theori-io/cve-2016-0189 deamwork/MS16-051-poc CVE-2016-0199 # Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-0200 and CVE-2016-3211. LeoonZHANG/CVE-2016-0199 CVE-2016-0638 # Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service. 0xn0ne/weblogicScanner CVE-2016-0701 # The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file. luanjampa/cve-2016-0701 CVE-2016-0728 # The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands. idl3r/cve-2016-0728 kennetham/cve_2016_0728 nardholio/cve-2016-0728 googleweb/CVE-2016-0728 MagicPwn/CVE-2016-0728-Check neuschaefer/cve-2016-0728-testbed bittorrent3389/cve-2016-0728 sibilleg/exploit_cve-2016-0728 hal0taso/CVE-2016-0728 sugarvillela/CVE CVE-2016-0752 # Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. forced-request/rails-rce-cve-2016-0752 dachidahu/CVE-2016-0752 CVE-2016-0792 # Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando. jpiechowka/jenkins-cve-2016-0792 s0wr0b1ndef/java-deserialization-exploits CVE-2016-0793 # Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a request that contains (a) lowercase or (b) \"meaningless\" characters. tafamace/CVE-2016-0793 CVE-2016-0801 # The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029. abdsec/CVE-2016-0801 zsaurus/CVE-2016-0801-test CVE-2016-0805 # The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204. hulovebin/cve-2016-0805 CVE-2016-0846 # libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider the heap size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26877992. secmob/CVE-2016-0846 b0b0505/CVE-2016-0846-PoC CVE-2016-0974 # Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984. Fullmetal5/FlashHax CVE-2016-10033 # The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \\\" (backslash double quote) in a crafted Sender property. opsxcq/exploit-CVE-2016-10033 Zenexer/safeshell GeneralTesler/CVE-2016-10033 chipironcin/CVE-2016-10033 Bajunan/CVE-2016-10033 qwertyuiop12138/CVE-2016-10033 liusec/WP-CVE-2016-10033 pedro823/cve-2016-10033-45 awidardi/opsxcq-cve-2016-10033 0x00-0x00/CVE-2016-10033 cved-sources/cve-2016-10033 CVE-2016-10034 # The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \\\" (backslash double quote) in a crafted e-mail address. heikipikker/exploit-CVE-2016-10034 CVE-2016-10277 # An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33840490. alephsecurity/initroot leosol/initroot CVE-2016-10709 # pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php. wetw0rk/Exploit-Development CVE-2016-10761 # Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack. ISSAPolska/CVE-2016-10761 CVE-2016-1240 # The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out. Naramsim/Offensive mhe18/CVE_Project CVE-2016-1287 # Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019. jgajek/killasa NetSPI/asa_tools CVE-2016-1494 # The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack. matthiasbe/secuimag3a CVE-2016-1542 # The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure. patriknordlen/bladelogic_bmc-cve-2016-1542 bao7uo/bmc_bladelogic CVE-2016-1555 # (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands. ide0x90/cve-2016-1555 CVE-2016-1734 # AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted USB device. Manouchehri/CVE-2016-1734 CVE-2016-1757 # Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app. gdbinit/mach_race CVE-2016-1764 # The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL. moloch–/cve-2016-1764 CVE-2016-1825 # IOHIDFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. bazad/physmem CVE-2016-1827 # The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1828, CVE-2016-1829, and CVE-2016-1830. bazad/flow_divert-heap-overflow CVE-2016-1828 # The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1829, and CVE-2016-1830. bazad/rootsh CVE-2016-2098 # Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. hderms/dh-CVE_2016_2098 CyberDefenseInstitute/PoC_CVE-2016-2098_Rails42 Alejandro-MartinG/rails-PoC-CVE-2016-2098 0x00-0x00/CVE-2016-2098 its-arun/CVE-2016-2098 3rg1s/CVE-2016-2098 CVE-2016-2107 # The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169. FiloSottile/CVE-2016-2107 tmiklas/docker-cve-2016-2107 CVE-2016-2118 # The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka \"BADLOCK.\" nickanderson/cfengine-CVE-2016-2118 CVE-2016-2173 # org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code. HaToan/CVE-2016-2173 CVE-2016-2233 # Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message. fath0218/CVE-2016-2233 CVE-2016-2334 # Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image. icewall/CVE-2016-2334 CVE-2016-2402 # OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate. ikoz/cert-pinning-flaw-poc ikoz/certPinningVulnerableOkHttp CVE-2016-2431 # The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 24968809. laginimaineb/cve-2016-2431 laginimaineb/ExtractKeyMaster CVE-2016-2434 # The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090. jianqiangzhao/CVE-2016-2434 CVE-2016-2468 # The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted application, aka internal bug 27475454. gitcollect/CVE-2016-2468 CVE-2016-2569 # Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header. amit-raut/CVE-2016-2569 CVE-2016-2776 # buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query. KosukeShimofuji/CVE-2016-2776 infobyte/CVE-2016-2776 CVE-2016-2783 # Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames. iknowjason/spb CVE-2016-3088 # The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. VVzv/CVE-2016-3088 CVE-2016-3113 # Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML. 0xEmanuel/CVE-2016-3113 CVE-2016-3141 # Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element. peternguyen93/CVE-2016-3141 CVE-2016-3308 # The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-3309, CVE-2016-3310, and CVE-2016-3311. 55-AA/CVE-2016-3308 CVE-2016-3309 # The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311. siberas/CVE-2016-3309_Reloaded CVE-2016-3714 # The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\" jackdpeterson/imagick_secure_puppet tommiionfire/CVE-2016-3714 chusiang/CVE-2016-3714.ansible.role jpeanut/ImageTragick-CVE-2016-3714-RShell Hood3dRob1n/CVE-2016-3714 HRSkraps/CVE-2016-3714 CVE-2016-3749 # server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930. nirdev/CVE-2016-3749-PoC CVE-2016-3955 # The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet. pqsec/uboatdemo CVE-2016-3957 # The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryption_key. sj/web2py-e94946d-CVE-2016-3957 CVE-2016-3959 # The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries. alexmullins/dsa CVE-2016-3962 # Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request. securifera/CVE-2016-3962-Exploit CVE-2016-4010 # Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data. brianwrf/Magento-CVE-2016-4010 CVE-2016-4117 # Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. amit-raut/CVE-2016-4117-Report hybridious/CVE-2016-4117 CVE-2016-4438 # The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression. jason3e7/CVE-2016-4438 tafamace/CVE-2016-4438 CVE-2016-4463 # Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD. arntsonl/CVE-2016-4463 CVE-2016-4622 # WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624. saelo/jscpwn hdbreaker/WebKit-CVE-2016-4622 CVE-2016-4631 # ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF file. hansnielsen/tiffdisabler CVE-2016-4655 # The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. jndok/PegasusX Cryptiiiic/skybreak CVE-2016-4657 # WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Mimoja/CVE-2016-4657-NintendoSwitch Traiver/CVE-2016-4657-Switch-Browser-Binary iDaN5x/Switcheroo vigneshyaadav27/webkit-vulnerability CVE-2016-4669 # An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the \"Kernel\" component. It allows local users to execute arbitrary code in a privileged context or cause a denial of service (MIG code mishandling and system crash) via unspecified vectors. i-o-s/CVE-2016-4669 CVE-2016-4845 # Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware before 2.04 allows remote attackers to hijack the authentication of arbitrary users for requests that delete content. kaito834/cve-2016-4845_csrf CVE-2016-4861 # The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation. KosukeShimofuji/CVE-2016-4861 CVE-2016-4971 # GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource. BlueCocoa/CVE-2016-4971 mbadanoiu/CVE-2016-4971 CVE-2016-4977 # When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type. GEIGEI123/CVE-2016-4977-POC CVE-2016-5195 # Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\" KosukeShimofuji/CVE-2016-5195 ASRTeam/CVE-2016-5195 timwr/CVE-2016-5195 xlucas/dirtycow.cr istenrot/centos-dirty-cow-ansible pgporada/ansible-role-cve sideeffect42/DirtyCOWTester scumjr/dirtycow-vdso gbonacini/CVE-2016-5195 DavidBuchanan314/cowroot aishee/scan-dirtycow oleg-fiksel/ansible_CVE-2016-5195_check ldenevi/CVE-2016-5195 whu-enjoy/CVE-2016-5195 ndobson/inspec_CVE-2016-5195 linhlt247/DirtyCOW_CVE-2016-5195 sribaba/android-CVE-2016-5195 esc0rtd3w/org.cowpoop.moooooo nu11secur1ty/Protect-CVE-2016-5195-DirtyCow hyln9/VIKIROOT droidvoider/dirtycow-replacer FloridSleeves/os-experiment-4 arbll/dirtycow titanhp/Dirty-COW-CVE-2016-5195-Testing acidburnmi/CVE-2016-5195-master xpcmdshell/derpyc0w Brucetg/DirtyCow-EXP jas502n/CVE-2016-5195 imust6226/dirtcow CVE-2016-5345 # Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows local users to gain privileges via a crafted application, aka Android internal bug 32639452 and Qualcomm internal bug CR1079713. NickStephens/cve-2016-5345 CVE-2016-5639 # Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter. xfox64x/CVE-2016-5639 CVE-2016-5640 # Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter. vpnguy-zz/CrestCrack xfox64x/CVE-2016-5640 CVE-2016-5696 # net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack. Gnoxter/mountain_goat violentshell/rover jduck/challack bplinux/chackd nogoegst/grill CVE-2016-5699 # CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. bunseokbot/CVE-2016-5699-poc shajinzheng/cve-2016-5699-jinzheng-sha CVE-2016-5734 # phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote attackers to execute arbitrary PHP code via a crafted string, as demonstrated by the table search-and-replace implementation. KosukeShimofuji/CVE-2016-5734 CVE-2016-6187 # The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor setprocattr hook. vnik5287/cve-2016-6187-poc CVE-2016-6210 # sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. justlce/CVE-2016-6210-Exploit CVE-2016-6271 # The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by leveraging a missing HVI check on DHPart2 packet reception. gteissier/CVE-2016-6271 CVE-2016-6317 # Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain \"[nil]\" values, a related issue to CVE-2012-2660, CVE-2012-2694, and CVE-2013-0155. kavgan/vuln_test_repo_public_ruby_gemfile_cve-2016-6317 CVE-2016-6366 # Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON. RiskSense-Ops/CVE-2016-6366 CVE-2016-6515 # The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string. opsxcq/exploit-CVE-2016-6515 cved-sources/cve-2016-6515 CVE-2016-6516 # Race condition in the ioctl_file_dedupe_range function in fs/ioctl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (heap-based buffer overflow) or possibly gain privileges by changing a certain count value, aka a \"double fetch\" vulnerability. wpengfei/CVE-2016-6516-exploit CVE-2016-6584 # ViralSecurityGroup/KNOXout CVE-2016-6662 # Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15. konstantin-kelemen/mysqld_safe-CVE-2016-6662-patch meersjo/ansible-mysql-cve-2016-6662 KosukeShimofuji/CVE-2016-6662 Ashrafdev/MySQL-Remote-Root-Code-Execution boompig/cve-2016-6662 MAYASEVEN/CVE-2016-6662 CVE-2016-6663 # Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table. firebroo/CVE-2016-6663 CVE-2016-6754 # A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937. secmob/BadKernel CVE-2016-6798 # In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks in all scripts which use this method to validate user input, potentially allowing an attacker to read sensitive data on the filesystem, perform same-site-request-forgery (SSRF), port-scanning behind the firewall or DoS the application. tafamace/CVE-2016-6798 CVE-2016-6801 # Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows remote attackers to hijack the authentication of unspecified victims for requests that create a resource via an HTTP POST request with a (1) missing or (2) crafted Content-Type header. TSNGL21/CVE-2016-6801 CVE-2016-7117 # Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing. KosukeShimofuji/CVE-2016-7117 CVE-2016-7190 # The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7194. 0xcl/cve-2016-7190 CVE-2016-7200 # The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243. theori-io/chakra-2016-11 CVE-2016-7255 # The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" heh3/CVE-2016-7255 FSecureLABS/CVE-2016-7255 homjxi0e/CVE-2016-7255 yuvatia/page-table-exploitation bbolmin/cve-2016-7255_x86_x64 CVE-2016-7434 # The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query. opsxcq/exploit-CVE-2016-7434 shekkbuilder/CVE-2016-7434 cved-sources/cve-2016-7434 CVE-2016-7608 # An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the \"IOFireWireFamily\" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors. bazad/IOFireWireFamily-overflow CVE-2016-7855 # Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016. swagatbora90/CheckFlashPlayerVersion CVE-2016-8007 # Authentication bypass vulnerability in McAfee Host Intrusion Prevention Services (HIPS) 8.0 Patch 7 and earlier allows authenticated users to manipulate the product's registry keys via specific conditions. dmaasland/mcafee-hip-CVE-2016-8007 CVE-2016-8016 # Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to obtain the existence of unauthorized files on the system via a URL parameter. opsxcq/exploit-CVE-2016-8016-25 CVE-2016-8367 # An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all versions, Magelis STO5xx and STU Small panels, all versions, Magelis XBT GH Advanced Hand-held Panels, all versions, Magelis XBT GK Advanced Touchscreen Panels with Keyboard, all versions, Magelis XBT GT Advanced Touchscreen Panels, all versions, and Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe). An attacker can open multiple connections to a targeted web server and keep connections open preventing new connections from being made, rendering the web server unavailable during an attack. 0xICF/PanelShock CVE-2016-8462 # An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: N/A. Android ID: A-32510383. CunningLogic/PixelDump_CVE-2016-8462 CVE-2016-8467 # An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service (device interoperability: completely permanent or requiring re-flashing the entire operating system). Product: Android. Versions: N/A. Android ID: A-30308784. roeeh/bootmodechecker CVE-2016-8610 # A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients. cujanovic/CVE-2016-8610-PoC CVE-2016-8636 # Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the \"RDMA protocol over infiniband\" (aka Soft RoCE) technology. jigerjain/Integer-Overflow-test CVE-2016-8655 # Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions. scarvell/cve-2016-8655 LakshmiDesai/CVE-2016-8655 KosukeShimofuji/CVE-2016-8655 agkunkle/chocobo martinmullins/CVE-2016-8655_Android CVE-2016-8735 # Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types. ianxtianxt/CVE-2016-8735 CVE-2016-8740 # The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to cause a denial of service (memory consumption) via crafted CONTINUATION frames in an HTTP/2 request. lcfpadilha/mac0352-ep4 CVE-2016-8776 # Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account. maviroxz/CVE-2016-8776 CVE-2016-8858 # ** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that \"OpenSSH upstream does not consider this as a security issue.\" dag-erling/kexkill CVE-2016-8869 # The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site. sunsunza2009/Joomla-3.4.4-3.6.4_CVE-2016-8869_and_CVE-2016-8870 rustyJ4ck/JoomlaCVE20168869 cved-sources/cve-2016-8869 CVE-2016-8870 # The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting. cved-sources/cve-2016-8870 CVE-2016-9066 # A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird \u003c 45.5, Firefox ESR \u003c 45.5, and Firefox \u003c 50. saelo/foxpwn CVE-2016-9079 # A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u003c 50.0.2, Firefox ESR \u003c 45.5.1, and Thunderbird \u003c 45.5.1. LakshmiDesai/CVE-2016-9079 dangokyo/CVE-2016-9079 CVE-2016-9192 # A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225). serializingme/cve-2016-9192 CVE-2016-9244 # A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well. EgeBalci/Ticketbleed glestel/minion-ticket-bleed-plugin CVE-2016-9838 # An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user's account and reset the user's group mappings, username, and password, as demonstrated by submitting a form that targets the `registration.register` task. cved-sources/cve-2016-9838 CVE-2016-9920 # steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute arbitrary code via a modified HTTP request that sends a crafted e-mail message. t0kx/exploit-CVE-2016-9920 2015 # CVE-2015-0006 # The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not perform mutual authentication to determine a domain connection, which allows remote attackers to trigger an unintended permissive configuration by spoofing DNS and LDAP responses on a local network, aka \"NLA Security Feature Bypass Vulnerability.\" bugch3ck/imposter CVE-2015-0057 # win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\" 55-AA/CVE-2015-0057 CVE-2015-0072 # Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a redirect, and an eval of a WindowProxy object, aka \"Universal XSS (UXSS).\" dbellavista/uxss-poc CVE-2015-0204 # The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the \"FREAK\" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations. felmoltor/FreakVulnChecker scottjpack/Freak-Scanner AbhishekGhosh/FREAK-Attack-CVE-2015-0204-Testing-Script niccoX/patch-openssl-CVE-2014-0291_CVE-2015-0204 CVE-2015-0231 # Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142. 3xp10it/php_cve-2014-8142_cve-2015-0231 CVE-2015-0235 # Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka \"GHOST.\" fser/ghost-checker mikesplain/CVE-2015-0235-cookbook aaronfay/CVE-2015-0235-test piyokango/ghost LyricalSecurity/GHOSTCHECK-cve-2015-0235 mholzinger/CVE-2015-0235_GHOST adherzog/ansible-CVE-2015-0235-GHOST favoretti/lenny-libc6 nickanderson/cfengine-CVE_2015_0235 koudaiii-archives/cookbook-update-glibc F88/ghostbusters15 JustDenisYT/ghosttester tobyzxj/CVE-2015-0235 makelinux/CVE-2015-0235-workaround arm13/ghost_exploit alanmeyer/CVE-glibc r0otshell/CVE-2015-0235 chayim/GHOSTCHECK-cve-2015-0235 CVE-2015-0313 # Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322. SecurityObscurity/cve-2015-0313 CVE-2015-0345 # Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. BishopFox/coldfusion-10-11-xss CVE-2015-0568 # Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call. betalphafai/CVE-2015-0568 CVE-2015-0816 # Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as demonstrated by the resource: URL associated with PDF.js. Afudadi/Firefox-35-37-Exploit CVE-2015-1130 # The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. Shmoopi/RootPipe-Demo sideeffect42/RootPipeTester CVE-2015-1140 # Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors. kpwn/vpwn CVE-2015-1157 # CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message. perillamint/CVE-2015-1157 CVE-2015-1318 # The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container). ScottyBauer/CVE-2015-1318 CVE-2015-1427 # The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script. t0kx/exploit-CVE-2015-1427 cved-sources/cve-2015-1427 CVE-2015-1474 # Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denial of service (memory corruption) via vectors that trigger a large number of (1) file descriptors or (2) integer values. p1gl3t/CVE-2015-1474_poc CVE-2015-1528 # Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of service (Binder heap memory corruption) via a crafted application, aka internal bug 19334482. secmob/PoCForCVE-2015-1528 kanpol/PoCForCVE-2015-1528 CVE-2015-1538 # Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496. oguzhantopgul/cve-2015-1538-1 renjithsasidharan/cve-2015-1538-1 jduck/cve-2015-1538-1 marZiiw/Stagefright_CVE-2015-1538-1 niranjanshr13/Stagefright-cve-2015-1538-1 CVE-2015-1560 # SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0) allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php. Iansus/Centreon-CVE-2015-1560_1561 CVE-2015-1579 # Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734. paralelo14/WordPressMassExploiter paralelo14/CVE-2015-1579 CVE-2015-1592 # Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors. lightsey/cve-2015-1592 CVE-2015-1635 # HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka \"HTTP.sys Remote Code Execution Vulnerability.\" xPaw/HTTPsys Zx7ffa4512-Python/Project-CVE-2015-1635 technion/erlvulnscan wiredaem0n/chk-ms15-034 1337r00t/Remove-IIS-RIIS bongbongco/MS15-034 aedoo/CVE-2015-1635-POC limkokhole/CVE-2015-1635 CVE-2015-1641 # Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka \"Microsoft Office Memory Corruption Vulnerability.\" Cyberclues/rtf_exploit_extractor CVE-2015-1701 # Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka \"Win32k Elevation of Privilege Vulnerability.\" hfiref0x/CVE-2015-1701 CVE-2015-1805 # The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an \"I/O vector array overrun.\" panyu6325/CVE-2015-1805 dosomder/iovyroot FloatingGuy/cve-2015-1805 mobilelinux/iovy_root_research CVE-2015-1855 # verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters. vpereira/CVE-2015-1855 CVE-2015-2080 # The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak. BizarreNULL/CVE-2015-2080 CVE-2015-2153 # The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU). arntsonl/CVE-2015-2153 CVE-2015-2208 # The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter. ptantiku/cve-2015-2208 CVE-2015-2231 # rednaga/adups-get-super-serial CVE-2015-2291 # (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call. Tare05/Intel-CVE-2015-2291 CVE-2015-2315 # Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the target parameter in a reminder_popup action to the default URI. weidongl74/cve-2015-2315-report CVE-2015-2546 # The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka \"Win32k Memory Corruption Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2015-2511, CVE-2015-2517, and CVE-2015-2518. k0keoyo/CVE-2015-2546-Exploit CVE-2015-2794 # The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. styx00/DNN_CVE-2015-2794 wilsc0w/CVE-2015-2794-finder CVE-2015-2900 # The AddUserFinding add_userfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted packet on port 8190. securifera/CVE-2015-2900-Exploit CVE-2015-2925 # The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a \"double-chroot attack.\" Kagami/docker_cve-2015-2925 CVE-2015-3043 # Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042. whitehairman/Exploit CVE-2015-3073 # Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, and CVE-2015-3074. reigningshells/CVE-2015-3073 CVE-2015-3152 # Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a \"BACKRONYM\" attack. duo-labs/mysslstrip CVE-2015-3224 # request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelisted_ips protection mechanism via a crafted request. 0x00-0x00/CVE-2015-3224 0xEval/cve-2015-3224 CVE-2015-3306 # The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. chcx/cpx_proftpd nootropics/propane t0kx/exploit-CVE-2015-3306 davidtavarez/CVE-2015-3306 cved-sources/cve-2015-3306 hackarada/cve-2015-3306 CVE-2015-3337 # Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors. jas502n/CVE-2015-3337 CVE-2015-3456 # The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM. vincentbernat/cve-2015-3456 MauroEldritch/venom CVE-2015-3636 # The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect. betalphafai/cve-2015-3636_crash askk/libping_unhash_exploit_POC ludongxu/cve-2015-3636 fi01/CVE-2015-3636 android-rooting-tools/libpingpong_exploit debugfan/rattle_root a7vinx/CVE-2015-3636 CVE-2015-3825 # roeeh/conscryptchecker CVE-2015-3837 # The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization, which allows attackers to execute arbitrary code via an application that sends a crafted Intent, aka internal bug 21437603. itibs/IsildursBane CVE-2015-3839 # The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process crash). mabin004/cve-2015-3839_PoC CVE-2015-3864 # Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824. pwnaccelerator/stagefright-cve-2015-3864 eudemonics/scaredycat HenryVHuang/CVE-2015-3864 CVE-2015-4495 # The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015. vincd/CVE-2015-4495 CVE-2015-4852 # The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product. roo7break/serialator AndersonSingh/serialization-vulnerability-scanner CVE-2015-4870 # Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser. OsandaMalith/CVE-2015-4870 CVE-2015-5119 # Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015. jvazquez-r7/CVE-2015-5119 portcullislabs/CVE-2015-5119_walkthrough dangokyo/CVE-2015-5119 CVE-2015-5195 # ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation. theglife214/CVE-2015-5195 CVE-2015-5254 # Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object. jas502n/CVE-2015-5254 CVE-2015-5290 # A Denial of Service vulnerability exists in ircd-ratbox 3.0.9 in the MONITOR Command Handler. skyhighwings/CVE-2015-5290 CVE-2015-5374 # A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions \u003c V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions \u003c V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions \u003c V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions \u003c V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions \u003c 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device. can/CVE-2015-5374-DoS-PoC CVE-2015-5454 # Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item. security-breachlock/CVE-2015-5454 CVE-2015-5477 # named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. robertdavidgraham/cve-2015-5477 elceef/tkeypoc hmlio/vaas-cve-2015-5477 knqyf263/cve-2015-5477 ilanyu/cve-2015-5477 denmilu/ShareDoc_cve-2015-5477 CVE-2015-5602 # sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by \"/home/*/*/file.txt.\" t0kx/privesc-CVE-2015-5602 cved-sources/cve-2015-5602 CVE-2015-5932 # The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified \"type confusion\" during Mach task processing. jndok/tpwn-bis CVE-2015-5995 # Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header. shaheemirza/TendaSpill CVE-2015-6086 # Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\" payatu/CVE-2015-6086 CVE-2015-6095 # Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles password changes, which allows physically proximate attackers to bypass authentication, and conduct decryption attacks against certain BitLocker configurations, by connecting to an unintended Key Distribution Center (KDC), aka \"Windows Kerberos Security Feature Bypass.\" JackOfMostTrades/bluebox CVE-2015-6132 # Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \"Windows Library Loading Remote Code Execution Vulnerability.\" hexx0r/CVE-2015-6132 CVE-2015-6357 # The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code, via a crafted certificate, aka Bug ID CSCuw06444. mattimustang/firepwner CVE-2015-6576 # Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource. CallMeJonas/CVE-2015-6576 CVE-2015-6606 # The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786. michaelroland/omapi-cve-2015-6606-exploit CVE-2015-6612 # libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted application, aka internal bug 23540426. secmob/CVE-2015-6612 flankerhqd/cve-2015-6612poc-forM CVE-2015-6620 # libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bugs 24123723 and 24445127. flankerhqd/CVE-2015-6620-POC flankerhqd/mediacodecoob CVE-2015-6637 # The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013. betalphafai/CVE-2015-6637 CVE-2015-6639 # The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875. laginimaineb/cve-2015-6639 laginimaineb/ExtractKeyMaster CVE-2015-6640 # The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service (vma list corruption) via a crafted application, aka internal bug 20017123. betalphafai/CVE-2015-6640 CVE-2015-6835 # The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content. ockeghem/CVE-2015-6835-checker CVE-2015-6967 # Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/my_image/image.php. VanTekken/CVE-2015-6967 CVE-2015-7214 # Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs. llamakko/CVE-2015-7214 CVE-2015-7297 # SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7858. CCrashBandicot/ContentHistory CVE-2015-7501 # Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. ianxtianxt/CVE-2015-7501 CVE-2015-7545 # The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule. avuserow/bug-free-chainsaw CVE-2015-7547 # Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing \"dual A/AAAA DNS queries\" and the libnss_dns.so.2 NSS module. fjserna/CVE-2015-7547 cakuzo/CVE-2015-7547 t0r0t0r0/CVE-2015-7547 JustDenisYT/glibc-patcher rexifiles/rex-sec-glibc babykillerblack/CVE-2015-7547 jgajek/cve-2015-7547 eSentire/cve-2015-7547-public bluebluelan/CVE-2015-7547-proj-master miracle03/CVE-2015-7547-master CVE-2015-7755 # Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b, and 6.3.0r20 before 6.3.0r21 allows remote attackers to obtain administrative access by entering an unspecified password during a (1) SSH or (2) TELNET session. hdm/juniper-cve-2015-7755 cinno/CVE-2015-7755-POC CVE-2015-7808 # The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments. Prajithp/CVE-2015-7808 CVE-2015-8088 # Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application. Pray3r/CVE-2015-8088 CVE-2015-8103 # The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the \"Groovy variant in 'ysoserial'\". cved-sources/cve-2015-8103 CVE-2015-8277 # Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode (a) 0x107 or (b) 0x10a. securifera/CVE-2015-8277-Exploit CVE-2015-8299 # Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet. kernoelpanic/CVE-2015-8299 CVE-2015-8543 # The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application. bittorrent3389/CVE-2015-8543_for_SLE12SP1 CVE-2015-8562 # Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015. ZaleHack/joomla_rce_CVE-2015-8562 RobinHoutevelts/Joomla-CVE-2015-8562-PHP-POC atcasanova/cve-2015-8562-exploit thejackerz/scanner-exploit-joomla-CVE-2015-8562 paralelo14/CVE-2015-8562 VoidSec/Joomla_CVE-2015-8562 xnorkl/Joomla_Payload CVE-2015-8651 # Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK \u0026 Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors. Gitlabpro/The-analysis-of-the-cve-2015-8651 CVE-2015-8660 # The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application. whu-enjoy/CVE-2015-8660 CVE-2015-8710 # The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment. Karm/CVE-2015-8710 CVE-2015-9251 # jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. halkichi0308/CVE-2015-9251 2014 # CVE-2014-0038 # The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter. saelo/cve-2014-0038 CVE-2014-0050 # MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions. jrrdev/cve-2014-0050 CVE-2014-0094 # The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to \"manipulate\" the ClassLoader via the class parameter, which is passed to the getClass method. HasegawaTadamitsu/CVE-2014-0094-test-program-for-struts1 CVE-2014-0114 # Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to \"manipulate\" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1. rgielen/struts1filter ricedu/struts1-patch anob3it/strutt-cve-2014-0114 CVE-2014-0130 # Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request. omarkurt/cve-2014-0130 CVE-2014-0160 # The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug. FiloSottile/Heartbleed titanous/heartbleeder DominikTo/bleed cyphar/heartthreader jdauphant/patch-openssl-CVE-2014-0160 musalbas/heartbleed-masstest obayesshelton/CVE-2014-0160-Scanner Lekensteyn/pacemaker isgroup-srl/openmagic fb1h2s/CVE-2014-0160 roganartu/heartbleedchecker-chrome zouguangxian/heartbleed sensepost/heartbleed-poc proactiveRISK/heartbleed-extention amerine/coronary 0x90/CVE-2014-0160 ice-security88/CVE-2014-0160 waqasjamal-zz/HeartBleed-Vulnerability-Checker siddolo/knockbleed sammyfung/openssl-heartbleed-fix a0726h77/heartbleed-test hreese/heartbleed-dtls wwwiretap/bleeding_onions idkqh7/heatbleeding GeeksXtreme/ssl-heartbleed.nse xlucas/heartbleed indiw0rm/-Heartbleed- einaros/heartbleed-tools mozilla-services/Heartbleed yryz/heartbleed.js DisK0nn3cT/MaltegoHeartbleed OffensivePython/HeartLeak vortextube/ssl_scanner mpgn/heartbleed-PoC xanas/heartbleed.py iSCInc/heartbleed marstornado/cve-2014-0160-Yunfeng-Jiang hmlio/vaas-cve-2014-0160 hybridus/heartbleedscanner Xyl2k/CVE-2014-0160-Chrome-Plugin kaosV20/Heartexploit caiqiqi/OpenSSL-HeartBleed-CVE-2014-0160-PoC Saymeis/HeartBleed cved-sources/cve-2014-0160 cheese-hub/heartbleed artofscripting/cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS cldme/heartbleed-bug hack3r-0m/heartbleed_fix_updated CVE-2014-0166 # The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie. Ettack/POC-CVE-2014-0166 CVE-2014-0195 # The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment. ricedu/CVE-2014-0195 CVE-2014-0196 # The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO \u0026 !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings. SunRain/CVE-2014-0196 tempbottle/CVE-2014-0196 CVE-2014-0224 # OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability. Tripwire/OpenSSL-CCS-Inject-Test iph0n3/CVE-2014-0224 droptables/ccs-eval ssllabs/openssl-ccs-cve-2014-0224 secretnonempty/CVE-2014-0224 CVE-2014-0291 # niccoX/patch-openssl-CVE-2014-0291_CVE-2015-0204 CVE-2014-0521 # Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X do not properly implement JavaScript APIs, which allows remote attackers to obtain sensitive information via a crafted PDF document. molnarg/cve-2014-0521 CVE-2014-0816 # Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown vectors. tandasat/CVE-2014-0816 CVE-2014-0993 # Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file. helpsystems/Embarcadero-Workaround CVE-2014-10069 # Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the um_auth_account_password field. Manouchehri/hitron-cfg-decrypter CVE-2014-1266 # The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step. landonf/Testability-CVE-2014-1266 linusyang/SSLPatch gabrielg/CVE-2014-1266-poc CVE-2014-1303 # Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Liang Chen during a Pwn2Own competition at CanSecWest 2014. RKX1209/CVE-2014-1303 CVE-2014-1322 # The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it easier for local users to bypass the ASLR protection mechanism by reading an unspecified attribute of the object. raymondpittman/IPC-Memory-Mac-OSX-Exploit CVE-2014-1447 # Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent. tagatac/libvirt-CVE-2014-1447 CVE-2014-160 # menrcom/CVE-2014-160 GitMirar/heartbleed_exploit CVE-2014-1677 # Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information. tihmstar/freePW_tc7200Eploit CVE-2014-1773 # Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775. day6reak/CVE-2014-1773 CVE-2014-2064 # The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts. Naramsim/Offensive CVE-2014-2323 # SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname. cirocosta/lighty-sqlinj-demo CVE-2014-2324 # Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname. sp4c30x1/uc_httpd_exploit CVE-2014-2630 # Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors. redtimmy/perf-exploiter CVE-2014-2734 # ** DISPUTED ** The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operations. NOTE: this issue has been disputed by the Ruby OpenSSL team and third parties, who state that the original demonstration PoC contains errors and redundant or unnecessarily-complex code that does not appear to be related to a demonstration of the issue. As of 20140502, CVE is not aware of any public comment by the original researcher. gdisneyleugers/CVE-2014-2734 adrienthebo/cve-2014-2734 CVE-2014-3120 # The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine. jeffgeiger/es_inject echohtp/ElasticSearch-CVE-2014-3120 CVE-2014-3153 # The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification. timwr/CVE-2014-3153 android-rooting-tools/libfutex_exploit geekben/towelroot lieanu/CVE-2014-3153 zerodavinci/CVE-2014-3153-exploit c3c/CVE-2014-3153 dangtunguyen/TowelRoot CVE-2014-3341 # The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616. ehabhussein/snmpvlan CVE-2014-3466 # Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message. azet/CVE-2014-3466_PoC CVE-2014-3566 # The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue. mikesplain/CVE-2014-3566-poodle-cookbook stdevel/poodle_protector ashmastaflash/mangy-beast mpgn/poodle-PoC CVE-2014-3625 # Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling. ilmila/springcss-cve-2014-3625 gforresu/SpringPathTraversal CVE-2014-3704 # The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys. happynote3966/CVE-2014-3704 CVE-2014-4014 # The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root. vnik5287/cve-2014-4014-privesc CVE-2014-4076 # Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka \"TCP/IP Elevation of Privilege Vulnerability.\" fungoshacks/CVE-2014-4076 CVE-2014-4109 # Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4110, and CVE-2014-4111. day6reak/CVE-2014-4109 CVE-2014-4113 # win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka \"Win32k.sys Elevation of Privilege Vulnerability.\" johnjohnsp1/CVE-2014-4113 nsxz/Exploit-CVE-2014-4113 sam-b/CVE-2014-4113 CVE-2014-4140 # Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \"Internet Explorer ASLR Bypass Vulnerability.\" day6reak/CVE-2014-4140 CVE-2014-4210 # Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services. NoneNotNull/SSRFX 0xn0ne/weblogicScanner CVE-2014-4321 # android-rooting-tools/libmsm_vfe_read_exploit CVE-2014-4322 # drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application. retme7/CVE-2014-4322_poc laginimaineb/cve-2014-4322 askk/CVE-2014-4322_adaptation koozxcv/CVE-2014-4322 CVE-2014-4323 # The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application. marcograss/cve-2014-4323 CVE-2014-4377 # Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. feliam/CVE-2014-4377 davidmurray/CVE-2014-4377 CVE-2014-4378 # CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted PDF document. feliam/CVE-2014-4378 CVE-2014-4481 # Integer overflow in CoreGraphics in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. feliam/CVE-2014-4481 CVE-2014-4511 # Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/. michaelsss1/gitlist-RCE CVE-2014-4671 # Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK \u0026 Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. cph/rabl-old CVE-2014-4699 # The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls. vnik5287/cve-2014-4699-ptrace CVE-2014-4936 # The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable. 0x3a/CVE-2014-4936 CVE-2014-4943 # The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket. redes-2015/l2tp-socket-bug CVE-2014-5284 # host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which allows local users to modify access restrictions in hosts.deny and gain root privileges by creating the temporary files before automatic IP blocking is performed. mbadanoiu/CVE-2014-5284 CVE-2014-6271 # GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\" NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix. dlitz/bash-cve-2014-6271-fixes npm/ansible-bashpocalypse ryancnelson/patched-bash-4.3 jblaine/cookbook-bash-CVE-2014-6271 rrreeeyyy/cve-2014-6271-spec scottjpack/shellshock_scanner Anklebiter87/Cgi-bin_bash_Reverse justzx2011/bash-up mattclegg/CVE-2014-6271 ilismal/Nessus_CVE-2014-6271_check RainMak3r/Rainstorm gabemarshall/shocknaww woltage/CVE-2014-6271 ariarijp/vagrant-shellshock themson/shellshock securusglobal/BadBash villadora/CVE-2014-6271 APSL/salt-shellshock teedeedubya/bash-fix-exploit internero/debian-lenny-bash_3.2.52-cve-2014-6271 pwnGuy/shellshock-shell vonnyfly/shellshock_crawler u20024804/bash-3.2-fixed-CVE-2014-6271 u20024804/bash-4.2-fixed-CVE-2014-6271 u20024804/bash-4.3-fixed-CVE-2014-6271 francisck/shellshock-cgi proclnas/ShellShock-CGI-Scan sch3m4/RIS ryeyao/CVE-2014-6271_Test cj1324/CGIShell renanvicente/puppet-shellshock indiandragon/Shellshock-Vulnerability-Scan ramnes/pyshellshock akiraaisha/shellshocker-python kelleykong/cve-2014-6271-mengjia-kong huanlu/cve-2014-6271-huan-lu sunnyjiang/shellshocker-android P0cL4bs/ShellShock-CGI-Scan hmlio/vaas-cve-2014-6271 opsxcq/exploit-CVE-2014-6271 Pilou-Pilou/docker_CVE-2014-6271. zalalov/CVE-2014-6271 0x00-0x00/CVE-2014-6271 kowshik-sundararajan/CVE-2014-6271 w4fz5uck5/ShockZaum-CVE-2014-6271 Aruthw/CVE-2014-6271 cved-sources/cve-2014-6271 shawntns/exploit-CVE-2014-6271 Sindadziy/cve-2014-6271 wenyu1999/bash-shellshock Sindayifu/CVE-2019-14287-CVE-2014-6271 Any3ite/CVE-2014-6271 somhm-solutions/Shell-Shock CVE-2014-6287 # The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action. roughiz/cve-2014-6287.py CVE-2014-6332 # OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka \"Windows OLE Automation Array Remote Code Execution Vulnerability.\" MarkoArmitage/metasploit-framework tjjh89017/cve-2014-6332 mourr/CVE-2014-6332 CVE-2014-6577 # Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the original researcher's claim that this is an XML external entity (XXE) vulnerability in the XML parser, which allows attackers to conduct internal port scanning, perform SSRF attacks, or cause a denial of service via a crafted (1) http: or (2) ftp: URI. SecurityArtWork/oracle-xxe-sqli CVE-2014-6598 # Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications Applications 3.x, 4.x, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Signaling - DPI. KPN-CISO/DRA_writeup CVE-2014-7169 # GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271. chef-boneyard/bash-shellshock gina-alaska/bash-cve-2014-7169-cookbook CVE-2014-7236 # Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome. m0nad/CVE-2014-7236_Exploit CVE-2014-7911 # luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0.0 does not verify that deserialization will result in an object that met the requirements for serialization, which allows attackers to execute arbitrary code via a crafted finalize method for a serialized object in an ArrayMap Parcel within an intent sent to system_service, as demonstrated by the finalize method of android.os.BinderProxy, aka Bug 15874291. retme7/CVE-2014-7911_poc ele7enxxh/CVE-2014-7911 heeeeen/CVE-2014-7911poc GeneBlue/cve-2014-7911-exp koozxcv/CVE-2014-7911 koozxcv/CVE-2014-7911-CVE-2014-4322_get_root_privilege mabin004/cve-2014-7911 CytQ/CVE-2014-7911_poc CVE-2014-7920 # mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921. laginimaineb/cve-2014-7920-7921 Vinc3nt4H/cve-2014-7920-7921_update CVE-2014-8110 # Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. tafamace/CVE-2014-8110 CVE-2014-8142 # Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019. 3xp10it/php_cve-2014-8142_cve-2015-0231 CVE-2014-8244 # Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request. JollyJumbuckk/LinksysLeaks CVE-2014-8609 # The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Android before 5.0.0 does not properly create a PendingIntent, which allows attackers to use the SYSTEM uid for broadcasting an intent with arbitrary component, action, or category information via a third-party authenticator in a crafted application, aka Bug 17356824. locisvv/Vulnerable-CVE-2014-8609 CVE-2014-8682 # Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary SQL commands via the q parameter to (1) api/v1/repos/search, which is not properly handled in models/repo.go, or (2) api/v1/users/search, which is not properly handled in models/user.go. nihal1306/gogs CVE-2014-8729 # inso-/TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878 CVE-2014-8757 # LG On-Screen Phone (OSP) before 4.3.010 allows remote attackers to bypass authorization via a crafted request. irsl/lgosp-poc CVE-2014-9016 # The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request. c0r3dump3d/wp_drupal_timing_attack Primus27/WordPress-Long-Password-Denial-of-Service CVE-2014-9222 # AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the \"Misfortune Cookie\" vulnerability. BenChaliah/MIPS-CVE-2014-9222 CVE-2014-9295 # Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function. MacMiniVault/NTPUpdateSnowLeopard CVE-2014-9301 # Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter. ottimo/burp-alfresco-referer-proxy-cve-2014-9301 CVE-2014-9322 # arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space. RKX1209/CVE-2014-9322 CVE-2014-9390 # Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine; libgit2; Egit; and JGit allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem. mmetince/CVE-2014-9390 hakatashi/CVE-2014-9390 CVE-2014-9707 # EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (heap-based buffer overflow and crash), or possibly execute arbitrary code via a crafted URI. zhw-01/cve-2014-9707 2013 # CVE-2013-0156 # active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion. terracatta/name_reverser heroku/heroku-CVE-2013-0156 josal/crack-0.1.8-fixed bsodmike/rails-exploit-cve-2013-0156 R3dKn33/CVE-2013-0156 CVE-2013-0229 # The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read. lochiiconnectivity/vulnupnp CVE-2013-0269 # The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka \"Unsafe Object Creation Vulnerability.\" heroku/heroku-CVE-2013-0269 CVE-2013-0333 # lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL injection attacks, or bypass authentication via crafted data that triggers unsafe decoding, a different vulnerability than CVE-2013-0156. heroku/heroku-CVE-2013-0333 CVE-2013-1081 # Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter. steponequit/CVE-2013-1081 CVE-2013-1300 # win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka \"Win32k Memory Allocation Vulnerability.\" Meatballs1/cve-2013-1300 CVE-2013-1488 # The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, \"improper toString calls,\" and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013. v-p-b/buherablog-cve-2013-1488 CVE-2013-1491 # The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013. guhe120/CVE20131491-JIT CVE-2013-1690 # Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location. vlad902/annotated-fbi-tbb-exploit CVE-2013-1775 # sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch. bekhzod0725/perl-CVE-2013-1775 CVE-2013-1965 # Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect. cinno/CVE-2013-1965 CVE-2013-2028 # The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow. danghvu/nginx-1.4.0 kitctf/nginxpwn tachibana51/CVE-2013-2028-x64-bypass-ssp-and-pie-PoC CVE-2013-2072 # Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap. bl4ck5un/cve-2013-2072 CVE-2013-2094 # The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call. realtalk/cve-2013-2094 hiikezoe/libperf_event_exploit Pashkela/CVE-2013-2094 tarunyadav/fix-cve-2013-2094 timhsutw/cve-2013-2094 vnik5287/CVE-2013-2094 CVE-2013-2186 # The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance. GrrrDog/ACEDcup SPlayer1248/Payload_CVE_2013_2186 SPlayer1248/CVE_2013_2186 CVE-2013-2217 # cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. Osirium/suds CVE-2013-225 # ninj4c0d3r/ShellEvil CVE-2013-2595 # The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, enables MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl calls for an unrestricted mmap interface, which allows attackers to gain privileges via a crafted application. fi01/libmsm_cameraconfig_exploit CVE-2013-2596 # Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program. hiikezoe/libfb_mem_exploit CVE-2013-2597 # Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument. fi01/libmsm_acdb_exploit CVE-2013-2729 # Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727. feliam/CVE-2013-2729 CVE-2013-2730 # Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2733. feliam/CVE-2013-2730 CVE-2013-2842 # Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets. 173210/spider CVE-2013-2977 # Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1 on Linux, allows remote attackers to execute arbitrary code via a malformed PNG image in a previewed e-mail message, aka SPR NPEI96K82Q. lagartojuancho/CVE-2013-2977 CVE-2013-3319 # The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128. integrity-sa/cve-2013-3319 CVE-2013-3651 # LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC_CheckError.php and data/class/SC_FormParam.php. motikan2010/CVE-2013-3651 CVE-2013-3664 # Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue. lagartojuancho/CVE-2013-3664_MAC lagartojuancho/CVE-2013-3664_BMP CVE-2013-4002 # XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names. tafamace/CVE-2013-4002 CVE-2013-4175 # MySecureShell 1.31 has a Local Denial of Service Vulnerability hartwork/mysecureshell-issues CVE-2013-4348 # The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation. bl4ck5un/cve-2013-4348 CVE-2013-4378 # Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header. theratpack/grails-javamelody-sample-app CVE-2013-4434 # Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames. styx00/Dropbear_CVE-2013-4434 CVE-2013-4784 # The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password. alexoslabs/ipmitest CVE-2013-5065 # NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013. Friarfukd/RobbinHood CVE-2013-5211 # The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013. dani87/ntpscanner suedadam/ntpscanner sepehrdaddev/ntpdos CVE-2013-5664 # Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908. phusion/rails-cve-2012-5664-test CVE-2013-5842 # Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850. guhe120/CVE-2013-5842 CVE-2013-6117 # Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777. milo2012/CVE-2013-6117 CVE-2013-6282 # The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013. fi01/libput_user_exploit fi01/libget_user_exploit jeboo/bypasslkm timwr/CVE-2013-6282 CVE-2013-6375 # Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an \"inverted boolean parameter.\" bl4ck5un/cve-2013-6375 CVE-2013-6668 # Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. sdneon/CveTest CVE-2013-6987 # Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before 4.3-3810 Update 3 allow remote attackers to read, write, and delete arbitrary files via a .. (dot dot) in the (1) path parameter to file_delete.cgi or (2) folder_path parameter to file_share.cgi in webapi/FileStation/; (3) dlink parameter to fbdownload/; or unspecified parameters to (4) html5_upload.cgi, (5) file_download.cgi, (6) file_sharing.cgi, (7) file_MVCP.cgi, or (8) file_rename.cgi in webapi/FileStation/. Sciota/CVE-2013-6987 2012 # CVE-2012-0003 # Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka \"MIDI Remote Code Execution Vulnerability.\" k0keoyo/CVE-2012-0003_eXP CVE-2012-0056 # The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/\u003cpid\u003e/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper. srclib/CVE-2012-0056 pythonone/CVE-2012-0056 CVE-2012-0152 # The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka \"Terminal Server Denial of Service Vulnerability.\" rutvijjethwa/RDP_jammer CVE-2012-1675 # The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by performing a remote registration of a database (1) instance or (2) service name that already exists, then conducting a man-in-the-middle (MITM) attack to hijack database connections, aka \"TNS Poison.\" bongbongco/CVE-2012-1675 CVE-2012-1723 # Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. EthanNJC/CVE-2012-1723 CVE-2012-1823 # sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case. drone789/CVE-2012-1823 gamamaru6005/oscp_scripts-1 noondi/metasploitable2 CVE-2012-1876 # Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka \"Col Element Remote Code Execution Vulnerability,\" as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. WizardVan/CVE-2012-1876 CVE-2012-1889 # Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. whu-enjoy/CVE-2012-1889 l-iberty/cve-2012-1889 CVE-2012-2122 # sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value. Avinza/CVE-2012-2122-scanner CVE-2012-2688 # Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an \"overflow.\" shelld3v/CVE-2012-2688 CVE-2012-3137 # The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to conduct brute force password guessing attacks, aka \"stealth password cracking vulnerability.\" hantwister/o5logon-fetch r1-/cve-2012-3137 CVE-2012-3153 # Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the PARSEQUERY function allows remote attackers to obtain database credentials via reports/rwservlet/parsequery, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3152 to execute arbitrary code by uploading a .jsp file. Mekanismen/pwnacle-fusion CVE-2012-3716 # CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write or read) via a crafted text glyph. d4rkcat/killosx CVE-2012-4220 # diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via an application that uses crafted arguments in a local diagchar_ioctl call. hiikezoe/diaggetroot poliva/root-zte-open CVE-2012-4431 # org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier. Michael-Main/CVE-2012-4431 CVE-2012-4681 # Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class. benjholla/CVE-2012-4681-Armoring ZH3FENG/PoCs-CVE_2012_4681 CVE-2012-4792 # Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012. WizardVan/CVE-2012-4792 CVE-2012-4929 # The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a \"CRIME\" attack. mpgn/CRIME-poc CVE-2012-5106 # Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a PUT command. war4uthor/CVE-2012-5106 CVE-2012-5575 # Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka \"XML Encryption backwards compatibility attack.\" tafamace/CVE-2012-5575 CVE-2012-5613 # ** DISPUTED ** MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this issue, stating that this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: it could be argued that this should not be included in CVE because it is a configuration issue. Hood3dRob1n/MySQL-Fu.rb w4fz5uck5/UDFPwn-CVE-2012-5613 CVE-2012-5664 # phusion/rails-cve-2012-5664-test CVE-2012-5958 # Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction. lochiiconnectivity/vulnupnp CVE-2012-5960 # Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet. finn79426/CVE-2012-5960-PoC CVE-2012-6066 # freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c. bongbongco/CVE-2012-6066 CVE-2012-6636 # The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in an application targeted to API level 16 or earlier, a related issue to CVE-2013-4710. xckevin/AndroidWebviewInjectDemo 2011 # CVE-2011-0228 # The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an arbitrary domain. jan0/isslfix CVE-2011-1237 # Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other \"Vulnerability Type 1\" CVEs listed in MS11-034, aka \"Win32k Use After Free Vulnerability.\" BrunoPujos/CVE-2011-1237 CVE-2011-1473 # ** DISPUTED ** OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment. c826/bash-tls-reneg-attack zjt674449039/cve-2011-1473 CVE-2011-1475 # The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to \"a mix-up of responses for requests from different users.\" samaujs/CVE-2011-1475 CVE-2011-1485 # Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID. Pashkela/CVE-2011-1485 CVE-2011-1571 # Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. noobpk/CVE-2011-1571 CVE-2011-1575 # The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a \"plaintext command injection\" attack, a similar issue to CVE-2011-0411. masamoon/cve-2011-1575-poc CVE-2011-1720 # The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method. nbeguier/postfix_exploit CVE-2011-1974 # NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka \"NDISTAPI Elevation of Privilege Vulnerability.\" hittlle/CVE-2011-1974-PoC CVE-2011-2461 # Cross-site scripting (XSS) vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains. ikkisoft/ParrotNG u-maxx/magento-swf-patched-CVE-2011-2461 edmondscommerce/CVE-2011-2461_Magento_Patch CVE-2011-2894 # Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended security restrictions and execute untrusted code by (1) serializing a java.lang.Proxy instance and using InvocationHandler, or (2) accessing internal AOP interfaces, as demonstrated using deserialization of a DefaultListableBeanFactory instance to execute arbitrary commands via the java.lang.Runtime class. pwntester/SpringBreaker CVE-2011-3026 # Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation. argp/cve-2011-3026-firefox CVE-2011-3192 # The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086. tkisason/KillApachePy limkokhole/CVE-2011-3192 stcmjp/cve-2011-3192 CVE-2011-3368 # The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character. SECFORCE/CVE-2011-3368 colorblindpentester/CVE-2011-3368 CVE-2011-3389 # The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack. mpgn/BEAST-PoC CVE-2011-3556 # Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557. sk4la/cve_2011_3556 CVE-2011-3872 # Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof a Puppet master via a man-in-the-middle (MITM) attack against an agent that uses an alternate DNS name for the master, aka \"AltNames Vulnerability.\" puppetlabs/puppetlabs-cve20113872 CVE-2011-4107 # The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack. SECFORCE/CVE-2011-4107 CVE-2011-4862 # Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011. hdbreaker/GO-CVE-2011-4862 lol-fi/cve-2011-4862 kpawar2410/CVE-2011-4862 CVE-2011-4872 # Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class. Chiggins/CVE-2011-4872 CVE-2011-4905 # Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests. Michael-Main/CVE-2011-4905 CVE-2011-4919 # mpack 1.6 has information disclosure via eavesdropping on mails sent by other users hartwork/mpacktrafficripper 2010 # CVE-2010-0426 # sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory. t0kx/privesc-CVE-2010-0426 cved-sources/cve-2010-0426 CVE-2010-0738 # The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method. ChristianPapathanasiou/jboss-autopwn gitcollect/jboss-autopwn CVE-2010-1205 # Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row. mk219533/CVE-2010-1205 CVE-2010-1411 # Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow. MAVProxyUser/httpfuzz-robomiller CVE-2010-2075 # UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands. M4LV0/UnrealIRCd-3.2.8.1-RCE CVE-2010-3332 # Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka \"ASP.NET Padding Oracle Vulnerability.\" bongbongco/MS10-070 CVE-2010-3333 # Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka \"RTF Stack Buffer Overflow Vulnerability.\" whiteHat001/cve-2010-3333 CVE-2010-3437 # Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call. huang-emily/CVE-2010-3437 CVE-2010-3490 # Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files via a .. (dot dot) in the usersnum parameter to admin/config.php, as demonstrated by creating a .php file under the web root. moayadalmalat/CVE-2010-3490 CVE-2010-3600 # Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that this issue involves an exposed JSP script that accepts XML uploads in conjunction with NULL bytes in an unspecified parameter that allow execution of arbitrary code. LAITRUNGMINHDUC/CVE-2010-3600-PythonHackOracle11gR2 CVE-2010-3847 # elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory. magisterquis/cve-2010-3847 CVE-2010-3904 # The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls. redhatkaty/-cve-2010-3904-report CVE-2010-3971 # Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a self-referential @import rule in a stylesheet, aka \"CSS Memory Corruption Vulnerability.\" nektra/CVE-2010-3971-hotpatch CVE-2010-4221 # Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server. M31MOTH/cve-2010-4221 CVE-2010-4258 # The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call. johnreginald/CVE-2010-4258 CVE-2010-4476 # The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308. grzegorzblaszczyk/CVE-2010-4476-check CVE-2010-4669 # The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package. quinn-samuel-perry/CVE-2010-4669 CVE-2010-4804 # The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/. thomascannon/android-cve-2010-4804 CVE-2010-5327 # Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template. Michael-Main/CVE-2010-5327 2009 # CVE-2009-0473 # Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. akbarq/CVE-2009-0473 CVE-2009-0689 # Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number. Fullmetal5/str2hax CVE-2009-1151 # Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action. minervais/pocs CVE-2009-1244 # Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916. piotrbania/vmware_exploit_pack_CVE-2009-1244 CVE-2009-1324 # Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file. war4uthor/CVE-2009-1324 CVE-2009-1330 # Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file. adenkiewicz/CVE-2009-1330 war4uthor/CVE-2009-1330 exploitwritter/CVE-2009-1330_EasyRMToMp3Converter CVE-2009-1437 # Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408. HanseSecure/CVE-2009-1437 CVE-2009-1904 # The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type. NZKoz/bigdecimal-segfault-fix CVE-2009-2692 # The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket. jdvalentini/CVE-2009-2692 CVE-2009-2698 # The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket. xiaoxiaoleo/CVE-2009-2698 CVE-2009-3103 # Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an \u0026 (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka \"SMBv2 Negotiation Vulnerability.\" NOTE: some of these details are obtained from third party information. mazding/ms09050 CVE-2009-4092 # Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords. xiaoyu-iid/Simplog-Exploit CVE-2009-4118 # The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running. alt3kx/CVE-2009-4118 CVE-2009-4137 # The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cookies before calling the unserialize function, which allows remote attackers to execute arbitrary code or upload arbitrary files via vectors related to the __destruct function in the Piwik_Config class; php://filter URIs; the __destruct functions in Zend Framework, as demonstrated by the Zend_Log destructor; the shutdown functions in Zend Framework, as demonstrated by the Zend_Log_Writer_Mail class; the render function in the Piwik_View class; Smarty templates; and the _eval function in Smarty. Alexeyan/CVE-2009-4137 CVE-2009-4660 # Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660. war4uthor/CVE-2009-4660 CVE-2009-5147 # DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names. vpereira/CVE-2009-5147 zhangyongbo100/-Ruby-dl-handle.c-CVE-2009-5147- 2008 # CVE-2008-0128 # The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. ngyanch/4062-1 CVE-2008-0166 # OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys. g0tmi1k/debian-ssh avarx/vulnkeys nu11secur1ty/debian-ssh CVE-2008-0228 # Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators. SpiderLabs/TWSL2011-007_iOS_code_workaround CVE-2008-1611 # Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request. Axua/CVE-2008-1611 CVE-2008-1613 # SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter. SECFORCE/CVE-2008-1613 CVE-2008-2938 # Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version. Naramsim/Offensive CVE-2008-4250 # The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka \"Server Service Vulnerability.\" thunderstrike9090/Conflicker_analysis_scripts CVE-2008-4609 # The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress. marcelki/sockstress CVE-2008-4654 # Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value. bongbongco/CVE-2008-4654 KernelErr/VLC-CVE-2008-4654-Exploit CVE-2008-5416 # Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka \"SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability.\" SECFORCE/CVE-2008-5416 CVE-2008-6827 # The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a \"Shatter\" style attack on the \"command prompt\" hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function. alt3kx/CVE-2008-6827 CVE-2008-6970 # SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter. KyomaHooin/CVE-2008-6970 CVE-2008-7220 # Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make \"cross-site ajax requests\" via unknown vectors. followboy1999/CVE-2008-7220 2007 # CVE-2007-0038 # Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred. Axua/CVE-2007-0038 CVE-2007-0843 # The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information. z3APA3A/spydir CVE-2007-1567 # Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors, as demonstrated by warftp_165.tar by Immunity. NOTE: this might be the same issue as CVE-1999-0256, CVE-2000-0131, or CVE-2006-2171, but due to Immunity's lack of details, this cannot be certain. war4uthor/CVE-2007-1567 CVE-2007-2447 # The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management. noondi/metasploitable2 amriunix/CVE-2007-2447 b1fair/smb_usermap Unam3dd/exploit_smb_usermap_script JoseBarrios/CVE-2007-2447 3x1t1um/CVE-2007-2447 CVE-2007-3830 # Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter. alt3kx/CVE-2007-3830 CVE-2007-3831 # PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. alt3kx/CVE-2007-3831 CVE-2007-4607 # Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15. joeyrideout/CVE-2007-4607 CVE-2007-5036 # Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the \"files filter.\" alt3kx/CVE-2007-5036 CVE-2007-6638 # March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz. alt3kx/CVE-2007-6638 2006 # CVE-2006-1236 # Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010. Axua/CVE-2006-1236 CVE-2006-3592 # Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to execute arbitrary commands with elevated privileges via unspecified vectors, involving \"certain CLI commands,\" aka bug CSCse11005. adenkiewicz/CVE-2006-3592 CVE-2006-3747 # Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules. spinfoo/CVE-2006-3747 CVE-2006-4777 # Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446. Mario1234/js-driveby-download-CVE-2006-4777 CVE-2006-4814 # The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock. tagatac/linux-CVE-2006-4814 CVE-2006-6184 # Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long filename in a (1) GET or (2) PUT command. shauntdergrigorian/cve-2006-6184 b03902043/CVE-2006-6184 2005 # CVE-2005-1125 # Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed. tagatac/libsafe-CVE-2005-1125 CVE-2005-2428 # Lotus Domino R5 and R6 WebMail, with \"Generate HTML for all fields\" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696. schwankner/CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit 2004 # CVE-2004-0558 # The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port. fibonascii/CVE-2004-0558 CVE-2004-1561 # Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers. ivanitlearning/CVE-2004-1561 CVE-2004-1769 # The \"Allow cPanel users to reset their password via email\" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass. sinkaroid/shiguresh CVE-2004-2167 # Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand. uzzzval/cve-2004-2167 CVE-2004-2271 # Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. kkirsche/CVE-2004-2271 PercussiveElbow/CVE-2004-2271-MiniShare-1.4.1-Buffer-Overflow war4uthor/CVE-2004-2271 pwncone/CVE-2004-2271-MiniShare-1.4.1-BOF CVE-2004-2549 # Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow. alt3kx/CVE-2004-2549 2003 # CVE-2003-0222 # Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a \"CREATE DATABASE LINK\" query containing a connect string with a long USING parameter. phamthanhsang280477/CVE-2003-0222 CVE-2003-0264 # Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server. adenkiewicz/CVE-2003-0264 fyoderxx/slmail-exploit war4uthor/CVE-2003-0264 pwncone/CVE-2003-0264-SLmail-5.5 2002 # CVE-2002-0200 # Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. alt3kx/CVE-2002-0200 CVE-2002-0201 # Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow. alt3kx/CVE-2002-0201 CVE-2002-0288 # Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request. alt3kx/CVE-2002-0288 CVE-2002-0289 # Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request. alt3kx/CVE-2002-0289 CVE-2002-0346 # Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi. alt3kx/CVE-2002-0346 CVE-2002-0347 # Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request. alt3kx/CVE-2002-0347 CVE-2002-0348 # service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument. alt3kx/CVE-2002-0348 CVE-2002-0448 # Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many \"C:/\" sequences. alt3kx/CVE-2002-0448 CVE-2002-0740 # Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument. alt3kx/CVE-2002-0740 CVE-2002-0991 # Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters. alt3kx/CVE-2002-0991 2001 # CVE-2001-0680 # Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a \"dot dot\" attack in a LIST (ls) command. alt3kx/CVE-2001-0680 CVE-2001-0758 # Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via \"CWD ...\" command. alt3kx/CVE-2001-0758 CVE-2001-0931 # Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET. alt3kx/CVE-2001-0931 CVE-2001-0932 # Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command. alt3kx/CVE-2001-0932 CVE-2001-0933 # Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. \"ls C:\". alt3kx/CVE-2001-0933 CVE-2001-0934 # Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname. alt3kx/CVE-2001-0934 CVE-2001-1442 # Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the \"news\" group to gain privileges via a long -c command line argument. alt3kx/CVE-2001-1442 2000 # CVE-2000-0170 # Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. mike182/exploit CVE-2000-0979 # File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the \"Share Level Password\" vulnerability. Z6543/CVE-2000-0979 1999 # CVE-1999-0532 # websecnl/Bulk_CVE-1999-0532_Scanner ","title":"PoC in GitHub","type":"blog"},{"content":" Index # Android Golang Gulp Haskell Javascript Node.js PHP QA React.js Ruby Webpack Информационные технологии и безопасность Новости и Разработка ПО Android # Android Dev (Podcast) Golang # GolangShow (Podcast) Gulp # Скринкаст по Gulp - Илья Кантор (Screencast) Haskell # Бананы и Линзы Javascript # Devschacht (Podcast) Frontflip (Podcast) Javascript для начинающих (Screencast) RadioJS (Podcast) Webstandards (Podcast) Node.js # Скринкаст Node.JS - Илья Кантор (Screencast) PHP # Пятиминутка PHP (Podcast) QA # QAGuild (Podcast) Подкаст тестировщиков (Podcast) React.js # Основы React.js - Роман Якобчук (Screencast) Пятиминутка React (Podcast) Ruby # RubyNoName Podcast (Podcast) RubySchool (Ruby, Rails) - Роман Пушкин (Screencast) RWPod Podcast (Podcast) Scala # Русскоязычный подкаст о Scala (Podcast) Webpack # Скринкаст Webpack - Илья Кантор (Screencast) Информационные технологии и безопасность # LinkMeUp (Podcast) Noise Security Bit (Podcast) uWebDesign (Podcast) Квант безопасности (Podcast) Новости и Разработка ПО # CTOcast (Podcast) DevZen Podcast (Podcast) Software Development podCAST (Podcast) The Art Of Programming (Podcast) Две Столицы - Уютный подкаст IT панков (Podcast) Как делают игры (Podcast) Радио-Т (Podcast) Разбор полётов (Podcast) Развлекательный IT подкаст (Podcast) Слава + Паша (Podcast) ","date":"March 18, 2020","externalUrl":null,"permalink":"/2020/03/18/free-podcasts-screencasts-ru/","section":"Blog","summary":"Index # Android Golang Gulp Haskell Javascript Node.js PHP QA React.js Ruby Webpack Информационные технологии и безопасность Новости и Разработка ПО Android # Android Dev (Podcast) Golang # GolangShow (Podcast) Gulp # Скринкаст по Gulp - Илья Кантор (Screencast) Haskell # Бананы и Линзы Javascript # Devschacht (Podcast) Frontflip (Podcast) Javascript для начинающих (Screencast) RadioJS (Podcast) Webstandards (Podcast) Node.js # Скринкаст Node.JS - Илья Кантор (Screencast) PHP # Пятиминутка PHP (Podcast) QA # QAGuild (Podcast) Подкаст тестировщиков (Podcast) React.js # Основы React.js - Роман Якобчук (Screencast) Пятиминутка React (Podcast) Ruby # RubyNoName Podcast (Podcast) RubySchool (Ruby, Rails) - Роман Пушкин (Screencast) RWPod Podcast (Podcast) Scala # Русскоязычный подкаст о Scala (Podcast) Webpack # Скринкаст Webpack - Илья Кантор (Screencast) Информационные технологии и безопасность # LinkMeUp (Podcast) Noise Security Bit (Podcast) uWebDesign (Podcast) Квант безопасности (Podcast) Новости и Разработка ПО # CTOcast (Podcast) DevZen Podcast (Podcast) Software Development podCAST (Podcast) The Art Of Programming (Podcast) Две Столицы - Уютный подкаст IT панков (Podcast) Как делают игры (Podcast) Радио-Т (Podcast) Разбор полётов (Podcast) Развлекательный IT подкаст (Podcast) Слава + Паша (Podcast) ","title":"free-podcasts-screencasts","type":"blog"},{"content":" Index # 0 - Language Agnostic Open Source Ecosystem Облачные Вычисления Парадигмы Программирования Работа c cетью Управление конфигурациями Angular Assembly Bash C C# C++ Clojure CoffeeScript Elasticsearch Elixir Erlang Git Go Haskell HTML / CSS Bootstrap Java Android EasyMock Hibernate JDBC JUnit Maven Spring JavaScript AngularJS jQuery Node.js nuxt.js React vue.js Kotlin LaTeX Lisp MetaPost .NET NoSQL Objective-C Perl PHP CakePHP CodeIgniter Laravel Python Django R Reverse engineering Ruby RSpec Ruby on Rails Rust Scala Scilab Scratch Smalltalk SQL PostgreSQL TypeScript Unix Vim 0 - Language Agnostic # 3D-моделирование в Blender - C. Шапошникова E-maxx.ru: Сборник алгоритмов с примерами на C++ (PDF) Scrum и XP: заметки с передовой (PDF) Введение в структуры и алгоритмы обработки данных - Михаил Курносов (PDF) Занимательное программирование. Самоучитель - Мозговой М.В. (PDF) Операционные системы - Всеволод Дёмкин (PDF) Параллельные технологии Программирование: введение в профессию - Столяров Андрей Викторович (:construction: в процессе написания) (PDF) Руководство по HTTP - Евгений Сулейманов Руководство по SOAP - Евгений Сулейманов Структура и интерпретация компьютерных программ - Гарольд Абельсон, Джералд Джей Сассман (PDF) Тестирование программного обеспечения. Базовый курс. - Святослав Куликов (PDF) Эффективные алгоритмы и сложность вычислений - Кузюрин Н.Н., Фомин С.А. Работа с сетью # IPv6 для знатоков IPv4 - Ярослав Тихий (PDF, HTML, EPUB) Разъяснение HTTP2 - Даниэль Штенберг (PDF) Open Source Ecosystem # Архитектура приложений с открытым исходным кодом Облачные вычисления # Разработка мультитенантных приложений для облака, издание 3-е Парадигмы программирования # Введение в функциональное программирование - John Harrison Практика функционального программирования - журнал Управление конфигурациями # Пособие по Ansible - Michel Blanc Angular # Angular 5. Полное руководство - Maximilian Schwarzmüller Руководство по Angular - Евгений Попов Assembly # Ассемблер в Linux для программистов C - Викиучебник Ассемблер для чайников Микропроцессоры и вычислительные комплексы семейства \u0026ldquo;Эльбрус\u0026rdquo; (PDF) Программирование на языке ассемблера NASM для ОС Unix - Андрей Столяров (PDF) Bash # Advanced Bash-Scripting Guide C # Заметки о языке программирования Си/Си++ - Денис Юричев (PDF) Особенности языка C. Учебное пособие - C. Шапошникова (PDF) Разработка сетевых приложений (PDF) Руководство по языку программирования C - Евгений Попов Си/Си++. От дилетанта до профессионала - Романов Е.Л. Язык Си в примерах - Викиучебник C Sharp # Паттерны проектирования в C# и .NET - Евгений Попов Полное руководство по языку программирования С# 7.0 и платформе .NET 4.7 - Евгений Попов Сетевое программирование в С# и .NET - Евгений Попов C++ # Введение в язык программирования С++ - Бьерн Страуструп Введение в язык Си++ - Андрей Столяров (PDF) Вводный курс по объектно-ориентированному программированию на языке Си++ - Викиучебник Руководство по языку программирования C++ - Евгений Попов Справочное руководство по C++ - Бьерн Страуструп Уроки по OpenGL 3 - Гуревич Артём Clojure # Введение в Clojure - Алексей Отт CoffeeScript # The Little Book on CoffeeScript - перевод Андрея Романова Документация CoffeeScript - Jeremy Ashkenas Elasticsearch # Уроки по Elasticsearch Elixir # Уроки программирования на языке Elixir Erlang # Программирование на Эрланге - Джо Армстронг Git # Pro Git Волшебство Git - Ben Lynn Простое руководство по работе с Git Руководство по Git - Евгений Сулейманов Go # Go в примерах The Little Go Book (перевод) Введение в программирование на Go - Калеб Докси Руководство по языку Go - Евгений Попов Эффективный Go Haskell # Developing Web Applications with Haskell and Yesod - Майкл Сноймен Haskell: введение в функциональное программирование - В.Н. Власов О Haskell по-человечески - Денис Шевченко Учебник по Haskell - Антон Холомьёв Язык и библиотеки Haskell 98 - Simon Peyton Jones Язык программирования Haskell: Учимся быть ленивыми - Г. Коваленко HTML / CSS # CSS и CSS3 - Елена Назарова HTML и HTML5 - Елена Назарова Руководство по HTML5 и CSS3 - Евгений Попов Справочник CSS - Влад Мержевич Справочник по HTML - Влад Мержевич Bootstrap # Bootstrap 4 Java # Java Basics Java Programming for Kids, Parents and Grandparents - Yakov Fain Руководство по Java Core - Евгений Сулейманов Руководство по Servlets - Евгений Сулейманов Руководство по языку программирования Java - Евгений Попов Самоучитель по Java с нуля - Vertex Academy Собеседование по Java Core Собеседование по Java EE Учебник Java 8 - Фёдор Урванов Учебник по Java 8 - Vertex Academy Учебник по Java 9 - Vertex Academy Язык Java 8 Android # Программирование под Android - Евгений Попов Уроки по Android EasyMock # EasyMock 3 Hibernate # Hibernate Руководство по Hibernate - Евгений Сулейманов JDBC # JDBC и Spring JDBC Руководство по JDBC - Евгений Сулейманов JUnit # JUnit 4 Руководство по JUnit - Евгений Сулейманов Maven # Apache Maven Руководство по Maven - Евгений Сулейманов Spring # Spring Framework Руководство по Spring - Евгений Сулейманов JavaScript # JavaScript Garden - Иво Ветцель JavaScript и jQuery - Елена Назарова Выразительный JavaScript - Marijn Haverbeke Курс современного JavaScript - bxnotes Онлайн-книга по WebGL - Евгений Попов Паттерны для масштабируемых JavaScript-приложений - Эдди Османи Руководство по JavaScript - Евгений Попов Современный учебник JavaScript - Илья Кантор AngularJS # Онлайн-руководство по AngularJS - Евгений Попов Перевод документации jQuery # jQuery для начинающих - Антон Шевчук Онлайн-книга \u0026ldquo;Изучаем jQuery\u0026rdquo; - Евгений Попов Русская документация по API jQuery Node.js # Node.js для начинающих - Manuel Kiessling Руководство по Node.js - Евгений Попов Nuxt.js # Перевод документации React # Путь к изучению React - Алексей Пыльцын (PDF, ePub, MOBI) (Требуется аккаунт на Leanpub или действительный адрес электронной почты) Руководство по React - Евгений Попов Уроки по React Vue.js # Перевод документации Руководство по Vue.js - Евгений Попов Kotlin # Руководство по языку Kotlin Руководство по языку Kotlin - Евгений Попов LaTeX # LaTeX, GNU/Linux и русский стиль (сборник статей) LaTeX за три дня - Андрей Столяров (PDF) Lisp # Common Lisp Cookbook (перевод) Lisp In Small Pieces (translation) Practical Common Lisp (перевод) (PDF) MetaPost # Создание иллюстраций в MetaPost .NET # Руководство по ADO.NET и работе с базами данных - Евгений Попов Руководство по ASP.NET Core 2.0 - Евгений Попов Руководство по ASP.NET MVC 5 - Евгений Попов Руководство по ASP.NET Web API 2 - Евгений Попов Руководство по EF Core - Евгений Попов Руководство по Entity Framework - Евгений Попов NoSQL # Маленькая книга о MongoDB - Карл Сегуин (PDF) Маленькая книга о Redis - Карл Сегуин Руководство по MongoDB - Евгений Сулейманов Objective-C # Become an XCoder Хрестоматия iOS паттернов (PDF) Цикл статей разработки под Apple iOS Perl # Pragmatic Perl - журнал Введение в Perl - Маслов Владимир Викторович Краткий экскурс в Perl-программирование - Докучаев Дмитрий PHP # PHP: Правильный Путь Руководство по PHP Руководство по PHPUnit Самоучитель (учебник) по PHP CakePHP # Руководство CodeIgniter # CodeIgniter - Игорь Букша Laravel # Документация 5.x Перевод документации Python # Problem Solving with Algorithms and Data Structures Python. unittest - Абдрахманов М.И Python. Введение в объектно-ориентированное программирование - C. Шапошникова Python. Введение в программирование - C. Шапошникова Python. Уроки - Абдрахманов М.И. Tkinter. Программирование графического интерфейса - C. Шапошникова Вглубь языка Python Основы программирования на Python - Дмитрий Фёдоров (PDF) Руководство по языку программирования Python - Евгений Попов Самоучитель Python (PDF) Укус Питона - Swaroop C H Учебник Python 2.6 - Викиучебник Django # Руководство Django Girls (1.11) (HTML) (:construction: в процессе написания) Руководство по веб-фреймворку Django - Евгений Попов R # Анализ данных с R Рандомизация и бутстреп: статистический анализ в биологии и экологии с использованием R. (PDF) Reverse engineering # Введение в reverse engineering для начинающих - Денис Юричев (PDF) Ruby # Ruby - Викиучебник Ruby Book - Круглов А. Ruby за двадцать минут Руководство пользователя - matz Учись программировать - Крис Пайн RSpec # Better Specs (RSpec Guidelines with Ruby) Ruby on Rails # Ruby on Rails Tutorial. Изучение Rails на Примерах Майкл Хартл Ruby on Rails по-русски Rust # Rust на примерах Растономикон Язык программирования Rust Scala # Effective Scala - Marius Eriksen Scala Школа! - Twitter Путеводитель неофита по Scala (перевод серии статей Даниеля Вестсайда) - Антон Холомьёв Руководство по Scala - Евгений Сулейманов Scilab # Введение в Scilab Программирование в Scilab Scratch # Креативное программирование (PDF) Smalltalk # Смолток: Язык и его реализация - Адэль Голдберг, Дэвид Робсон SQL # Работа с MySQL, MS SQL Server и Oracle в примерах - Святослав Куликов (PDF) Руководство по MS SQL Server 2017 - Евгений Попов Руководство по SQL - Евгений Сулейманов Язык SQL. Базовый курс (PDF) PostgreSQL # PostgreSQL для начинающих (PDF) Документация (PDF) История о PostgreSQL - Linux Format Работа с PostgreSQL - настройка и масштабирование - А. Ю. Васильев TypeScript # Перевод официальной документации Typescript Руководство по TypeScript - Евгений Попов Unix # Beyond Linux From Scratch (version 2011-12-30) Linux From Scratch (version 6.8) The Linux Kernel Module Programming Guide - Peter Jay Salzman, Michael Burian, Ori Pomerantz Архитектура операционной системы Unix - Maurice J. Bach Введение в Linux. Руководство по работе - Machtelt Garrels Введение в системное администрирование UNIX - Мошков Максим Евгеньевич Внутреннее устройство Ядра Linux 2.4 - Tigran Aivazian Перевод Linux kernel and C library. Программирование в Linux с нуля - Nikolay N. Ivanov Руководство программиста для Linux - Sven Goldt, Matt Welsh Энциклопедия программиста Linux - Алексей Паутов Энциклопедия разработчика модулей ядра Linux - Ori Pomerantz Vim # Поваренная Книга Vim - Steve Oualline Просто о Vim (PDF) ","date":"March 18, 2020","externalUrl":null,"permalink":"/2020/03/18/free-programming-books-ru/","section":"Blog","summary":"Index # 0 - Language Agnostic Open Source Ecosystem Облачные Вычисления Парадигмы Программирования Работа c cетью Управление конфигурациями Angular Assembly Bash C C# C++ Clojure CoffeeScript Elasticsearch Elixir Erlang Git Go Haskell HTML / CSS Bootstrap Java Android EasyMock Hibernate JDBC JUnit Maven Spring JavaScript AngularJS jQuery Node.js nuxt.js React vue.js Kotlin LaTeX Lisp MetaPost .NET NoSQL Objective-C Perl PHP CakePHP CodeIgniter Laravel Python Django R Reverse engineering Ruby RSpec Ruby on Rails Rust Scala Scilab Scratch Smalltalk SQL PostgreSQL TypeScript Unix Vim 0 - Language Agnostic # 3D-моделирование в Blender - C. Шапошникова E-maxx.ru: Сборник алгоритмов с примерами на C++ (PDF) Scrum и XP: заметки с передовой (PDF) Введение в структуры и алгоритмы обработки данных - Михаил Курносов (PDF) Занимательное программирование. Самоучитель - Мозговой М.В. (PDF) Операционные системы - Всеволод Дёмкин (PDF) Параллельные технологии Программирование: введение в профессию - Столяров Андрей Викторович (:construction: в процессе написания) (PDF) Руководство по HTTP - Евгений Сулейманов Руководство по SOAP - Евгений Сулейманов Структура и интерпретация компьютерных программ - Гарольд Абельсон, Джералд Джей Сассман (PDF) Тестирование программного обеспечения. Базовый курс. - Святослав Куликов (PDF) Эффективные алгоритмы и сложность вычислений - Кузюрин Н.Н., Фомин С.А. Работа с сетью # IPv6 для знатоков IPv4 - Ярослав Тихий (PDF, HTML, EPUB) Разъяснение HTTP2 - Даниэль Штенберг (PDF) Open Source Ecosystem # Архитектура приложений с открытым исходным кодом Облачные вычисления # Разработка мультитенантных приложений для облака, издание 3-е Парадигмы программирования # Введение в функциональное программирование - John Harrison Практика функционального программирования - журнал Управление конфигурациями # Пособие по Ansible - Michel Blanc Angular # Angular 5. Полное руководство - Maximilian Schwarzmüller Руководство по Angular - Евгений Попов Assembly # Ассемблер в Linux для программистов C - Викиучебник Ассемблер для чайников Микропроцессоры и вычислительные комплексы семейства “Эльбрус” (PDF) Программирование на языке ассемблера NASM для ОС Unix - Андрей Столяров (PDF) Bash # Advanced Bash-Scripting Guide C # Заметки о языке программирования Си/Си++ - Денис Юричев (PDF) Особенности языка C. Учебное пособие - C. Шапошникова (PDF) Разработка сетевых приложений (PDF) Руководство по языку программирования C - Евгений Попов Си/Си++. От дилетанта до профессионала - Романов Е.Л. Язык Си в примерах - Викиучебник C Sharp # Паттерны проектирования в C# и .NET - Евгений Попов Полное руководство по языку программирования С# 7.0 и платформе .NET 4.7 - Евгений Попов Сетевое программирование в С# и .NET - Евгений Попов C++ # Введение в язык программирования С++ - Бьерн Страуструп Введение в язык Си++ - Андрей Столяров (PDF) Вводный курс по объектно-ориентированному программированию на языке Си++ - Викиучебник Руководство по языку программирования C++ - Евгений Попов Справочное руководство по C++ - Бьерн Страуструп Уроки по OpenGL 3 - Гуревич Артём Clojure # Введение в Clojure - Алексей Отт CoffeeScript # The Little Book on CoffeeScript - перевод Андрея Романова Документация CoffeeScript - Jeremy Ashkenas Elasticsearch # Уроки по Elasticsearch Elixir # Уроки программирования на языке Elixir Erlang # Программирование на Эрланге - Джо Армстронг Git # Pro Git Волшебство Git - Ben Lynn Простое руководство по работе с Git Руководство по Git - Евгений Сулейманов Go # Go в примерах The Little Go Book (перевод) Введение в программирование на Go - Калеб Докси Руководство по языку Go - Евгений Попов Эффективный Go Haskell # Developing Web Applications with Haskell and Yesod - Майкл Сноймен Haskell: введение в функциональное программирование - В.Н. Власов О Haskell по-человечески - Денис Шевченко Учебник по Haskell - Антон Холомьёв Язык и библиотеки Haskell 98 - Simon Peyton Jones Язык программирования Haskell: Учимся быть ленивыми - Г. Коваленко HTML / CSS # CSS и CSS3 - Елена Назарова HTML и HTML5 - Елена Назарова Руководство по HTML5 и CSS3 - Евгений Попов Справочник CSS - Влад Мержевич Справочник по HTML - Влад Мержевич Bootstrap # Bootstrap 4 Java # Java Basics Java Programming for Kids, Parents and Grandparents - Yakov Fain Руководство по Java Core - Евгений Сулейманов Руководство по Servlets - Евгений Сулейманов Руководство по языку программирования Java - Евгений Попов Самоучитель по Java с нуля - Vertex Academy Собеседование по Java Core Собеседование по Java EE Учебник Java 8 - Фёдор Урванов Учебник по Java 8 - Vertex Academy Учебник по Java 9 - Vertex Academy Язык Java 8 Android # Программирование под Android - Евгений Попов Уроки по Android EasyMock # EasyMock 3 Hibernate # Hibernate Руководство по Hibernate - Евгений Сулейманов JDBC # JDBC и Spring JDBC Руководство по JDBC - Евгений Сулейманов JUnit # JUnit 4 Руководство по JUnit - Евгений Сулейманов Maven # Apache Maven Руководство по Maven - Евгений Сулейманов Spring # Spring Framework Руководство по Spring - Евгений Сулейманов JavaScript # JavaScript Garden - Иво Ветцель JavaScript и jQuery - Елена Назарова Выразительный JavaScript - Marijn Haverbeke Курс современного JavaScript - bxnotes Онлайн-книга по WebGL - Евгений Попов Паттерны для масштабируемых JavaScript-приложений - Эдди Османи Руководство по JavaScript - Евгений Попов Современный учебник JavaScript - Илья Кантор AngularJS # Онлайн-руководство по AngularJS - Евгений Попов Перевод документации jQuery # jQuery для начинающих - Антон Шевчук Онлайн-книга “Изучаем jQuery” - Евгений Попов Русская документация по API jQuery Node.js # Node.js для начинающих - Manuel Kiessling Руководство по Node.js - Евгений Попов Nuxt.js # Перевод документации React # Путь к изучению React - Алексей Пыльцын (PDF, ePub, MOBI) (Требуется аккаунт на Leanpub или действительный адрес электронной почты) Руководство по React - Евгений Попов Уроки по React Vue.js # Перевод документации Руководство по Vue.js - Евгений Попов Kotlin # Руководство по языку Kotlin Руководство по языку Kotlin - Евгений Попов LaTeX # LaTeX, GNU/Linux и русский стиль (сборник статей) LaTeX за три дня - Андрей Столяров (PDF) Lisp # Common Lisp Cookbook (перевод) Lisp In Small Pieces (translation) Practical Common Lisp (перевод) (PDF) MetaPost # Создание иллюстраций в MetaPost .NET # Руководство по ADO.NET и работе с базами данных - Евгений Попов Руководство по ASP.NET Core 2.0 - Евгений Попов Руководство по ASP.NET MVC 5 - Евгений Попов Руководство по ASP.NET Web API 2 - Евгений Попов Руководство по EF Core - Евгений Попов Руководство по Entity Framework - Евгений Попов NoSQL # Маленькая книга о MongoDB - Карл Сегуин (PDF) Маленькая книга о Redis - Карл Сегуин Руководство по MongoDB - Евгений Сулейманов Objective-C # Become an XCoder Хрестоматия iOS паттернов (PDF) Цикл статей разработки под Apple iOS Perl # Pragmatic Perl - журнал Введение в Perl - Маслов Владимир Викторович Краткий экскурс в Perl-программирование - Докучаев Дмитрий PHP # PHP: Правильный Путь Руководство по PHP Руководство по PHPUnit Самоучитель (учебник) по PHP CakePHP # Руководство CodeIgniter # CodeIgniter - Игорь Букша Laravel # Документация 5.x Перевод документации Python # Problem Solving with Algorithms and Data Structures Python. unittest - Абдрахманов М.И Python. Введение в объектно-ориентированное программирование - C. Шапошникова Python. Введение в программирование - C. Шапошникова Python. Уроки - Абдрахманов М.И. Tkinter. Программирование графического интерфейса - C. Шапошникова Вглубь языка Python Основы программирования на Python - Дмитрий Фёдоров (PDF) Руководство по языку программирования Python - Евгений Попов Самоучитель Python (PDF) Укус Питона - Swaroop C H Учебник Python 2.6 - Викиучебник Django # Руководство Django Girls (1.11) (HTML) (:construction: в процессе написания) Руководство по веб-фреймворку Django - Евгений Попов R # Анализ данных с R Рандомизация и бутстреп: статистический анализ в биологии и экологии с использованием R. (PDF) Reverse engineering # Введение в reverse engineering для начинающих - Денис Юричев (PDF) Ruby # Ruby - Викиучебник Ruby Book - Круглов А. Ruby за двадцать минут Руководство пользователя - matz Учись программировать - Крис Пайн RSpec # Better Specs (RSpec Guidelines with Ruby) Ruby on Rails # Ruby on Rails Tutorial. Изучение Rails на Примерах Майкл Хартл Ruby on Rails по-русски Rust # Rust на примерах Растономикон Язык программирования Rust Scala # Effective Scala - Marius Eriksen Scala Школа! - Twitter Путеводитель неофита по Scala (перевод серии статей Даниеля Вестсайда) - Антон Холомьёв Руководство по Scala - Евгений Сулейманов Scilab # Введение в Scilab Программирование в Scilab Scratch # Креативное программирование (PDF) Smalltalk # Смолток: Язык и его реализация - Адэль Голдберг, Дэвид Робсон SQL # Работа с MySQL, MS SQL Server и Oracle в примерах - Святослав Куликов (PDF) Руководство по MS SQL Server 2017 - Евгений Попов Руководство по SQL - Евгений Сулейманов Язык SQL. Базовый курс (PDF) PostgreSQL # PostgreSQL для начинающих (PDF) Документация (PDF) История о PostgreSQL - Linux Format Работа с PostgreSQL - настройка и масштабирование - А. Ю. Васильев TypeScript # Перевод официальной документации Typescript Руководство по TypeScript - Евгений Попов Unix # Beyond Linux From Scratch (version 2011-12-30) Linux From Scratch (version 6.8) The Linux Kernel Module Programming Guide - Peter Jay Salzman, Michael Burian, Ori Pomerantz Архитектура операционной системы Unix - Maurice J. Bach Введение в Linux. Руководство по работе - Machtelt Garrels Введение в системное администрирование UNIX - Мошков Максим Евгеньевич Внутреннее устройство Ядра Linux 2.4 - Tigran Aivazian Перевод Linux kernel and C library. Программирование в Linux с нуля - Nikolay N. Ivanov Руководство программиста для Linux - Sven Goldt, Matt Welsh Энциклопедия программиста Linux - Алексей Паутов Энциклопедия разработчика модулей ядра Linux - Ori Pomerantz Vim # Поваренная Книга Vim - Steve Oualline Просто о Vim (PDF) ","title":"free-programming-books","type":"blog"},{"content":" Index # Clojure Java PHP PostgreSQL Python React Уровни # BEG - новичок. Основы.\nINT - средний. Расширенные возможности.\nADV - продвинутый. Тонкости.\nClojure # Курс Clojure (BEG) Java # Java. Путь от ученика до эксперта. - Пётр Арсентьев (INT) Вводный курс. Java в аналогиях. - Пётр Арсентьев (BEG) Курс тест по Java - Пётр Арсентьев (BEG) PHP # Основы программирования на PHP (BEG) (:construction: in process) PostgreSQL # DBA1. Администрирование PostgreSQL (BEG) DBA2. Администрирование PostgreSQL. Расширенный курс (INT) DEV1. Разработка серверной части приложений PostgreSQL (ADV) Hacking PostgreSQL (INT) Python # Python: быстрый старт - Дмитрий Фёдоров (BEG) Python: основы и применение - Stepik (INT) Основы программирования на Python - Coursera (BEG) Программирование на Python - Stepik (BEG) React # React.js курс для начинающих (BEG) Роутинг в react-приложениях (INT) Туториал по Redux (INT) ","date":"March 18, 2020","externalUrl":null,"permalink":"/2020/03/18/free-courses-ru/","section":"Blog","summary":"Index # Clojure Java PHP PostgreSQL Python React Уровни # BEG - новичок. Основы.\nINT - средний. Расширенные возможности.\nADV - продвинутый. Тонкости.\n","title":"free-courses","type":"blog"},{"content":"getting from Seven golden advices for programmer\nNever trust yourself It\u0026rsquo;s about the code. Everytime, when I have an error somewhere but can\u0026rsquo;t find it, I begin blame everything: interpreter, environment, language. But this is always the error in code, mostly this error is simple, like similar name of variable or just silly typo. In such moment I always trying to change state of my mind, switch environment, write unit test, grab cup of coffee or go for a walk.\nStay calm Everytime, when we have something important, we start worrying about that. I know, this is complicated to keep things under control, and I think that is possible. There are plenty things, which can annoy you like slow deployment or environment, bad code, lack of documentation or even noise in the office. It is very important to understand that this is just your job and you are professional, you can handle that. Sometimes it gets tricky or complicated, but this is possible.\nDon\u0026rsquo;t postpone it There is a lot of distracting factors: simple tasks, some emails or videos from Watch Later. You begin procrastination and time wasting instead of real work. It is better to enforce yourself to start solving the problem. If problem is too big, try to split it to several small parts (decomposition). Sometimes I start writing interface or abstract class. Sometimes i begin with one-line comments. Start coding right now, don\u0026rsquo;t postpone it!\nRead the books Read, read and read. You are pour without books. Yes, you can read the articles, but that is not enough. Many books systematize your knowledge, make it deeper and wider. Also, books contribute to evolving of your intellection. I don\u0026rsquo;t speak about language references, I always thought that is useless because many modern IDE has perfect support of documentation rendering. I speak about the good books, like \u0026ldquo;Code complete\u0026rdquo; for example.\nKnow your tools The biggest part of my life I have spent with relatively slow hardware, therefore I had to use simplest and fastest solutions. I used shell, I tried to create little bash and bat scripts. And later when I started using IDE, by habit I haven\u0026rsquo;t used its most advanced features. It takes some effort to learn but it drastically increases your productivity. Always invest in your education.\nHelp others Always help your friends or colleagues. It will pay you back.\nNever stop learning Doesn\u0026rsquo;t matter how old you are. Just go and learn.\n","date":"March 18, 2020","externalUrl":null,"permalink":"/2020/03/18/advices/","section":"Blog","summary":"getting from Seven golden advices for programmer\nNever trust yourself It’s about the code. Everytime, when I have an error somewhere but can’t find it, I begin blame everything: interpreter, environment, language. But this is always the error in code, mostly this error is simple, like similar name of variable or just silly typo. In such moment I always trying to change state of my mind, switch environment, write unit test, grab cup of coffee or go for a walk.\n","title":"Advs for programmer","type":"blog"},{"content":" Good programmers never read manuals and rarely use online help - they easily get a grasp of a new program, simply because they have already tried every single program in this field before.\nGood programmers never pay for the software. They either crack it or buy those wonderful CDs with tons of cracked software that are sold for $5 bucks in every major city.\nGood programmers are always on the cutting edge of software development - they use the latest versions of the best tools available - it\u0026rsquo;s easy, since there is no need to pay.\nGood programmers are very experienced in hardware. They will take your computer apart and build it back in a matter of minutes. They remember the jumpers settings for most boards, hard drives and other devices. They never forget what interrupts and base memory addresses are currently used up in their computers.\nGood programmers keep upgrading their computers until there are no more available interrupts, no room for additional memory and no free bay slots. If they can\u0026rsquo;t upgrade it any more they buy a new one and tie both old and new computer into a LAN.\nGood programmers program on all levels, beginning with the processor codes, table of which they hold for the reference on their desk. They usually remember by heart the list of functions of Int21H.\nGood programmers remember by heart keyboard layouts. You can ask them in the middle of the night what key is between A and L and you\u0026rsquo;ll hear surprised: \u0026ldquo;What do you mean - they are 7 keys apart?\u0026rdquo;.\nGood programmers hate Microsoft and Microsoft tools, but keep using them\nGood programmers prefer Borland tools and install Microsoft compilers only for their nice Help files on Windows API.\nGood programmers feel themselves very comfortable on the Internet. They are always online - just in case they need something urgently.\nGood programmers only work when they are in the right mood. Programming is a creative process and it cannot be pushed.\nGood programmers are always in the mood for programming. There are two kinds of Good programmers - the ones that hate Windows and program on Unix and the ones that hate Windows and still program on Windows. Macintosh programmers aren\u0026rsquo;t real programmers - they are more often referred to as \u0026ldquo;users\u0026rdquo;.\nGood programmers hate to code somebody else\u0026rsquo;s ideas. Each program is written personally and from scratch.\nGood programmers always have a copy of Doom, Duke Nukem or Quake on their hard drives. They play nights over the network in a Deathmatch mode.\nGood programmers never use joystick. Keyboard is a dangerous weapon in their fast hands.\nGood programmers never give up. They will hunt down bugs in their programs forgetting to eat and sleep.\nGood programmers\u0026rsquo; wives are never happy. They get no attention whatsoever as long as the computer is in the same house.\nThere are two kinds of Good programmers - the ones that bring profit by actually doing something, and the ones that bring better profit by not interfering with anything.\nGood programmers are always underpaid. There is no money in the world that amounts to what they are really worth.\nBig bosses don\u0026rsquo;t like Good programmers. Who likes a smart ass that knows everything?\nBig bosses will never fire a Good programmer. They know that even working 10 hours a week and being half-drunk\nGood programmer will accomplish more than a Ph.D both in the short and in the long run.\nGood programmers never prototype the code. They write on inspiration, sometimes without sleep, driven by the urge to see the new program run as soon as possible. When the program finally runs without glitches they drop on the floor and sleep for 20-30 hours happily smiling in their dreams.\nGood programmers never approach programming methodically. Every program is a piece of art and is usually written in a highly inconvenient time when deadlines for other projects are around the corner.\n","date":"March 8, 2020","externalUrl":null,"permalink":"/2020/03/08/russian_programmers/","section":"Blog","summary":" Good programmers never read manuals and rarely use online help - they easily get a grasp of a new program, simply because they have already tried every single program in this field before.\n","title":"programmers","type":"blog"},{"content":" HipChat Alternatives # Why? # HipChat is fantastic, however:\n4/25/2014: HipChat Changed Their TOS To Allow Admins Access to 1-1 Chat History\n4/27/2014: Response from HipChat regarding 1-1 chat access by admins - Who can view chat history and files\nEdit: 10/19/2014: Slack is awesome (and is taking over the world).\nSlack # Slack Homepage\nWorking at Slack\nReviews from HipChat TOS Change Hacker News Thread:\nWe use Slack at my company (switched to it from Kato) and we\u0026rsquo;re very happy with it.\n\u0026ndash; coolsunglasses on Hacker News\nSame [referring to above quote]. Though, it seems a tad overpriced. It is a very nice platform though \u0026ndash; fidlefodl on Hacker News\nSomewhat tangential to this story, but we recently moved our team over from HipChat to Slack [1]. I initially thought that we\u0026rsquo;d miss the sheer number of integrations HipChat offers, but Slack seems to cover almost all of the ones we use regularly and some HipChat doesn\u0026rsquo;t yet offer, like Asana. \u0026ndash; shravan on Hacker News\nOur team tried out Slack, but the Mac app isn\u0026rsquo;t native, just a rather weak wrapper around the normal web page. And the web experience just isn\u0026rsquo;t as good as HipChat. Also, no in-app voice/video integration that I could find. HipChat\u0026rsquo;s one-on-one video is great, although waht I really wish for is conferencing built in. Google Hangouts is just too annoying to set up (first it pesters me about signing up for Google Plus, which I don\u0026rsquo;t want, then it shows a blank screen with a \u0026ldquo;start a hangout\u0026rdquo; button, then it opens a GH video in a separate window, which is just stupid), and doesn\u0026rsquo;t have a desktop app. \u0026ndash; lobster_johnson on Hacker News\nChatGrape # \u0026ldquo;The world\u0026rsquo;s fastest business chat.\u0026rdquo;\nChatGrape Homepage\nChatGrape allows you to manage your cloud services right from the chat, allowing your business to move twice as fast.\nCore features are:\nThe world\u0026rsquo;s only Grape Browser that allows you to access your company\u0026rsquo;s issues, appointments and files right as you type External Services like Giphy and Youtube browsable without leaving the service Markdown and code inside the chat Customer oriented Privacy Policy especially regarding governmental data access The indexAPI, allowing you to add your company data to the ChatGrape index Special pricing for startups iOS, Mac OS X and Android Apps Open Source: Encrypted OTR P2P Messaging in the making a lot more to come Let\u0026rsquo;s Chat # Let\u0026rsquo;s Chat Homepage\nA BYOS (Bring Your Own Server) chat app for small teams.\nFeatures:\nPersistent messages Multiple rooms New message alerts / notifications Mentions (hey @you) Image embeds Code pasting File uploads Transcripts / chat history XMPP Multi-user chat (MUC) Local / Kerberos / LDAP authentication Hubot Adapter REST-like API MIT Licensed Kandan # Kandan Homepage\nAn Open Source Alternative to HipChat and so much more.\nGitter # Gitter Homepage\nGitter is chat, for Github.\nCurrently the service is in beta, but will soon be moving across to a paid model where all open-source/public rooms are always free.\nFeatures:\nGitter supports IRC, web and mobile web chat interfaces. Markdown in your chat. Gitter understands Github - it uses your Github organisations for security, understands commit hashes and issues and much more. Embedded content from external services. A fully-featured API Open-source service integration model. Support for Hubot. Much, much, more. Grove # Grove Homepage\nHosted IRC and so much more.\nFeatures:\nweb UI for your less techie team members SSL for all communications Searchable chat archive Integrations with GitHub, Heroku, Bitbucket, Pivotal Tracker, and more Desktop and email notifications when you\u0026rsquo;re not online MogoChat # Mogo Chat Github Page\nSelf-Hosted Team Chat App\nFeatures:\nWorks on mobile devices ~! Easy to install Multiple rooms Sound notifications Code snippets /me status messages Comes with an API (docs) Other Alternatives # Echoplexus\nScrollback\nUnison\nHall\nCandy\nPartychat\nCampfire\nFlowdock\nMattermost\nRocket Chat\nZulip\n","date":"December 16, 2019","externalUrl":null,"permalink":"/2019/12/16/hipchatalternatives/","section":"Blog","summary":"HipChat Alternatives # Why? # HipChat is fantastic, however:\n","title":"HipChat Alternatives","type":"blog"},{"content":" References # have fun with them projections filters resource-keys scripting-gcloud gcloud alpha interactive https://medium.com/@Joachim8675309/getting-started-with-gcloud-sdk-part-1-114924737 https://medium.com/@Joachim8675309/getting-started-with-gcloud-sdk-part-2-4d049a656f1a https://gist.github.com/bborysenko/97749fe0514b819a5a87611e6aea3db8 Other cheatsheets # https://github.com/dennyzhang/cheatsheet-gcp-A4 multiple gcloud config configurations # https://www.jhanley.com/google-cloud-understanding-gcloud-configurations/ https://medium.com/infrastructure-adventures/working-with-multiple-environment-in-gcloud-cli-93b2d4e8cf1e gcloud config configurations create pythonrocks gcloud config configurations list gcloud config configurations activate pythonrocks gcloud config set core/account pythonrocks@gmail.com gcloud auth login gcloud projects list gcloud config set project dev-193420 switch gcloud context with gcloud config # gcloud config list gcloud config set account pythonrocksk8s201702@gmail.com gcloud config set project salt-163215 gcloud config set compute/region us-west1 gcloud config set compute/zone us-west1-a alias demo=\u0026#39;gcloud config set account pythonrocksk8s201702@gmail.com \u0026amp;\u0026amp; gcloud config set project salt-163215 \u0026amp;\u0026amp; gcloud config set compute/region us-west1 \u0026amp;\u0026amp; gcloud config set compute/zone us-west1-a\u0026#39; cluster=$(gcloud config get-value container/cluster 2\u0026gt; /dev/null) zone=$(gcloud config get-value compute/zone 2\u0026gt; /dev/null) project=$(gcloud config get-value core/project 2\u0026gt; /dev/null) # switch project based on the name gcloud config set project $(gcloud projects list --filter=\u0026#39;name:wordpress-dev\u0026#39; --format=\u0026#39;value(project_id)\u0026#39;) command -v gcloud \u0026gt;/dev/null 2\u0026gt;\u0026amp;1 || { \\ echo \u0026gt;\u0026amp;2 \u0026#34;I require gcloud but it\u0026#39;s not installed. Aborting.\u0026#34;; exit 1; } REGION=$(gcloud config get-value compute/region) if [[ -z \u0026#34;${REGION}\u0026#34; ]]; then echo \u0026#34;https://cloud.google.com/compute/docs/regions-zones/changing-default-zone-region\u0026#34; 1\u0026gt;\u0026amp;2 echo \u0026#34;gcloud cli must be configured with a default region.\u0026#34; 1\u0026gt;\u0026amp;2 echo \u0026#34;run \u0026#39;gcloud config set compute/region REGION\u0026#39;.\u0026#34; 1\u0026gt;\u0026amp;2 echo \u0026#34;replace \u0026#39;REGION\u0026#39; with the region name like us-west1.\u0026#34; 1\u0026gt;\u0026amp;2 exit 1; fi auth # gcloud auth list gcloud auth login gcloud auth activate-service-account --key-file=sa_key.json kubectl uses OAuth token generated by\ngcloud config config-helper --format json gcloud config config-helper --format='value(credential.access_token)' gcloud auth print-access-token generates new token info # gcloud info --format flattened export PROJECT=$(gcloud info --format=\u0026#39;value(config.project)\u0026#39;) projects # # various way to get project_id PROJECT_ID=$(gcloud config get-value core/project) PROJECT_ID=$(gcloud config list project --format=\u0026#39;value(core.project)\u0026#39;) PROJECT_ID=$(gcloud info --format=\u0026#39;value(config.project)\u0026#39;) # get project_number given project_id or name gcloud projects list --filter=\u0026#34;project_id:${project_id}\u0026#34; --format=\u0026#39;value(project_number)\u0026#39; gcloud projects list --filter=\u0026#34;name:${project_name}\u0026#34; --format=\u0026#39;value(project_number)\u0026#39; zones # To return a list of zones given a region\ngcloud compute zones list --filter=region:us-central1 billing # gcloud beta billing accounts list gcloud organizations list IAM list permission and roles for a given resource # gcloud iam list-testable-permissions \u0026lt;uri\u0026gt; e.g gcloud iam list-testable-permissions //cloudresourcemanager.googleapis.com/projects/$PROJECT_ID gcloud iam list-grantable-roles \u0026lt;uri\u0026gt; e.g. gcloud iam list-grantable-roles //cloudresourcemanager.googleapis.com/projects/$PROJECT_ID gcloud iam list-grantable-roles https://www.googleapis.com/compute/v1/projects/$PROJECT_ID/zones/us-central1-a/instances/iowa1 # get uri e.g. gcloud projects list --uri IAM service account # When granting IAM roles, you can treat a service account either as a resource or as an identity export SA_EMAIL=$(gcloud iam service-accounts list \\ --filter=\u0026#34;displayName:jenkins\u0026#34; --format=\u0026#39;value(email)\u0026#39;) export PROJECT=$(gcloud info --format=\u0026#39;value(config.project)\u0026#39;) # creaate and list sa gcloud iam service-accounts create jenkins --display-name jenkins gcloud iam service-accounts list gcloud iam service-accounts list --filter=\u0026#39;email ~ [0-9]*-compute@.*\u0026#39; --format=\u0026#39;table(email)\u0026#39; # create \u0026amp; list sa key gcloud iam service-accounts keys create jenkins-sa.json --iam-account $SA_EMAIL gcloud iam service-accounts keys list --iam-account=vault-admin@\u0026lt;project_id\u0026gt;.iam.gserviceaccount.com # project level: grant roles to sa gcloud projects get-iam-policy $PROJECT gcloud projects add-iam-policy-binding $PROJECT --role roles/storage.admin \\ --member serviceAccount:$SA_EMAIL gcloud projects add-iam-policy-binding $PROJECT --role roles/compute.instanceAdmin.v1 \\ --member serviceAccount:$SA_EMAIL gcloud projects add-iam-policy-binding $PROJECT --role roles/compute.networkAdmin \\ --member serviceAccount:$SA_EMAIL gcloud projects add-iam-policy-binding $PROJECT --role roles/compute.securityAdmin \\ --member serviceAccount:$SA_EMAIL gcloud projects add-iam-policy-binding $PROJECT --role roles/iam.serviceAccountActor \\ --member serviceAccount:$SA_EMAIL # service account level: add role to service account gcloud iam service-accounts get-iam-policy \u0026lt;sa_email\u0026gt; gcloud iam service-accounts add-iam-policy-binding infrastructure@retviews-154908.iam.gserviceaccount.com --member=\u0026#39;serviceAccount:infrastructure@retviews-154908.iam.gserviceaccount.com\u0026#39; --role=\u0026#39;roles/iam.serviceAccountActor\u0026#39; GCS bucket level # COMPUTE_ENGINE_SA_EMAIL=$(gcloud iam service-accounts list --filter=\u0026#34;name:Compute Engine default service account\u0026#34; --format \u0026#34;value(email)\u0026#34;) gsutil iam ch serviceAccount:${COMPUTE_ENGINE_SA_EMAIL}:objectViewer gs://bucket-name Custom Roles # # list predefined roles gcloud iam roles list # list custom roles gcloud iam roles list --project $PROJECT_ID # create custom role in the following 2 ways, either on project level (--project [PROJECT_ID]) or org level (--organization [ORGANIZATION_ID]) 1. gcloud iam roles create editor --project $PROJECT_ID --file role-definition.yaml 2. gcloud iam roles create viewer --project $PROJECT_ID --title \u0026#34;Role Viewer\u0026#34; --description \u0026#34;Custom role description.\u0026#34; --permissions compute.instances.get,compu te.instances.list --stage ALPHA app engine # https://medium.com/google-cloud/app-engine-project-cleanup-9647296e796a cloud build # # user defined gcloud builds submit --config=cloudbuild.yaml --substitutions=_BRANCH_NAME=foo,_BUILD_NUMBER=1 . # override built in TAG_NAME gcloud builds submit --config=cloudbuild.yaml --substitutions=TAG_NAME=v1.0.1 Cloud build trigger GCE rolling replace/start # https://medium.com/google-cloud/continuous-delivery-in-google-cloud-platform-cloud-build-with-compute-engine-a95bf4fd1821 https://cloud.google.com/compute/docs/instance-groups/updating-managed-instance-groups#performing_a_rolling_replace_or_restart steps: - name: \u0026#39;gcr.io/cloud-builders/docker\u0026#39; args: [ \u0026#39;build\u0026#39;, \u0026#39;-t\u0026#39;, \u0026#39;gcr.io/$PROJECT_ID/gcp-cloudbuild-gce-angular\u0026#39;, \u0026#39;.\u0026#39; ] - name: \u0026#39;gcr.io/cloud-builders/gcloud\u0026#39; args: [ \u0026#39;beta\u0026#39;, \u0026#39;compute\u0026#39;, \u0026#39;instance-groups\u0026#39;, \u0026#39;managed\u0026#39;, \u0026#39;rolling-action\u0026#39;, \u0026#39;restart\u0026#39;, \u0026#39;gce-angular-instance-group\u0026#39;, \u0026#39;--zone=us-east1-b\u0026#39; ] images: - \u0026#39;gcr.io/$PROJECT_ID/gcp-cloudbuild-gce-angular\u0026#39; kms # cloud-encrypt-with-kms Integrated with cloud build # list all keyrings gcloud kms keyrings list --location global # list all keys in my_key_ring gcloud kms keys list --keyring my_key_ring --location global # grant KMS IAM permission to a sv account $USER_EMAIL gcloud kms keyrings add-iam-policy-binding $KEYRING_NAME \\ --location global \\ --member user:$USER_EMAIL \\ --role roles/cloudkms.admin gcloud kms keyrings add-iam-policy-binding $KEYRING_NAME \\ --location global \\ --member user:$USER_EMAIL \\ --role roles/cloudkms.cryptoKeyEncrypterDecrypter # Encrypt and Decrypt in REST API curl -v \u0026#34;https://cloudkms.googleapis.com/v1/projects/$DEVSHELL_PROJECT_ID/locations/global/keyRings/$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_NAME:encrypt\u0026#34; \\ -d \u0026#34;{\\\u0026#34;plaintext\\\u0026#34;:\\\u0026#34;$PLAINTEXT\\\u0026#34;}\u0026#34; \\ -H \u0026#34;Authorization:Bearer $(gcloud auth application-default print-access-token)\u0026#34;\\ -H \u0026#34;Content-Type:application/json\u0026#34; \\ | jq .ciphertext -r \u0026gt; 1.encrypted curl -v \u0026#34;https://cloudkms.googleapis.com/v1/projects/$DEVSHELL_PROJECT_ID/locations/global/keyRings/$KEYRING_NAME/cryptoKeys/$CRYPTOKEY_NAME:decrypt\u0026#34; \\ -d \u0026#34;{\\\u0026#34;ciphertext\\\u0026#34;:\\\u0026#34;$(cat 1.encrypted)\\\u0026#34;}\u0026#34; \\ -H \u0026#34;Authorization:Bearer $(gcloud auth application-default print-access-token)\u0026#34;\\ -H \u0026#34;Content-Type:application/json\u0026#34; \\ | jq .plaintext -r | base64 -d compute engine # gcloud command for creating an instance? # from web console\ngcloud compute instances create [INSTANCE_NAME] \\ --image-family [IMAGE_FAMILY] \\ --image-project [IMAGE_PROJECT] \\ --create-disk image=[DISK_IMAGE],image-project=[DISK_IMAGE_PROJECT],size=[SIZE_GB],type=[DISK_TYPE] gcloud compute instances create micro1 --zone=us-west1-a --machine-type=f1-micro --subnet=default --network-tier=PREMIUM --maintenance-policy=MIGRATE --service-account=398028291895-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/devstorage.read_only,https://www.googleapis.com/auth/logging.write,https://www.googleapis.com/auth/monitoring.write,https://www.googleapis.com/auth/servicecontrol,https://www.googleapis.com/auth/service.management.readonly,https://www.googleapis.com/auth/trace.append --min-cpu-platform=Automatic --image=debian-9-stretch-v20180510 --image-project=debian-cloud --boot-disk-size=10GB --boot-disk-type=pd-standard --boot-disk-device-name=micro1 list compute images # gcloud compute images list --filter=name:debian --uri https://www.googleapis.com/compute/v1/projects/debian-cloud/global/images/debian-8-jessie-v20180109 https://www.googleapis.com/compute/v1/projects/debian-cloud/global/images/debian-9-stretch-v20180105 # Use the following command to see available non-Shielded VM Windows Server images gcloud compute images list --project windows-cloud --no-standard-images # Use the following command to see a list of available Shielded VM images, including Windows images gcloud compute images list --project gce-uefi-images --no-standard-images list an instance # filters resource-keys gcloud compute instances list --filter=\u0026#34;zone:us-central1-a\u0026#34; gcloud compute instances list --project=dev --filter=\u0026#34;name~^es\u0026#34; gcloud compute instances list --project=dev --filter=name:kafka --format=\u0026#34;value(name,INTERNAL_IP)\u0026#34; gcloud compute instances list --filter=tags:kafka-node gcloud compute instances list --filter=\u0026#39;machineType:g1-small\u0026#39; move instance # gcloud compute instances move \u0026lt;instance_wanna_move\u0026gt; --destination-zone=us-central1-a --zone=us-central1-c\nssh \u0026amp; scp # #--verbosity=debug is great for debugging, showing the SSH command # the following is a real word example for running a bastion server that talks to a GKE cluster (master authorized network) gcloud compute ssh --verbosity=debug \u0026lt;instance_name\u0026gt; --command \u0026#34;kubectl get nodes\u0026#34; gcloud compute scp --recurse ../manifest \u0026lt;instance_name\u0026gt;: SSH via IAP # https://cloud.google.com/iap/docs/using-tcp-forwarding # find out access-config-name\u0026#39;s name gcloud compute instances describe oregon1 # remove the external IP gcloud compute instances delete-access-config oregon1 --access-config-name \u0026#34;External NAT\u0026#34; # connect via IAP, assuming the IAP is granted to the account used for login. gcloud beta compute ssh oregon1 --tunnel-through-iap ssh port forwarding for elasticsearch # gcloud compute --project \u0026#34;foo\u0026#34; ssh --zone \u0026#34;us-central1-c\u0026#34; \u0026#34;elasticsearch-1\u0026#34; --ssh-flag=\u0026#34;-L localhost:9200:localhost:9200\u0026#34; The 2nd localhost is relative to elasticsearch-1`\nssh reverse port forwarding # for example, how to connect to home server\u0026rsquo;s flask server (tcp port 5000) for a demo or a local game server in development\nGOOGLE_CLOUD_PROJECT=$(gcloud config get-value project) gcloud compute --project \u0026#34;${GOOGLE_CLOUD_PROJECT}\u0026#34; ssh --zone \u0026#34;us-west1-c\u0026#34; --ssh-flag=\u0026#34;-v -N -R :5000:localhost:5000\u0026#34; \u0026#34;google_cloud_bastion_server\u0026#34; generate ssh config # gcloud compute config-ssh debugging # gcloud debugging: gcloud compute instances list --log-http serial port debug\ninstance level metadata # curl -s \u0026#34;http://metadata.google.internal/computeMetadata/v1/instance/?recursive=true\u0026amp;alt=text\u0026#34; -H \u0026#34;Metadata-Flavor: Google\u0026#34; leader=$(curl -s \u0026#34;http://metadata.google.internal/computeMetadata/v1/instance/attributes/leader\u0026#34; -H \u0026#34;Metadata-Flavor: Google\u0026#34;) project level metadata # gcloud compute project-info describe gcloud compute project-info describe --flatten=\u0026#34;commonInstanceMetadata[]\u0026#34; instances, template, target-pool and instance group # cat \u0026lt;\u0026lt; EOF \u0026gt; startup.sh #! /bin/bash apt-get update apt-get install -y nginx service nginx start sed -i -- \u0026#39;s/nginx/Google Cloud Platform - \u0026#39;\u0026#34;\\$HOSTNAME\u0026#34;\u0026#39;/\u0026#39; /var/www/html/index.nginx-debian.html EOF gcloud compute instance-templates create nginx-template --metadata-from-file startup-script=startup.sh gcloud compute target-pools create nginx-pool gcloud compute instance-groups managed create nginx-group \\ --base-instance-name nginx \\ --size 2 \\ --template nginx-template \\ --target-pool nginx-pool MIG with startup and shutdown scripts # https://cloud.google.com/vpc/docs/special-configurations#multiple-natgateways\ngsutil cp gs://nat-gw-template/startup.sh . gcloud compute instance-templates create nat-1 \\ --machine-type n1-standard-2 --can-ip-forward --tags natgw \\ --metadata-from-file=startup-script=startup.sh --address $nat_1_ip gcloud compute instance-templates create nat-2 \\ --machine-type n1-standard-2 --can-ip-forward --tags natgw \\ --metadata-from-file=startup-script=startup.sh --address $nat_2_ip disk snapshot # gcloud compute disks snapshot kafka-data1-1 --async --snapshot-names=kafka-data-1 --project project_a --zone us-west1-a Use [gcloud compute operations describe URI] command to check the status of the operation(s). regional disk # gcloud beta compute instance attach-disk micro1 --disk pd-west1 --disk-scope regional Networking # network and subnets # gcloud compute networks create privatenet --subnet-mode=custom gcloud compute networks subnets create privatesubnet-us --network=privatenet --region=us-central1 --range=172.16.0.0/24 gcloud compute networks subnets create privatesubnet-eu --network=privatenet --region=europe-west1 --range=172.20.0.0/20 gcloud compute networks subnets list --sort-by=NETWORK route # tag the instances with no-ips\ngcloud compute instances add-tags existing-instance --tags no-ip gcloud compute routes create no-ip-internet-route \\ --network custom-network1 \\ --destination-range 0.0.0.0/0 \\ --next-hop-instance nat-gateway \\ --next-hop-instance-zone us-central1-a \\ --tags no-ip --priority 800 firewall rules # https://medium.com/@swongra/protect-your-google-cloud-instances-with-firewall-rules-69cce960fba # allow SSH, RDP and ICMP for the given network gcloud compute firewall-rules create managementnet-allow-icmp-ssh-rdp --direction=INGRESS --priority=1000 --network=managementnet --action=ALLOW --rules=tcp:22,3389,icmp --source-ranges=0.0.0.0/0 # allow internal from given source range gcloud compute firewall-rules create mynetwork-allow-internal --network \\ mynetwork --action ALLOW --direction INGRESS --rules all \\ --source-ranges 10.128.0.0/9 gcloud compute firewall-rules list --filter=\u0026#34;network:mynetwork\u0026#34; ## DENY gcloud compute firewall-rules create mynetwork-deny-icmp \\ --network mynetwork --action DENY --direction EGRESS --rules icmp \\ --destination-ranges 10.132.0.2 --priority 500 gcloud compute firewall-rules list \\ --filter=\u0026#34;network:mynetwork AND name=mynetwork-deny-icmp\u0026#34; # sort-by gcloud compute firewall-rules list --sort-by=NETWORK layer 4 network lb # gcloud compute firewall-rules create www-firewall --allow tcp:80 gcloud compute forwarding-rules create nginx-lb \\ --region us-central1 \\ --ports=80 \\ --target-pool nginx-pool gcloud compute firewall-rules list --sort-by=NETWORK layer 7 http lb # https://cloud.google.com/solutions/scalable-and-resilient-apps gcloud compute http-health-checks create http-basic-check gcloud compute instance-groups managed \\ set-named-ports nginx-group \\ --named-ports http:80 gcloud compute backend-services create nginx-backend \\ --protocol HTTP --http-health-checks http-basic-check --global gcloud compute backend-services add-backend nginx-backend \\ --instance-group nginx-group \\ --instance-group-zone us-central1-a \\ --global gcloud compute url-maps create web-map \\ --default-service nginx-backend gcloud compute target-http-proxies create http-lb-proxy \\ --url-map web-map gcloud compute forwarding-rules create http-content-rule \\ --global \\ --target-http-proxy http-lb-proxy \\ --ports 80 gcloud compute forwarding-rules list forwarding-rules # gcloud compute forwarding-rules list --filter=$(dig +short \u0026lt;dns_name\u0026gt;) gcloud compute forwarding-rules describe my-forwardingrule --region us-central1 gcloud compute forwarding-rules describe my-http-forwardingrule --global address # # get the external IP address of the instance gcloud compute instances describe single-node \\ --format=\u0026#39;value(networkInterfaces.accessConfigs[0].natIP) gcloud compute addresses describe https-lb --global --format json # list all IP addresses gcloud projects list --format=\u0026#39;value(project_id)\u0026#39; | xargs -I {} gcloud compute addresses list --format=\u0026#39;value(address)\u0026#39; --project {} 2\u0026gt;/dev/null | sort | uniq -c GCP managed ssl certificate # gcloud beta compute ssl-certificates create example-mydomain --domains example.mydomain.com gcloud beta compute ssl-certificates list gcloud beta compute ssl-certificates describe example-mydomain # It takes 30mins+ to provision the TLS, one of conditions is the target-https-proxies needs to be associated with the cert. gcloud beta compute target-https-proxies list StackDriver logging # gcloud logging read \u0026#34;timestamp \u0026gt;= \\\u0026#34;2018-04-19T00:30:00Z\\\u0026#34; and logName=projects/${project_id}/logs/requests and resource.type=http_load_balancer\u0026#34; --format=\u0026#34;csv(httpRequest.remoteIp,httpRequest.requestUrl,timestamp)\u0026#34; --project=${project_id} Service # list service available # gcloud services list --available\nEnable Service # # chain gcloud services enable cloudapis.googleapis.com \u0026amp;\u0026amp; \\ cloudresourcemanager.googleapis.com \u0026amp;\u0026amp; \\ compute.googleapis.com # or not chain gcloud services enable container.googleapis.com gcloud services enable containerregistry.googleapis.com gcloud services enable cloudbuild.googleapis.com gcloud services enable iam.googleapis.com gcloud services enable logging.googleapis.com gcloud services enable monitoring.googleapis.com gcloud services enable storage-api.googleapis.com gcloud services enable storage-component.googleapis.com gcloud services enable sourcerepo.googleapis.com function enable-service() { SERVICE=$1 if [[ $(gcloud services list --format=\u0026#34;value(serviceConfig.name)\u0026#34; \\ --filter=\u0026#34;serviceConfig.name:$SERVICE\u0026#34; 2\u0026gt;\u0026amp;1) != \\ \u0026#34;$SERVICE\u0026#34; ]]; then echo \u0026#34;Enabling $SERVICE\u0026#34; gcloud services enable $SERVICE else echo \u0026#34;$SERVICE is already enabled\u0026#34; fi } enable-service container.googleapis.com Client libraries you can use to connect to Google APIs # https://medium.com/google-cloud/simple-google-api-auth-samples-for-service-accounts-installed-application-and-appengine-da30ee4648 chaining gcloud commands # gcloud compute forwarding-rules list --format \u0026#39;value(NAME)\u0026#39; \\ | xargs -I {} gcloud compute forwarding-rules delete {} --region us-west1 -q gcloud projects list --format=\u0026#39;value(project_id)\u0026#39; \\ | xargs -I {} gcloud compute addresses list --format=\u0026#39;value(address)\u0026#39; --project {} 2\u0026gt;/dev/null | sort | uniq -c gcloud compute instances list --filter=elasticsearch --format=\u0026#39;value(NAME)\u0026#39; \\ | xargs -I {} -p gcloud compute instances stop {} gcloud compute instances list --filter=elasticsearch --format=\u0026#39;value(INTERNAL_IP)\u0026#39; \\ | xargs -I {} ssh {} \u0026#34;sudo chef-client\u0026#34; # delete non default routes gcloud compute routes list --filter=\u0026#34;NOT network=default\u0026#34; --format=\u0026#39;value(NAME)\u0026#39; \\ | xargs -I {} gcloud compute routes delete -q {} one liner to purge GCR images given a date # DATE=2018-10-01 IMAGE=\u0026lt;project_id\u0026gt;/\u0026lt;image_name\u0026gt; gcloud container images list-tags gcr.io/$IMAGE --limit=unlimited --sort-by=TIMESTAMP \\ --filter=\u0026#34;NOT tags:* AND timestamp.datetime \u0026lt; \u0026#39;${DATE}\u0026#39;\u0026#34; --format=\u0026#39;get(digest)\u0026#39; | \\ while read digest;do gcloud container images delete -q --force-delete-tags gcr.io/$IMAGE@$digest ;done GKE # # create a private cluster gcloud beta container clusters create private-cluster \\ --private-cluster \\ --master-ipv4-cidr 172.16.0.16/28 \\ --enable-ip-alias \\ --create-subnetwork \u0026#34;\u0026#34; gcloud compute networks subnets create my-subnet \\ --network default \\ --range 10.0.4.0/22 \\ --enable-private-ip-google-access \\ --region us-central1 \\ --secondary-range my-svc-range=10.0.32.0/20,my-pod-range=10.4.0.0/14 gcloud beta container clusters create private-cluster2 \\ --private-cluster \\ --enable-ip-alias \\ --master-ipv4-cidr 172.16.0.32/28 \\ --subnetwork my-subnet \\ --services-secondary-range-name my-svc-range \\ --cluster-secondary-range-name my-pod-range gcloud container clusters update private-cluster2 \\ --enable-master-authorized-networks \\ --master-authorized-networks \u0026lt;external_ip_of_kubectl_instance\u0026gt; # create a GKE cluster with CloudRun,Istio, HPA enabled gcloud beta container clusters create run-gke \\ --addons HorizontalPodAutoscaling,HttpLoadBalancing,Istio,CloudRun \\ --scopes cloud-platform \\ --zone us-central1-a \\ --machine-type n1-standard-4 \\ --enable-stackdriver-kubernetes \\ --no-enable-ip-alias # create a VPC native cluster gcloud container clusters create k1 \\ --network custom-ip-vpc --subnetwork subnet-alias \\ --enable-ip-alias --cluster-ipv4-cidr=/16 --services-ipv4-cidr=/22 # get the GKE endpoint gcloud container clusters describe mycluster --format=\u0026#39;get(endpoint)\u0026#39; # generate a ~/.kube/config for private cluster with private endpoint gcloud container clusters get-credentials private-cluster --zone us-central1-a --internal-ip Machine Learning # brew install bat gcloud ml language analyze-entities --content=\u0026#34;Michelangelo Caravaggio, Italian painter, is known for \u0026#39;The Calling of Saint Matthew\u0026#39;.\u0026#34; | bat -l json Deployment Manager # https://cloud.google.com/sdk/gcloud/reference/deployment-manager/deployments/ Play with the commands for preview and cancel-preview. ","date":"July 25, 2019","externalUrl":null,"permalink":"/2019/07/25/gcloud-cheat-sheet/","section":"Blog","summary":"References # have fun with them projections filters resource-keys scripting-gcloud gcloud alpha interactive https://medium.com/@Joachim8675309/getting-started-with-gcloud-sdk-part-1-114924737 https://medium.com/@Joachim8675309/getting-started-with-gcloud-sdk-part-2-4d049a656f1a https://gist.github.com/bborysenko/97749fe0514b819a5a87611e6aea3db8 Other cheatsheets # https://github.com/dennyzhang/cheatsheet-gcp-A4 multiple gcloud config configurations # https://www.jhanley.com/google-cloud-understanding-gcloud-configurations/ https://medium.com/infrastructure-adventures/working-with-multiple-environment-in-gcloud-cli-93b2d4e8cf1e gcloud config configurations create pythonrocks gcloud config configurations list gcloud config configurations activate pythonrocks gcloud config set core/account pythonrocks@gmail.com gcloud auth login gcloud projects list gcloud config set project dev-193420 switch gcloud context with gcloud config # gcloud config list gcloud config set account pythonrocksk8s201702@gmail.com gcloud config set project salt-163215 gcloud config set compute/region us-west1 gcloud config set compute/zone us-west1-a alias demo='gcloud config set account pythonrocksk8s201702@gmail.com \u0026\u0026 gcloud config set project salt-163215 \u0026\u0026 gcloud config set compute/region us-west1 \u0026\u0026 gcloud config set compute/zone us-west1-a' cluster=$(gcloud config get-value container/cluster 2\u003e /dev/null) zone=$(gcloud config get-value compute/zone 2\u003e /dev/null) project=$(gcloud config get-value core/project 2\u003e /dev/null) # switch project based on the name gcloud config set project $(gcloud projects list --filter='name:wordpress-dev' --format='value(project_id)') command -v gcloud \u003e/dev/null 2\u003e\u00261 || { \\ echo \u003e\u00262 \"I require gcloud but it's not installed. Aborting.\"; exit 1; } REGION=$(gcloud config get-value compute/region) if [[ -z \"${REGION}\" ]]; then echo \"https://cloud.google.com/compute/docs/regions-zones/changing-default-zone-region\" 1\u003e\u00262 echo \"gcloud cli must be configured with a default region.\" 1\u003e\u00262 echo \"run 'gcloud config set compute/region REGION'.\" 1\u003e\u00262 echo \"replace 'REGION' with the region name like us-west1.\" 1\u003e\u00262 exit 1; fi auth # gcloud auth list gcloud auth login gcloud auth activate-service-account --key-file=sa_key.json kubectl uses OAuth token generated by\n","title":"gcloud cheat sheet","type":"blog"},{"content":" Awesome-Selfhosted # Selfhosting is the process of locally hosting and managing applications instead of renting from SaaS providers.\nThis is a list of Free Software network services and web applications which can be hosted locally. Non-Free software is listed on the Non-Free page.\nSee Contributing.\nList of Software Analytics Archiving and Digital Preservation (DP) Automation Blogging Platforms Bookmarks and Link Sharing Calendaring and Contacts Management Communication systems Custom communication systems Email Complete solutions Mail Transfer Agents Mail Delivery Agents Mailing lists and newsletters Webmail clients IRC SIP/IPBX Social Networks and Forums XMPP XMPP Servers XMPP Web Clients Conference Management Content Management Systems (CMS) E-commerce DNS Document Management E-books and Integrated Library Systems (ILS) Federated Identity/Authentication Feed Readers File Sharing and Synchronization Distributed filesystems File transfer/synchronization Peer-to-peer filesharing Object storage/file servers Single-click/drag-n-drop upload Web based file managers Games Gateways Groupware Human Resources Management (HRM) Internet of Things (IoT) Learning and Courses Maps and Global Positioning System (GPS) Media Streaming Multimedia Streaming Audio Streaming Video Streaming Misc/Other Money, Budgeting and Management Monitoring Note-taking and Editors Office Suites Password Managers Pastebins Personal Dashboards Photo and Video Galleries Polls and Events Booking and Scheduling Proxy Read it Later Lists Resource Planning Enterprise Resource Planning Search Engines Software Development Project Management Bug Trackers IDE/Tools Continuous Integration FaaS/Serverless API Management Documentation Generators Localization Static site generators Task management/To-do lists Ticketing URL Shorteners VPN Web servers Wikis Self-hosting Solutions List of Licenses External links Contributing License Analytics # For personal analytics/dashboards, see Personal Dashboards\n^ back to top ^\nWeb Analytics\nAWStats - Generates web, streaming, ftp or mail server statistics graphically. (Source Code) GPL-3.0 Perl Countly - Real time mobile and web analytics, crash reporting and push notifications platform. (Source Code) AGPL-3.0 Javascript Druid - Distributed, column-oriented, real-time analytics data store. (Source Code) Apache-2.0 Java Fathom Analytics - Simple \u0026amp; trustworthy website analytics. (Source Code) MIT Go GoAccess - Real-time web log analyzer and interactive viewer that runs in a terminal. (Source Code) GPL-2.0 C Hastic - Hackable time series pattern recognition tool with UI for Grafana. (Source Code) Apache-2.0 Python/Nodejs KISSS - Very minimalistic (KISS) website statistics tool. (Source Code) MIT Go Matomo - Leading open-source analytics platform that gives you more than just powerful analytics, formerly known as Piwik. (Source Code) GPL-3.0 PHP Open Web Analytics - Google Analytics and Piwik alternative. (Source Code) GPL-2.0 PHP Rakam - Custom analytics platform that allows you to create your own analytics services. Integrate with any data source (web, mobile, IoT etc.), analyze data with SQL and create dashboards. (Source Code) Apache-2.0 Java Serposcope - Serposcope is a free and open-source rank tracker to monitor websites ranking in Google and improve your SEO performances. (Source Code) MIT Java Snowplow - Have every single event, from your websites, mobile apps, desktop applications and server-side systems, stored in your own data warehouse and available to action in real-time. (Source Code) Apache-2.0 Scala Suet ⚠ - Detailed analytics and reporting for your Mailgun transactional emails. (Source Code) GPL-3.0 Nodejs Business Intelligence\nMetabase - Simple Dashboarding and GUI Query tool, Nightly Emails and Slack Integration w/ PostgreSQL, MySQL, Redshift and other DBs. (Source Code) AGPL-3.0 Clojure Redash - connect to over 18 types of databases (SQL and \u0026ldquo;NoSQL\u0026rdquo;), query your data, visualize it and create dashboards. Everything has a URL that can be shared. Slack and HipChat integration. (Demo, Source Code) BSD-2-Clause Python Superset - Modern, enterprise-ready business intelligence web application. (Source Code) Apache-2.0 Python Social Media\nIG Monitoring - ⚠ Instagram Analytics and Stats. (Demo, Source Code) MIT PHP Archiving and Digital Preservation (DP) # ^ back to top ^\nSome Content Management System solutions also feature archiving and digital preservation.\nAccess to Memory (AtoM) - Web-based, open source application for standards-based archival description and access in a multilingual, multi-repository environment. (Demo, Source Code) AGPL-3.0-only PHP Archivematica - Mature digital preservation system designed to maintain standards-based, long-term access to collections of digital objects. (Demo, Source Code) AGPL-3.0-only Python ArchiveBox - Self-hosted \u0026ldquo;wayback machine\u0026rdquo; that creates HTML \u0026amp; screenshot archives of sites from your bookmarks, browsing history, RSS feeds, or other sources. (Demo, Source Code) MIT Python ArchivesSpace - Archives information management application for managing and providing Web access to archives, manuscripts and digital objects. (Demo, Source Code) ECL-2.0 Ruby Collective Access: Providence - Highly configurable Web-based framework for management, description, and discovery of digital and physical collections supporting a variety of metadata standards, data types, and media formats. (Source Code) GPL-3.0-only PHP Automation # ^ back to top ^\nAlltube - Web interface for youtube-dl, a program to download videos and audio from more than 100 websites. (Source Code) GPL-3.0 PHP AmIUnique - Learn how identifiable you are on the Internet (browser fingerprinting tool). (Source Code) MIT Java Beehive - Flexible event and agent system, which allows you to create your own agents that perform automated tasks triggered by events and filters. AGPL-3.0 Go CouchPotato - CouchPotato is an automatic Video Library Manager for Movies. Automatic torrent/nzb searching, downloading, and processing at the qualities you want. (Source Code) GPL-3.0 Python Episodes ⚠ - Self Hosted TV show Episode tracker and recommender built using django, bootstrap4. MIT Python feedmixer - FeedMixer is a WSGI (Python3) micro web service which takes a list of feed URLs and returns a new feed consisting of the most recent n entries from each given feed(Returns Atom, RSS, or JSON). (Demo) WTFPL Python FHEM - FHEM is used to automate common tasks in the household like switching lamps and heating. It can also be used to log events like temperature or power consumption. You can control it via web or smartphone frontends, telnet or TCP/IP directly. (Source Code) GPL-3.0 Perl Gekko - Gekko is a Bitcoin TA trading and backtesting bot which support multiple exchanges and cryptocurrencies. (Source Code) MIT Nodejs Gladys - Gladys is an open-source home assistant which runs on your Raspberry Pi. (Source Code) MIT Nodejs Headphones - Automated music downloader for NZB and Torrent, written in Python. It supports SABnzbd, NZBget, Transmission, µTorrent, Deluge and Blackhole. GPL-3.0 Python Healthchecks - Django app which listens for pings and sends alerts when pings are late. (Source Code) BSD-3-Clause Python Home Assistant - Open-source home automation platform. (Demo, Source Code) MIT Python homebank-converter - Web app to convert an export bank file to compatible Homebank csv. (Demo) AGPL-3.0 HTML5 HRConvert2 - Drag-and-drop file conversion server with session based authentication, automatic temporary file maintenance, and logging capability. (Demo, Source Code) GPL-3.0 PHP Huginn - Allows you to build agents that monitor and act on your behalf. MIT Ruby Http2pic - Website screenshots/renderer. It uses the wkhtmltox to render websites with various options. (Source Code) Apache 2.0 PHP/Javascript Kibitzr - Lightweight personal web assistant with powerful integrations. (Source Code) MIT Python LazyLibrarian ⚠ - LazyLibrarian is a program to follow authors and grab metadata for all your digital reading needs. It uses a combination of Goodreads Librarything and optionally GoogleBooks as sources for author info and book info. GPL-3.0 Python Leon - Open-source personal assistant who can live on your server. (Demo, Source Code) MIT Node.js Lidarr - Lidarr is a music collection manager for Usenet and BitTorrent users. (Source Code) GPL-3.0 C# Medusa - Automatic Video Library Manager for TV Shows. It watches for new episodes of your favorite shows, and when they are posted it does its magic. GPL-3.0 Python Node RED - Browser-based flow editor that helps you wiring hardware devices, APIs and online services to create IoT solutions. (Source Code) Apache-2.0 Nodejs openHAB - Vendor and technology agnostic open source software for home automation. (Source Code) EPL-1.0 Java PolitePol - Online tool for creation of RSS feeds for any web page. (Demo) MIT Python Poffer ⚠ - Tool that makes it easier to share the content you like thanks to Pocket+Buffer. (Source Code) MIT Nodejs pyLoad - Lightweight, customizable and remotely manageable downloader for 1-click-hosting sites like rapidshare.com or uploaded.to. (Source Code) GPL-3.0 Python Radarr - Radarr is an independent fork of Sonarr reworked for automatically downloading movies via Usenet and BitTorrent, à la Couchpotato. (Source Code) GPL-3.0 C# RSS-Bridge - rss-bridge is a PHP project capable of generating ATOM feeds for websites which don\u0026rsquo;t have one. Public domain PHP RSS Merger - PHP script which will take multiple RSS / Atom feeds as input and merge them into a single RSS feed. GPL-2.0 PHP SickRage - SickRage is an automatic Video Library Manager for TV Shows. Automatic torrent/nzb searching, downloading, and processing at the qualities you want. (Source Code) GPL-3.0 Python Sonarr - Automatic TV Shows downloader and manager for Usenet and BitTorrent. It can grab, sort and rename new episodes and automatically upgrade the quality of files already downloaded when a better quality format becomes available. (Source Code) GPL-3.0 C# TriggerHappy - Open source clone of IFTTT, a bridge between your internet services. (Source Code) BSD-3-Clause Python WebUI-aria2 - Interface to interact with the aria2 downloader. Very simple to use, just download and open index.html in any web browser. (Demo) MIT HTML5 WTFDYUM ⚠ - Why The Fuck Did You Unfollow Me - Find out who stops following you on Twitter. (Source Code) Apache-2.0 Java Zenbot 3 - Zenbot is a lightweight, extendable, artificially intelligent trading bot for Bitcoin, Ether, Litecoin, and more. MIT Node.js Blogging Platforms # ^ back to top ^\nSee also Static Site Generators, Content Management Systems and WeblogMatrix\nAnchor CMS - Free, lightweight, faster-than-a-bullet, simple blogging system, made for art–directed posts. (Source Code) GPL-3.0 PHP Antville - Free, open source project aimed at the development of a high performance, feature rich weblog hosting software. (Source Code) Apache-2.0 Javascript Blogotext - Free blog-engine written in PHP and using SQLite. This offers you both an unmatched simplicity during installation and great performances. (Source Code) MIT PHP Bludit ⚠ - Simple application to build a site or blog in seconds. Bludit uses flat-files (text files in JSON format) to store posts and pages. (Demo, Source Code) MIT PHP Cadmus - Cadmus is an extremely lightweight, flat-file blogging platform powered by Markdown. MIT PHP Chyrp Lite - Extra-awesome, extra-lightweight blog engine. (Source Code) BSD-3-Clause PHP Dante Stories - A self hosted Medium platform built with Ruby on Rails. (Source Code) MIT Ruby Dotclear - Take control over your blog. (Source Code) GPL-2.0 PHP Formtools - Powerful, flexible, free and open source PHP/MySQL script to manage your forms and data. (Source Code) GPL-2.0 PHP Ghost - Just a blogging platform. (Source Code) MIT Nodejs Hexo - Fast, simple and powerful blog framework, powered by Node.js. (Source Code) MIT Nodejs Hotglue - Freehand CMS which allows to construct websites directly in a web-browser. It uses flat files for storage and provides an intuitive GUI. (Demo, Source Code) GPL-3.0 PHP htmly - Databaseless Blogging Platform (Flat-File Blog). (Demo, Source Code) GPL-2.0 PHP Known - Single website for all your content. (Source Code) Apache-2.0 PHP Noddity - It\u0026rsquo;s a blog, it\u0026rsquo;s a wiki, it\u0026rsquo;s a fast CMS. (Source Code) WTFPL Nodejs Plume - Federated blogging engine, based on ActivityPub. (Source Code) AGPL-3.0 Ruby PluXml - XML-based blog/CMS platform. (Source Code) GPL-1.0 PHP Postleaf - Open source blogging platform with inline editing, handlebar templates, and a beautiful user interface. (Source Code) MIT Nodejs Solo - Blogging system written in Java, feel free to create your or your team own blog. (Demo, Source Code) Apache-2.0 Java Bookmarks and Link Sharing # ^ back to top ^\ndyu/bookmarks - Single-threaded/process bookmark app powered by leveldb and uWebSockets. Supports importing from Delicious and Chrome. (Demo) Apache-2.0 Java Espial - An open-source, web-based bookmarking server. AGPL-3.0 Haskell Firefox Auth Server - This project implements the core server-side API for Firefox Accounts. (Source Code) MPL-2.0 Nodejs Firefox Content Server - Static server that hosts Firefox Account sign up, sign in, email verification, etc. flows. (Source Code) MPL-2.0 Java Firefox Sync Server - Sync Firefox bookmarks, passwords, history, tabs, preferences. (Source Code) MPL-2.0 Python Geekmarks - Personal bookmarking service focused on speed and organization using hierarchical tags. (Source Code) BSD-2-Clause Go golinks - Web application that allows you to create smart bookmarks, commands and aliases by pointing your web browser\u0026rsquo;s default search engine at a running instance. Similar to bunny1 or yubnub. (Demo) MIT Go Lobsters - Run your own link aggregation site. (Source Code) BSD-3-Clause Ruby No Fuss Bookmarks - Very simple software and service to store bookmarks especially designed for hackers (that don\u0026rsquo;t need fancy interfaces, but nice API). (Source Code) GPL-3.0 Python Pinry - The tiling image board system for people who want to save, tag, and share images, videos, and webpages. (Source Code) BSD-2-Clause Python Shaarli - Personal, minimalist, super-fast, no-database bookmarking and link sharing platform. (Demo) Zlib PHP Shiori - Simple bookmark manager built with Go. MIT Go unmark - Open source to do app for links. MIT PHP xBrowserSync - Open source tool for syncing browser data between browsers and devices. (Source Code) MIT Nodejs ymarks - Keep your browser\u0026rsquo;s bookmarks synchronized without limiting yourself to one provider. WTFPL C Calendaring and Contacts Management # ^ back to top ^\nSome Groupware solutions also feature calendar/address book editing and synchronization.\nSee https://en.wikipedia.org/wiki/Comparison_of_CalDAV_and_CardDAV_implementations\nCalDAV or CardDAV servers\nBaïkal - Lightweight CalDAV and CardDAV server based on sabre/dav. (Source Code) GPL-3.0 PHP CalendarServer - Apple, Inc.\u0026rsquo;s standards-compliant server implementing the CalDAV and CardDAV protocols shipped with macOS Server. (Source Code) Apache-2.0 Python calypso - Python-based CalDAV and CardDAV server, forked from Radicale. (Source Code) GPL-3.0 Python DAViCal - Server for calendar sharing (CalDAV) that uses a PostgreSQL database as a data store. (Source Code) GPL-2.0 PHP DecSync CC - Serverless contacts, calendar synchronization using your own file syncing method i.e Syncthing, Nextcloud etc. (Source Code) GPL-3.0 Kotlin EteSync Server - End-to-end encrypted and journaled personal information server supporting calendar and contact data, offering its own clients. (Source Code) AGPL-3.0 Python/Django Radicale - Simple calendar and contact server with extremely low administrative overhead. (Source Code) GPL-3.0 Python SabreDAV - Open source CardDAV, CalDAV, and WebDAV framework and server. (Source Code) MIT PHP Xandikos - Open source CardDAV, CalDAV and WebDAV server with minimal administrative overhead, backed by a Git repository. (Source Code) GPL-3.0 Python CalDAV or CardDAV clients.\nAgenDAV - Multilanguage CalDAV web client with a rich AJAX interface and shared calendars support. (Source Code) GPL-3.0 PHP DAVDroid - Open-source CalDAV/CardDAV suite and sync app for Android. (Source Code) GPL-3.0 Java InfCloud - Open source CalDAV/CardDAV web client implementation. (Demo, Source Code) AGPL-3.0 Javascript EteSync Web - EteSync\u0026rsquo;s official Web-based client (i.e., their Web app). (Demo, Source Code) AGPL-3.0 TypeScript Communication systems # ^ back to top ^\nCustom communication systems # Centrifugo - Language-agnostic real-time messaging (Websocket or SockJS) server. (Demo) MIT Go Cherry - Tiny webchat server. GPL-2.0 Go Freenet - Anonymously share files, browse and publish \u0026ldquo;freesites\u0026rdquo; (web sites accessible only through Freenet) and chat on forums. (Source Code) GPL-2.0 Java Friends - P2P chat powered by the web. (Source Code) MIT Nodejs GNUnet - Free software framework for decentralized, peer-to-peer networking. (Source Code) GPL-3.0 C Gotify - Self-hosted notification server with Android and CLI clients, similar to PushBullet. (Source Code, Clients) MIT Go Hawkpost - HawkPost is a web app that lets you create unique links that you can share with a person that desires to send you important information but doesn\u0026rsquo;t know how to encrypt it. The message is encrypted in their browser and sent to your email address. (Source Code) MIT Python Hubl.in - WebRTC powered video conference, chat and collaborative editor. (Source Code) AGPL-3.0 Nodejs Jitsi Meet - Jitsi Meet is an OpenSource (MIT) WebRTC Javascript application that uses Jitsi Videobridge to provide high quality, scalable video conferences. (Source Code) MIT Javascript Jitsi Video Bridge - WebRTC compatible Selective Forwarding Unit (SFU) that allows for multiuser video communication. (Source Code) Apache-2.0 Java Kandan - Kandan is an Open Source Alternative to HipChat. (Source Code) AGPL-3.0 Ruby KChat - PHP Based Live Chat Aplication. Apache-2.0 PHP Lets-Chat - Self hosted chat suite written in Node. (Source Code) MIT Nodejs Live Helper Chat - Live Support chat for your website. (Source Code) Apache-2.0 PHP Mattermost - Open-source, on-prem Slack-alternative. It can be integrated with Gitlab. (Source Code) AGPL-3.0/Apache Go MiAOU - Multi-room persistent chat server. (Source Code) MIT Nodejs Mibew - Mibew Messenger is an open-source live support application written in PHP and MySQL. It enables one-on-one chat assistance in real-time directly from your website. (Demo, Source Code) Apache-2.0 PHP Mumble - Low-latency, high quality voice/text chat software. (Source Code, Clients) BSD-3-Clause C++ Node-Chat - Not-so-basic open-source chat with admin features. MIT Nodejs Rallly - Rallly is a free collaborative scheduling service. (Source Code) CC-BY-SA-4.0 Nodejs RetroShare - Secured and decentralized communication system. Offers decentralized chat, forums, messaging, file transfer. (Source Code) GPL-2.0 С++ Jami - Free and universal communication platform which preserves the user\u0026rsquo;s privacy and freedoms (formerly GNU Ring). (Source Code) GPL-3.0 C++ Rocket.Chat - Teamchat solution similar to Gitter.im or Slack. (Source Code) MIT Nodejs Spectrum 2 - Spectrum 2 is an open source instant messaging transport. It allows users to chat together even when they are using different IM networks. (Source Code) GPL-3.0 C++ Spreed - WebRTC audio/video calls, conferencing server, and web client. (Source Code) AGPL-3.0 Go Synapse - Server for Matrix, an open standard for decentralized persistent communication. (Source Code) Apache-2.0 Python Matrix Console Web - Web client meant to be a showcase of Matrix capabilities, and reference implementation of the Matrix standard. (Source Code) Apache-2.0 Javascript RIOT - Glossy Matrix web client with an emphasis on performance and usability. (Source Code) Apache-2.0 Javascript Syndie - Syndie is a libre system for operating distributed forums. CC0-1.0 Java TextBelt ⚠ - Outgoing SMS API that uses carrier-specific gateways to deliver your text messages for free, and without ads. MIT Javascript Tox - Distributed, secure messenger with audio and video chat capabilities. (Source Code) GPL-3.0 C Tuber - Peer-to-peer video chat that works. (Source Code) MIT Javascript ZeroNet ⚠ - Open, free, and uncensorable websites, using Bitcoin cryptography and BitTorrent network. (Source Code) GNU Python Zulip - Zulip is a powerful, open source group chat application. (Source Code) Apache/Other Python Email # ^ back to top ^\nComplete solutions # Simple deployment of a mail server, e.g. for inexperienced or impatient admins.\ndocker-mailserver - Fullstack but simple mail server (smtp, imap, antispam, antivirus, etc.). Only configuration files, no SQL database. Keep it simple and versioned. Easy to deploy and upgrade. MIT Docker Inboxen - Inboxen is a service that provides you with an infinite number of unique inboxes. (Source Code) GPL-3.0 Python homebox - A suite of Ansible scripts to deploy a fully functional mail server on Debian. Unobtrusive and automatic as much as possible, focusing on stability and security. GPL-3.0 Shell iRedMail - Full-featured mail server solution based on Postfix and Dovecot. (Source Code) GPL-3.0 Shell Mailcow - Mail server suite based on Dovecot, Postfix and other open source software, that provides a modern Web UI for administration. (Source Code) GPL-2.0 PHP Mailu - Mailu is a simple yet full-featured mail server as a set of Docker images. (Demo, Source Code) MIT Docker/Python Mail-in-a-Box - Turns any Ubuntu server into a fully functional mail server with one command. (Source Code) CC0-1.0 Shell Modoboa - Modoboa is a mail hosting and management platform including a modern and simplified Web User Interface. (Source Code) MIT Python Qmailtoaster - Stable, full-featured, easy-to-install mail server based on qmail. (Source Code) Multiple Linux Simple NixOS Mailserver - A complete mailserver solution leveraging the Nix Ecosystem. GPL-3.0 Nix Mail Transfer Agents # MTAs / SMTP servers\nCourier MTA - Fast, scalable, enterprise mail/groupware server providing ESMTP, IMAP, POP3, webmail, mailing list, basic web-based calendaring and scheduling services. (Source Code) GPL-3.0 C Exim - Message transfer agent (MTA) developed at the University of Cambridge. (Source Code) GPL-3.0 C Haraka - High-performance, pluginable SMTP server written in Javascript. (Source Code) MIT Javascript MailCatcher - Ruby gem that deploys a simply SMTP MTA gateway that accepts all mail and displays in web interface. Useful for debugging or development. (Source Code) MIT Ruby Maildrop - Disposable email SMTP server, also useful for development. MIT Scala MailHog - Small Golang executable which runs an SMTP MTA gateway that accepts all mail and displays in web interface. Useful for debugging or development. MIT Go OpenSMTPD - Secure SMTP server implementation from the OpenBSD project. (Source Code) ISC C Postfix - Fast, easy to administer, and secure Sendmail replacement. IPL-1.0 C Qmail - Secure Sendmail replacement. (Source Code) CC0-1.0 C Sendmail - Message transfer agent (MTA). Sendmail C Slimta - Mail Transfer Library built on Python. (Source Code) MIT Python Mail Delivery Agents # MDAs - IMAP/POP3 software\nCyrus IMAP/POP3 - Intended to be run on sealed servers, where normal users are not permitted to log in. (Source Code) BSD-3-Clause-Attribution C Dovecot - IMAP and POP3 server written primarily with security in mind. (Source Code) MIT/LGPL-2.1 C Piler - feature rich open source email archiving solution. (Source Code) GPL-3.0 C Mailing lists and Newsletters # Mailing lists servers and mass mailing software - one message to many recipients.\nDada Mail - Web-based list management system that can be used for announcement lists and/or discussion lists. (Source Code) GPL-2.0 Perl Mail For Good ⚠ - Open source email campaign management tool for nonprofits. BSD-3-Clause Javascript Mailman - The Gnu mailing list server. GPL-3.0 Python Mailtrain - self hosted newsletter application built on Node.js (v5+) and MySQL (v5.5+ or MariaDB). (Source Code) GPL-3.0 Nodejs MailyHerald - Self-hosted Mailchimp alternative that you can easily integrate with your site. Helps you send and manage your application mailings. It support email marketing and conducting the daily stream of notifications you send to your users. (Source Code) LGPL-3.0 Ruby Mautic - Mautic is marketing automation software (email, social and more). (Source Code) GPL-3.0 PHP phpList - Newsletter and email marketing with advanced management of subscribers, bounces, and plugins. (Source Code) AGPL-3.0 PHP Postal - Fully featured open source mail delivery platform for incoming and outgoing e-mail. MIT Ruby Schleuder - GPG-enabled mailing list manager with resending-capabilities. (Source Code) GPL-3.0 Ruby Sympa - Mailing list manager. GPL-2.0 Perl Webmail clients # AfterLogic - Fast and easy-to-use webmail front-end for your existing IMAP mail server, Plesk or cPanel. (Demo, Source Code) AGPL-3.0 PHP Cypht - Feed reader for your email accounts. (Source Code) GPL-2.0 PHP Disposable Mailbox - Simple disposable mailbox web-app based on a catch-all IMAP mailbox. (Demo) GPL-3.0 PHP IMP - HORDE application that provides webmail access to IMAP and POP3 accounts. (Demo, Source Code) GPL-2.0 PHP MailCare - Open source disposable email address service. (Source Code) MIT PHP Mailpile - Webmail client with search, filtering, encryption features and more. (Source Code) AGPL-3.0 Python RainLoop - Simple, modern and fast webmail with IMAP/SMTP Support and multi accounting. (Demo, Source Code). AGPL-3.0 PHP Roundcube - Browser-based IMAP client with an application-like user interface. (Source Code) GPL-3.0 PHP SquirrelMail - Another browser-based IMAP client. (Source Code) GPL-2.0 PHP WebMail Lite - Web-based IMAP Mail client. (Source Code) GPL-3.0 PHP IRC # ^ back to top ^\nIRC communication software\nConvos - Always online web IRC client. (Demo, Source Code) Artistic-2.0 Perl Dispatch - A self-hosted web IRC client written in Go. (Demo) MIT Go Kiwi IRC - A responsive web IRC client with theming support. (Demo), (Source Code) Apache-2.0 Nodejs The Lounge - A self-hosted web IRC client. (Demo, Source Code) MIT Nodejs Quassel IRC - distributed IRC client, meaning that one (or multiple) client(s) can attach to and detach from a central core. (Source Code) GPL-2.0 C++ Robust IRC - RobustIRC is IRC without netsplits. Distributed IRC server, based on RobustSession protocol. (Source Code) BSD-3-Clause Go Weechat - Fast, light and extensible chat client. GPL-3.0 C ZNC - Advanced IRC bouncer. (Source Code) Apache-2.0 C++ SIP # ^ back to top ^\nSIP/IPBX telephony software\nAsterisk - Easy to use but advanced IP PBX system, VoIP gateway and conference server. GPL-2.0 C ASTPP - is an Open Source VoIP Billing Solution for Freeswitch. It supports prepaid and postpaid billing with call rating and credit control. It also provides many other features. (Source Code) AGPL-3.0 PHP Freepbx - Web-based open source GUI that controls and manages Asterisk. (Source Code) GPL-2.0 PHP FreeSWITCH - Scalable open source cross-platform telephony platform. (Source Code) MPL-2.0 C FusionPBX - Open source project that provides a customizable and flexible web interface to the very powerful and highly scalable multi-platform voice switch called FreeSWITCH. (Source Code) MPL-1.1 PHP Homer - Troubleshooting and monitoring VoIP calls. (Source Code) AGPL-3.0 Angular/C Kamailio - Modular SIP server (registrar/proxy/router/etc). (Source Code) GPL-2.0 C Kazoo - KAZOO is an open-source, highly scalable software platform designed to provide carrier-grade VoIP switch functions and features. (Source Code) MPL-1.1 Erlang Ostel - Secure SIP telephony setup with ZRTP encryption. GPL-3.0 Ruby Tapir - Troubleshooting and real-time monitoring of VoIP-based systems. (Source Code) Apache-2.0 Java/Kotlin Wazo - Full-featured IPBX solution built atop Asterisk with integrated Web administration interface and REST-ful API. (Source Code) GPL-3.0 Python/PHP Social Networks and Forums # ^ back to top ^\nAbilian SBE - Open Source Collaboration and Social Networking framework and platform. LGPL-2.1 Python Anahita - Open Source Social Networking Framework and Platform. (Source Code) GPL-3.0 PHP bbPress - bbPress is forum software with a twist from the creators of WordPress. Easily setup discussion forums inside your WordPress.org powered site. (Source Code) GPL-2.0 PHP Bootcamp - Enterprise social network. (Source Code) MIT Python Buddycloud - Tools, libraries, services and a community to build user-to-user, group and social messaging into your app. Saves time. Scales up. Supports you. (Source Code) Apache-2.0 Java BuddyPress - Powerful plugin that takes your WordPress.org powered site beyond the blog with social-network features like user profiles, activity streams, user groups, and more. (Source Code) GPL-2.0 PHP cartulary - RSS reader, readability tool, article archiver, microblogger, social graph manager and reading list manager. CDDL-1.0 PHP Commento - Commento is a discussion platform that you can embed on your blog, news articles, and any place where you want your readers to add comments. MIT GO diaspora* - Distributed social networking server. (Demo, Source Code) AGPL-3.0 Ruby Discourse - Advanced forum / community solution based on Ruby and JS. (Demo, Source Code) GPL-2.0 Ruby dyu/comments - Real-time, markdown-enabled comment engine powered by leveldb. (Demo) Apache-2.0 Java Elgg - Powerful open source social networking engine. (Source Code) GPL-2.0 PHP Flarum - Delightfully simple forums. Flarum is the next-generation forum software that makes online discussion fun again. (Source Code) MIT PHP flaskbb - FlaskBB is forum software written in Python using the microframework Flask. You can easily create new topics, posts and send other users private messages. It also includes basic administration and moderation tools. (Source Code) BSD-3-Clause Python FluxBB - Fast, light, user-friendly forum software for your website. (Source Code) GPL-2.0 PHP Friendica - Social Communication Server. (Source Code) AGPL-3.0 PHP GNU social - Social communication software for both public and private communications. (Source Code) AGPL-3.0 PHP Hubzilla - Decentralized identity, privacy, publishing, sharing, cloud storage, and communications/social platform. (Source Code) MIT PHP HumHub - Flexible kit for private social networks. (Source Code) AGPL-3.0 PHP Isso - Lightweight commenting server written in Python and Javascript. It aims to be a drop-in replacement for Disqus. (Source Code) MIT Python Loomio - Loomio is a collaborative decision-making tool that makes it easy for anyone to participate in decisions which affect them. (Source Code) AGPL-3.0 Ruby Mastodon - Federated microblogging server, an alternative to GNU social. (Source Code) AGPL-3.0 Ruby Movim - Modern, federated social network based on XMPP, with a fully featured group-chat, subscriptions and microblogging. (Source Code) AGPL-3.0 PHP MyBB - Free, extensible forum software package. (Source Code) LGPL-3.0 PHP Newebe - Distributed Social Network. (Source Code) AGPL-3.0 Python NodeBB - Node.js based forum software built for the modern web. (Source Code) GPL-3.0 Nodejs Orange Forum - Orange Forum is an easy to deploy forum that has minimal dependencies and uses very little javascript. (Demo, Source Code) BSD-3-Clause Go OSSN - Open Source Social Network (OSSN) is a social networking software written in PHP. It allows you to make a social networking website and helps your members build social relationships, with people who share similar professional or personal interests. (Source Code) GPL-2.0 PHP Oxwall - Oxwall is used for a wide range of projects starting from family sites and custom social networks to collaboration tools and enterprise community solutions. (Source Code) CPAL-1.0 PHP phpBB - Flat-forum bulletin board software solution that can be used to stay in touch with a group of people or can power your entire website. (Source Code) GPL-2.0 PHP PixelFed - Pixelfed is an open-source, federated platform alternate to Instagram. (Source Code) AGPL-3.0 PHP\\HTML\\Vue Pleroma - Federated microblogging server, Mastodon, GNU social, \u0026amp; ActivityPub compatible. (Source Code) AGPL-3.0 Elixir PPnet - Create and host your own social network. MIT Javascript Pump.io - Stream server that does most of what people really want from a social network. (Source Code) Apache-2.0 Nodejs remark42 - A lightweight and simple comment engine, which doesn\u0026rsquo;t spy on users. It can be embedded into blogs, articles or any other place where readers add comments. (Demo, Source Code) MIT Go Scoold - Stack Overflow in a JAR. An enterprise-ready Q\u0026amp;A platform with full-text search, SAML, LDAP integration and social login support. (Demo, Source Code) Apache-2.0 Java Simple Machines Forum - Free, professional grade software package that allows you to set up your own online community within minutes. (Source Code) BSD-3-Clause PHP Socialhome - Federated and decentralized profile builder and social network engine. (Demo, Source Code) AGPL-3.0 Python Symphony - Modern community (forum/SNS/blog) platform written in Java. (Source Code) GPL-3.0 Java Talkyard - Create a community, where your users can suggest ideas and get questions answered. And have friendly open-ended discussions and chat (Slack/StackOverflow/Discourse/Reddit/Disqus hybrid). (Demo, Source Code) AGPL-3.0 Scala Telescope - Open-source social news app built with Meteor. (Demo, Source Code) MIT Nodejs Tokumei - Anonymous microblogging platform. (Demo, Source Code) ISC rc Thredded - Forums, feature-rich and simple. (Demo, Source Code) MIT Ruby twister - Fully decentralized P2P microblogging platform leveraging the free software implementations of Bitcoin and BitTorrent protocols. (Source Code) MIT C++ Vanilla Forums - Simple and flexible forum software. (Source Code) GPL-2.0 PHP XMPP # ^ back to top ^\nExtensible Messaging and Presence Protocol software\nXMPP Servers # ejabberd - XMPP instant messaging server. (Source Code) GPL-2.0 Erlang Kontalk - Kontalk is an Open Source Messenger, similar to WhatsApp (app for android only currently), including end-to-end encryption, server is based on Tigase XMPP Server. (Source Code) GPL-3.0 Java Metronome IM - Fork of Prosody IM. (Source Code) MIT Lua MongooseIM - Mobile messaging platform with a focus on performance and scalability. (Source Code) GPL-2.0 Erlang Openfire - Real time collaboration (RTC) server. (Source Code) Apache-2.0 Java Prosody IM - Feature-rich and easy to configure XMPP server. (Source Code) MIT Lua Tigase - XMPP server implementation in Java. GPL-3.0 Java XMPP Web Clients # Candy - Multi user XMPP client written in Javascript. (Source Code) MIT Javascript Converse.js - Free and open-source XMPP chat client in your browser. (Source Code) MPL-2.0 Javascript JSXC - Real-time XMPP web chat application with video calls, file transfer and encrypted communication. There are also versions for Nextcloud/Owncloud and SOGo. (Source Code) MIT Javascript Kaiwa - Web based chat client in the style of common paid alternatives. (Source Code) MIT Nodejs Salut à Toi - Multipurpose, multi frontend, libre and decentralized communication tool. (Source Code) AGPL-3.0 Python Libervia - Web frontend from Salut à Toi. (Source Code) AGPL-3.0 Python Conference Management # ^ back to top ^\nBigBlueButton - Supports real-time sharing of audio, video, slides (with whiteboard controls), chat, and the screen. Instructors can engage remote students with polling, emojis, and breakout rooms. (Demo, Source Code) LGPL-3.0 Java Conference Organizing Distribution (COD) - Create conference and event websites built on top of Drupal. (Source Code) GPL-1.0 PHP frab - web-based conference planning and management system. It helps to collect submissions, to manage talks and speakers and to create a schedule. (Source Code) MIT Ruby Open Conference Systems (OCS) - is a free Web publishing tool that will create a complete Web presence for your scholarly conference. (Demo, Source Code) GPL-1.0 PHP OpenCFP - OpenCFP is a PHP-based conference talk submission system. MIT PHP OpenConferenceWare - An open source web application for supporting conference-like events. This customizable, general-purpose platform provides proposals, sessions, schedules, tracks, user profiles. (Source Code) MIT Ruby osem - Event management tailored to free Software conferences. (Demo, Source Code) MIT Ruby pretalx - Web-based event management, including running a Call for Papers, reviewing submissions, and scheduling talks. Exports and imports for various related tools. (Source Code) Apache-2.0 Python Content Management Systems (CMS) # ^ back to top ^\nCMS are a practical way to setup a website with many features. CMS often come with third party plugins, themes and functionality that is easy to add and customize to your needs. See also Blogging Platforms and Static Site Generators\nAPIQ CMS - Simple and powerful Ruby on Rails CMS for developers. (Demo, Source Code) MIT Ruby Apostrophe - Node.js CMS with a focus on extensible in-context editing tools. (Demo, Source Code) MIT Nodejs Backdrop CMS - The comprehensive CMS for small to medium sized businesses and non-profits. (Source Code) GPL-2.0 PHP Baun - Modern, lightweight, extensible CMS for PHP. (Source Code) MIT PHP BigTree CMS - Straightforward, well documented, and capable written with PHP and MySQL. (Source Code) LGPL-2.1 PHP Bolt CMS - Open source Content Management Tool, which strives to be as simple and straightforward as possible. (Demo, Source Code) MIT PHP CMS Made Simple - Open source content management system, faster and easier management of website contents, scalable for small businesses to large corporations. (Source Code) GPL-1.0 PHP Cockpit - Simple Content Platform to manage any structured content. (Source Code) MIT PHP Concrete 5 CMS - Open source content management system. (Source Code) MIT PHP CouchCMS - Simple Open-Source CMS for designers. (Source Code) CPAL-1.0 PHP Directus - Directus is a powerful and intuitive headless CMS for managing SQL databases with custom architectures. Built around a robust and extensible API, this decoupled content management framework is perfect for websites, apps, or multi-client projects. (Source Code) GPL-3.0 PHP Drupal - Advanced open source content management platform. (Source Code) GPL-2.0 PHP eLabFTW - Online lab notebook for research labs. Store experiments, use a database to find reagents or protocols, use trusted timestamping to legally timestamp an experiment, export as pdf or zip archive, share with collaborators…. (Demo, Source Code) AGPL-3.0 PHP Expressa - Content Management System for powering database driven websites using JSON schemas. Provides permission management and automatic REST APIs. MIT Nodejs GetSimple CMS - The Simplest Content Management System. Ever. (Source Code) GPL-3.0 PHP ImpressPages CMS - Easy code meets easy admin. (Demo, Source Code) GPL-3.0/MIT PHP Joomla! - Advanced Content Management System (CMS). (Source Code) GPL-2.0 PHP KeystoneJS - CMS and Web Application Platform. (Demo, Source Code) MIT Nodejs MODX - MODX is an advanced content management and publishing platform. The current version is called \u0026lsquo;Revolution\u0026rsquo;. (Source Code) GPL-2.0 PHP Neos - Neos or TYPO3 Neos (for version 1) is a modern, open source CMS. (Source Code) GPL-3.0 PHP Noosfero - Noosfero is a web platform for social and solidarity economy networks with blog, e-Portfolios, CMS, RSS, thematic discussion, events agenda and collective intelligence for solidarity economy in the same system. (Source Code) AGPL-3.0 Ruby october - Free, open-source, self-hosted CMS platform. (Source Code) MIT PHP Omeka - Create complex narratives and share rich collections, adhering to Dublin Core standards with Omeka on your server, designed for scholars, museums, libraries, archives, and enthusiasts. (Demo, Source Code) GPL-3.0 PHP Pagekit - New modern CMS to create and share. (Source Code) MIT PHP Pico - Stupidly simple, blazing fast, flat file CMS. (Source Code) MIT PHP Pimcore - Multi-Channel Experience and Engagement Management Platform. (Source Code) GPL-3.0-or-later PHP Plone - Powerful open-source CMS system. (Source Code) ZPL-2.0 Python ProcessWire - ProcessWire is an open source content management system (CMS) and web application framework aimed at the needs of designers, developers and their clients. (Source Code) MPL-2.0 PHP PropertyWebBuilder - The ultimate Ruby on Rails engine for creating real estate websites. (Demo, Source Code) MIT Ruby Publify - Simple but full featured web publishing software. MIT Ruby REDAXO - Simple, flexible and useful content management system (documentation only available in German). (Source Code) MIT PHP Redaxscript - Ultra lightweight CMS for MySQL, SQLite and PostgreSQL. (Demo, Source Code) GPL-3.0 PHP Roadiz - Modern CMS based on a node system which can handle many types of services. (Source Code) MIT PHP SilverStripe - Easy to use CMS with powerful MVC framework underlying. (Demo, Source Code) BSD-3-Clause PHP Sphido - Fast, lightweight, flat file CMS for PHP. (Source Code) MIT PHP SPIP - Publication system for the Internet aimed at collaborative work, multilingual environments, and simplicity of use for web authors. (Source Code) GPL-2.0 PHP Squidex - Headless CMS, based on MongoDB, CQRS and Event Sourcing. (Demo, Source Code) MIT .NET Strapi - The most advanced open-source Content Management Framework (headless-CMS) to build powerful API with no effort. (Source Code) MIT Nodejs Subrion - Subrion is a free open source content management system that allows you to build websites for any purpose. Yes, from blog to corporate mega portal. (Demo, Source Code) GPL-3.0 PHP Textpattern - Flexible, elegant and easy-to-use CMS. (Demo, Source Code) GPL-2.0 PHP TYPO3 - Powerful and advanced CMS with a large community. (Source Code) GPL-2.0 PHP Umbraco - The friendly CMS. Free and open source with an amazing community. (Source Code) MIT .NET Wagtail - Django content management system focused on flexibility and user experience. (Source Code) BSD-3-Clause Python WonderCMS - WonderCMS is the smallest flat file CMS since 2008. (Demo, Source Code) MIT PHP WordPress - The worlds most-used blogging and CMS engine. (Source Code) GPL-2.0 PHP Recipe management\nOpenEats - Recipe management site that allows users to create, store, share and rate recipes, create grocery lists, and more. (Demo) MIT Python E-commerce # Attendize - Ticket selling and event management platform. (Source Code) AAL PHP Bagisto - Leading Laravel open source e-commerce framework with multi-inventory sources, taxation, localization, dropshipping and more exciting features. (Demo, Source Code) MIT PHP CoreShop - CoreShop is a e-commerce plugin for Pimcore. (Source Code) GPL-3.0 PHP Drupal Commerce - Drupal Commerce is a popular e-commerce module for Drupal CMS, with support for dozens of payment, shipping, and shopping related modules. (Source Code) GPL-2.0 PHP Magento - Leading provider of open omnichannel innovation. (Demo, Source Code) OSL-3.0 PHP Microweber - Drag and Drop CMS and online shop. (Demo, Source Code) Apache-2.0 PHP OpenBazaar - Decentralized marketplace using cryptocurrency. (Source Code) MIT Go OpenCart - Free open source shopping cart solution. (Source Code) GPL-3.0 PHP Open Classifieds - Free open-source, self-hosted CMS for classifieds sites. (Source Code) GPL-3.0 PHP Open Source POS - Open Source Point of Sale is a web based point of sale system. (Source Code) MIT PHP Osclass - One-stop shop to building your own classifieds marketplace. (Source Code) Apache-2.0 PHP OXID eShop - OXID eShop is a flexible open source e-commerce software with a wide range of functionalities. (Demo, Source Code) GPL-3.0 PHP Open Food Network - Online marketplace for local food. It enables a network of independent online food stores that connect farmers and food hubs with individuals and local businesses. (Source Code) AGPL-3.0 Ruby PrestaShop - PrestaShop offers a free, open-source and fully scalable e-commerce solution. (Demo, Source Code) OSL-3.0 PHP Pretix - Django based ticket sales platform for events. (Source Code) Apache-2.0 Python Reaction Commerce - Customizable, real-time reactive, JavaScript commerce platform. (Source Code) GPL-3.0 Nodejs Saleor - Django based open-sourced e-commerce storefront. (Demo, Source Code) BSD-3-Clause Python Sharetribe - An open source platform to create your own peer-to-peer marketplace, also available with SaaS model. (Source Code) MIT Ruby Shuup - Django powered fully customizable open source e-commerce framework for small and large sites. (Source Code) AGPL-3.0 Python Shopware Community Edition - PHP based ppen source e-commerce software made in Germany. (Demo, Source Code) AGPL-3.0 PHP Sylius - Symfony2 powered open source full-stack platform for eCommerce. (Demo, Source Code) MIT PHP Thelia - Thelia is an open source and flexible e-commerce solution. (Demo, Source Code) LGPL-3.0 PHP WooCommerce - WordPress based e-commerce solution. (Source Code) GPL-3.0 PHP DNS # ^ back to top ^\nSee https://github.com/n1trux/awesome-sysadmin#dns\nCoreDNS - Plugin driven DNS Server with support for proxying to Google\u0026rsquo;s DNS-over-HTTPS. (Source Code) Apache-2.0 Go nsupdate.info - nsupdate.info is a dynamic DNS service. (Demo, Source Code) BSD-3-Clause Python SPF Toolbox - Application to look up DNS records such as SPF, MX, Whois, and more. (Source Code) MIT PHP Document Management # ^ back to top ^\nCaseBox - Manage all your organization\u0026rsquo;s information in one system. (Source Code) AGPL-3.0 PHP/Java EdPaper - PDF organizer with users management. MIT PHP Mayan EDMS - Free Open Source Electronic Document Management System. An electronic vault for your documents with preview generation, OCR, and automatic categorization among other features. (Source Code) Apache-2.0 Python Paperless - Scan, index, and archive all of your paper documents. GPL-3.0 Python E-books and Integrated Library Systems (ILS) # ^ back to top ^\nPersonal e-book management software.\nCalibre - E-book library manager that can view, convert, and catalog e-books in most of the major e-book formats and provides a built-in Web server for remote clients. (Demo, Source code) GPL-3.0 Python BicBucStriim - Provides web-based access to your Calibre Library\u0026rsquo;s e-book collection. (Source Code) MIT PHP Calibre Web - Web app providing a clean interface for browsing, reading and downloading eBooks using an existing Calibre database. GPL-3.0 Python COPS - Lightweight e-book server alternative to Calibre content server or Calibre2OPDS. (Demo, Source Code) GPL-2.0 PHP Polar Bookshelf - Polar is a personal knowledge repository for PDF and web content supporting incremental reading and document annotation. (Source Code) GPL Javascript Enterprise-class library management software.\nEvergreen - Highly-scalable software for libraries that helps library patrons find library materials, and helps libraries manage, catalog, and circulate those materials. (Source Code) GPL-2.0 PL/pgSQL Koha - Enterprise-class ILS with modules for acquisitions, circulation, cataloging, label printing, offline circulation for when Internet access is not available, and much more. (Demo, Source Code) GPL-3.0 Perl Federated Identity/Authentication # ^ back to top ^\nSee https://github.com/n1trux/awesome-sysadmin#identity-management\nFeed Readers # ^ back to top ^\nCommaFeed - Google Reader inspired self-hosted RSS reader. (Source Code) Apache-2.0 Java Feedbin - Simple, fast and nice looking RSS reader. (Source Code) MIT Ruby FeedHQ - FeedHQ is a web-based feed reader. (Source Code) BSD-3-Clause Python FreshRSS - Self-hostable RSS feed aggregator. (Demo, Source Code, Mobile app) AGPL-3.0 PHP JARR - JARR (Just Another RSS Reader) is a web-based news aggregator and reader (fork of Newspipe). (Demo, Source Code) AGPL-3.0 Python Kriss Feed - Simple and smart (or stupid) feed reader. (Demo, Source Code) CC0-1.0 PHP Leed - Leed (for Light Feed) is a Free and minimalist RSS aggregator. (Source Code) AGPL-3.0 PHP Leselys - Your very elegant RSS reader. AGPL-3.0 Python Lite-Reader - Read your feeds on your own machine with a simple and lite application. (Demo) BSD-3-Clause PHP Moonmoon - simple feed agregator (planet like): it only aggregates feeds and spits them out in one single page. (Source Code) BSD-3-Clause PHP Miniflux - Miniflux 2 is a minimalist and open source news reader, written in Go and PostgreSQL. (Source Code) Apache-2.0 Go NewsBlur - NewsBlur is a personal news reader that brings people together to talk about the world. A new sound of an old instrument. (Source Code) MIT Python Newspipe - Newspipe is a web news aggregator and reader. (Demo, Source Code) AGPL-3.0 Python Nunux Reader - Simple, fast and reactive RSS reader. (Source Code) GPL-3.0 Nodejs Reader-Self - Self-hosted rss reader (php / mysql or sqlite) - Google Reader alternative. (Source Code) GPL-3.0 PHP RSS2EMail - Fetches RSS/Atom-feeds and pushes new Content to any email-receiver, supports OPML. (Source Code) GPL-2.0 Python RSS Monster - RSS Monster is an easy to use web-based RSS aggregator and reader compatible with the Fever API, created as an alternative for Google Reader. MIT PHP Screaming Liquid Tiger - Simple script to automatically generate valid RSS and Atom feeds from a list of media files in the same folder. MIT PHP Selfoss - New multipurpose rss reader, live stream, mashup, aggregation web application. (Source Code) AGPL-3.0 PHP Sismics Reader - Free and open source feeds reader, including all major Google Reader features. (Demo, Source Code) GPL-2.0 Java Stringer - Work-in-progress self-hosted, anti-social RSS reader. MIT Ruby Temboz - Two-column feed reader emphasizing filtering capabilities to manage information overload. MIT Python Tiny Tiny RSS - Open source web-based news feed (RSS/Atom) reader and aggregator. (Demo) GPL-3.0 PHP gritttt-rss - More features for Tiny Tiny RSS. (Source Code) BSD-2-Clause Python ttrss-mobile - Mobile webapp for Tiny Tiny RSS. AGPL-3.0 Javascript ttrss-reader - Light and responsive client for TTRSS. GPL-2.0 Javascript Winds ⚠ - Open source and beautiful RSS reader built using React/Redux/Sails/Node and Stream. It showcases personalized feeds powered by the Stream API. (Demo, Source Code) BSD-3-Clause Nodejs File Sharing and Synchronization # ^ back to top ^\nSome Groupware solutions also feature file sharing and synchronization.\nDistributed filesystems # ^ back to top ^\nSee https://github.com/n1trux/awesome-sysadmin#distributed-filesystems\nFile transfer/synchronization # Git Annex - File synchronization between computers, servers, external drives. (Source Code) GPL-3.0 Haskell Gossa - Gossa is a light and simple webserver for your files. MIT Go Kinto - Kinto is a minimalist JSON storage service with synchronisation and sharing abilities. (Source Code) Apache-2.0 Python Nextcloud - Access and share your files, calendars, contacts, mail and more from any device, on your terms. (Demo, Source Code) AGPL-3.0 PHP OpenSSH/SFTP - Secure File Transfer Program. (Source Code) BSD-2-Clause C ownCloud - All-in-one solution for saving, synchronizing, viewing, editing and sharing files, calendars, address books and more. (Source Code, Clients) AGPL-3.0 PHP Pydio - Turn any web server into a powerful file management system and an alternative to mainstream cloud storage providers. (Source Code) AGPL-3.0 PHP Samba - Samba is the standard Windows interoperability suite of programs for Linux and Unix. It provides secure, stable and fast file and print services for all clients using the SMB/CIFS protocol. (Source Code) GPL-3.0 C Seafile - File hosting and sharing solution primary for teams and organizations. (Demo, Source Code) GPL-2.0 C SparkleShare - Self hosted, instant, secure file sync. (Source Code) GPL-3.0 C# Syncany - Secure file sync software for arbitrary storage backends, an open-source cloud storage and filesharing application. Securely synchronize your files to any kind of storage. GPL-3.0 Java Syncthing - Syncthing is an open source peer-to-peer file synchronisation tool. (Source Code) MPL-2.0 Go Unison - Unison is a file-synchronization tool for OSX, Unix, and Windows. GPL-3.0 OCaml Z-Push - Implementation of Microsoft’s ActiveSync protocol. (Source Code) AGPL-3.0 PHP Peer-to-peer filesharing # bittorrent-tracker - Simple, robust, BitTorrent tracker (client and server) implementation. (Source Code) MIT Nodejs cloud-torrent - Torrent Web Client with HTTP retrievable or streamable downloaded files. AGPL-3.0 Go Dat Project - Powerful decentralized file sharing applications built from a large ecosystem of modules. (Source Code) MIT Nodejs FilePizza - Peer-to-peer file transfers in your browser. (Source Code) BSD-3-Clause Nodejs Firefox Send - A file sharing experiment which allows you to send encrypted files to other users. MPL-2.0 Nodejs instant.io - Streaming file transfer over WebTorrent. (Demo) MIT Nodejs Magnetico - Magnetico is the first autonomous (self-hosted) BitTorrent DHT search engine suite that is designed for end-users. AGPL-3.0 Python Magnetissimo - Search engine that indexes all popular torrent sites. MIT Elixir Opentracker - Open and free bittorrent tracker. It aims for minimal resource usage and is intended to run at your wlan router. (Source Code) Beerware C peerflix-server - Downloads torrent files and provides a direct link download or a direct link stream. MIT Nodejs qBittorrent - Free cross-platform bittorrent client with a feature rich Web UI for remote access. (Source Code) GPL-2.0 C++ rartracker - Complete private bittorrent tracker. WTFPL PHP Transmission - Fast, easy, Free Bittorrent client. (Source Code) GPL-3.0 C Object storage/file servers # Minio - Minio is an open source object storage server compatible with Amazon S3 APIs. (Source Code) Apache-2.0 Go Zenko CloudServer - Zenko CloudServer, an open-source Node.js implementation of a server handling the Amazon S3 protocol. (Source Code) Apache-2.0 Nodejs Single-click/drag-n-drop upload # BoZoN - Minimalist Drag and drop file sharing app. AGPL-3.0 PHP Coquelicot - Coquelicot is a “one-click” file sharing web application with a focus on protecting users’ privacy. (Source Code) AGPL-3.0 Ruby droppy - droppy is a self-hosted cloud server with an interface similar to desktop file managers and has capabilities to edit files on-the-fly as well as view and playback media directly in the browser. (Demo) BSD-2-Clause Nodejs FileShelter - FileShelter is a self-hosted software that allows you to easily share files over the Internet. (Demo) GPL-3.0 C++ Files Sharing - Open Source and self-hosted files sharing application based on unique and temporary links. GPL-3.0 PHP img.bi - img.bi is a secure image hosting. Images are encrypted using AES-256 with random key in browser before upload. GPL-3.0 Nodejs ipfs.pics - ipfs.pics is a distributed image hosting website. AGPL-3.0 PHP Jirafeau - Jirafeau is a web site permitting to upload a file in a simple way and give an unique link to it. (Demo) AGPL-3.0 PHP linx - File sharing application and pastebin with API, auto-expiry, deletion keys, and web seed support. (Demo) GPL-3.0 Go lufi - Let\u0026rsquo;s Upload that FIle, client-side encrypted. (Demo, Source Code) AGPL-3.0 Perl lutim - Let\u0026rsquo;s Upload That Image. AGPL-3.0 Perl OnionShare - Securely and anonymously share a file of any size. GPL-2.0 Python PictShare - PictShare is a multi lingual, open source image hosting service with a simple resizing and upload API. (Source Code) Apache-2.0 PHP Plik - Plik is a scalable and friendly temporary file upload system. (Demo) MIT Go Pomf - Simple file uploading and sharing, source for the now shut down site Pomf.se. MIT PHP ProjectSend - Upload files and assign them to specific clients you create. Give access to those files to your clients. (Source Code) GPL-2.0 PHP PsiTransfer - Simple open source self-hosted file sharing solution with robust up-/download-resume and password protection. BSD-2-Clause Nodejs Sharry - Share files easily over the internet between authenticated and anonymous users (both ways) with resumable up- and downloads. (Demo) GPL-3.0 Scala/Java Uguu - Stores files and deletes after X amount of time. (Source Code) MIT PHP Up1 - Client-side Encrypted Image Host. MIT Nodejs uPste - Private file hosting application with an emphasis on serving technology communities. (Source Code) AGPL-3.0 PHP XBackBone - A simple, fast, lightweight and powerful ShareX (a free and open-source screenshot utility for Windows) PHP backend. AGPL-3.0 PHP YouTransfer - YouTransfer is a simple but elegant self-hosted file transfer and sharing solution. (Demo, Source Code) Apache-2.0 Nodejs Command-line file upload\nBeauties - Minimalist file sharing written in Go, to be used primarily from Unix shell (e.g. with curl). Can be built as a Debian package for easy install. MIT Go transfer.sh - Easy file sharing from the command line. (Source Code) MIT Go Web based file managers # Apaxy - Theme built to enhance the experience of browsing web directories, using the mod_autoindex Apache module and some CSS to override the default style of a directory listing. (Source Code) Unlicense HTML DirectoryLister - Simple PHP based directory lister that lists a directory and all it\u0026rsquo;s sub-directories and allows you to navigate there within. (Source Code) MIT PHP Encode Explorer - Encode Explorer is a single page file browser, it is simple and functional. (Demo, Source Code) MIT PHP explorer - Highly-configurable directory listing made with nodejs. (Source Code) MIT Nodejs filebrowser - Web File Manager which can be used as a middleware or standalone app. (Source Code) Apache-2.0 Go/VueJS Filestash - A web file manager that lets you manage your data anywhere it is located: FTP, SFTP, WebDAV, Git, S3, Minio, Dropbox, or Google Drive . (Demo, Source Code) AGPL-3.0 Go goBrowser - Simple http file browser. GPL-3.0 Go h5ai - Modern file indexer for HTTP web servers with focus on your files. Directories are displayed in a appealing way and browsing them is enhanced by different views, a breadcrumb and a tree overview. (Demo, Source Code) MIT PHP IFM - Single script file manager. MIT PHP ResourceSpace - ResourceSpace open source digital asset management software is the simple, fast, and free way to organise your digital assets. (Demo, Source Code) Other PHP s3server - Simple HTTP interface to index and browse files in a public S3 or Google Cloud Storage bucket. (Demo) MIT Go Sprut.io - 2 panel file manager with drag and drop features, code editor, text search, hotkeys. (Demo, Source Code) GPL-3.0 Python Surfer - Simple static file server with webui to manage files. MIT Nodejs TagSpaces - TagSpaces is an offline, cross-platform file manager and organiser that also can function as a note taking app. The WebDAV version of the application can be installed on top of a WebDAV servers such as Nextcloud or ownCloud. (Demo, Source Code) AGPL-3.0 Javascript Games # ^ back to top ^\nA Dark Room - Minimalist text adventure game for your browser. (Demo) MPL-2.0 HTML5 Agar.IO Clone - Agar.io clone written with Socket.IO and HTML5 canvas. MIT Nodejs battlecraft - Fully distributed multiplayer browser game. (Demo) Apache-2.0 Erlang Clumsy Bird - MelonJS port of the famous Flappy Bird Game. (Demo) MIT Nodejs elevatorsaga - The elevator programming game. (Source Code) MIT Javascript Hextris - Fast paced HTML5 puzzle game inspired by Tetris. (Demo) GPL-3.0 HTML5 Lila - The forever free, adless and open source chess server powering lichess.org, with official iOS and Android client apps. (Source Code) AGPL-3.0 Scala Posio - Geography multiplayer game. (Demo) MIT Python SourceBans++ - Admin, ban, and communication management system for games running on the Source engine. (Source Code) CC-BY-SA-4.0 PHP Spyfall - Fan made web version of the Spyfall party game. (Demo) MIT HTML/Javascript Teeworlds - Open source 2D retro multiplayer shooter. (Source Code) BSD-3-Clause/Other C++ TournamentMango - TournamentMango is an open source tournament bracket and user management system. You can build an archive of players and keep track of all their scores over time as well as their regular characters, games, and aliases. (Source Code) MIT Javascript Gateways # ^ back to top ^\nGateOne - Gate One is an HTML5 web-based terminal emulator and SSH client. (Source Code) AGPL-3.0 Python Guacamole - Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC and RDP. (Source Code) Apache-2.0 Java/C oneye - Cloud software to access your data from everywhere with any browser. (Demo, Source Code) AGPL-3.0 PHP OS.js - Desktop implementation for your browser with a fully-fledged window manager, Application APIs, GUI toolkits and filesystem abstraction. (Demo, Source Code) BSD-2-Clause Nodejs Groupware # ^ back to top ^\nCitadel - Groupware including email, calendar/scheduling, address books, forums, mailing lists, IM, wiki and blog engines, RSS aggregation and more. (Source Code) GPL-3.0 C Cozy Cloud - Personal cloud where you can read your emails or manage and sync your contact, files or calendars, with an app store full of community contributions. (Source Code) GPL-3.0 Nodejs egroupware - Software suite including calendars, address books, notepad, project management tools, client relationship management tools (CRM), knowledge management tools, a wiki and a CMS. (Source Code) GPL-2.0 PHP EspoCRM - CRM with a frontend designed as a single page application, and a REST API. (Demo, Source Code) GPL-3.0 PHP Horde - The Horde Project is about creating high quality Open Source applications and libraries, based on PHP and the Horde Framework. (Demo, Source Code) GPL-2.0 PHP HRCloud2 - Full-featured home hosted Cloud Drive, Personal Assistant, App Launcher, File Converter, Streamer, Share Tool and more. (Source Code) GPL-3.0 PHP Kolab - Kolab community is a unified communication and collaboration system. (Source Code) GPL-2.0/LGPL-2.1/GPL-3.0 C++/Python/PHP Kopano - Groupware suite including e-mail, calendars, tasks, todos and notes. Featuring a modern WebApp, DeskApp and mobile access over Z-Push/ActiveSync. (Demo, Source Code) AGPL-3.0 C/Python/PHP Openmeetings - Openmeetings provides video conferencing, instant messaging, white board, collaborative document editing and other groupware tools using API functions of the Red5 Streaming Server for Remoting and Streaming. (Source Code) Apache-2.0 Java SOGo - SOGo offers multiple ways to access the calendaring and messaging data. CalDAV, CardDAV, GroupDAV, as well as ActiveSync, including native Outlook compatibility and Web interface. (Demo, Source Code) LGPL-2.1 Objective-C SuiteCRM - The award-winning, enterprise-class open source CRM. (Source Code) AGPL-3.0 PHP Tine 2.0 - Contacts, Calendar, Tasks, WebDAV, ActiveSync, VOIP, Mail-Client, CRM, Sales, Projects, Timetracker. (Demo, Source Code) AGPL-3.0/Other PHP Zimbra Collaboration - Email, calendar, collaboration server with Web interface and lots of integrations. (Source Code) GPL-2.0/CPAL-1.0 Java Human Resources Management (HRM) # ^ back to top ^\nadmidio - Admidio is a free open source user management system for websites of organizations and groups. The system has a flexible role model so that it’s possible to reflect the structure and permissions of your organization. (Demo, Source Code) GPL-2.0 PHP IceHrm - IceHrm employee management system allows companies to centralize confidential employee information. (Demo, Source Code) Apache-2.0 PHP OrangeHRM - OrangeHRM is a comprehensive HRM system that captures all the essential functionalities required for any enterprise. (Source Code) GPL-2.0 PHP Sentrifugo - Sentrifugo is a HRM system that can be easily configured to meet your organizational needs. (Source Code) GPL-3.0 PHP TimeOff.Management - Simple yet powerful absence management software for small and medium size business. (Demo, Source Code) MIT Nodejs Internet Of Things (IoT) # DeviceHive - Open Source IoT Plaform with a wide range of integration options. (Demo, Source Code) Apache-2.0 Java Domoticz - Home Automation System that lets you monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more. (Source Code, Clients) GPL-3.0 C/C++ Thingsboard - Open-source IoT Platform - Device management, data collection, processing and visualization. (Demo, Source Code) Apache-2.0 Java Thingspeak - Open source “Internet of Things” application and API to store and retrieve data from things using HTTP. (Demo, Source Code) GPL-3.0 Ruby Learning and Courses # ^ back to top ^\nCanvas LMS - Canvas is the trusted, open-source learning management system (LMS) that is revolutionizing the way we educate. (Demo, Source Code) AGPL-3.0 Ruby Chamilo LMS - Chamilo LMS allows you to create a virtual campus for the provision of online or semi-online training. (Source Code) GPL-3.0 PHP edX - The Open edX platform is open-source code that powers edX.org. (Source Code) AGPL-3.0 Python ILIAS - ILIAS is the Learning Management System that can cope with anything you throw at it. (Demo, Source Code) GPL-3.0 PHP Mahara - Open Source fully featured web application to build students electronic portfolio. (Source Code) GPL-3.0 PHP Moodle - Moodle is a learning and courses platform with one of the largest open source communities worldwide. (Demo, Source Code) GPL-3.0 PHP Open eClass - Open eClass is an advanced e-learning solution that can enhance the teaching and learning process. (Demo, Source Code) GPL-2.0 PHP RELATE - RELATE is a web-based courseware package, includes features such as: flexible rules, statistics, multi-course support, class calendar. (Source Code) MIT Python RosarioSIS - RosarioSIS, free Student Information System for school management. (Demo, Source Code) GPL-2.0 PHP Sakai - The Sakai project provides a flexible and feature-rich environment for teaching, learning, research and other collaboration. (Demo, Source Code) ECL-2.0 Java SchoolTool - SchoolTool is free administrative software for schools. It includes demographics, gradebook, attendance, calendaring, reporting and more for primary and secondary schools. (Source Code) GPL-2.0 Python Maps and Global Positioning System (GPS) # ^ back to top ^\nGraphhopper - Fast routing library and server using OpenStreetMap. (Source Code) Apache-2.0 Java MapBBCodeShare - Tool for sharing custom OSM maps. Support for annotated markers, polygons, lines, multi-format import/export, multiple layers, shortlinks. (Demo) WTFPL/Other PHP OpenGTS - Entry-level fleet tracking system. Supports variety of tracking devices and protocols. Comes with rich web-interface and reporting features. (Demo, Source Code) Apache-2.0 Java OpenStreetMap - OpenStreetMap is a map of the world, created by people like you and free to use under an open license. (Source Code) GPL-2.0 Ruby Orion - Powerful OwnTracks API-compliant location data visualization frontend for the web. (Demo) MIT Python/Nodejs OwnTracks Recorder ⚠ - Store and access data published by OwnTracks location tracking apps. GPL-2.0 C/Lua TileServer GL - Vector and raster maps with GL styles. Server side rendering by Mapbox GL Native. Map tile server for Mapbox GL JS, Android, iOS, Leaflet, OpenLayers, GIS via WMTS, etc. (Source Code) BSD-2-Clause Nodejs TileServer PHP - Serve map tiles from any PHP hosting. BSD-2-Clause PHP Traccar - Java application to track GPS positions. Supports loads of tracking devices and protocols, has an Android and iOS App. Has a web interface to view your trips. (Demo, Source Code) Apache-2.0 Java uMap - Create maps with OpenStreetMap layers in a minute and embed them in your site. (Source Code) WTFPL Python Media Streaming # ^ back to top ^\nSee also https://en.wikipedia.org/wiki/List_of_streaming_media_systems, https://en.wikipedia.org/wiki/Comparison_of_streaming_media_systems\nMultimedia Streaming # Darwin Streaming Server - High performance server for streaming QuickTime and MPEG-4 media over RTP and RTSP protocols. Originated as Apple’s QTSS. (Source Code) APSL-2.0 C++ Gerbera - Gerbera is an UPnP Media Server. It allows you to stream your digital media throughout your home network and listen to/watch it on a variety of UPnP compatible devices. (Source Code) GPL-2.0 C++ homehost ⚠ - Self-hosted React + Redux app that streams your media collection (music, movies, books, podcasts, comics etc). MIT Nodejs Icecast 2 - streaming audio/video server which can be used to create an Internet radio station or a privately running jukebox and many things in between. (Source Code, Clients) GPL-2.0 C Jellyfin - Streaming audio/video server with a slick UI and robust transcoding capabilities (fork of Emby). (Source Code) GPL-2.0 C# MistServer - Streaming media server that works well in any streaming environment. (Source Code) AGPL-3.0 C++ ReadyMedia - Simple media server software, with the aim of being fully compliant with DLNA/UPnP-AV clients. Formerly known as MiniDLNA. (Source Code) GPL-2.0 C Rygel - Rygel is a UPnP AV MediaServer that allows you to easily share audio, video, and pictures. Media player software may use Rygel to become a MediaRenderer that may be controlled remotely by a UPnP or DLNA Controller. (Source Code) GPL-3.0 C üWave ⚠ - üWave is a self-hosted collaborative listening platform. Users take turns playing media—songs, talks, gameplay videos, or anything else—from a variety of media sources like YouTube and SoundCloud. (Demo, Source Code) MIT Nodejs Audio Streaming # Ampache - Web based audio/video streaming application. (Demo, Source Code) AGPL-3.0 PHP Airsonic - Open-source web-based media streamer and jukebox. A fork of Subsonic\u0026rsquo;s last open-source release, before it switched licenses. (Source Code, Clients) GPL-3.0 Java AzuraCast - A modern and accessible self-hosted web radio management suite. (Source Code) Apache-2.0 PHP Beets - Music library manager and MusicBrainz tagger (command-line and Web interface). (Source Code) MIT Python CherryMusic - Minimalistic Web-Mediaplayer. (Source Code) GPL-3.0 Python cloudtunes ⚠ - Web-based music player for the cloud. MIT Python Compactd - Remote music player that supports adding content. MIT Nodejs FriendsRadio ⚠ - Share music with your friends from Youtube and Soundcloud. (Demo) MIT Nodejs Funkwhale - A modern, web-based, convivial, multi-user and free music server. (Demo, Source Code) BSD-3-Clause Python/Django GNU FM - Running music community websites, alternative to last.fm. (Source Code) AGPL-3.0 PHP Groove Basin - Music player server with a web-based user interface inspired by Amarok 1.4. MIT Nodejs koel - Personal music streaming server that works. (Source Code) MIT PHP LibreTime - Simple, open source platform that lets you broadcast streaming radio on the web (fork of Airtime). (Source Code) AGPL-3.0 PHP LMS - Access your self-hosted music using a web interface. (Demo) GPL-3.0 C++ Mopidy - Extensible music server. Offers a superset of the mpd API, as well as integration with 3rd party services like Spotify, SoundCloud etc. (Source Code) Apache-2.0 Python Moped - Responsive HTML5 + Javascript client for the Mopidy music server. MIT HTML5 Mopidy MusicBox - Web Client for Mopidy Music Server. Apache-2.0 HTML5 Mopidy-Party - Mopidy web extension designed for party! Let your guests manage the sound. Apache-2.0 Python mpd - Daemon to remotely play music, stream music, handle and organize playlists. Many clients available. (Source Code) GPL-2.0 C++ ympd - Standalone MPD Web GUI written in C, utilizing Websockets and Bootstrap/JS. (Source Code) GPL-2.0 C mStream - Music streaming server with GUI management tools. Runs on Mac, Windows, and Linux. (Demo, Source Code) GPL-2.0 Nodejs Music Browser - Browser and streamer for your music collection. It is runs on most operating systems, and is light enough to run flawlessly on NAS devices. GPL-3.0 PHP musikcube - Streaming audio server with Linux/macOS/Windows/Android clients. (Source Code) BSD-3-Clause C++ Polaris - Music browsing and streaming application optimized for large music collections, ease of use and high performance. MIT Rust Sonerezh - Self-hosted, web-based application for stream your music, everywhere. (Demo, Source Code) GPL-3.0 PHP Volumio - A free and open source linux distribution, designed and fine-tuned exclusively for music playback. (Source Code) GPLv3 NodeJS Video Streaming # crtmpserver - High performance RTMP/RTSP streaming server. GPL-3.0 C++ CyTube - CyTube is a web application providing media synchronization, chat, and more for an arbitrary number of channels. (Demo) MIT Nodejs Hellowlol HTPC Manager fork - Fully responsive interface to manage all your favorite media on your HTPC. (Source Code) MIT Python Myflix - Self-hosted, super lightweight Netflix alternative. MIT Shell Odd Networks - Open source video management system (VMS) and API for collections and videos with supporting SDKs for Roku, Apple iOS/tvOS, Google Android, and Amazon FireTV. (Source Code) MIT Nodejs Open Streaming Platform - Self-Hosted alternative to Twitch and Youtube Live for live and on-demand video streaming. (Demo) MIT Python PeerTube - Decentralized video streaming platform using P2P (BitTorrent) directly in the web browser. (Source Code) AGPL-3.0 Nodejs Restreamer - Restreamer allows you to do h.264 real-time video streaming on your website without a streaming provider. (Source Code) Apache-2.0 Nodejs/Docker ShinobiCE - Open Source CCTV software written in Node with both IP and local camera support. (Source Code) AGPL-3.0/GPL-3.0 Nodejs Streama - Self hosted streaming media server. (Source Code) MIT Java VideoLAN Client (VLC) - Cross-platform multimedia player client and server supporting most multimedia files as well as DVDs, Audio CDs, VCDs, and various streaming protocols. (Source Code) Multiple C Zoneminder - Closed-circuit television (CCTV) software application which supports IP, USB and Analog cameras. (Source Code) GPL-2.0 PHP Misc/Other # ^ back to top ^\n411 - Alert Management Web Application. (Source Code) MIT PHP AlertHub ⚠ - AlertHub is a simple tool to get alerted from GitHub releases. MIT Nodejs Anchr - Anchr is a toolbox for tiny tasks on the internet, including bookmark collections, URL shortening and (encrypted) image uploads. (Source Code) GPL-3.0 Nodejs Anuko - Anuko provides simple time and project tracking on a selfhosted basis. (Demo, Source Code) Other PHP asciiflow - Flow Diagram Drawing Tool. (Source Code) GPL-3.0 Java/JavaScript blynk - Platform with iOS and Android apps to control Arduino, ESP8266, Raspberry Pi and similar microcontroller boards over the Internet. (Source Code) AGPL-3.0 Java CUPS - The Common Unix Print System uses Internet Printing Protocol (IPP) to support printing to local and network printers. (Source Code) GPL-2.0 C DomainMOD - Application to manage your domains and other internet assets in a central location. DomainMOD includes a Data Warehouse framework that allows you to import your WHM/cPanel web server data so that you can view, export, and report on your data. (Demo, Source Code) GPL-3.0 PHP EasyBook Project - Book publishing as easy as it should be. (Source Code) MIT PHP Flox ⚠ - Self hosted movie, TV series and anime watch list with a 3-point rating system. Uses The Movie Database backend for information. (Demo) MIT PHP formspree ⚠ - Just send your form to our URL and we\u0026rsquo;ll forward it to your email. No PHP, Javascript or sign up required. (Demo, Source Code) AGPL-3.0 Python GeneWeb - GeneWeb is an open source genealogy software written in OCaml. It comes with a Web interface and can be used off-line or as a Web service. (Demo, Source Code) GPL-2.0 OCAML How Secure Is My Password - Rather than just saying a password is \u0026ldquo;weak\u0026rdquo; or \u0026ldquo;strong\u0026rdquo;, How Secure is My Password? lets your users know how long it would take someone to crack their password. (Demo) MIT Javascript google-webfonts-helper ⚠ - Hassle-Free Way to Self-Host Google Fonts. Get eot, ttf, svg, woff and woff2 files + CSS snippets. (Demo) MIT Nodejs ytdl-webserver - Docker-ready webserver for downloading youtube videos. MIT Nodejs Kimai - Simple time and project tracking. (Demo, Source Code) GPL-3.0 PHP King Phisher - King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. BSD-3-Clause Python Maily Form - Self-hosted service you can use to place forms on static sites. It uses nodemailer and you can host it with Docker. GPL-3.0 Nodejs/Docker Mindmaps - Open source, offline capable, mind mapping application. (Demo) AGPL-3.0 HTML5 Monica - Personal relationship manager, and a new kind of CRM to organize interactions with your friends and family. (Source Code) AGPL-3.0 PHP Musical Artifacts - Helping to catalog, preserve and free the artifacts you need to produce music. (Source Code) MIT Ruby My Mind - Web application for creating and managing mind maps. (Demo) MIT Javascript nnmm - Super tiny pastebin/url minifier \u0026ldquo;microservice\u0026rdquo;. (Source Code) Beerware PHP Notica - Lets you send browser notifications from your terminal to your desktop or phone. No installation or registration is required. (Source Code) MIT Nodejs Ombi - A content request system for Plex/Emby, connects to SickRage, CouchPotato, Sonarr, with a growing feature set. (Demo, Source Code) GPL-2.0 C# revealjs - Framework for easily creating beautiful presentations using HTML. (Demo, Source Code) MIT JavaScript SANE Network Scanning - Allow remote clients to access image acquisition devices (scanners) available on the local host. (Source Code) GPL-2.0 C Trello Burndown ⚠ - Easy to use SCRUM burndown chart for Trello boards. MIT Go/Docker Ulterius - Ulterius is an open-source remote desktop software with lots of awesome functions. (Demo, Source Code) MPL-2.0 C# ViMbAdmin - Provides a web based virtual mailbox administration system to allow mail administrators to easily manage domains, mailboxes and aliases. (Demo, Source Code) GPL-3.0 PHP visualCaptcha - Configurable captcha solution, focusing on accessibility and simplicity whilst maintaining security. (Demo, Source Code) MIT PHP/Nodejs/Ruby/Python Web fonts repository - A simple webfont hosting. Google Fonts alternative for your own fonts. MIT PHP webtrees - Webtrees is the web\u0026rsquo;s leading on-line collaborative genealogy application. (Demo, Source Code) GPL-3.0 PHP Money, Budgeting and Management # ^ back to top ^\nSee also https://github.com/n1trux/awesome-sysadmin#it-asset-management\nAkaunting - Akaunting is a free, online and open source accounting software designed for small businesses and freelancers. (Source Code) GPL-3.0 PHP BTCPay Server - A self-hosted Bitcoin and other cryptocurrencies payment processor. (Demo, Source Code) MIT C# Benedetto - Bennedetto is a simple, turn-based budget management app. GPL-3.0 Python Boodle - Simple accounting single-page application in Clojure and ClojureScript. EPL-1.0 Clojure Budget App - Budget App is an open source personal budgeting application. Apache-2.0 Java Dot Ledger - Web-based personal finance management tool. (Demo, Source Code) Apache-2.0 Ruby Economizzer - An easy and secure system for you to manage your personal money and achieve your goals, and can be accessed by computer, tablet or smartphone. (Demo, Source Code) MIT PHP ExMoney - Self-hosted personal finance app. ISC Elixir Firefly III - Firefly III is a modern financial manager. It helps you to keep track of your money and make budget forecasts. It supports credit cards, has an advanced rule engine and can import data from many banks. It\u0026rsquo;s powered by Laravel and requires PHP7.2. (Demo, Source Code) GPL-3.0 PHP Fava - Fava is the web frontend of Beancount, a text based double-entry accounting system. (Demo, Source Code) MIT Python Galette - Galette is a membership management web application towards non profit organizations. (Source Code) GPL-3.0 PHP GRR - Assets management and booking for small/medium companies. (Source Code) GPL-2.0 PHP Hospital Run - Hospital Run is offline enabled hospital management software. (Source Code, Demo) GPL-3.0 Nodejs Inventaire - Collaborative resources mapper project, while yet only focused on exploring books mapping with wikidata and ISBNs. (Source Code) AGPL-3.0 Nodejs Invoice Ninja - Powerful tool to invoice clients online. (Demo, Source Code) AAL PHP InvoicePlane - Manage quotes, invoices, payments and customers for your small business. (Demo, Source Code) MIT PHP IHateMoney - Manage your shared expenses, easily. (Demo, Source Code) BSD-3-Clause Python Kresus - Open source personal finance manager. (Demo, Source Code) MIT Nodejs PartKeepr - PartKeepr is an electronic part inventory management software. It helps you to keep track of your available parts and assist you with re-ordering parts. (Demo, Source Code) GPL-3.0 PHP SilverStrike - Personal finance management made easy. (Demo, Source Code) MIT Python/Django StockazNG - Asset Management System. MIT Python Monitoring # ^ back to top ^\nSee https://github.com/n1trux/awesome-sysadmin#monitoring and https://github.com/n1trux/awesome-sysadmin#metric--metric-collection\nNote-taking and Editors # ^ back to top ^\nSee also Wikis\nAbrays Notes - Take server side encrypted notes. Self hosted, WYSIWYG editor, material design and more. (Source Code) MIT Ruby BulletNotes - Workflowy / Dynalist clone with Kanban (Trello) and Calendar functionality. Organize everything. (Source Code) MIT Nodejs Boostnote - The note-taking app for programmers that focuses on markdown, snippets, and customizability. (Source Code) GPL-3.0 JavaScript CodiMD - Realtime collaborative markdown notes on all platforms, formerly HackMD CE. (Source Code) AGPL-3.0 Node.js dillinger - The last Markdown editor, ever. (Source Code) MIT Nodejs draw.io - Diagram software for making flowcharts, process diagrams, org charts, UML, ER and network diagrams. (Source Code) Apache-2.0 JavaScript Joplin - Joplin is a note taking application with Markdown editor and encryption support for mobile and desktop platforms. Runs client-side and syncs through self hosted Nextcloud or similar. Consider it like open source alternative to Evernote. (Source Code) MIT Nodejs Leanote - Leanote, Not Just A Notepad! Open source cloud notepad. (Demo, Source Code) GPL-2.0 Go Markdown Edit - Online markdown editor/viewer. (Source Code) MIT HTML5 Meemo - Personal notes stream with Markdown support. (Source Code) MIT Nodejs minimalist-web-notepad - Minimalist notepad.cc clone. Apache-2.0 PHP MiniNote - Simple Markdown note-taking app with persistence. MIT Nodejs OpenNote - OpenNote was built to be an open web-based alternative to Microsoft OneNote (T) and EverNote. (Demo) MIT HTML5 Paperwork - OpenSource note-taking and archiving alternative to Evernote, Microsoft OneNote and Google Keep. (Source Code) MIT PHP savepad - Minimalist notepad based on notepad.cc. MIT PHP ShareLaTex - Web-based collaborative LaTeX editor. (Source Code) AGPL-3.0 Ruby Standard Notes - Simple and private notes app. Protect your privacy while getting more done. That\u0026rsquo;s Standard Notes. (Demo, Source Code) GPL-3.0 Ruby turndown - HTML to Markdown converter written in JavaScript. (Source Code) MIT Javascript Trilium Notes - Trilium Notes is a hierarchical note taking application with focus on building large personal knowledge bases. AGPL-3.0 Nodejs Turtl - Totally private personal database and note taking app. (Source Code) GPL-3.0 CommonLisp Office Suites # ^ back to top ^\nCollabora Online Development Edition - Collabora Online Development Edition (CODE) is a powerful LibreOffice-based online office that supports all major document, spreadsheet and presentation file formats, which you can integrate in your own infrastructure. (Source Code) MPL-2.0 C++ CryptPad - CryptPad is the zero knowledge realtime collaborative editor (rich-text, files, source-code, \u0026hellip;). (Source Code) AGPL-3.0 Nodejs EtherCalc - Web spreadsheet. (Source Code) CPAL-1.0/Other Nodejs EtherDraw - Intuitive collaborative drawing web based tool. Apache-2.0 Nodejs Etherpad - Etherpad is a highly customizable Open Source online editor providing collaborative editing in really real-time. (Demo, Source Code) Apache-2.0 Nodejs Infinoted - Server for Gobby, a multi-platform collaborative text editor. (Source Code) MIT C++ ONLYOFFICE - Office suite that enables you to manage documents, projects, team and customer relations in one place. (Source Code) AGPL-3.0 Nodejs PHPOffice - PHPOffice contains libraries which permits to write and read files from most office suites. LGPL-3.0 PHP WebODF - Tools and libraries to view and edit Open Document Format (ODF) files. (Source Code) AGPL-3.0 HTML5 Password Managers # ^ back to top ^\nBitwarden - Password manager with webapp, browser extension, and mobile app. (Source Code) AGPL-3.0 C# keeweb - This webapp is a browser and desktop password manager compatible with KeePass databases. (Source Code) MIT HTML5 Passbolt - Password manager dedicated for managing passwords in a collaborative way on any Web server, using a MySQL database backend. (Source Code) AGPL-3.0 PHP PassIt - Simple password manage with sharing features by group and user, but no administration interface. (Demo, Source Code) AGPL-3.0 Python Psono - A promising password managers fully featured for teams. (Demo, Source Code) Apache-2.0 Python sysPass - Multiuser password management system. (Demo, Source Code) GPL-3.0 PHP Teampass - Password manager dedicated for managing passwords in a collaborative way. One symmetric key is used to encrypt all shared/team passwords and stored server side in a file and the database. works on any server Apache, MySQL and PHP. (Source Code) GPL-3.0 PHP Pastebins # ^ back to top ^\n0bin - Client side encrypted pastebin. WTFPL Python bepasty - A pastebin for all kinds of files. (Source Code) BSD-2-Clause Python bin - a paste bin. (Demo) WTFPL/0BSD Rust CoderVault - Open source, self-hosted, snippet manager. (Source Code) MIT Ruby cryptonote - Simple open source web application that lets users encrypt and share messages that can only be read once. (Source Code) MIT Ruby EdPaste - Self-hosted pastebin written in Laravel (PHP Framework). (Demo) MIT PHP fiche - Command line pastebin, all you need is netcat. (Demo) MIT C Fugacious - Open source short-term secure messaging (OSSSM). (Source Code) CC0-1.0 Ruby GIST - GIST is an open-source application to share code. (Demo) GPL-3.0 PHP hastebin - Open source pastebin written in node.js. (Demo, Source Code) MIT Nodejs Modern Paste - Modern pastebin with a contemporary, minimalistic user interface backed by a robust feature set. (Source Code) MIT Python mojopaste - Perl based pastebin. (Demo, Source Code) Artistic-2.0 Perl NoteHub - Free and Hassle-free Pastebin for Markdown Pages. Simple, clean, password provided, generated-short link. MIT Nodejs Paste - Paste is forked from the original source pastebin.com used before it was bought. (Source Code) GPL-3.0 PHP pastebin - Simple pastebin service with convenient api and CLI. (Demo) MIT Go Pastebin - Modern self-hosted pastebin service with a restful API. MIT Go pb - Lightweight pastebin (and url shortener) built using flask. (Demo) GPL-3.0 Python pbnh - Pastebin inspired from project pb and hastebin, with an API and a SQL-based backend. MIT Python PrivateBin - PrivateBin is a minimalist, opensource online pastebin/discussion board where the server has zero knowledge of hosted data. (Demo, Source Code) Zlib PHP SharpPaste - Cross-platform C# pastebin with client-side AES-256 encryption that just works. (Demo) MIT C#/NancyFX Snibox - Code snippets manager with attractive tag-oriented interface. (Demo, Source Code) MIT Ruby snipt - Long-term memory for coders. Share and store code snippets. (Source Code) MIT Python Stikked - Advanced and beautiful pastebin. (Demo) GPL-3.0 PHP Sup3rS3cretMes5age - Very simple (to deploy and to use) secret message service using Hashicorp Vault as a secrets storage. MIT Go tastebin - Updated version of hastebin plus additional features. Apache-2.0 Nodejs Personal Dashboards # ^ back to top ^\nSee also Monitoring\nBaby Buddy - Helps caregivers track baby sleep, feedings, diaper changes, and tummy time. (Demo) BSD-2-Clause Python Dj Diabetes - My Glucose Manager - follow your daily health. BSD-3-Clause Python Habitica - Habit tracker app which treats your goals like a Role Playing Game. Previously called HabitRPG. (Source Code) GPL-3.0/CC-BY-NC-SA-3.0/CC-BY-SA-3.0 Nodejs Heimdall - Heimdall is an elegant solution to organise all your web applications. (Source Code) MIT PHP Homepage - Simple, standalone, self-hosted PHP page that is your window to your server and the web. MIT PHP iDashboard-PHP - HTPC Dashboard to load website services. MIT PHP Organizr - Organizr aims to be your one stop shop for your Servers Frontend. GPL-3.0 PHP simple-dash - A simple, fully responsive Dashboard to forward to the services of your choice. (Demo) MIT Javascript Tipboard - In-house, tasty, local dashboarding system. (Source Code) Apache-2.0 Python wger - Web-based personal workout, fitness and weight logger/tracker. It can also be used as a simple gym management utility and offers a full REST API as well. (Demo, Source Code) AGPL-3.0 Python Photo and Video Galleries # ^ back to top ^\nChevereto Free - Powerful and fast image hosting script that allows you to create your very own full featured image hosting website in just minutes. (Source Code) AGPL-3.0 PHP Coppermine - Multilingual photo gallery that integrates with various bulletin boards. Includes upload approval and password protected albums. (Demo, Source Code) GPL-3.0 PHP CumulusClips - Your own video sharing website with CumulusClips video sharing script. You can build a YouTube clone where users can upload, rate, comment on videos, and much more. (Demo) GPL-2.0 PHP Gallery CSS - Gallery.css is all CSS. Think: Simple, maintainable and understandable galleries without the use of Javascript. (Source Code) MIT CSS Lychee - Open source grid and album based photo-management-system. (Source Code) MIT PHP MediaDrop - Video, audio and podcast publication platform. (Source Code) GPL-3.0 Python Mediagoblin - Free software media publishing platform that anyone can run. You can think of it as a decentralized alternative to Flickr, YouTube, SoundCloud, etc. (Source Code) AGPL-3.0 Python MinigalNano - MinigalNano is a very simple image gallery. It adheres to the KISS principle and is very easy to install. MinigalNano does not have a web admin interface: You just upload your images in the photo folder on your server (using FTP, SFTP). AGPL-3.0 PHP OwnPhotos - Self hosted wannabe Google Photos clone, with a slight focus on cool graphs. MIT Python Photato - Self-hosted photo gallery, accessible through a responsive WebUI. Directly uses and indexes a specific folder in the filesystem. AGPL-3.0 Java Photofloat - Web 2.0 Photo Gallery Done Right via Static JSON and Dynamic Javascript. (Demo) GPL-2.0 Python PhotoLight - The easiest photo gallery there is. GPL-3.0 PHP Photonix - A new web-based photo management application with object recognition, location awareness, color analysis and other ML algorithms. (Demo, Source Code) AGPL-3.0 Python PhotoPrism - Personal photo management powered by Go and Google TensorFlow. Browse, organize, and share your personal photo collection, using the latest technologies to automatically tag and find pictures. (Source Code) MIT Go Photoshow - Responsive Web Gallery. (Source Code) GPL-3.0 PHP Piwigo - Photo gallery software for the web, built by an active community of users and developers. (Demo, Source Code) GPL-2.0 PHP Plumi - Create your own sophisticated video-sharing site. (Source Code) GPL-2.0 Python Quru Image Server - High performance dynamically resizing image server offering directory based access control cropping, rotation, color management and other tools. (Demo, Source Code) AGPL-3.0 Python sigal - Yet another simple static gallery generator. MIT Python UberGallery - UberGallery is an easy to use, simple to manage, web photo gallery. UberGallery does not require a database and supports JPEG, GIF and PNG file types. Simply upload your images and UberGallery will automatically generate thumbnails and output HTML. (Source Code) MIT PHP Videobin - Simple video upload and sharing service with transcoding. (Demo, Source Code) GPL-3.0 Python Zenphoto - Open-source gallery and CMS project. (Source Code) GPL-2.0 PHP Polls and Events # ^ back to top ^\nCalagator - Event aggregator. (Source code) MIT Ruby Clerk - Simple event logger to keep track of periodic events, habits, etc. as they occur. GPL-3.0 PHP dudle - Online scheduling application. (Demo, Source code) AGPL-3.0 Ruby Fider - Open source alternative to UserVoice for customer feedback. (Demo, Source Code) MIT Go Framadate - Online service for planning an appointment or make a decision quickly and easily: Make a poll, Define dates or subjects to choose, Send the poll link to your friends or colleagues, Discuss and make a decision. (Demo, Source Code) CECILL-B PHP Kyélà - Participation polls for group events. (Demo, Source Code) AGPL-3.0 PHP LimeSurvey - Feature-rich Open Source web based polling software. Supports extensive survey logic. (Demo, Source code) GPL-2.0 PHP Nuages - Collaborative meeting poll system, similar to doodle or rdvz. (Source Code) GPL-3.0 Python PHPBack - The open source feedback system. (Demo, Source Code) GPL-3.0 PHP Booking and Scheduling # Alf.io - The open source ticket reservation system. (Demo, Source Code) GPL-3.0 Java Booked - A web-based calendar and resource scheduling system that allows administered management of reservations on any number of resources. (Demo, Source Code) GPL-3.0 PHP Easy!Appointments - A highly customizable web application that allows your customers to book appointments with you via the web. (Demo, Source Code) GPL-3.0 PHP Proxy # ^ back to top ^\nhttp2-serverpush-proxy - Reverse proxy that helps to automatically utilize HTTP/2.0\u0026rsquo;s server push mechanism for static websites. Available as middleware and standalone application. MIT Nodejs imgproxy - Fast and secure standalone server for resizing and converting remote images. It works great when you need to resize multiple images on the fly without preparing a ton of cached resized images or re-doing it every time the design changes. MIT Go/Docker iodine - IPv4 over DNS tunnel solution, enabling you to start up a socks5 proxy listener. (Source Code) ISC C microproxy - lightweight non-caching HTTP/HTTPS proxy server. MIT Go miniProxy - Simple web proxy written in PHP that can allow you to bypass Internet content filters, or to browse the internet anonymously. Only one php file. (Source Code) GPL-3.0 PHP Oranjeproxy - Anonymizing web proxy. (Source Code) GPL-2.0 PHP PHP-Proxy - Web proxy script built specifically to be fast, easy to modify and to support video sites such as YouTube. (Demo, Source Code) MIT PHP Pomerium - An identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your requst to the backend, so that you can safely expose your self-hosted websites to public Internet. (Source Code) Apache-2.0 Go Pound - Light-weight reverse proxy and load balancer for HTTP/HTTPS. GPL-2.0 C Privoxy - Non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk. GPL-2.0 C Redbird - A modern reverse proxy for node that includes cluster, HTTP2, LetsEncrypt, and Docker support. BSD-2-Clause Javascript Squid - Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. (Source Code) GPL-2.0 C Swiperproxy - Lightning-fast, open source web proxy that is easy for you to run and customize. (Source Code) MIT Python Tinyproxy - Light-weight HTTP/HTTPS proxy daemon. (Source Code) GPL-2.0 C Traefik - Træfɪk is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It supports several backends (Docker, Swarm, Mesos/Marathon, …) to manage its configuration automatically and dynamically. (Source Code) MIT Go Read it Later Lists # ^ back to top ^\nNunux Keeper - Your personal content curation service. (Source Code) GPL-3.0 Nodejs Wallabag - Wallabag, formerly Poche, is a web application allowing you to save articles to read them later with improved readability. (Demo, Source Code) MIT PHP Resource Planning # ^ back to top ^\nfarmOS - Web-based farm record keeping application. (Source Code) GPL-2.0 PHP Grocy - grocy is a web-based selfhosted groceries management solution for your home, available in English, German, Italian and Norwegian. (Demo, Source Code) MIT PHP Tania - Tania is a free and open source farming management system for everyone. You can manage your areas, reservoirs, farm tasks, inventories, and the crop growing progress. Apache-2.0 Go Enterprise Resource Planning # ERPNext - Free open source ERP system. (Demo, Source Code) GPL-3.0 Python LedgerSMB - Integrated accounting and ERP system for small and midsize businesses, with double entry accounting, budgeting, invoicing, quotations, projects, orders and inventory management, shipping and more. (Demo, Source Code) GPL-2.0 Perl Odoo - Free open source ERP system. (Demo, Source Code) LGPL-3.0 Python Tryton - Free open source business solution. (Demo, Source Code) GPL-3.0 Python Search Engines # ^ back to top ^\nAmbar - Document Search Engine (OCR, Store \u0026amp; Search). (Demo, Source Code) MIT Nodejs/Python Gigablast - open source search engine. (Source Code) Apache-2.0 C++ Searx - Privacy-respecting, hackable metasearch engine. (Demo, Source Code) AGPL-3.0 Python Yacy - Peer based, decentralized search engine server. (Demo, Source Code) GPL-2.0 Java Software Development # ^ back to top ^\nProject Management # See also Ticketing, Task management/To-do lists, awesome-sysadmin/Code Review\nBonobo Git Server - Set up your own self hosted git server on IIS for Windows. Manage users and have full control over your repositories with a nice user friendly graphical interface. (Source Code) MIT C# Fossil - Distributed version control system featuring wiki and bug tracker. BSD-2-Clause-FreeBSD C Goodwork - Self hosted project management and collaboration tool powered by Laravel \u0026amp; VueJS. (Demo) MIT PHP Gitblit - Pure Java stack for managing, viewing, and serving Git repositories. (Source Code) Apache-2.0 Java gitbucket - The easily installable GitHub clone powered by Scala. (Source Code) Apache-2.0 Scala/Java Gitea - Community managed fork of Gogs, lightweight code hosting solution. (Demo, Source Code) MIT Go GitLab - Self Hosted Git repository management, code reviews, issue tracking, activity feeds and wikis. (Demo, Source Code) MIT Ruby Gitlist - Web-based git repository browser - GitList allows you to browse repositories using your favorite browser, viewing files under different revisions, commit history and diffs. (Source Code) BSD-3-Clause PHP Gitolite - Gitolite allows you to setup git hosting on a central server, with fine-grained access control and many more powerful features. (Source Code) GPL-2.0 Perl GitPrep - Portable Github clone. (Demo, Source Code) Artistic-2.0 Perl Git WebUI - Standalone web based user interface for git repositories. Apache-2.0 Python Gogs - Painless self-hosted Git Service written in Go. (Demo, Source Code) MIT Go Kallithea - Source code management system that supports two leading version control systems, Mercurial and Git, with a web interface. (Source Code) GPL-3.0 Python Klaus - Simple, easy-to-set-up Git web viewer that Just Works. ISC Python Lavagna - Lavagna is an open-source issue/project management tool designed for small teams. Lightweight, pure Java, easy to install, easy to use. (Source Code) GPL-3.0 Java Octobox ⚠ - Take back control of your GitHub Notifications. (Source Code) AGPL-3.0 Ruby OpenProject - OpenProject is a web-based project management system. (Source Code) GPL-3.0 Ruby Phabricator - Collection of web applications that help build better software. (Demo, Source Code) Apache-2.0 PHP Phproject - High performance full-featured project management system. (Demo, Source Code) GPL-3.0 PHP ProjeQtOr - A complete, mature, multi-user project management system with extensive functionality for all phases of a project. (Demo, Source Code) AGPL-3.0 PHP Redmine - Redmine is a flexible project management web application. (Demo, Source Code) GPL-2.0 Ruby RhodeCode - RhodeCode is an open source platform for software development teams. It unifies and simplifies repository management for Git, Subversion, and Mercurial. (Demo, Source Code) AGPL-3.0 Python SCM Manager - The easiest way to share and manage your Git, Mercurial and Subversion repositories over http. (Source Code) BSD-3-Clause Java Taiga - Agile Project Management Tool based on the Kanban and Scrum methods. (Source Code) AGPL-3.0 Python Trac - Trac is an enhanced wiki and issue tracking system for software development projects. BSD-3-Clause Python Tuleap - Tuleap is a libre suite to plan, track, code and collaborate on software projects. (Source Code) GPL-2.0 PHP Bug Trackers # See Ticketing\nIDE/Tools # Babelfish - Self-hosted server for source code parsing. It can parse any file, in any supported language, extract an Abstract Syntax Tree from it, and convert it to a Universal Abstract Syntax Tree which can enable further analysis and transformation. (Source Code) GPL-3.0 Go Code-Server - Visual Studio Code in the browser, hosted on a remote server. (Source Code) MIT Nodejs/Docker Eclipse Che - Open source workspace server and cloud IDE. (Source Code) EPL-1.0 Docker/Java ICEcoder - ICEcoder is a web IDE / browser based code editor, which allows you to develop websites directly within the web browser. (Demo, Source Code) MIT PHP JS Bin - Open source collaborative web development debugging tool. (Source Code) MIT Nodejs Judge0 API - Open source API to compile and run source code. (Source Code) GPL-3.0 Ruby Koding - The simplest way to manage your entire Dev Infrastructure. (Source Code) Apache-2.0 Nodejs Microglark - Hacky minimalistic remote pair programming editor. (Source Code) AGPL-3.0 Nodejs Regexr - RegExr is a HTML/JS based tool for creating, testing, and learning about Regular Expressions. (Source Code) MIT Nodejs RequestBin - Inspect HTTP requests. Debug webhooks. (Source Code) MIT python RStudio Server - Web browser based IDE for R. (Source Code) AGPL-3.0 Java/C++ Selenoid - Lightweight Selenium hub implementation launching browsers within Docker containers. (Source Code) Apache-2.0 Go sourcegraph - Sourcegraph is a fast, open-source, fully-featured code search and navigation engine written in Go. (Source Code) Apache-2.0 Go Wide - Web-based IDE for Teams using Go programming language/Golang. (Demo) Apache-2.0 Go Zalenium - Allows anyone to have a disposable and flexible Docker-based Selenium Grid infrastructure featuring video recording, live preview and online/offline dashboards. Apache-2.0 Java/Shell Continuous Integration # See awesome-sysadmin/Continuous Integration \u0026amp; Continuous Deployment\nFaaS/Serverless # Serverless computing on Wikipedia\nfx - fx is a tool to help you do Function as a Service with painless on your own servers. MIT Go IronFunctions - The serverless microservices platform by iron.io. Apache-2.0 Go LocalStack - LocalStack is a fully functional local AWS cloud stack. This includes Lambda for serverless computation. (Source Code) Apache-2.0 Python/Other OpenFaaS - Serverless Functions Made Simple for Docker \u0026amp; Kubernetes. (Source Code) MIT Go API Management # DreamFactory - Turns any SQL/NoSQL/Structured data into Restful API. (Source Code) Apache-2.0 PHP Endpoint - Super simple mock HTTP API endpoints that return static JSON data, for testing webhooks and client libraries in development. MIT Nodejs Fusio - Open-source API management platform which helps to build and manage REST APIs. (Demo, Source Code) AGPL-3.0 PHP Hapttic - Simple HTTP server that forwards all requests to a shell script to handle webhooks you receive. Apache-2.0 Go Para - Flexible and modular backend framework/server for object persistence, API development and authentication. (Source Code) Apache-2.0 Java Tyk - Fast and scalable open source API Gateway. Out of the box, Tyk offers an API Management Platform with an API Gateway, API Analytics, Developer Portal and API Management Dashboard. (Source Code) MPL-2.0 Go Documentation Generators # See also Static site generators\nDocstore - Static document hosting without any server-side processing, does not require you to recompile every time you change an article. Clone the repository and add articles in the text/ directory to get started. (Source Code) BSD-3-Clause Javascript Flatdoc - Small Javascript file that fetches Markdown files and renders them as full pages. MIT Javascript markdown-tree - Serve a hierarchy / tree directory of markdown files. Use intended for small sites built in markdown. MIT Ruby Read the Docs - Host documentation, making it fully searchable and easy to find; import your docs using any major version control system, including Mercurial, Git, Subversion, and Bazaar. (Demo, Source Code) MIT Python Localization # Accent - Open-source, self-hosted, developer-oriented translation tool. (Source Code) BSD-3-Clause Elixir Pootle - Online translation and localization tool. (Source Code) GPL-3.0 Python Weblate - Web-based translation tool with tight version control integration. (Demo, Source Code) GPL-3.0 Python Zanata - Web-based translation platform for translators, content creators and developers to manage localisation projects. (Source Code) GPL-2.0 Java Static site generators # ^ back to top ^\nSee https://staticsitegenerators.net and https://www.staticgen.com\nTask management/To-do lists # ^ back to top ^\nSee also Project Management and Ticketing.\nCrepido - Create (kanban) boards to track users and projects from flat markdown files. MIT Nodejs Kanboard - Simple and open source visual task board. (Source Code) MIT PHP myTinyTodo - Simple way to manage your todo list in AJAX style. Uses PHP, jQuery, SQLite/MySQL. GTD compliant. (Demo, Source Code) GPL-2.0 PHP PHP Task/Todo list - Simple task/todo list that uses a JSON text file for the tasks. MIT PHP Restyaboard - Open source Trello-like kanban board. (Demo, Source Code) OSL-3.0 PHP scrumblr - Collaborative Online Scrum Tool Using Websockets, Node.js, jQuery, and CSS3. (Demo, Source Code) GPL-3.0 Nodejs TaskBoard - Kanban-inspired app for keeping track of things that need to get done. (Demo, Source Code) MIT PHP Taskfreak - Simple but efficient web based task manager written in PHP. GPL-3.0 PHP Tasks - Simple tasks and notes manager written in PHP, jQuery and Bootstrap using a custom flat file database. MPL-2.0 PHP Tasks - Kanban based to-do list manager written in Go. MIT Go tasks.php - Simple task/todo list manager. MIT PHP Taskwarrior - Taskwarrior is Free and Open Source Software that manages your TODO list from your command line. It is flexible, fast, efficient, and unobtrusive. It does its job then gets out of your way. (Source Code) MIT C++ Tinyissue - Simple Issue Tracking for Teams. MIT PHP todo - Simple todo list manager. (Demo) MIT Go todoMini - Mobile friendly zero-feature TODO list web app. Unix philosophy. (Demo, Source Code) GPL-3.0 PHP/Clojure Tracks - Web-based application to help you implement David Allen’s Getting Things Done™ methodology. (Source Code) GPL-2.0 Ruby Volition - Opinionated open-source task management. (Demo, Source Code) MIT Ruby Wekan - Open-source Trello-like kanban. (Demo, Source Code) MIT Nodejs Ticketing # ^ back to top ^\nSee also Task management/To-do lists and Project Management\nBrimir - Simple and clean open-source ticket manager written in Ruby on Rails. (Source Code) AGPL-3.0 Ruby Bugzilla - General-purpose bugtracker and testing tool originally developed and used by the Mozilla project. MPL-2.0 Perl Bumpy Booby - Simple, responsive and highly customizable PHP bug tracking system. (Source Code) MIT PHP Cerb - Group-based e-mail management project. (Source Code) DPL PHP Deskulu - Opensource helpdesk and ticketing system based on Drupal 7. (Demo) GPL-2.0 PHP DiamanteDesk - DiamanteDesk is FREE Open Source easy-to-use help-desk solution. (Demo, Source Code) OSL-3.0 PHP django-todo - django-todo is a pluggable, multi-user, multi-group, multi-list todo and ticketing system - a reusable app designed to be dropped into any existing Django project. (Source Code) BSD-3-Clause Python/Django Flyspray - Uncomplicated, web-based bug tracking system. (Source Code) GPL-2.0 PHP FreeScout - Open source clone of Help Scout: email-based customer support application, help desk and shared mailbox. AGPL-3.0 PHP Helpy - Helpy is a modern, open source helpdesk customer support application. Features include knowledgebase, community discussions and support tickets integrated with email. (Demo, Source Code) MIT Ruby HuBoard ⚠ - Instant project management for your GitHub issues (Connects directly GitHub API). MIT Ruby MantisBT - Self hosted bug tracker, fits best for software development. (Demo), (Source Code) GPL-2.0 PHP OpenSupports - Multi language ticket system with FAQ, role management, metrics and canned response features. (Demo, Source Code) GPL-3.0 PHP osTicket - Manage, organize and archive all your support requests and responses in one place. (Source Code) GPL-2.0 PHP OTRS - Trouble ticket system for assigning tickets to incoming queries and tracking further communications. (Source Code) AGPL-3.0 Perl Request Tracker - An enterprise-grade issue tracking system. (Source Code) GPL-2.0 Perl Sentry On-Premise - A powerful error tracking platform with wide language support and a robust API. (Source Code) BSD-3-Clause Python/Django SIT - SCM-agnostic, file-based, offline-first, immutable issue tracker. (Source Code) MIT Apache-2.0 Rust. TheBugGenie - friendly project management and issue tracking tool, with extensive user rights system. (Source Code) MPL-2.0 PHP Zammad - Easy to use but powerful open-source support and ticketing system. (Source Code) AGPL-3.0 Ruby URL Shorteners # ^ back to top ^\ndevShort - A simple and privacy-friendly URL shortener for web developers, admins and all professionals. (Demo) MIT PHP Kutt - A modern URL shortener with support for custom domains. (Source Code) MIT Nodejs Link-shortener-bot ⚠ - URL shortener using a Telegram Bot. (Demo) MIT Ruby Linkr - Beautiful, fast URL shortening. (Demo, Source Code) MIT Python/Nodejs liteshort - User-friendly, actually lightweight, and configurable URL shortener. (Demo) MIT Python Lstu - Let\u0026rsquo;s SHorten That Url - Lightweight URL shortener. WTFPL Perl Nimbus - URL shortener and file sharer with a drag-and-drop OS X menu bar client and web interface. MIT Python Polr - Modern, minimalist, modular, and lightweight URL shortener. (Source Code) GPL-2.0 PHP reduc.io - URL shortener service written in Scala, using Akka-Http and Redis. MIT Scala schort - No login, no javascript, just short links. (Demo) CC0-1.0 Python shorturl - Simple URL shortener with very tiny URLs. (Demo) MIT Go shuri - SHort URI - Lighweight URL shortener. MIT PHP url-shortener ⚠ - Shitty url shortener, emoji and AI powered. MIT Nodejs YOURLS - YOURLS is a set of PHP scripts that will allow you to run Your Own URL Shortener. Features include password protection, URL customization, bookmarklets, statistics, API, plugins, jsonp. (Source Code) MIT PHP VPN # ^ back to top ^\nSee https://github.com/n1trux/awesome-sysadmin#vpn\nWeb servers # ^ back to top ^\nSee https://github.com/n1trux/awesome-sysadmin#web\nWikis # ^ back to top ^\nSee also Documentation Generators, Wikimatrix, Wiki Engines on WikiIndex, List of wiki software on wikipedia, Comparison of wiki software on wikipedia.\nBookStack - BookStack is a simple, self-hosted, easy-to-use platform for organizing and storing information. It allows for documentation to be stored in a book like fashion. (Demo, Source Code) MIT PHP Cowyo - Cowyo is a feature-rich wiki for minimalists. (Demo) MIT Go django-wiki - Wiki system with complex functionality for simple integration and a superb interface. Store your knowledge with style: Use django models. (Demo) GPL-3.0 Python Documize - Modern Docs + Wiki software with built-in workflow, single binary executable, just bring MySQL/Percona. (Source Code) AGPL-3.0 Go Dokuwiki - Easy to use, lightweight, standards-compliant wiki engine with a simple syntax allowing reading the data outside the wiki. All data is stored in plain files, therefore no database is required. (Source Code) GPL-2.0 PHP Gitit - Wiki program that stores pages and uploaded files in a git repository, which can then be modified using the VCS command line tools or the wiki\u0026rsquo;s web interface. GPL-2.0 Haskell Gollum - Simple, Git-powered wiki with a sweet API and local frontend. MIT Ruby jingo - Git based wiki engine written for node.js, with a decent design, a search capability and good typography. (Demo) MIT Nodejs Mediawiki - MediaWiki is a free and open-source wiki software package written in PHP. It serves as the platform for Wikipedia and the other Wikimedia projects, used by hundreds of millions of people each month. (Source Code) GPL-2.0 PHP MoinMoin - Advanced, easy to use and extensible WikiEngine with a large community of users. (Source Code) GPL-2.0 Python Olelo - Olelo is a wiki that stores pages in a Git repository, supports many markup styles and has an extensible, hackable architecture. (Demo) MIT Ruby Outline ⚠ - An open, extensible, wiki for your team built using React and Node.js. (Source Code) BSD-3-Clause Nodejs Pepperminty Wiki - Complete markdown-powered wiki contained in a single PHP file. (Demo) MPL-2.0 PHP PineDocs - Simple, fast, customizable and lightweight site for browsing files. GPL-3.0 PHP PmWiki - Wiki-based system for collaborative creation and maintenance of websites. GPL-3.0 PHP Raneto - Raneto is an open source Knowledgebase platform that uses static Markdown files to power your Knowledgebase. MIT Nodejs Realms - Git-backed wiki inspired by Gollum. (Source Code) GPL-2.0 Python TiddlyWiki - Reusable non-linear personal web notebook. (Source Code) BSD-3-Clause Nodejs Tiki - Wiki CMS Groupware with the most built-in features. (Demo, Source Code) LGPL-2.1 PHP TWiki - TWiki is a Perl-based structured wiki application, typically used to run a collaboration platform, knowledge or document management system, a knowledge base, or team portal. (Demo, Source Code) GPL-1.0 Perl wiki - Simple Markdown based wiki engine. (Demo) MIT Go Wiki.js - Modern, lightweight and powerful wiki app built on NodeJS, Git and Markdown. (Demo) AGPL-3.0 Nodejs WiKiss - Wiki, simple to use and install. (Source Code) GPL-2.0 PHP XWiki - Second generation wiki that allows the user to extend its functionalities with a powerful extension-based architecture. (Demo, Source Code) LGPL-2.1 Java Self-hosting Solutions # ^ back to top ^\n1Backend - Self-host web apps, microservices and lambdas on your server. Advanced features enable service reuse and composition. AGPL-3.0 Go Ansible-NAS - Build a full-featured home server with this playbook and an Ubuntu box. MIT YAML/Docker DietPi - Minimal Debian OS optimized for single-board computers, which allows you to easily install and manage several services for selfhosting at home. (Source Code) GPL-2.0 Shell DockSTARTer - DockSTARTer helps you get started with home server apps running in Docker. (Source Code) MIT Shell DPlatform - Deploy self-hosted apps easily: simple, bloat-free, independent installation. (Source Code) MIT Shell FreedomBone - Home server configuration based on Debian. (Source Code) AGPL-3.0 Shell FreedomBox - Community project to develop, design and promote personal servers running free software for private, personal, communications. GPL-3.0 Python/Other FreeNAS - Network-attached storage (NAS) software based on FreeBSD and the OpenZFS file system. Support for SMB, AFP, NFS, iSCSI, SSH, rsync and FTP/TFTP protocols. Advanced features include full-disk encryption and plug-ins. (Source Code) BSD-3-Clause Python/Other HomelabOS - Your very own offline-first privacy-centric open-source data-center. MIT Docker OpenMediaVault - OpenMediaVault is the next generation network attached storage (NAS) solution based on Debian Linux. It contains services like SSH, (S)FTP, SMB/CIFS, DAAP media server, RSync, BitTorrent client and many more. (Source Code) GPL-3.0 PHP Piratebox - DIY anonymous offline file-sharing and communications system built with free software and inexpensive off-the-shelf hardware. (Source Code). GPL-3.0 Python/Other Puffin - Lightweight webapp catalog based on containers, with user interface à la mobile app store. (Source Code) AGPL-3.0 Python/Docker Sandstorm - Personal server for running self-hosted apps easily and securely. (Demo, Source Code) Apache-2.0 C++/Other sovereign - Set of Ansible playbooks to build and maintain your own private cloud: email, calendar, contacts, file sync, IRC bouncer, VPN, and more. GPL-3.0 YAML/Other Syncloud - Your own online file storage, social network or email server. (Source Code) GPL-3.0 Python/Other UBOS - Linux distro that runs on indie boxes (personal servers and IoT devices). Single-command installation and management of apps - Jenkins, Mediawiki, Owncloud, WordPress, etc., and other features. GPL-3.0 Perl/Other WikiSuite - The most comprehensive and integrated Free / Libre / Open Source software suite ever developed. (Source Code) Multiple ClearOS YunoHost - Server operating system aiming to make self-hosting accessible to everyone. (Demo, Source Code) AGPL-3.0 Python/Other List of Licenses # ^ back to top ^\n⚠ - Depends on a third party network service 0BSD - BSD Zero-Clause Licence AAL - Attribution Assurance License AGPL-3.0 - GNU Affero General Public License 3.0 AGPL-3.0-only - GNU Affero General Public License 3.0 only Apache-2.0 - Apache, Version 2.0 APSL-2.0 - Apple Public Source License, Version 2.0 Artistic-2.0 - Artistic License Version 2.0 Beerware - Beerware License BSD-2-Clause - BSD 2-clause \u0026ldquo;Simplified\u0026rdquo; BSD-2-Clause-FreeBSD - BSD 2-Clause FreeBSD License BSD-3-Clause - BSD 3-Clause \u0026ldquo;New\u0026rdquo; or \u0026ldquo;Revised\u0026rdquo; BSD-3-Clause-Attribution - BSD with attribution CC-BY-NC-SA-3.0 - Creative Commons Attribution-NonCommercial-ShareAlike 3.0 International License CC-BY-SA-3.0 - Creative Commons Attribution-ShareAlike 3.0 International License CC-BY-SA-4.0 - Creative Commons Attribution-ShareAlike 4.0 International License CC0-1.0 - Public Domain CDDL-1.0 - Common Development and Distribution License CECILL-B - CEA CNRS INRIA Logiciel Libre CPAL-1.0 - Common Public Attribution License Version 1.0 DPL - Devblocks Public License 1.0 ECL-2.0 - Educational Community License, Version 2.0 EPL-1.0 - Eclipse Public License, Version 1.0 GPL-1.0 - GNU General Public License GPL-2.0 - GNU General Public License 2.0 GPL-3.0 - GNU General Public License 3.0 GPL-3.0-only - GNU General Public License 3.0 IPL-1.0 - IBM Public License ISC - Internet Systems Consortium License LGPL-2.1 - Lesser General Public License 2.1 LGPL-3.0 - Lesser General Public License 3.0 MIT - MIT License MPL-1.1 - Mozilla Public License Version 1.1 MPL-2.0 - Mozilla Public License Multiple - Various different licenses, for different components of the project\u0026rsquo;s software. OSL-3.0 - Open Software License 3.0 Other - Non-standard license, usually unique to the project itself. Sendmail - Sendmail License Unlicense - The Unlicense WTFPL - Do What the Fuck You Want to Public License Zlib - Zlib/libpng License ZPL-2.0 - Zope Public License 2.0 External links # ^ back to top ^\nAwesome Big Data - Curated list of awesome big data frameworks, resources and other awesomeness. Awesome Public Datasets - List of high quality, topic-centric public data sources. Awesome Sysadmin - Curated list of amazingly awesome open source sysadmin resources. Lists of software aimed at privacy and decentralization in some form: PRISM Break, privacytools.io, Alternative Internet, Libre Projects Dynamic Domain Name services: Afraid.org, Pagekite Communities/forums: /r/selfhosted, IndieWeb Mirrors: GitHub.com, Gitlab.com Contributing # Contributing guidelines can be found here.\nAuthors # The list of authors can be found here.\nLicense # This list is under the Creative Commons Attribution-ShareAlike 3.0 Unported License.\n","date":"June 16, 2019","externalUrl":null,"permalink":"/2019/06/16/awesome-selfhosted/","section":"Blog","summary":"Awesome-Selfhosted # Selfhosting is the process of locally hosting and managing applications instead of renting from SaaS providers.\n","title":"Awesome-Selfhosted","type":"blog"},{"content":"This Guide will allow you to mount your Feral slots remote file system as a local file system through SFTP.\nRecommended Method: Install Dokan Libraries and then use win-sshfs.\nTo do this you need meet these requirements:\n1: You have a Feral slot that has been activated and you can SSH to. This means that your FTP/SFTP/SSH user name and password have been set-up and and are visible from You can do this from the Install Software link in your Account Manager\nYou login information for the relevant slot will be shown here:\n2: You will need to install the Visual C++ Redistributable Packages for Visual Studio 2013 to make sure Dokan will work.\n[http://www.microsoft.com/en-us/download/details.aspx?id=40784](Visual C++ Redistributable Packages for Visual Studio 2013)\nDownload and install vcredist_x86.exe Download and install vcredist_x64.exe\nImportant note: Install the x86 regardless of whether your system is x86 or you will get an error about MSVCR120.dll not being found\nNow continue to download and install the Dokan library.\nStep 1 # 1: Remove the previous Dokan library if you had it installed via the Add or Remove programs option.\n2: Download and install the current latest release from this URL: Dokan Libraries.\nReboot if asked.\nYou can now jump to the win-sshfs section.\nStep 2 # This step requires some pre requisites in order to be installable:\n1: You will need to install Net 2.0 if you do not already have it. It comes as part of the Net 3.5 web installer linked here:\nNet 3.5 x86 and x64\n2: You must install this Visual C++ 2005 SP1 x86 in order to install Dokan sshfs 0201226. It does not matter if you are on a x64 OS. You must have this x86 runtime.\nMicrosoft Visual C++ 2005 SP1 Redistributable Package (x86)\nIf you do not do this you will get this error when trying to install sshfs 0.2.0:\nOnce you have installed both of these you can download and install the sshfs 0.2.0 executable.\nDokan sshfs 0201226 install this program. (it requires the Dokan library is installed)\nStep 3 # Download and unpack the files:\nDokan sshfs 0.60:\nWe will use this to update the dokan-sshfs-0201226 to 0.6.0, Why will we do this?\n\u0026ldquo;This package doesn\u0026rsquo;t include installer and Explorer extensions which add context menu to Dokan drive and permission setting dialog. If you want to support those features, please install dokan-sshfs-0.2.0.1226 and overwrite DokanNet.dll and DokanSSHFS.exe files by dokan-sshfs-0.6.0\u0026rdquo;.\nNow browse to the location you installed it to (if no shortcut is created) for example:\nC:\\Program Files\\Dokan\\DokanSSHFS\\ Or\nC:\\Program Files (x86)\\Dokan\\DokanSSHFS\\ You will need to copy the files from the Dokan sshfs 0.6.0 to this folder and overwrite the files.\nConfirm the overwrite action:\nThese are the files that have been updated:\nStep 4 # Then run the DokanSSHFS.exe located in this folder and enter your details in the windows that pops up:\nOne the program starts you will see something like this:\nImportant note: you need to specify the full path to the root of your home directory. So it will be something like:\n/media/DiskID/home/yourusername If you want to use a keyfile it will need to be in the OpenSSH format. To convert your PuTTy PPK file to the OpenSSH format do this:\nUpon connecting Dokan will tell you that is has started SFTP and then you should see you mounted volume in My computer with the driver letter assigned in the settings. If you get an error about assigning the driver letter check that the Dokanmounter service is running.\nthis was done on:\nWindows 7 x86 \u0026amp; x64 with no compatibility settings used. Net 2 and 3.5 are included in an updated Windows 7. You must install Microsoft Visual C++ 2005 SP1 Redistributable Package (x86)\nWindows 8 x86 \u0026amp; x64 with Windows 7 compatibility settings used. Net 2 and 3.5 must be installed manually. You must install Microsoft Visual C++ 2005 SP1 Redistributable Package (x86)\nwin-sshfs # Step 1:\nMake sure you have downloaded and installed the Dokan 0.6.0 Libraries. You can skip this step if you have done this previously.\nImportant note: Windows 8 users must use Windows 7 compatibility mode on this installer.\nDownload and install this:\nDokan Libraries you will need to install this first, reboot if asked.\nImportant note: If you see this box on Windows 8 just click \u0026ldquo;This program ran correctly\u0026rdquo; option:\nStep 2:\nDownload and install win-sshfs:\nDownload win-sshfs\nYou will need to meet all these requirements to install and use win_sshs\nIF you see this box when installing make sure to \u0026ldquo;Overwrite\u0026rdquo; the destination file.\nIf you do not have Net Framework 4 installed you can get it from here.\nNet Framework 4 Web Installer\nStep 3:\nOnce install and running you will see the icon in the tray. Right click on it and click on \u0026ldquo;Show Manager\u0026rdquo;:\nThis is the default screen you will see, click on \u0026ldquo;Add\u0026rdquo;\nFill in your information as shown in the image. The \u0026ldquo;Save\u0026rdquo; before trying to mount:\nOnce you have saved you will see something like this. Now you can try to \u0026ldquo;Mount\u0026rdquo; the drive.\nIf successful with no programs errors, the drive will now be available to access and use. Click \u0026ldquo;Unmount\u0026rdquo; to unmount the drive\nImportant note: You can create and use multiple connection profiles and use them as the same time. Select each profile and \u0026ldquo;Mount\u0026rdquo; the server.\n","date":"May 17, 2019","externalUrl":null,"permalink":"/2019/05/17/sftp/","section":"Blog","summary":"This Guide will allow you to mount your Feral slots remote file system as a local file system through SFTP.\nRecommended Method: Install Dokan Libraries and then use win-sshfs.\n","title":"SFTP","type":"blog"},{"content":" arpwatch – Ethernet Activity Monitor.\nbmon – bandwidth monitor and rate estimator.\nbwm-ng – live network bandwidth monitor.\ncurl – transferring data with URLs.\ndarkstat – captures network traffic, usage statistics.\ndhclient – Dynamic Host Configuration Protocol Client\ndig – query DNS servers for information.\ndstat – replacement for vmstat, iostat, mpstat, netstat and ifstat.\nethtool – utility for controlling network drivers and hardware.\nftp – simplest file transfer protocol.\ngated – gateway routing daemon.\nhost – DNS lookup utility.\nhping – TCP/IP packet assembler/analyzer.\nibmonitor – shows bandwidth and total data transferred.\nifstat – report network interfaces bandwidth.\niftop – display bandwidth usage.\nip (PDF file) – a command with more features that ifconfig (net-tools).\niperf3 – network bandwidth measurement tool. (above screenshot Stacklinux VPS)\niproute2 – collection of utilities for controlling TCP/IP.\nIPTraf – An IP Network Monitor.\niputils – set of small useful utilities for Linux networking.\njwhois (whois) – client for the whois service.\nmtr – network diagnostic tool.\nnet-tools – utilities include: arp, hostname, ifconfig, netstat, rarp, route, plipconfig, slattach, mii-tool, iptunnel and ipmaddr.\nncat – improved re-implementation of the venerable netcat.\nnetcat – networking utility for reading/writing network connections.\nnethogs – a small ‘net top’ tool.\nNetperf – Network bandwidth Testing.\nnetsniff-ng – Swiss army knife for daily Linux network plumbing.\nnetstat – Print network connections, routing tables, statistics, etc.\nnetwatch – monitoring Network Connections.\nnload – display network usage.\nnmap – network discovery and security auditing.\nnslookup – query Internet name servers interactively.\nping – send icmp echo_request to network hosts.\nroute – show / manipulate the IP routing table.\nslurm – network load monitor.\nsmokeping – keeps track of your network latency.\nspeedometer – Measure and display the rate of data across a network.\nspeedtest-cli – test internet bandwidth using speedtest.net\nss – utility to investigate sockets.\nssh – secure system administration and file transfers over insecure networks.\ntcpdump – command-line packet analyzer.\ntcptrack – Displays information about tcp connections on a network interface.\ntelnet – user interface to the TELNET protocol.\ntracepath – very similar function to traceroute.\ntraceroute – print the route packets trace to network host.\nvnStat – network traffic monitor.\nwget – retrieving files using HTTP, HTTPS, FTP and FTPS.\nWireless Tools for Linux – includes iwconfig, iwlist, iwspy, iwpriv and ifrename.\nWireshark – network protocol analyzer.\n","date":"January 31, 2019","externalUrl":null,"permalink":"/2019/01/31/linux-networking-commands/","section":"Blog","summary":" arpwatch – Ethernet Activity Monitor.\nbmon – bandwidth monitor and rate estimator.\nbwm-ng – live network bandwidth monitor.\ncurl – transferring data with URLs.\ndarkstat – captures network traffic, usage statistics.\n","title":"Linux Networking commands","type":"blog"},{"content":" Awesome Machine Learning for Cyber Security # A curated list of amazingly awesome tools and resources related to the use of machine learning for cyber security.\nTable of Contents # Datasets Papers Books Talks Tutorials Courses Miscellaneous ↑ Contributing # Please read CONTRIBUTING if you wish to add tools or resources.\n↑ Datasets # Samples of Security Related Data DARPA Intrusion Detection Data Sets Stratosphere IPS Data Sets Open Data Sets Data Capture from National Security Agency The ADFA Intrusion Detection Data Sets NSL-KDD Data Sets Malicious URLs Data Sets Multi-Source Cyber-Security Events KDD Cup 1999 Data Web Attack Payloads WAF Malicious Queries Data Sets Malware Training Data Sets Aktaion Data Sets CRIME Database from DeepEnd Research Publicly available PCAP files 2007 TREC Public Spam Corpus Drebin Android Malware Dataset PhishingCorpus Datset ↑ Papers # Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks Outside the Closed World: On Using Machine Learning for Network Intrusion Detection Anomalous Payload-Based Network Intrusion Detection Malicious PDF detection using metadata and structural features Adversarial support vector machine learning Exploiting machine learning to subvert your spam filter CAMP – Content Agnostic Malware Protection Notos – Building a Dynamic Reputation System for DNS Kopis – Detecting malware domains at the upper dns hierarchy Pleiades – From Throw-away Traffic To Bots – Detecting The Rise Of DGA-based Malware EXPOSURE – Finding Malicious Domains Using Passive DNS Analysis Polonium – Tera-Scale Graph Mining for Malware Detection Nazca – Detecting Malware Distribution in Large-Scale Networks PAYL – Anomalous Payload-based Network Intrusion Detection Anagram – A Content Anomaly Detector Resistant to Mimicry Attacks Applications of Machine Learning in Cyber Security Data Mining для построения систем обнаружения сетевых атак (RUS) Выбор технологий Data Mining для систем обнаружения вторжений в корпоративную сеть (RUS) Нейросетевой подход к иерархическому представлению компьютерной сети в задачах информационной безопасности (RUS) Методы интеллектуального анализа данных и обнаружение вторжений (RUS) Dimension Reduction in Network Attacks Detection Systems Rise of the machines: Machine Learning \u0026amp; its cyber security applications Machine Learning in Cyber Security: Age of the Centaurs Automatically Evading Classifiers A Case Study on PDF Malware Classifiers Weaponizing Data Science for Social Engineering — Automated E2E Spear Phishing on Twitter Machine Learning: A Threat-Hunting Reality Check Neural Network-based Graph Embedding for Cross-Platform Binary Code Similarity Detection Practical Secure Aggregation for Privacy-Preserving Machine Learning DeepLog: Anomaly Detection and Diagnosis from System Logs through Deep Learning eXpose: A Character-Level Convolutional Neural Network with Embeddings For Detecting Malicious URLs, File Paths and Registry Keys Big Data Technologies for Security Event Correlation Based on Event Type Accounting (RUS) Investigation of The Use of Neural Networks for Detecting Low-Intensive Ddоs-Atak of Applied Level (RUS) Detecting Malicious PowerShell Commands using Deep Neural Networks Machine Learning DDoS Detection for Consumer Internet of Things Devices Anomaly Detection in Computer System by Intellectual Analysis of System Journals (RUS) ↑ Books # Data Mining and Machine Learning in Cybersecurity Machine Learning and Data Mining for Computer Security Network Anomaly Detection: A Machine Learning Perspective Machine Learning and Security: Protecting Systems with Data and Algorithms Introduction To Artificial Intelligence For Security Professionals Mastering Machine Learning for Penetration Testing ↑ Talks # Using Machine Learning to Support Information Security Defending Networks with Incomplete Information Applying Machine Learning to Network Security Monitoring Measuring the IQ of your Threat Intelligence Feeds Data-Driven Threat Intelligence: Metrics On Indicator Dissemination And Sharing Applied Machine Learning for Data Exfil and Other Fun Topics Secure Because Math: A Deep-Dive on ML-Based Monitoring Machine Duping 101: Pwning Deep Learning Systems Delta Zero, KingPhish3r – Weaponizing Data Science for Social Engineering Defeating Machine Learning What Your Security Vendor Is Not Telling You CrowdSource: Crowd Trained Machine Learning Model for Malware Capability Det Defeating Machine Learning: Systemic Deficiencies for Detecting Malware Packet Capture Village – Theodora Titonis – How Machine Learning Finds Malware Build an Antivirus in 5 Min – Fresh Machine Learning #7. A fun video to watch Hunting for Malware with Machine Learning Machine Learning for Threat Detection Machine Learning and the Cloud: Disrupting Threat Detection and Prevention Fraud detection using machine learning \u0026amp; deep learning The Applications Of Deep Learning On Traffic Identification Defending Networks With Incomplete Information: A Machine Learning Approach Machine Learning \u0026amp; Data Science Advances in Cloud-Scale Machine Learning for Cyber-Defense Applied Machine Learning: Defeating Modern Malicious Documents Automated Prevention of Ransomware with Machine Learning and GPOs Learning to Detect Malware by Mining the Security Literature Clarence Chio and Anto Joseph - Practical Machine Learning in Infosecurity Advances in Cloud-Scale Machine Learning for Cyberdefense Machine Learning-Based Techniques For Network Intrusion Detection Practical Machine Learning in Infosec AI and Security AI in InfoSec Beyond the Blacklists: Detecting Malicious URL Through Machine Learning Machine Learning Fueled Cyber Threat Hunting Weaponizing Machine Learning: Humanity Was Overrated Machine Learning, Offense, and the future of Automation ↑ Tutorials # Click Security Data Hacking Project Using Neural Networks to generate human readable passwords Machine Learning based Password Strength Classification Using Machine Learning to Detect Malicious URLs Big Data and Data Science for Security and Fraud Detection Using deep learning to break a Captcha system Data mining for network security and intrusion detection An Introduction to Machine Learning for Cybersecurity and Threat Hunting Applying Machine Learning to Improve Your Intrusion Detection System Analyzing BotNets with Suricata \u0026amp; Machine Learning fWaf – Machine learning driven Web Application Firewall Deep Session Learning for Cyber Security DMachine Learning for Malware Detection ShadowBrokers Leak: A Machine Learning Approach Practical Machine Learning in Infosec - Virtualbox Image and Stuff A Machine-Learning Toolkit for Large-scale eCrime Forensics WebShells Detection by Machine Learning Building Machine Learning Models for the SOC Detecting Web Attacks With Recurrent Neural Networks ↑ Courses # Data Mining for Cyber Security by Stanford Data Science and Machine Learning for Infosec ↑ Miscellaneous # System predicts 85 percent of cyber-attacks using input from human experts A list of open source projects in cyber security using machine learning Source code about machine learning and security Source code for Mastering Machine Learning for Penetration Testing License # This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International license.\n","date":"November 9, 2018","externalUrl":null,"permalink":"/2018/11/09/awesome-machine-learning-for-cyber-security/","section":"Blog","summary":"Awesome Machine Learning for Cyber Security # A curated list of amazingly awesome tools and resources related to the use of machine learning for cyber security.\n","title":"Awesome Machine Learning for Cyber Security","type":"blog"},{"content":" My favorite movies # Wrong 2012\nMurder of a Cat 2014\nThe Voices 2014\nClue 1985\nCible émouvante 1993\nL\u0026rsquo;écume des jours 2013\nThe Little Death 2014\nRelatos salvajes 2014\nAttila Marcel 2013\nLa totale! 1991\nQuai d\u0026rsquo;Orsay 2013\n\u0026hellip;\n","date":"November 8, 2018","externalUrl":null,"permalink":"/2018/11/08/my-favorite-movies/","section":"Blog","summary":"My favorite movies # Wrong 2012\nMurder of a Cat 2014\nThe Voices 2014\n","title":"My favorite movies","type":"blog"},{"content":"##Google Interview Questions: Product Marketing Manager\nWhy do you want to join Google? \u0026ndash; Because I want to create tools for others to learn, for free. I didn\u0026rsquo;t have a lot of money when growing up so I didn\u0026rsquo;t get access to the same books, computers and resources that others had which caused money, I want to help ensure that others can learn on the same playing field regardless of their families wealth status or location.\nWhat do you know about Google’s product and technology? \u0026ndash; A lot actually, I am a beta tester for numerous products, I use most of the Google tools such as: Search, Gmaill, Drive, Reader, Calendar, G+, YouTube, Web Master Tools, Keyword tools, Analytics etc.\nIf you are Product Manager for Google’s Adwords, how do you plan to market this?\nWhat would you say during an AdWords or AdSense product seminar?\nWho are Google’s competitors, and how does Google compete with them? \u0026ndash; Google competes on numerous fields: \u0026mdash; Search: Baidu, Bing, Duck Duck Go \u0026mdash; Ads: Microsoft, Facebook, Comcast, Newspapers \u0026mdash; Social: Facebook and Twitter \u0026mdash; Mobile: Apple, Microsoft, RIM \u0026mdash; Desktop Operating System: Apple, Microsoft, Ubuntu, Fedora \u0026mdash; Office Suite: Microsoft, Open Office, Zoho \u0026mdash; TV: Apple, Microsoft, Samsung Smart TV \u0026mdash; Cable Internet: Comcast, Verizon, Time Warner, Quest/Century Link \u0026mdash; Online Videos: Vimeo, self hosted video, Apple/iTunes, Netflix, Amazon VOD \u0026mdash; Hardware: Apple, Nokia, Microsoft, HTC, Samsung, Acer, Vizio \u0026mdash; Music: Apple/iTunes, Amazon MP3, Not direct competition: Pandora, Mog, Last.fm \u0026mdash; Browsers: Microsoft IE, Firefox, Apple Safari, Opera\nHave you ever used Google’s products? Gmail? \u0026ndash; Yes, I use at least 10 Google products everyday: \u0026mdash; Gmail \u0026mdash; Google Search \u0026mdash; Google Drive \u0026mdash; Android \u0026mdash; Calendar \u0026mdash; Google+ \u0026mdash; Google Reader \u0026mdash; Chrome \u0026mdash; Google Voice \u0026mdash; YouTube\nWhat’s a creative way of marketing Google’s brand name and product? \u0026ndash; Show the power of Google\u0026rsquo;s beam tool by playing phone tag from one side of the country (USA) to the other \u0026ndash; Travel around the world and communicate with every language by using Google Translate \u0026ndash; More Television commercials since most people just don\u0026rsquo;t know about the products / features that Google offers and the TV is still the most used device which almost everyone has.\nIf you are the product marketing manager for Google’s Gmail product, how do you plan to market it so as to achieve 100 million customers in 6 months?\nHow much money you think Google makes daily from Gmail ads?\nName a piece of technology you’ve read about recently. Now tell me your own creative execution for an ad for that product.\nSay an advertiser makes $0.10 every time someone clicks on their ad. Only 20% of people who visit the site click on their ad. How many people need to - visit the site for the advertiser to make $20?\nEstimate the number of students who are college seniors, attend four-year schools, and graduate with a job in the United States every year.\n##Google Interview Questions: Product Manager\nHow would you boost the GMail subscription base? What is the most efficient way to sort a million integers? How would you re-position Google’s offerings to counteract competitive threats from Microsoft? How many golf balls can fit in a school bus? You are shrunk to the height of a nickel and your mass is proportionally reduced so as to maintain your original density. You are then thrown into an empty glass blender. The blades will start moving in 60 seconds. What do you do? How much should you charge to wash all the windows in Seattle? How would you find out if a machine’s stack grows up or down in memory? Explain a database in three sentences to your eight-year-old nephew. How many times a day does a clock’s hands overlap? You have to get from point A to point B. You don’t know if you can get there. What would you do? Imagine you have a closet full of shirts. It’s very hard to find a shirt. So what can you do to organize your shirts for easy retrieval? Every man in a village of 100 married couples has cheated on his wife. Every wife in the village instantly knows when a man other than her husband has cheated, but does not know when her own husband has. The village has a law that does not allow for adultery. Any wife who can prove that her husband is unfaithful must kill him that very day. The women of the village would never disobey this law. One day, the queen of the village visits and announces that at least one husband has been unfaithful. What happens? In a country in which people only want boys, every family continues to have children until they have a boy. If they have a girl, they have another child. If they have a boy, they stop. What is the proportion of boys to girls in the country? If the probability of observing a car in 30 minutes on a highway is 0.95, what is the probability of observing a car in 10 minutes (assuming constant default probability)? If you look at a clock and the time is 3:15, what is the angle between the hour and the minute hands? (The answer to this is not zero!) Four people need to cross a rickety rope bridge to get back to their camp at night. Unfortunately, they only have one flashlight and it only has enough light left for seventeen minutes. The bridge is too dangerous to cross without a flashlight, and it’s only strong enough to support two people at any given time. Each of the campers walks at a different speed. One can cross the bridge in 1 minute, another in 2 minutes, the third in 5 minutes, and the slow poke takes 10 minutes to cross. How do the campers make it across in 17 minutes? You are at a party with a friend and 10 people are present including you and the friend. your friend makes you a wager that for every person you find that has the same birthday as you, you get $1; for every person he finds that does not have the same birthday as you, he gets $2. would you accept the wager? How many piano tuners are there in the entire world? You have eight balls all of the same size. 7 of them weigh the same, and one of them weighs slightly more. How can you find the ball that is heavier by using a balance and only two weighings? You have five pirates, ranked from 5 to 1 in descending order. The top pirate has the right to propose how 100 gold coins should be divided among them. But the others get to vote on his plan, and if fewer than half agree with him, he gets killed. How should he allocate the gold in order to maximize his share but live to enjoy it? (Hint: One pirate ends up with 98 percent of the gold.) You are given 2 eggs. You have access to a 100-story building. Eggs can be very hard or very fragile means it may break if dropped from the first floor or may not even break if dropped from 100th floor. Both eggs are identical. You need to figure out the highest floor of a 100-story building an egg can be dropped without breaking. The question is how many drops you need to make. You are allowed to break 2 eggs in the process. Describe a technical problem you had and how you solved it. How would you design a simple search engine? Design an evacuation plan for San Francisco. There’s a latency problem in South Africa. Diagnose it. What are three long term challenges facing Google? Name three non-Google websites that you visit often and like. What do you like about the user interface and design? Choose one of the three sites and comment on what new feature or project you would work on. How would you design it? If there is only one elevator in the building, how would you change the design? How about if there are only two elevators in the building? How many vacuum’s are made per year in USA? ##Google Interview Questions: Software Engineer\nWhy are manhole covers round? \u0026ndash; Man hole covers are round because it is the only shape that cannot fit within itself. \u0026ndash; Circles are the shape which requires the least amount of material to fit a full size man/woman \u0026ndash; Circular tubes are the strongest to hold off the forces of the earth, hence cause the man hole to be circular What is the difference between a mutex and a semaphore? Which one would you use to protect access to an increment operation? A man pushed his car to a hotel and lost his fortune. What happened? \u0026ndash; He didn\u0026rsquo;t own the hotel on the monopoly board. Explain the significance of “dead beef”. Write a C program which measures the the speed of a context switch on a UNIX/Linux system. Given a function which produces a random integer in the range 1 to 5, write a function which produces a random integer in the range 1 to 7. Describe the algorithm for a depth-first graph traversal. Design a class library for writing card games. You need to check that your friend, Bob, has your correct phone number, but you cannot ask him directly. You must write a the question on a card which and give it to Eve who will take the card to Bob and return the answer to you. What must you write on the card, besides the question, to ensure Bob can encode the message so that Eve cannot read your phone number? How are cookies passed in the HTTP protocol? Design the SQL database tables for a car rental database. Write a regular expression which matches a email address. Write a function f(a, b) which takes two character string arguments and returns a string containing only the characters found in both strings in the order of a. Write a version which is order N-squared and one which is order N. You are given a the source to a application which is crashing when run. After running it 10 times in a debugger, you find it never crashes in the same place. The application is single threaded, and uses only the C standard library. What programming errors could be causing this crash? How would you test each one? Explain how congestion control works in the TCP protocol. In Java, what is the difference between final, finally, and finalize? What is multithreaded programming? What is a deadlock? Write a function (with helper functions if needed) called to Excel that takes an excel column value (A,B,C,D…AA,AB,AC,… AAA..) and returns a corresponding integer value (A=1,B=2,… AA=26..). You have a stream of infinite queries (ie: real time Google search queries that people are entering). Describe how you would go about finding a good estimate of 1000 samples from this never ending set of data and then write code for it. Tree search algorithms. Write BFS and DFS code, explain run time and space requirements. Modify the code to handle trees with weighted edges and loops with BFS and DFS, make the code print out path to goal state. You are given a list of numbers. When you reach the end of the list you will come back to the beginning of the list (a circular list). Write the most efficient algorithm to find the minimum # in this list. Find any given # in the list. The numbers in the list are always increasing but you don’t know where the circular list begins, ie: 38, 40, 55, 89, 6, 13, 20, 23, 36. Describe the data structure that is used to manage memory. (stack) What’s the difference between local and global variables? If you have 1 million integers, how would you sort them efficiently? (modify a specific sorting algorithm to solve this) In Java, what is the difference between static, final, and const. (if you don’t know Java they will ask something similar for C or C++). Talk about your class projects or work projects (pick something easy)… then describe how you could make them more efficient (in terms of algorithms). Suppose you have an NxN matrix of positive and negative integers. Write some code that finds the sub-matrix with the maximum sum of its elements. Write some code to reverse a string. Implement division (without using the divide operator, obviously). Write some code to find all permutations of the letters in a particular string. What method would you use to look up a word in a dictionary? Imagine you have a closet full of shirts. It’s very hard to find a shirt. So what can you do to organize your shirts for easy retrieval? You have eight balls all of the same size. 7 of them weigh the same, and one of them weighs slightly more. How can you fine the ball that is heavier by using a balance and only two weighings? What is the C-language command for opening a connection with a foreign host over the internet? Design and describe a system/application that will most efficiently produce a report of the top 1 million Google search requests. These are the particulars: 1) You are given 12 servers to work with. They are all dual-processor machines with 4Gb of RAM, 4x400GB hard drives and networked together.(Basically, nothing more than high-end PC’s) 2) The log data has already been cleaned for you. It consists of 100 Billion log lines, broken down into 12 320 GB files of 40-byte search terms per line. 3) You can use only custom written applications or available free open-source software. There is an array A[N] of N numbers. You have to compose an array Output[N] such that Output[i] will be equal to multiplication of all the elements of A[N] except A[i]. For example Output[0] will be multiplication of A[1] to A[N-1] and Output[1] will be multiplication of A[0] and from A[2] to A[N-1]. Solve it without division operator and in O(n). There is a linked list of numbers of length N. N is very large and you don’t know N. You have to write a function that will return k random numbers from the list. Numbers should be completely random. Hint: 1. Use random function rand() (returns a number between 0 and 1) and irand() (return either 0 or 1) 2. It should be done in O(n). Find or determine non existence of a number in a sorted list of N numbers where the numbers range over M, M\u0026raquo; N and N large enough to span multiple disks. Algorithm to beat O(log n) bonus points for constant time algorithm. You are given a game of Tic Tac Toe. You have to write a function in which you pass the whole game and name of a player. The function will return whether the player has won the game or not. First you to decide which data structure you will use for the game. You need to tell the algorithm first and then need to write the code. Note: Some position may be blank in the game। So your data structure should consider this condition also. You are given an array [a1 To an] and we have to construct another array [b1 To bn] where bi = a1a2…*an/ai. you are allowed to use only constant space and the time complexity is O(n). No divisions are allowed. How do you put a Binary Search Tree in an array in a efficient manner. Hint :: If the node is stored at the ith position and its children are at 2i and 2i+1(I mean level order wise)Its not the most efficient way. How do you find out the fifth maximum element in an Binary Search Tree in efficient manner. Note: You should not use use any extra space. i.e sorting - - Binary Search Tree and storing the results in an array and listing out the fifth element. Given a Data Structure having first n integers and next n chars. A = i1 i2 i3 … iN c1 c2 c3 … cN.Write an in-place algorithm to rearrange the elements of the array ass A = i1 c1 i2 c2 … in cn Given two sequences of items, find the items whose absolute number increases or decreases the most when comparing one sequence with the other by reading the sequence only once. Given That One of the strings is very very long , and the other one could be of various sizes. Windowing will result in O(N+M) solution but could it be better? May be NlogM or even better? How many lines can be drawn in a 2D plane such that they are equidistant from 3 non-collinear points? Let’s say you have to construct Google maps from scratch and guide a person standing on Gateway of India (Mumbai) to India Gate(Delhi). How do you do the same? Given that you have one string of length N and M small strings of length L. How do you efficiently find the occurrence of each small string in the larger one? Given a binary tree, programmatically you need to prove it is a binary search tree. You are given a small sorted list of numbers, and a very very long sorted list of numbers – so long that it had to be put on a disk in different blocks. - How would you find those short list numbers in the bigger one? Suppose you have given N companies, and we want to eventually merge them into one big company. How many ways are theres to merge? Given a file of 4 billion 32-bit integers, how to find one that appears at least twice? Write a program for displaying the ten most frequent words in a file such that your program should be efficient in all complexity measures. Design a stack. We want to push, pop, and also, retrieve the minimum element in constant time. Given a set of coin denominators, find the minimum number of coins to give a certain amount of change. Given an array, i) find the longest continuous increasing subsequence. ii) find the longest increasing subsequence. Suppose we have N companies, and we want to eventually merge them into one big company. How many ways are there to merge? Write a function to find the middle node of a single link list. Given two binary trees, write a compare function to check if they are equal or not. Being equal means that they have the same value and same structure. Implement put/get methods of a fixed size cache with LRU replacement algorithm. You are given with three sorted arrays ( in ascending order), you are required to find a triplet ( one element from each array) such that distance is minimum. Distance is defined like this : If a[i], b[j] and c[k] are three elements then distance=max(abs(a[i]-b[j]),abs(a[i]-c[k]),abs(b[j]-c[k]))” Please give a solution in O(n) time complexity How does C++ deal with constructors and deconstructors of a class and its child class? Write a function that flips the bits inside a byte (either in C++ or Java). Write an algorithm that take a list of n words, and an integer m, and retrieves the mth most frequent word in that list. What’s 2 to the power of 64? Given that you have one string of length N and M small strings of length L. How do you efficiently find the occurrence of each small string in the larger one? How do you find out the fifth maximum element in an Binary Search Tree in efficient manner. Suppose we have N companies, and we want to eventually merge them into one big company. How many ways are there to merge? There is linked list of millions of node and you do not know the length of it. Write a function which will return a random number from the list. You need to check that your friend, Bob, has your correct phone number, but you cannot ask him directly. You must write a the question on a card which and give it to Eve who will take the card to Bob and return the answer to you. What must you write on the card, besides the question, to ensure Bob can encode the message so that Eve cannot read your phone number? How long it would take to sort 1 trillion numbers? Come up with a good estimate. Order the functions in order of their asymptotic performance: 1) 2^n 2) n^100 3) n! 4) n^n There are some data represented by(x,y,z). Now we want to find the Kth least data. We say (x1, y1, z1) \u0026gt; (x2, y2, z2) when value(x1, y1, z1) \u0026gt; value(x2, y2, z2) where value(x,y,z) = (2^x)(3^y)(5^z). Now we can not get it by calculating value(x,y,z) or through other indirect calculations as lg(value(x,y,z)). How to solve it? How many degrees are there in the angle between the hour and minute hands of a clock when the time is a quarter past three? Given an array whose elements are sorted, return the index of a the first occurrence of a specific integer. Do this in sub-linear time. I.e. do not just go through each element searching for that element. Given two linked lists, return the intersection of the two lists: i.e. return a list containing only the elements that occur in both of the input lists. What’s the difference between a hashtable and a hashmap? If a person dials a sequence of numbers on the telephone, what possible words/strings can be formed from the letters associated with those numbers? How would you reverse the image on an n by n matrix where each pixel is represented by a bit? Create a fast cached storage mechanism that, given a limitation on the amount of cache memory, will ensure that only the least recently used items are discarded when the cache memory is reached when inserting a new item. It supports 2 functions: String get(T t) and void put(String k, T t). Create a cost model that allows Google to make purchasing decisions on to compare the cost of purchasing more RAM memory for their servers vs. buying more disk space. Design an algorithm to play a game of Frogger and then code the solution. The object of the game is to direct a frog to avoid cars while crossing a busy road. You may represent a road lane via an array. Generalize the solution for an N-lane road. What sort would you use if you had a large data set on disk and a small amount of ram to work with? What sort would you use if you required tight max time bounds and wanted highly regular performance. How would you store 1 million phone numbers? Design a 2D dungeon crawling game. It must allow for various items in the maze – walls, objects, and computer-controlled characters. (The focus was on the class structures, and how to optimize the experience for the user as s/he travels through the dungeon.) What is the size of the C structure below on a 32-bit system? On a 64-bit? struct foo { char a; char* b; };\n##Google Interview: Software Engineer in Test\nEfficiently implement 3 stacks in a single array. Given an array of integers which is circularly sorted, how do you find a given integer. Write a program to find depth of binary search tree without using recursion. Find the maximum rectangle (in terms of area) under a histogram in linear time. Most phones now have full keyboards. Before there there three letters mapped to a number button. Describe how you would go about implementing spelling and word suggestions as people type. Describe recursive mergesort and its runtime. Write an iterative version in C++/Java/Python. How would you determine if someone has won a game of tic-tac-toe on a board of any size? Given an array of numbers, replace each number with the product of all the numbers in the array except the number itself without using division. Create a cache with fast look up that only stores the N most recently accessed items. How to design a search engine? If each document contains a set of keywords, and is associated with a numeric attribute, how to build indices? Given two files that has list of words (one per line), write a program to show the intersection. What kind of data structure would you use to index annagrams of words? e.g. if there exists the word “top” in the database, the query for “pot” should list that. ##Google Interview: Quantitative Compensation Analyst\nWhat is the yearly standard deviation of a stock given the monthly standard deviation? How many resumes does Google receive each year for software engineering? Anywhere in the world, where would you open up a new Google office and how would you figure out compensation for all the employees at this new office? What is the probability of breaking a stick into 3 pieces and forming a triangle? Google Interview: Engineering Manager You’re the captain of a pirate ship, and your crew gets to vote on how the gold is divided up. If fewer than half of the pirates agree with you, you die. How do you recommend apportioning the gold in such a way that you get a good share of the booty, but still survive? ##Google Interview: AdWords Associate\nHow would you work with an advertiser who was not seeing the benefits of the AdWords relationship due to poor conversions? How would you deal with an angry or frustrated advertisers on the phone? ","date":"February 25, 2018","externalUrl":null,"permalink":"/2018/02/25/google-interview-questions/","section":"Blog","summary":"##Google Interview Questions: Product Marketing Manager\nWhy do you want to join Google? – Because I want to create tools for others to learn, for free. I didn’t have a lot of money when growing up so I didn’t get access to the same books, computers and resources that others had which caused money, I want to help ensure that others can learn on the same playing field regardless of their families wealth status or location.\n","title":"Google Interview Questions","type":"blog"},{"content":" russia-it-podcast # Список русскоязычных подкастов на тему информационных технологий.\nDevZen (#DevZen) site, itunes # DevZen Podcast (ранее EaxCast) — единственный подкаст на русском языке о программировании, администрировании и вообще IT, который (1) выходит каждую неделю, (2) специализируется на сильно технических темах, не \u0026ldquo;мобилках\u0026rdquo;, (3) и при этом не является узконаправленным, например, посвященным одному языку программирования или стеку технологий. За первый год своего существования у подкаста появилось более 3000 постоянных слушателей.\nВсе ведущие DevZen являются профессиональными программистами и пишут много кода каждый день. Кроме того, в выпуски регулярно приходят гости и рассказывают о своем опыте работы с теми или иными технологиями. А слушатели предлагают интересные темы при помощи комментариев на сайте. Новые выпуски записываются в субботу вечером, и публикуются в воскресенье днем.\nВедущие github twitter Александр Алексеев @afiskon @afiskon Иван Глушков @gliush @gliush Светлана Божко @SBozhko @SBozhko Валерий Мелешкин @sumerman @sum3rman Радио-Т (#radiot) site, itunes, pirates version # Разговоры на темы хайтек, высоких компьютерных технологий, гаджетов, облаков, программирования и прочего интересного из мира ИТ.\nВедущие github twitter Григорий Бакунов @bobuk @bobuk Евгений Борт @umputun @umputun Сергей Петренко @grayru @gray_ru Ксения @ksenks @ksenks GolangShow (@GolangShow, #GolangShow): site, github, itunes. # Русскоязычный подкаст о Go.\nВедущие twitter github Артём Андреенко @miolini @miolini Алексей Палажченко @paaleksey @AlekSi Слава Бахмутов @m0sth8 @m0sth8 Александр Морозов @lk4d4math @lk4d4 Елена Граховац @webdeva @rumyantseva Базовый блок: блокчейн без буллшита telegram, site, vk. # «Базовый блок» — русскоязычный технический подкаст о блокчейн-технологиях\nИнтересуетесь блокчейном, но устали от буллшита? Вам сюда. В «Базовом блоке» говорят о блокчейне по существу. Как поменялся курс за неделю? Сколько миллионов собрало последнее ICO? Пофиг! В «Базовом блоке» — только технологии. Обсудим последние усовершенствования в Биткойне и Эфириуме, свежие академические статьи и индустриальные конференции. Криптографические алгоритмы, механизмы консенсуса, языки смарт-контрактов.\nДавайте вместе разбираться, как устроен блокчейн!\nВедущие twitter github Sergei Tikhomirov @serg_tikhomirov @s-tikhomirov Без слайдов youtube. # Ведущие twitter github Alexey Fyodorov @23derevo @23derevo Бананы и Линзы site, itunes, #BananasAndLenses # Русскоязычный подкаст о Haskell и обо всём вокруг него.\nВедущие github twitter Роман Чепляка @feuerbach @shebang Денис Редозубов @dredozubov @rufuse Денис Шевченко @denisshevchenko @dshevchenko_biz EaxCast (#EaxCast) site, itunes # Подкаст делает особый акцент на \u0026ldquo;не мейнстримовых\u0026rdquo; технологиях, таких, как функциональное программирование и NoSQL базы данных. Впрочем, тематика не ограничивается исключительно этими вопросами. Подкаст публикуется эпизодами по 40-45 минут каждые две недели.\nВедущие github twitter Валерий Мелешкин @sumerman @sum3rman Александр Алексеев @afiskon @afiskon Frontflip site, itunes # Подкаст о JavaScript\u0026rsquo;e, фронтенде и сопутствующих технологиях\nВедущие github twitter Илья Заяц @somebody32 @23ydobemos Артем Сущев @H1D @asuschev RadioJS site, itunes # Подкаст о веб-разработке, фронтенде и client-side.\nВедущие github twitter Константин Буркалев @KSDaemon @KSDaemon Александр Майоров (с 41 выпуска) @frontdevops @frontdevops Миша Башкиров (до 48 выпуска) @bashmish @bashmish Андрей Саломатин (до 40 выпуска) @filipovskii @filipovskii SDCast site, itunes, #SDCast # Подкаст о разработке ПО и его окрестностях. Интервью с разработчиками и активными участниками разных сообществ, разговоры о программировании, архитектуре, open source и смежных темах.\nВедущие github twitter Константин Буркалев @KSDaemon @KSDaemon RWpod site, itunes # Подкаст про мир Ruby и Web технологии (для тех, кому нравится мыслить в Ruby стиле).\nВедущие github twitter Алексей Васильев @le0pard @leopard_me Александр Чаплинский @alchapone @a1chapone Разбор Полетов (#razborpoletov): site, fan site, github, itunes, g+, facebook. # Подкаст о технологиях и разработке программного обеспечения.\nВедущие github twitter Виктор Гамов @gAmUssA @gAmUssA Алексей Абашев @abashev @a_abashev Антон Архипов @antonarhipov @antonarhipov Кирилл Толкачёв @tolkv @lavcraft Дмитрий Чурбанов @dzmitryc @dzmitryc Антон Черноусов @golodnyj @golodnyj Барух Садогурский @jbaruch @jbaruch Sorax youtube, podcast # JavaScript, 0% воды\nВедущие github vk Артем Гринберг @artsorax @art.sorax Как делают игры (#КакДелаютИгры) site, itunes # Подкаст о создании игр.\nВедущие twitter Сергей Галёнкин @galyonkin Михаил Кузьмин @kuzmitch_ru RadioFlazm site, itunes # Подкаст про независимую разработку игр в небольших командах. Технологии, платформы, вопросы продвижения, условия работы.\nВедущие twitter Алексей Давыдов @flazm Radio QA (#radioQA) site, itunes, facebook, vk, twitter # Подкаст не только о тестировании, выходит раз в две недели\nВедущие blog Алексей Виноградов blog Андрей Мясников blog Татьяна Зинченко blog Рина Ужевко blog Сергей Атрощенков blog Сергей Нестеренко site Радиома site, youtube, itunes, rss, vk, twitter # Развлекательный IT-подкаст. Обсуждение новостей из мира ИТ.\nВедущие vk Андрей Зарубин vk Сергей Карташов site Мария Черняева Solo on .NET podfm, itunes # Подкаст про разработку программного обеспечения (программирование). Обсуждаемые темы - C#, F#, C++, .NET, Visual Studio, Java, CUDA, Xeon Phi, FPGA и многое другое.\nВедущие twitter github Дмитрий Нестерук @dnesteruk @nesteruk CTOcast (#ctocast) site, itunes, rss # Подкаст о технологиях, процессах, инфраструктуре и людях в IT-компаниях.\nВедущие twitter Facebook Александр Астапенко @aaliaksandr @astapenka Павел Павлов RubyNoName site, itunes # RubyNoName подкаст — это русскоязычный подкаст о языке Ruby и всем, что с ним связано, будь то веб-фреймворк Rails, Sinatra, очереди сообщений, базы данных или даже системы управления конфигурацией Chef или Puppet.\nВедущие github twitter Андрей Дерябин @aderyabin @aderyabin Кир Шатров @kirs @kirs uWebDesign site, itunes, rss # Подкаст uWebDesign расскажет вам обо все IT новостях за прошедшую неделю, научит делать грамотные интерфейсы и продумывать UX (User eXperience). А также поделится с вами аналитикой про Web разработку в целом и WordPress в частности.\nВедущие github twitter Александр Гончаров @websanya @websanya Никита Тарасов @justElementar DevOps Дефлопе site, itunes, rss, twitter # Русскоязычный подкаст о DevOps.\nВедущие github twitter Никита Борзых @sample @ex_sample Иван Евтухович @evtuhovich @evtuhovich Пятиминутка PHP site, itunes, rss, twitter # Еженедельный подкаст о новостях из мира PHP, интересных постах в блогах и современных подходах к разработке\nВедущие github twitter Пётр Мязин @pqr @petrmyazin Пятиминутка React site, itunes, rss, twitter # Подкаст о React и смежных технологиях в мире JavaScript\nВедущие github twitter Пётр Мязин @pqr @petrmyazin Hangops Ru site, rss # Регулярные интернет-посиделки DevOps инженеров и сочувствующих им людей.\nDrupal-подкасты site, rss, twitter # Чем мы тут занимаемся? Мы разговариваем о Drupal, делимся опытом в веб-разработке и просто общаемся как старые друзья и знакомые (как правило — так оно и есть). Эта CMS во многом влияет на нашу работу, наше хобби, наши социальные проекты. Понятно, что нам интересно все, связанное с Drupal.\nLinkMeUp site, itunes, rss, twitter # Разговаривают на темы сферы телекоммуникаций, средств и сетей связи.\nВедущие twitter habrahabr Марат aka eucariot @ieucariot @eucariot Максим aka gluck @thegluck Наталья Пуртова Александр Фатин Диалоги #поИБэ site, itunes, rss # Подкаст о высоких технологиях и кибербезопасности. Проект популяризации темы информационной безопасности в РФ.\nВедущие twitter Евгений Климов Екатерина Старостина @cyberstarcat The Art Of Programming site, itunes, rss # Подкаст о технологиях и разработке программного обеспечения.\nВедущие github twitter Антон Черноусов @golodnyj @golodnyj Веб-стандарты SoundCloud, rss, itunes # Подкаст сообщества «Веб-стандарты» с новостями фронтенда за минувшую неделю.\nВедущие github twitter Вадим Макеев @pepelsbey @pepelsbey Алексей Симоненко @meritt @simonenko Ольга Алексашенко @tachisis @tachisis Апперитив site, rss # Каждую неделю мы обсуждаем самые значительные события мобильного рынка, самые интересные новости о разработке и маркетинге, лучшие мобильные приложения и бизнес-практики в нашем подкасте.\nAndroid Dev site, itunes # В подкасте мы говорим о разработке во всех ее аспектах, от нарезки дизайна до сборки собственных прошивок. Каждый выпуск посвящен не только последним новостям из мира Android разработчиков, но и определенной теме, с которой сталкивается каждый из нас, в процессе создания приложений.\nВедущие github twitter Денис Неклюдов @nekdenis @nekdenis Александр Ефременков @iamironz @iamironz Дмитрий Полищук @dpolishuk @dpolishuk Даниил Сердюков @DanielSerdyukov @DanielSerdyukov Подкаст сайта jff.name про фриланс site, itunes, youtube # Подкаст про фриланс и все, что с ним связанно. Основная тема — иностранные биржи Upwork(oDesk, Elance).\nДве столицы site, YouTube, ВКонтакте, Telegaram # Домашний и уютный подкаст последних событий, \u0026ldquo;горячих\u0026rdquo; вопросов WEB индустрии, сайтопродвижения, IT разработки и около того. Кухонные разговоры о высоких технологиях.\nВедущие VK Facebook Дмитрий Филатов @dimaeatworld @dimaeatworld Дмитрий Борисов @Кулинар @Кулинар Откровенно про IT-карьеризм site, podfm # Откровенно про IT-карьеризм» — программа, посвященная резюме, собеседованиям, построению карьеры и просто беседах о разных IT-сферах. Программу ведут Михаил Марченко — программист, начинающий Scrum master и просто веселый человек, и его соведущая — HR-manager, бизнес-тренер, специалист по оценке и мотивации персонала Ольга Давыдова\nВедущие VK Михаил Марченко shami13 Ольга Давыдова id70969528 Ната Потапова id1245292 Анна Камонина Хекслет itunes, SoundCloud, YouTube, rss # Это соло-подкаст, темы – мысли и рассуждения о программировании, изучение идей информатики, математики, новости мира ИТ и интересные дискуссии в тусовках разработчиков.\nВедущие Twitter github Рахим Давлеткалиев @freetonik @freetonik Рунетология podfm # Аналитическая программа, гостями которой становятся топ-менеджеры крупных интернет-проектов, создатели ярких стартапов, заметные веб-предприниматели. В каждом выпуске передачи освещается бизнес-биография героя интервью и в деталях разбирается та сфера рынка, в которую он наиболее глубоко погружен.\nВедущие Facebook Twitter Максим Спиридонов Spiridonov @MaximSpiridonov AppleInsider.ru site, iTunes # Еженедельные обсуждения самых свежих новостей из мира Apple. Запись подкаста проходит в прямом эфире, каждый вторник в 21-00 по московскому времени. Для гостей доступен чат, в котором можно задать вопросы ведущим и гостям подкаста.\nВедущие Twitter Миша Королев @dudlik_spb Ренат Гришин @iprizrak Константин Ёлшин @yolshi Scalalaz site, itunes # Scalalaz - русскоязычный подкаст о Scala.\nВедущие github Алексей Романчук @13h3r Вадим Челышов @dos65 Евгений Токарев @strobe Виктор Тараненко @viktortnk Алексей Фомкин @fomkin Лучеедство site # Лучеедство - подкаст про erlang, elixir.\nTwo Devs One Ops site, rss # Two Devs One Ops - подкаст про DevOps и современный стек.\nВедущие Twitter Кирилл Толкачёв @tolkv Сергей Егоров @bsideup Алексей Абашев @a_abashev Глеб Смирнов @gvsmirnov Александр Тарасов @aatarasoff Фронтёрки site, rss, soundcloud # Подкаст про фронтенд и людей.\nВедущие github twitter Тим Маринин @marinintim @marinintim devSchacht site, soundcloud # Подкаст. Переводы. Веб-разработка.\nВедущие github twitter Роман Понаморев @maksugr @maksUgr Андрей Мелихов @amel-true @amel_true Вадим Яловенко @yalovek @yalovek Podlodka Podcast itunes, soundcloud # Podlodka (изначально задумывалось как [pod load cast]) - еженедельный (ну или почти) подкаст про мобильную разработку. Мы обсуждаем различные темы, так или иначе связанные с разработкой - архитектуру, паттерны, библиотеки, процессы разработки в различных компаниях. Подкаст еще очень молодой и мы находимся в поисках оптимального формата как для нас самих, так и для слушателей, но уже можем обещать нескольких постоянных рубрик: обсуждение актуальных новостей и ближайших событий и конференций.\nВедущие github Егор Толстой @etolstoy Стас Цыганов @DevAlloy Глеб Новик @novixon Слава + Паша site # Беседы на различные IT-темы, в основном: Java, backend, Docker, Kubernetes и мн. др. Комментарии/багрепорты можно оставлять на сайте или на гитхабе: https://github.com/php-coder/ps-podcast\nВедущие github twitter Павел Финкельштейн @asm0dey @asm0di0 Слава Семушин @php-coder @php_coder Frontend Weekend site, itunes, soundcloud # Еженедельный подкаст о новостях мира frontend-разработки и индустрии web-технологий изнутри. Обсуждаем всё: от JavaScript и CSS до митапов, конференций и работы в IT-сфере.\nВедущие VK Андрей Смирнов st1ll RawMind site, itunes # Подкаст посвящён миру IT и не только. Здесь всё с чем связана жизнь инженера. Стандартные вопросы начинающих и опыт бывалых, а некоторые выпуски просто познакомят Вас с идеями и мнениями людей о разных темах, иногда и не связанных с IT.\nВедущие twitter github Viacheslav Kovalevskyi @b0noi @b0noi Происхождение видов itunes, telegram # Подкаст о том, как и зачем люди создают компьютеры, программы и искусственный интеллект.\nВедущие telegram Станислав Протасов @sprotasov SPB Frontend. Drinkast itunes, site # Подкаст питерского сообщества фронтендеров SPB Frontend.\nФронтенд Юность (18+) itunes, soundcloud, site # Вся правда о фронтенд-разработке. Всё, о чём боятся говорить — вы услышите здесь! Смузи, вейп, ES6, REACT — вас накроет волной хайпа\nSebrant chatting itunes, site # Ведущие twitter Андрей Себрант @asebrant QA Guild Podcast soundcloud, site # Ведущие twitter Сергей Пирогов @s_pirogov ","date":"February 3, 2018","externalUrl":null,"permalink":"/2018/02/03/russia-it-podcast/","section":"Blog","summary":"russia-it-podcast # Список русскоязычных подкастов на тему информационных технологий.\nDevZen (#DevZen) site, itunes # DevZen Podcast (ранее EaxCast) — единственный подкаст на русском языке о программировании, администрировании и вообще IT, который (1) выходит каждую неделю, (2) специализируется на сильно технических темах, не “мобилках”, (3) и при этом не является узконаправленным, например, посвященным одному языку программирования или стеку технологий. За первый год своего существования у подкаста появилось более 3000 постоянных слушателей.\n","title":"it-podcast","type":"blog"},{"content":" Forths in Assembly # :star: Name / Link Lang CPU Description :sparkles: AmForth Assembly AVR, MSP430 (13 repositories) 126 pijFORTHos Assembly ARM Bare-metal FORTH operating system for Raspberry Pi 53 Swapforth Assembly J1, FT900, x64 Cross-platform 32-bit ANS Forth 44 jonesforth Assembly x86 ANS FORTH version of jonesforth 32 STM8EF Assembly STM8S eForth with extensions for $0.20 µCs 30 DCPU Assembly DCPU-16 Forth for Notch\u0026rsquo;s DCPU-16 29 CoreForth Assembly ARM Forth for the Cortex-M3 23 JonesForth-arm Assembly ARM ARM port of JonesForth 22 DurexForth Assembly 6502 Modern C64 Forth 13 asforth Assembly AVR Subroutine threaded Forth for Atmega328 9 PETTIL Assembly 6502 Forth for the Commodore PET 2001 8 FlashForth Assembly PIC, AVR Forth system for the Microchip PIC 18, 24, 30, 33 and the Atmel Atmega 8 FastForth Assembly MSP430 Forth for all MSP430 FRAM devices, with SD card FAT16/32 and much more 7 feline Assembly x64 64-bit native code Forth 200x 6 OSX-Forth Assembly x86 Forth for OSX 3 j1eforth Assembly J1 eForth for the j1 3 megaforth Assembly 68000 Forth designed for the Sega Megadrive 2 MecrispStellaris Assembly ARM Cortex Mecrisp Stellaris Forth for ARM Cortex Architectures 1 CF430R Assembly MSP430 CamelForth for MSP430 1 Mecrisp Assembly MSP430 Mecrisp Forth for MSP430 1 hForth Assembly 8086, Z80, ARM hForth for i8086, Z80 and ARM Forths in Forth # :star: Name / Link Lang CPU Description 49 lbForth Forth x86 Self-hosting metacompiled Forth, bootstrapping from a few lines of C 8 PicForth Forth PIC16 Forth cross-compiler for PIC16Fxxx 8 myforth-arduino Forth AVR Simple, non-standard, tethered Forth for the Arduino 7 m3forth Forth ARM Cross-compiler for Cortex-M3 6 cmFORTH Forth NC4016 5 FIG-Forth Forth 6502 2 sbc09 Forth Forth 6809 2 CamelForth Forth 6809 Forths in JavaScript and other scripted languages # :star: Name / Link Lang CPU Description 61 Easy Forth JavaScript Small ebook for learning Forth 4 project-k JavaScript Forth kernel in JavaScript 3 Sonnet Lua forth-like language interpreter, written in lua 3 forthlike Python A very simple Forth-like language implemented in Python 2 jeforth.3we JavaScript jeforth 3 words engine 9 TclForth Tcl/Tk Multi-OS Forth using Tcl as its native language 15 jsforth Javascript A simple Forth-like language with a web-based REPL Forths in Other Languages # :star: Name / Link Lang CPU Description 41 pForth C Portable Forth 20 Gforth C Gforth mirror 13 staapl Racket PIC18 Racket-based Forth / Macro Assembler on steroids for PIC18F 3 uForth C Very portable (embeddable) switch threaded Forth 3 rtForth Rust Forth implemented in Rust for realtime application 3 Creole Forth Pascal Scripting language in the form of a Delphi/Lazarus component ","date":"November 15, 2017","externalUrl":null,"permalink":"/2017/11/15/forth/","section":"Blog","summary":"Forths in Assembly # :star: Name / Link Lang CPU Description :sparkles: AmForth Assembly AVR, MSP430 (13 repositories) 126 pijFORTHos Assembly ARM Bare-metal FORTH operating system for Raspberry Pi 53 Swapforth Assembly J1, FT900, x64 Cross-platform 32-bit ANS Forth 44 jonesforth Assembly x86 ANS FORTH version of jonesforth 32 STM8EF Assembly STM8S eForth with extensions for $0.20 µCs 30 DCPU Assembly DCPU-16 Forth for Notch’s DCPU-16 29 CoreForth Assembly ARM Forth for the Cortex-M3 23 JonesForth-arm Assembly ARM ARM port of JonesForth 22 DurexForth Assembly 6502 Modern C64 Forth 13 asforth Assembly AVR Subroutine threaded Forth for Atmega328 9 PETTIL Assembly 6502 Forth for the Commodore PET 2001 8 FlashForth Assembly PIC, AVR Forth system for the Microchip PIC 18, 24, 30, 33 and the Atmel Atmega 8 FastForth Assembly MSP430 Forth for all MSP430 FRAM devices, with SD card FAT16/32 and much more 7 feline Assembly x64 64-bit native code Forth 200x 6 OSX-Forth Assembly x86 Forth for OSX 3 j1eforth Assembly J1 eForth for the j1 3 megaforth Assembly 68000 Forth designed for the Sega Megadrive 2 MecrispStellaris Assembly ARM Cortex Mecrisp Stellaris Forth for ARM Cortex Architectures 1 CF430R Assembly MSP430 CamelForth for MSP430 1 Mecrisp Assembly MSP430 Mecrisp Forth for MSP430 1 hForth Assembly 8086, Z80, ARM hForth for i8086, Z80 and ARM Forths in Forth # :star: Name / Link Lang CPU Description 49 lbForth Forth x86 Self-hosting metacompiled Forth, bootstrapping from a few lines of C 8 PicForth Forth PIC16 Forth cross-compiler for PIC16Fxxx 8 myforth-arduino Forth AVR Simple, non-standard, tethered Forth for the Arduino 7 m3forth Forth ARM Cross-compiler for Cortex-M3 6 cmFORTH Forth NC4016 5 FIG-Forth Forth 6502 2 sbc09 Forth Forth 6809 2 CamelForth Forth 6809 Forths in JavaScript and other scripted languages # :star: Name / Link Lang CPU Description 61 Easy Forth JavaScript Small ebook for learning Forth 4 project-k JavaScript Forth kernel in JavaScript 3 Sonnet Lua forth-like language interpreter, written in lua 3 forthlike Python A very simple Forth-like language implemented in Python 2 jeforth.3we JavaScript jeforth 3 words engine 9 TclForth Tcl/Tk Multi-OS Forth using Tcl as its native language 15 jsforth Javascript A simple Forth-like language with a web-based REPL Forths in Other Languages # :star: Name / Link Lang CPU Description 41 pForth C Portable Forth 20 Gforth C Gforth mirror 13 staapl Racket PIC18 Racket-based Forth / Macro Assembler on steroids for PIC18F 3 uForth C Very portable (embeddable) switch threaded Forth 3 rtForth Rust Forth implemented in Rust for realtime application 3 Creole Forth Pascal Scripting language in the form of a Delphi/Lazarus component ","title":"forth","type":"blog"},{"content":"Провайдеры Российской Федерации, в большинстве своем, применяют системы глубокого анализа трафика (DPI, Deep Packet Inspection) для блокировки сайтов, внесенных в реестр запрещенных. Не существует единого стандарта на DPI, есть большое количество реализации от разных поставщиков DPI-решений, отличающихся по типу подключения и типу работы.\nСуществует два распространенных типа подключения DPI: пассивный и активный.\nПассивный DPIПассивный DPI — DPI, подключенный в провайдерскую сеть параллельно (не в разрез) либо через пассивный оптический сплиттер, либо с использованием зеркалирования исходящего от пользователей трафика. Такое подключение не замедляет скорость работы сети провайдера в случае недостаточной производительности DPI, из-за чего применяется у крупных провайдеров. DPI с таким типом подключения технически может только выявлять попытку запроса запрещенного контента, но не пресекать ее. Чтобы обойти это ограничение и заблокировать доступ на запрещенный сайт, DPI отправляет пользователю, запрашивающему заблокированный URL, специально сформированный HTTP-пакет с перенаправлением на страницу-заглушку провайдера, словно такой ответ прислал сам запрашиваемый ресурс (подделывается IP-адрес отправителя и TCP sequence). Из-за того, что DPI физически расположен ближе к пользователю, чем запрашиваемый сайт, подделанный ответ доходит до устройства пользователя быстрее, чем настоящий ответ от сайта.\nВыявляем и блокируем пакеты пассивного DPIПоддельные пакеты, формируемые DPI, легко обнаружить анализатором трафика, например, Wireshark.\nПробуем зайти на заблокированный сайт:\nМы видим, что сначала приходит пакет от DPI, с HTTP-перенаправлением кодом 302, а затем настоящий ответ от сайта. Ответ от сайта расценивается как ретрансмиссия и отбрасывается операционной системой. Браузер переходит по ссылке, указанной в ответе DPI, и мы видим страницу блокировки.\nРассмотрим пакет от DPI подробнее:\nHTTP/1.1 302 Found Connection: close Location: http://warning.rt.ru/?id=17\u0026amp;st=0\u0026amp;dt=195.82.146.214\u0026amp;rs=http%3A%2F%2Frutracker.org%2F\nВ ответе DPI не устанавливается флаг «Don't Fragment», и в поле Identification указано 1. Серверы в интернете обычно устанавливают бит «Don't Fragment», и пакеты без этого бита встречаются нечасто. Мы можем использовать это в качестве отличительной особенности пакетов от DPI, вместе с тем фактом, что такие пакеты всегда содержат HTTP-перенаправление кодом 302, и написать правило iptables, блокирующее их:\n# iptables -A FORWARD -p tcp --sport 80 -m u32 --u32 \"0x4=0x10000 \u0026amp;\u0026amp; 0x60=0x7761726e \u0026amp;\u0026amp; 0x64=0x696e672e \u0026amp;\u0026amp; 0x68=0x72742e72\" -m comment --comment \"Rostelecom HTTP\" -j DROP\nЧто это такое? Модуль u32 iptables позволяет выполнять битовые операции и операции сравнения над 4-байтовыми данными в пакете. По смещению 0x4 хранится 2-байтное поле Indentification, сразу за ним идут 1-байтные поля Flags и Fragment Offset.\nНачиная со смещения 0x60 расположен домен перенаправления (HTTP-заголовок Location).\nЕсли Identification = 1, Flags = 0, Fragment Offset = 0, 0x60 = «warn», 0x64 = «ing.», 0x68 = «rt.ru», то отбрасываем пакет, и получаем настоящий ответ от сайта.\nВ случае с HTTPS-сайтами, DPI присылает TCP Reset-пакет, тоже с Identification = 1 и Flags = 0.\nАктивный DPIАктивный DPI — DPI, подключенный в сеть провайдера привычным образом, как и любое другое сетевое устройство. Провайдер настраивает маршрутизацию так, чтобы DPI получал трафик от пользователей к заблокированным IP-адресам или доменам, а DPI уже принимает решение о пропуске или блокировке трафика. Активный DPI может проверять как исходящий, так и входящий трафик, однако, если провайдер применяет DPI только для блокирования сайтов из реестра, чаще всего его настраивают на проверку только исходящего трафика.\nСистемы DPI разработаны таким образом, чтобы обрабатывать трафик с максимально возможной скоростью, исследуя только самые популярные и игнорируя нетипичные запросы, даже если они полностью соответствуют стандарту.\nИзучаем стандарт HTTPТипичные HTTP-запросы в упрощенном виде выглядят следующим образом:\nGET / HTTP/1.1 Host: habrahabr.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:49.0) Gecko/20100101 Firefox/50.0 Accept-Encoding: gzip, deflate, br Connection: keep-alive\nЗапрос начинается с HTTP-метода, затем следует один пробел, после него указывается путь, затем еще один пробел, и заканчивается строка протоколом и переносом строки CRLF.\nЗаголовки начинаются с большой буквы, после двоеточия ставится символ пробела.\nДавайте заглянем в последнюю версию стандарта HTTP/1.1 от 2014 года. Согласно RFC 7230, HTTP-заголовки не зависят от регистра символов, а после двоеточия может стоять произвольное количество пробелов (или не быть их вовсе).\nEach header field consists of a case-insensitive field name followed by a colon (\":\"), optional leading whitespace, the field value, and optional trailing whitespace. header-field = field-name \u0026quot;:\u0026quot; OWS field-value OWS field-name = token field-value = *( field-content / obs-fold ) field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ] field-vchar = VCHAR / obs-text obs-fold = CRLF 1*( SP / HTAB ) ; obsolete line folding\u0026lt;/code\u0026gt;\u0026lt;/pre\u0026gt;\u0026lt;br\u0026gt; OWS — опциональный один или несколько символов пробела или табуляции, SP — одинарный символ пробела, HTAB — табуляция, CRLF — перенос строки и возврат каретки (\\r\\n).\nЭто значит, что запрос ниже полностью соответствует стандарту, его должны принять многие веб-серверы, придерживающиеся стандарта:\nGET / HTTP/1.1 hoSt:habrahabr.ru user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:49.0) Gecko/20100101 Firefox/50.0 Accept-Encoding: gzip, deflate, br coNNecTion:\tkeep-alive ← здесь символ табуляции между двоеточием и значением\nНа деле же, многие веб-серверы не любят символ табуляции в качестве разделителя, хотя подавляющее большинство серверов нормально обрабатывает и отсутствие пробелов между двоеточием в заголовках, и множество пробелов.\nСтарый стандарт, RFC 2616, рекомендует снисходительно парсить запросы и ответы сломанных веб-северов и клиентов, и корректно обрабатывать произвольное количество пробелов в самой первой строке HTTP-запросов и ответов в тех местах, где требуется только один:\nClients SHOULD be tolerant in parsing the Status-Line and servers tolerant when parsing the Request-Line. In particular, they SHOULD accept any amount of SP or HT characters between fields, even though only a single SP is required.Этой рекомендации придерживаются далеко не все веб-серверы. Из-за двух пробелов между методом и путем ломаются некоторые сайты.\nСпускаемся на уровень TCPСоединение TCP начинается с SYN-запроса и SYN/ACK-ответа. В запросе клиент, среди прочей информации, указывает размер TCP-окна (TCP Window Size) — количество байт, которые он готов принимать без подтверждения передачи. Сервер тоже указывает это значение. В интернете используется значение MTU 1500, что позволяет отправить до 1460 байтов данных в одном TCP-пакете.\nЕсли сервер указывает размер TCP-окна менее 1460, клиент отправит в первом пакете данных столько, сколько указано в этом параметре.\nЕсли сервер пришлет TCP Window Size = 2 в SYN/ACK-пакете (или мы его изменим на это значение на стороне клиента), то браузер отправит HTTP-запрос двумя пакетами:\nПакет 1:\nGEПакет 2:T / HTTP/1.1 Host: habrahabr.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:49.0) Gecko/20100101 Firefox/50.0 Accept-Encoding: gzip, deflate, br Connection: keep-alive\nИспользуем особенности HTTP и TCP для обхода активного DPIМногие решения DPI ожидают заголовки только в стандартном виде.\nДля блокировки сайтов по домену или URI, они ищут строку \"Host: \" в теле запроса. Стоит заменить заголовок «Host» на «hoSt» или убрать пробел после двоеточия, и перед вами открывается запрошенный сайт.\nНе все DPI можно обмануть таким простым трюком. DPI некоторых провайдеров корректно анализируют HTTP-заголовки в соответствии со стандартом, но не умеют собирать TCP-поток из нескольких пакетов. Для таких DPI подойдет «фрагментирование» пакета, путем искусственного уменьшения TCP Window Size.\nВ настоящий момент, в РФ DPI устанавливают и у конечных провайдеров, и на каналах транзитного трафика. Бывают случаи, когда одним способом можно обойти DPI вашего провайдера, но вы видите заглушку транзитного провайдера. В таких случаях нужно комбинировать все доступные способы.\nПрограмма для обхода DPIЯ написал программу для обхода DPI под Windows: GoodbyeDPI.\nОна умеет блокировать пакеты с перенаправлением от пассивного DPI, заменять Host на hoSt, удалять пробел между двоеточием и значением хоста в заголовке Host, «фрагментировать» HTTP и HTTPS-пакеты (устанавливать TCP Window Size), и добавлять дополнительный пробел между HTTP-методом и путем.\nПреимущество этого метода обхода в том, что он полностью автономный: нет внешних серверов, которые могут заблокировать.\nПо умолчанию активированы опции, нацеленные на максимальную совместимость с провайдерами, но не на скорость работы. Запустите программу следующим образом:\ngoodbyedpi.exe -1 -aЕсли заблокированные сайты стали открываться, DPI вашего провайдера можно обойти.\nПопробуйте запустить программу с параметром -2 и зайти на заблокированный HTTPS-сайт. Если все продолжает работать, попробуйте режим -3 и -4 (наиболее быстрый).\nНекоторые провайдеры, например, Мегафон и Yota, не пропускают фрагментированные пакеты по HTTP, и сайты перестают открываться вообще. С такими провайдерами используйте опцию -3 -a\nЭффективное проксирование для обхода блокировок по IPВ случае блокировок по IP-адресу, провайдеры фильтруют только исходящие запросы на IP-адреса из реестра, но не входящие пакеты с этих адресов.\nПрограмма ReQrypt работает как эффективный прокси-сервер: исходящие от клиента пакеты отправляются на сервер ReQrypt в зашифрованном виде, сервер ReQrypt пересылает их серверу назначения с подменой исходящего IP-адреса на клиентский, сервер назначения отвечает клиенту напрямую, минуя ReQrypt.\nЕсли наш компьютер находится за NAT, мы не можем просто отправить запрос на сервер ReQrypt и ожидать ответа от сайта. Ответ не дойдет, т.к. в таблице NAT не создана запись для этого IP-адреса.\nДля «пробива» NAT, ReQrypt отправляет первый пакет в TCP-соединении напрямую сайту, но с TTL = 3. Он добавляет запись в NAT-таблицу роутера, но не доходит до сайта назначения.\nДолгое время разработка была заморожена из-за того, что автор не мог найти сервер с возможностью спуфинга. Спуфинг IP-адресов часто используется для амплификации атак через DNS, NNTP и другие протоколы, из-за чего он запрещен у подавляющего большинства провайдеров. Но сервер все-таки был найден, хоть и не самый удачный. Разработка продолжается.\nЗаключение и TL;DRGoodbyeDPI — программа под Windows, позволяющая обходить пассивные и активные DPI. Просто скачайте и запустите ее, и заблокированные сайты станут снова доступны.\nДля Linux есть аналогичная программа — zapret.\nИспользуйте кроссплатформенную программу ReQrypt, если ваш провайдер блокирует сайты по IP-адресу.\nОпределить тип блокировки сайтов можно программой Blockcheck. Если в тестах DPI вы видите, что сайты открываются, или видите строку «обнаружен пассивный DPI», то GoodbyeDPI вам поможет. Если нет, используйте ReQrypt.\nДополнительная полезная информация есть здесь и здесь.","date":"November 10, 2017","externalUrl":null,"permalink":"/2017/11/10/dpiblock/","section":"Blog","summary":"Провайдеры Российской Федерации, в большинстве своем, применяют системы глубокого анализа трафика (DPI, Deep Packet Inspection) для блокировки сайтов, внесенных в реестр запрещенных. Не существует единого стандарта на DPI, есть большое количество реализации от разных поставщиков DPI-решений, отличающихся по типу подключения и типу работы.\nСуществует два распространенных типа подключения DPI: пассивный и активный.\nПассивный DPIПассивный DPI — DPI, подключенный в провайдерскую сеть параллельно (не в разрез) либо через пассивный оптический сплиттер, либо с использованием зеркалирования исходящего от пользователей трафика. Такое подключение не замедляет скорость работы сети провайдера в случае недостаточной производительности DPI, из-за чего применяется у крупных провайдеров. DPI с таким типом подключения технически может только выявлять попытку запроса запрещенного контента, но не пресекать ее. Чтобы обойти это ограничение и заблокировать доступ на запрещенный сайт, DPI отправляет пользователю, запрашивающему заблокированный URL, специально сформированный HTTP-пакет с перенаправлением на страницу-заглушку провайдера, словно такой ответ прислал сам запрашиваемый ресурс (подделывается IP-адрес отправителя и TCP sequence). Из-за того, что DPI физически расположен ближе к пользователю, чем запрашиваемый сайт, подделанный ответ доходит до устройства пользователя быстрее, чем настоящий ответ от сайта.\nВыявляем и блокируем пакеты пассивного DPIПоддельные пакеты, формируемые DPI, легко обнаружить анализатором трафика, например, Wireshark.\nПробуем зайти на заблокированный сайт:\nМы видим, что сначала приходит пакет от DPI, с HTTP-перенаправлением кодом 302, а затем настоящий ответ от сайта. Ответ от сайта расценивается как ретрансмиссия и отбрасывается операционной системой. Браузер переходит по ссылке, указанной в ответе DPI, и мы видим страницу блокировки.\nРассмотрим пакет от DPI подробнее:\nHTTP/1.1 302 Found Connection: close Location: http://warning.rt.ru/?id=17\u0026st=0\u0026dt=195.82.146.214\u0026rs=http%3A%2F%2Frutracker.org%2F\nВ ответе DPI не устанавливается флаг «Don't Fragment», и в поле Identification указано 1. Серверы в интернете обычно устанавливают бит «Don't Fragment», и пакеты без этого бита встречаются нечасто. Мы можем использовать это в качестве отличительной особенности пакетов от DPI, вместе с тем фактом, что такие пакеты всегда содержат HTTP-перенаправление кодом 302, и написать правило iptables, блокирующее их:\n# iptables -A FORWARD -p tcp --sport 80 -m u32 --u32 \"0x4=0x10000 \u0026\u0026 0x60=0x7761726e \u0026\u0026 0x64=0x696e672e \u0026\u0026 0x68=0x72742e72\" -m comment --comment \"Rostelecom HTTP\" -j DROP\nЧто это такое? Модуль u32 iptables позволяет выполнять битовые операции и операции сравнения над 4-байтовыми данными в пакете. По смещению 0x4 хранится 2-байтное поле Indentification, сразу за ним идут 1-байтные поля Flags и Fragment Offset.\nНачиная со смещения 0x60 расположен домен перенаправления (HTTP-заголовок Location).\nЕсли Identification = 1, Flags = 0, Fragment Offset = 0, 0x60 = «warn», 0x64 = «ing.», 0x68 = «rt.ru», то отбрасываем пакет, и получаем настоящий ответ от сайта.\nВ случае с HTTPS-сайтами, DPI присылает TCP Reset-пакет, тоже с Identification = 1 и Flags = 0.\nАктивный DPIАктивный DPI — DPI, подключенный в сеть провайдера привычным образом, как и любое другое сетевое устройство. Провайдер настраивает маршрутизацию так, чтобы DPI получал трафик от пользователей к заблокированным IP-адресам или доменам, а DPI уже принимает решение о пропуске или блокировке трафика. Активный DPI может проверять как исходящий, так и входящий трафик, однако, если провайдер применяет DPI только для блокирования сайтов из реестра, чаще всего его настраивают на проверку только исходящего трафика.\nСистемы DPI разработаны таким образом, чтобы обрабатывать трафик с максимально возможной скоростью, исследуя только самые популярные и игнорируя нетипичные запросы, даже если они полностью соответствуют стандарту.\nИзучаем стандарт HTTPТипичные HTTP-запросы в упрощенном виде выглядят следующим образом:\nGET / HTTP/1.1 Host: habrahabr.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:49.0) Gecko/20100101 Firefox/50.0 Accept-Encoding: gzip, deflate, br Connection: keep-alive\nЗапрос начинается с HTTP-метода, затем следует один пробел, после него указывается путь, затем еще один пробел, и заканчивается строка протоколом и переносом строки CRLF.\nЗаголовки начинаются с большой буквы, после двоеточия ставится символ пробела.\nДавайте заглянем в последнюю версию стандарта HTTP/1.1 от 2014 года. Согласно RFC 7230, HTTP-заголовки не зависят от регистра символов, а после двоеточия может стоять произвольное количество пробелов (или не быть их вовсе).\nEach header field consists of a case-insensitive field name followed by a colon (\":\"), optional leading whitespace, the field value, and optional trailing whitespace. header-field = field-name \":\" OWS field-value OWS field-name = token field-value = *( field-content / obs-fold ) field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ] field-vchar = VCHAR / obs-text obs-fold = CRLF 1*( SP / HTAB ) ; obsolete line folding\u003c/code\u003e\u003c/pre\u003e\u003cbr\u003e OWS — опциональный один или несколько символов пробела или табуляции, SP — одинарный символ пробела, HTAB — табуляция, CRLF — перенос строки и возврат каретки (\\r\\n).\nЭто значит, что запрос ниже полностью соответствует стандарту, его должны принять многие веб-серверы, придерживающиеся стандарта:\n","title":"dpiblock","type":"blog"},{"content":" https://blahcat.github.io/ GitHub ❤ ~/ dwm + apple trackpad (profile.nix) xmonad gnome3 + select variation for 2 different machines (laptop vs desktop) Common searches # Setup # xmonad repos / xmonad gists / xmonad #nixos / xmonad issues gnome3 repos / gnome3 gists / gnome3 #nixos / gnome3 issues lightdm repos / lightdm gists / lightdm #nixos / lightdm issues gdm repos / gdm gists / gdm #nixos / gdm issues macbook repos / macbook gists / macbook #nixos / macbook issues lxde repos / lxde gists / lxde #nixos / lxde issues Editors # yi repos / yi gists / yi #nixos / yi issues vim repos / vim gists / vim #nixos / vim issues emacs repos / emacs gists / emacs #nixos / emacs issues Browsers # chromium repos / chromium gists / chromium #nixos / chromium issues chrome repos / chrome gists / chrome #nixos / chrome issues firefox repos / firefox gists / firefox #nixos / firefox issues Haskell # hoogle repos / hoogle gists / hoogle #nixos / hoogle issues More reading # Awesome Nix Nix Cheatsheet Where to go from here Install/remove software ","date":"November 8, 2017","externalUrl":null,"permalink":"/2017/11/08/links/","section":"Blog","summary":" https://blahcat.github.io/ GitHub ❤ ~/ dwm + apple trackpad (profile.nix) xmonad gnome3 + select variation for 2 different machines (laptop vs desktop) Common searches # Setup # xmonad repos / xmonad gists / xmonad #nixos / xmonad issues gnome3 repos / gnome3 gists / gnome3 #nixos / gnome3 issues lightdm repos / lightdm gists / lightdm #nixos / lightdm issues gdm repos / gdm gists / gdm #nixos / gdm issues macbook repos / macbook gists / macbook #nixos / macbook issues lxde repos / lxde gists / lxde #nixos / lxde issues Editors # yi repos / yi gists / yi #nixos / yi issues vim repos / vim gists / vim #nixos / vim issues emacs repos / emacs gists / emacs #nixos / emacs issues Browsers # chromium repos / chromium gists / chromium #nixos / chromium issues chrome repos / chrome gists / chrome #nixos / chrome issues firefox repos / firefox gists / firefox #nixos / firefox issues Haskell # hoogle repos / hoogle gists / hoogle #nixos / hoogle issues More reading # Awesome Nix Nix Cheatsheet Where to go from here Install/remove software ","title":"Some interesting links","type":"blog"},{"content":" Prepare my Windows workstation # Identification # Name: HP Z210 Convertible Minitower Base Model Workstation Model #: XM856AV Serial #: CZC13941PV Windows 10 \u0026ldquo;Light\u0026rdquo; # Download Windows 10 ISO tool from Microsoft\nWindows phone activation: slui.exe 4\nSettings / Privacy\nReinstall all Apps:\nGet-AppxPackage -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register \u0026#34;$($_.InstallLocation)\\AppXManifest.xml\u0026#34;} Remove an App:\nGet-AppxPackage *skypeapp* | Remove-AppxPackage :: Determines how long the system waits for services to stop after notifying the service that the system is shutting down reg ADD \u0026#34;HKLM\\SYSTEM\\CurrentControlSet\\Control\u0026#34; /v \u0026#34;WaitToKillServiceTimeout\u0026#34; /d 20000 /f :: Remove Windows Spying :: https://github.com/Nummer/Destroy-Windows-10-Spying :: Remove all built-in Apps :: http://www.thewindowsclub.com/ultimate-windows-tweaker-4-windows-10 :: Remove OneDrive reg ADD \u0026#34;HKLM\\Software\\Policies\\Microsoft\\Windows\u0026#34; /v \u0026#34;DisableFileSyncNGSC\u0026#34; /t REG_DWORD /d 1 /f taskkill /f /im OneDrive.exe %SystemRoot%\\SysWOW64\\OneDriveSetup.exe /uninstall rd \u0026#34;%UserProfile%\\OneDrive\u0026#34; /Q /S rd \u0026#34;%LocalAppData%\\Microsoft\\OneDrive\u0026#34; /Q /S rd \u0026#34;%ProgramData%\\Microsoft OneDrive\u0026#34; /Q /S rd \u0026#34;C:\\OneDriveTemp\u0026#34; /Q /S reg DELETE \u0026#34;HKCR\\CLSID\\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\u0026#34; /f reg DELETE \u0026#34;HKCR\\Wow6432Node\\CLSID\\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\u0026#34; /f :: Remove Defender :: Open Task Manager, select Startup tab, right click on \u0026#34;Windows Defender notification icon\u0026#34;, click Disable :: GPO: Computer Configuration \u0026gt; Administrative Templates \u0026gt; Windows Components \u0026gt; Windows Defender :: reg QUERY \u0026#34;HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\u0026#34; /v \u0026#34;DisableAntiSpyware\u0026#34; /d 1 /f :: C:\\Program Files\\Windows Defender\\MSASCui.exe :: https://www.raymond.cc/blog/how-to-disable-uninstall-or-remove-windows-defender-in-vista/ \u0026#34;C:\\Program Files\\Windows Defender\\mpcmdrun\u0026#34; -removedefinitions -all reg ADD \u0026#34;HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\u0026#34; /v \u0026#34;DisableAntiSpyware\u0026#34; /T REG_DWORD /d 1 /f reg ADD \u0026#34;HKLM\\SYSTEM\\CurrentControlSet\\Services\\SecurityHealthService\u0026#34; /v \u0026#34;Start\u0026#34; /d 3 /f shutdown /t 0 /r :: Reboot to KNOPPIX (hit F8-F8-F8) ntfs-3g.real /dev/sda1 /mnt mv \u0026#34;/mnt/Program Files/Windows Defender\u0026#34; \u0026#34;/mnt/Program Files/_Windows Defender\u0026#34; :: Dummy file to prevent folder recreation touch \u0026#34;/mnt/Program Files/Windows Defender\u0026#34; :: @FIXME Remove services, drivers: WdFilter.sys, WdNisDrv.sys rem sc delete WinDefend rem sc delete WdNisSvc :: Disable SSDP Discovery service (enumerates UPnP devices) sc stop SSDPSRV sc config SSDPSRV start= disabled :: Disable Remote Registry service sc stop RemoteRegistry sc config RemoteRegistry start= disabled :: Check drivers :: http://www.nirsoft.net/utils/driverview.html sc query type= driver | find \u0026#34;_NAME:\u0026#34; :: https://www.devside.net/wamp-server/opening-up-port-80-for-apache-to-use-on-windows rem netsh http show urlacl | find \u0026#34;Reserved URL\u0026#34; rem netsh http show servicestate rem net stop HTTP rem sc config HTTP start= disabled :: Check missing files Autoruns.exe :: https://support.microsoft.com/en-us/kb/929833 sfc /VERIFYONLY rem sfc /SCANNOW Windows 10 version 1607 Error code: 0x8024200D WU_E_UH_NEEDANOTHERDOWNLOAD\nHardware related software # BIOS update # HP Support\nApplications # Intel® Driver Update Utility CPUZ Disable monitoring HWMonitor S.M.A.R.T. status viewer HP SoftPaq Download Manager HP Support Assistant Fujitsu DeskUpdate Lenovo ThinkVantage System Update NVIDIA QFE driver (Quadro New Feature) DirectX Windows settings # Drive labels # label C: system label E: data Boot display # BCDEdit /set reference\nbcdedit /set quietboot on bcdedit /set sos on Hibernation # powercfg -h on :: powercfg -h off powercfg.cpl :: Power button: shutdown, Sleep button: hibernate :: Hibernate command: shutdown /t 0 /f /h Disable Windows key combinations (user) # reg ADD \u0026#34;HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\u0026#34; /v \u0026#34;NoWinKeys\u0026#34; /t REG_DWORD /d 1 /f https://support.microsoft.com/help/12445/windows-keyboard-shortcuts\nShow known file extensions (user) # reg ADD \u0026#34;HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\u0026#34; /v \u0026#34;HideFileExt\u0026#34; /t REG_DWORD /d 0 /f Don\u0026rsquo;t display delete confirmation (user) # reg ADD \u0026#34;HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\u0026#34; /v \u0026#34;ConfirmFileDelete\u0026#34; /t REG_DWORD /d 0 /f Disable NTFS last access update # If you have spinning drives.\nreg ADD \u0026#34;HKCU\\SYSTEM\\CurrentControlSet\\Control\\FileSystem\u0026#34; /v \u0026#34;NtfsDisableLastAccessUpdate\u0026#34; /t REG_DWORD /d 0 /f Disable Terminal Server aka. remote assistance # reg ADD \u0026#34;HKLM\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server\u0026#34; /v \u0026#34;fDenyTSConnections\u0026#34; /t REG_DWORD /d 1 /f Show analogue clock # reg ADD \u0026#34;HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ImmersiveShell\u0026#34; /v \u0026#34;UseWin32TrayClockExperience\u0026#34; /t REG_DWORD /d 1 /f Untrusted Font Blocking in IE # gpedit.msc / Administrative Templates / System / Mitigation Options / Untrusted Font Blocking / \u0026ldquo;Do not block untrusted fonts\u0026rdquo;\nSettings commands # Control Panel Items\nAll shell:::{ED7BA470-8E54-465E-825C-99712043E01C} Battery Saver ms-settings:batterysaver Battery Saver Settings ms-settings:batterysaver-settings Battery use ms-settings:batterysaver-usagedetails Bluetooth ms-settings:bluetooth Colors ms-settings:colors Data Usage ms-settings:datausage Date and Time ms-settings:dateandtime Closed Captioning ms-settings:easeofaccess-closedcaptioning High Contrast ms-settings:easeofaccess-highcontrast Magnifier ms-settings:easeofaccess-magnifier Narrator ms-settings:easeofaccess-narrator Keyboard ms-settings:easeofaccess-keyboard Mouse ms-settings:easeofaccess-mouse Other Options (Ease of Access) ms-settings:easeofaccess-otheroptions Lockscreen ms-settings:lockscreen * Offline maps ms-settings:maps Airplane mode ms-settings:network-airplanemode Proxy ms-settings:network-proxy VPN ms-settings:network-vpn * Notifications \u0026amp; actions ms-settings:notifications * Account info ms-settings:privacy-accountinfo Calendar ms-settings:privacy-calendar Contacts ms-settings:privacy-contacts Other Devices ms-settings:privacy-customdevices * Feedback ms-settings:privacy-feedback * Location ms-settings:privacy-location Messaging ms-settings:privacy-messaging Microphone ms-settings:privacy-microphone Motion ms-settings:privacy-motion Radios ms-settings:privacy-radios Speech, inking, \u0026amp; typing ms-settings:privacy-speechtyping Camera ms-settings:privacy-webcam Region \u0026amp; language ms-settings:regionlanguage Speech ms-settings:speech * Windows Update ms-settings:windowsupdate Work access ms-settings:workplace Connected devices ms-settings:connecteddevices For developers ms-settings:developers Display ms-settings:display Mouse \u0026amp; touchpad ms-settings:mousetouchpad Cellular ms-settings:network-cellular Dial-up ms-settings:network-dialup DirectAccess ms-settings:network-directaccess * Ethernet ms-settings:network-ethernet Mobile hotspot ms-settings:network-mobilehotspot * Wi-Fi ms-settings:network-wifi Manage Wi-Fi Settings ms-settings:network-wifisettings * Optional features ms-settings:optionalfeatures Family \u0026amp; other users ms-settings:otherusers * Personalization ms-settings:personalization Backgrounds ms-settings:personalization-background Colors ms-settings:personalization-colors Start ms-settings:personalization-start Power \u0026amp; sleep ms-settings:powersleep Proximity ms-settings:proximity Display ms-settings:screenrotation Sign-in options ms-settings:signinoptions Storage Sense ms-settings:storagesense Themes ms-settings:themes Typing ms-settings:typing Tablet mode ms-settings://tabletmode/ * Privacy ms-settings:privacy * Computer Management compmgmt.msc * Windows Features OptionalFeatures.exe (Add HyperV) * System Properties SystemPropertiesAdvanced.exe * System Performance SystemPropertiesPerformance.exe (Disable animations) * Remote Desktop (RDP) SystemPropertiesRemote.exe * Security Center wscui.cpl * Firewall Firewall.cpl * Power Settings powercfg.cpl * Certificate Manager certmgr.msc * Mouse main.cpl (Disable mouse shadow) * Time and Date timedate.cpl (Analogue clock) * Task View shell:::{3080F90E-D7AD-11D9-BD98-0000947B0257} (Virtual desktops) See also: http://ss64.com/nt/shell.html and utl\\shell-commands.cmd for shell:: commands.\nTime # Check RTC: https://toolbox.googleapps.com/apps/browserinfo/\nNetwork and ISP # IPv6 connectivity DNS resolvers NTP server Blocked SMTP port (25/TCP) BCP38 Spoofer Fonts # https://github.com/andreberg/Meslo-Font/releases (LGS=line gap small, DZ=dotted zero) http://www.fontsquirrel.com/fonts/open-sans Usage in cmd.exe:\n@FIXME HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Console\\TrueTypeFont 000=Meslo LG M DZ Regular\nCursors # Windows built-in \u0026ldquo;Large inverted\u0026rdquo; See folder: cursor OS X Yosemite for Windows/ Chrome OS OS X Yosemite Windows Updates # Disable reboot after update\nTask Scheduler Library / Microsoft / Windows / UpdateOchestrator / Reboot right-click / Disable\nreg ADD \u0026#34;HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU\u0026#34; /v \u0026#34;NoAutoRebootWithLoggedOnUsers\u0026#34; /t REG_DWORD /d 1 /f Amphetamines\nchmod -x MusNotification.exe\nWindows Update MiniTool\nApplications # Dataram RAMDisk Visual C++ Redist 2013 Precise time for Windows (ntpd) Startup Delayer 64 Notifu Keypirinha System Commands ShareX ConsoleZ Shapeshifter Caret Premium Markdown Editor WinCompose 7-zip 64 CCleaner 64 HitmanPro.Alert Second opinion behavioral based Anti-Malware, beta Kaspersky Security Scan herdProtect Portable zpaq 64 bsc 64 hubiC client Total Commander 64 IrfanView 64 DiffImg Media Player Classic - BE latest Skype Skype Utility Project Skype official full installer Portable: Skype.exe /datapath:\u0026quot;path\\to\\profiles\u0026quot; /removable During call: Call / Call Technical Info @TODO tinyssh on Cygwin Chromium 64 / NIK stable / No sync / Archive --safebrowsing-disable-auto-update --lang=en-US --no-proxy-server --disable-translate --disk-cache-size=1 https://fpdownload.adobe.com/pub/flashplayer/latest/help/install_flash_player_ppapi.exe https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm https://chrome.google.com/webstore/detail/tag-assistant-by-google/kejbdjndbnbjgmefkgdddjlbokphdefk https://chrome.google.com/webstore/detail/google-analytics-debugger/jnkmfdileelhofjcijamephohjechhna https://chrome.google.com/webstore/detail/fb-pixel-helper/fdgfkebogiimcoedlicjlajpkdmockpc https://chrome.google.com/webstore/detail/seoquake/akdgnmcogleenhbclghghlkkdndkjdjc https://chrome.google.com/webstore/detail/wappalyzer/gppongmhjkpfnbhagpmjfkannfbllamg https://chrome.google.com/webstore/detail/project-naptha/molncoemjfmpgdkbdlbjmhlcgniigdnf UltraVNC 64 Listen on port 5500 UltraVNC SC TeamViewer full version Meneré Feedly reader todotxt winui, cli Libre Office 64 MuseScore 32 Miranda NG 64 SkypeWeb protocol GIMP 64 Inkspace 64 RealWolrd Paint Adobe PSE PDF-XChange Viewer Some PDF Images Extract Open Broadcaster Software Sizer Also on http://mirror.szepe.net/software/\nAlert on Event log errors # Scheduled task import: Task-Event log alert.xml\nExclude \u0026ldquo;DistributedCOM 10016\u0026rdquo;\n\u0026lt;Suppress Path=\u0026#34;Application\u0026#34;\u0026gt;*[System[(EventID=10016)]]\u0026lt;/Suppress\u0026gt; \u0026lt;Suppress Path=\u0026#34;Security\u0026#34;\u0026gt;*[System[(EventID=10016)]]\u0026lt;/Suppress\u0026gt; \u0026lt;Suppress Path=\u0026#34;Setup\u0026#34;\u0026gt;*[System[(EventID=10016)]]\u0026lt;/Suppress\u0026gt; \u0026lt;Suppress Path=\u0026#34;System\u0026#34;\u0026gt;*[System[(EventID=10016)]]\u0026lt;/Suppress\u0026gt; \u0026lt;Suppress Path=\u0026#34;ForwardedEvents\u0026#34;\u0026gt;*[System[(EventID=10016)]]\u0026lt;/Suppress\u0026gt; wevtutil qe Application \u0026#34;/q:*[System[(Level=1 or Level=2 or Level=3)]]\u0026#34; /f:text /rd:true /c:1 wevtutil qe Security \u0026#34;/q:*[System[(Level=1 or Level=2 or Level=3)]]\u0026#34; /f:text /rd:true /c:1 wevtutil qe Setup \u0026#34;/q:*[System[(Level=1 or Level=2 or Level=3)]]\u0026#34; /f:text /rd:true /c:1 wevtutil qe System \u0026#34;/q:*[System[(Level=1 or Level=2 or Level=3)]]\u0026#34; /f:text /rd:true /c:1 wevtutil qe ForwardedEvents \u0026#34;/q:*[System[(Level=1 or Level=2 or Level=3)]]\u0026#34; /f:text /rd:true /c:1 Google Chrome portable 64 bit # http://portableapps.com/apps/internet/google_chrome_portable / 64 bit Extract with 7-Zip File Manager find \u0026quot;DownloadURL=\u0026quot; App\\AppInfo\\installer.ini wget %DownloadURL% 7za e *_chrome_installer.exe 7za x chrome.7z Virtualize Windows applications # http://www.cameyo.com/ (Windows Server) https://www.rollapp.com/ (Ubuntu) https://turbo.net/ (WINE) /usr/bin on Windows # Create folder and prepend to PATH\nPrepend: %SystemDrive%\\usr\\bin;\nmkdir %SystemDrive%\\usr\\bin SystemPropertiesAdvanced.exe Wget # Binary: https://eternallybored.org/misc/wget/\nMozilla CA certificate store: https://curl.haxx.se/ca/cacert.pem\nCA download # :: Download deb package from https://packages.debian.org/stable/all/ca-certificates/download 7za e -t# \u0026#34;./ca-certificates_*_all.deb\u0026#34; \u0026#34;4.xz\u0026#34; 7za e \u0026#34;4.xz\u0026#34; 7za e -o.\\bundle \u0026#34;4\u0026#34; \u0026#34;.\\usr\\share\\ca-certificates\\mozilla\\*.crt\u0026#34; type \u0026#34;.\\bundle\\*.crt\u0026#34; \u0026gt; \u0026#34;C:\\usr\\bin\\ca-certificates.crt\u0026#34; del /Q \u0026#34;ca-certificates_*_all.deb\u0026#34; \u0026#34;4.xz\u0026#34; \u0026#34;4\u0026#34; \u0026#34;bundle\u0026#34; ## C:\\usr\\bin\\.wgetrc ca-certificate = C:/usr/bin/ca-certificates.crt content-disposition = on #default: ca-certificate = c:/ssl/ssl/cert.pem #http_proxy = http://192.168.2.161:8080/ #server_response = on #verbose = on Replace Microsoft CA certificates # wget -nv -O- https://curl.haxx.se/ca/cacert.pem \\ | csplit --suppress-matched --elide-empty-files --silent -f \u0026#34;ca-\u0026#34; -b \u0026#34;%03d.crt\u0026#34; - \u0026#39;/^$/\u0026#39; \u0026#39;{*}\u0026#39; rm -f ca-000.crt unix2dos *.crt :: Certificates / Computer account mmc FOR %%C IN (ca*.crt) DO ( certutil -addstore \u0026#34;Root\u0026#34; \u0026#34;%%C\u0026#34; IF ERRORLEVEL 1 PAUSE ) OpenSSL # https://indy.fulgan.com/SSL/ ZIP: openssl-*-x64_86-win64.zip C:\\usr\\openssl\\\necho CAfile = C:/usr/bin/cacert.pem\u0026gt; C:\\usr\\openssl\\openssl.cnf\nKeePass # Binary: http://keepass.info/download.html C:\\usr\\keepass\\\nTools / Options / Security / Enter Master Key on Secure Desktop cacls auth-data.kdbx /P PC\\User:F\nTools / Options / Advanced tab / Automatically save database on exit and workspace locking\nTools / Options / Integration tab / URL overrides\u0026hellip;\nlftp: cmd://cmd.exe /C \u0026quot;echo lftp -e 'set ftp:ssl-allow 0;' -u '{USERNAME},{PASSWORD}' ftp://{BASE:HOST} \u0026amp;\u0026amp; pause\u0026quot; sshp: cmd://putty.exe -ssh -P {BASE:PORT} {USERNAME}@{BASE:RMVSCM} rdp: cmd://mstsc.exe /v:{BASE:RMVSCM} Plugins # C:\\usr\\keepass\\Plugins\\\nKeeAgent (SSH agent) KeeOtp (TOTP 2FA) Readable Passphrase Generator (XKCD-style passwords) IOProtocolExt (SCP, SFTP, FTPS) KeeCloud (S3, Azure Blob, Dropbox) QR code reader with webcam # bcWebCam .NET\nPutty # cd \\usr\\bin wget -nv -N http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe wget -nv -N http://the.earth.li/~sgtatham/putty/latest/x86/pscp.exe wget -nv -N http://the.earth.li/~sgtatham/putty/latest/x86/puttygen.exe wget -nv -N https://github.com/altercation/solarized/raw/master/putty-colors-solarized/solarized_dark.reg wget -nv -N https://github.com/altercation/solarized/raw/master/putty-colors-solarized/solarized_light.reg Alternatives\nhttps://puttytray.goeswhere.com/ PuTTYtray http://www.fosshub.com/KiTTY.html (Cygterm) http://www.extraputty.com/download.php https://github.com/Maximus5/ConEmu/releases Firefox Developer Edition # See: ff-dev\nFlash player\nBookmarks for Launchy: browser.bookmarks.autoExportHTML = true\nFullscreen screenshot: Shift + F2 screenshot --fullpage --clipboard\nWeb Developer extension: https://addons.mozilla.org/en-US/firefox/addon/web-developer/\nKeypirinha # Profile\\User\\Keypirinha.ini\n[app] launch_at_startup = yes hotkey_run = Alt+F1 [gui] always_on_top = yes hide_on_focus_lost = immediate retain_last_search = yes escape_always_closes = yes show_on_taskbar = no show_scores = no show_history_hits = no Virtualization # Hyper-V: enable in BIOS, bcdedit /set hypervisorlaunchtype Auto , virtmgmt.msc VMware Workstation Player VirtualBox installer Desktop malware cleaning # HitmanPro.Alert \u0026amp; herdProtect\nNoVirusThanks tools\nCryptoPrevent\nAdwCleaner\nMalwarebytes Anti-Malware\nZemana AntiMalware\nBitdefender Adware Removal Tool\nBulk Crap Uninstaller BCUninstaller source\nMalwarebytes Anti-Rootkit Beta\nKaspersky TDSSKiller\nhttps://www.sophos.com/products/free-tools/sophos-anti-rootkit.aspx\nhttps://www.barkly.com/stackhackr\nCygwin # Create vdisk in diskpart # rem In cmd.exe: mkdir C:\\cygwin2 create vdisk file=\u0026#34;e:\\cygwin64.vhd\u0026#34; maximum=20000 attach vdisk create partition primary assign mount=\u0026#34;C:\\cygwin2\u0026#34; format label=\u0026#34;Cygwin2\u0026#34; quick Cygwin 64 bit setup # :: Cygwin vdisk script --- cyg-disk.dpt --- select vdisk file=\u0026#34;e:\\cygwin64.vhd\u0026#34; attach vdisk rem select vdisk file=\u0026#34;e:\\cygwin64.vhd\u0026#34; rem detach vdisk :: Mount Cygwin vdisk --- cygpart-mount.cmd --- @diskpart /s \u0026#34;C:\\usr\\bin\\cyg-disk.dpt\u0026#34; Shortcut target # :: Start Cygwin terminal C:\\cygwin2\\bin\\mintty.exe -i /Cygwin-Terminal.ico - Associate .dpt extension # ftype DiskPartScript=diskpart.exe /s %1 assoc .dpt=DiskPartScript Install apt-cyg # wget -nv -P /usr/local/sbin \u0026#34;https://github.com/transcode-open/apt-cyg/raw/master/apt-cyg\u0026#34; chmod +x /usr/local/sbin/apt-cyg Cygwin/X (XWin) # xorg-server xinit Application example: fontforge\nConnect to remote X11: cygwin$ ssh -CXY user@example.com\nAlso: https://sourceforge.net/projects/vcxsrv/\nBackup steps # Run backup-workstation.cmd on Windows shutdown Have hubiC client back it up daily, keep 10 versions Remove unused drivers @yearly # set \u0026#34;DEVMGR_SHOW_NONPRESENT_DEVICES=1\u0026#34; devmgmt.msc :: View / Show hidden devices Computer shops # http://www.mindenolcso.hu/hasznalt-szamitogep.html http://www.mindenolcso.hu/hasznalt-monitor.html http://www.marseus.hu/hu/memoria/szerver/ http://microstore.hu/index.php?manufacturer_id[]=503\u0026path=20_94\u0026route=product%2Fcategory ","date":"November 5, 2017","externalUrl":null,"permalink":"/2017/11/05/winworkstation/","section":"Blog","summary":"Prepare my Windows workstation # Identification # Name: HP Z210 Convertible Minitower Base Model Workstation Model #: XM856AV Serial #: CZC13941PV Windows 10 “Light” # Download Windows 10 ISO tool from Microsoft\n","title":"Prepare my Windows workstation","type":"blog"},{"content":" Тот самый Мюнхгаузен (1979)10\nОбыкновенное чудо (1978)10\nКонцерт (2009)9\nБлагочестивая Марта (1980)9\nБриллиантовая рука (1968)9\nОсторожно, бабушка! (1961)9\nИван Васильевич меняет профессию (1973)9\nМедведь (1938)9\nО бедном гусаре замолвите слово (1980)9\nНе шутите с Зоханом (2008)9\nПокровские ворота (1982)8\nПо семейным обстоятельствам (1978)8\nОдиноким предоставляется общежитие (1983)8\nПодкидыш (1939)8\nДень сурка (1993)8\nПолосатый рейс (1961)8\nШрек (2001)8\nСердца четырех (1941)8\nСлужебный роман (1977)8\nВас ожидает гражданка Никанорова (1978)8\nСтарики-разбойники (1971)8\nВерные друзья (1954)8\nДевчата (1961)8\nРодня (1981)8\nФормула любви (1984)8\nЭкипаж (1979)8\nКлассик (1998)8\nВлюблен по собственному желанию (1982)8\nМужики (1981)8\nФоррест Гамп (1994)8\nМы из джаза (1983)8\nНеподдающиеся (1959)8\nКандагар (2009)8\nАфоня (1975)7\nИстория кота со всеми вытекающими последствиями (1999)7\nАх водевиль водевиль (1980)7\nПятый элемент (1997)7\nКарнавал (1981)7\nКарнавальная ночь (1956)7\nСамая обаятельная и привлекательная (1985)7\nМачеха (1998)7\nБудьте моим мужем (1981)7\nУкротительница тигров (1954)7\nЧеловек-амфибия (1961)7\nВесна на Заречной улице (1956)7\nВокзал для двоих (1982)7\nВыйти замуж за капитана (1985)7\nИнтердевочка (1989)7\nГде находится нофелет? (1987)7\nНевероятные приключения итальянцев в России (1973)7\nУгнать за 60 секунд (2000)7\nБлондинка за углом (1984)7\nДевушка без адреса (1957)7\nСладкая женщина (1977)7\nЖандарм из Сен-Тропе (1964)7\nЖенитьба Бальзаминова (1964)7\nОдин дома 2: Потерянный в Нью-Йорке (1992)7\nЗабытая мелодия для флейты (1987)7\nЗимний вечер в Гаграх (1985)7\nКоролева бензоколонки (1962)7\nОдин дома (1990)7\nКоролевство кривых зеркал (1964)7\nУсатый нянь (1977)7\n38 попугаев. Зарядка для хвоста (1979)7\nКрошка Енот (1974)7\nОдинокая женщина желает познакомиться (1986)7\nНяня (1999)6\nПриключения Буратино (1975)6\nТри плюс два (1963)6\nТри толстяка (1966)6\nТридцать три (1965)6\nТрудный ребенок 2 (1991)6\nГаннибал (2001)6\nКорона Российской империи или Снова неуловимые (1971)6\nКурьер (1986)6\nХроники Риддика (2004)6\nГадкий утёнок (1956)6\nДневной Дозор (2005)5\nСвадебный переполох (2001)5\nАмели (2001)5\nДвенадцать месяцев (1973)5\nНочной Дозор (2004)5\nМисс Конгениальность (2000)5\nЧего хотят женщины (2000)5\nТитаник (1997)5\nЭффект бабочки (2003)5\nМатрица (1999)5\nВластелин колец 2: Две крепости (2002)5\nУбрать перископ (1996)5\nВластелин колец 3: Возвращение Короля (2003)5\nКудряшка Сью (1991)5\nЛюбимая женщина механика Гаврилова (1981)5\nКлуб первых жен (1996)5\nЕсли свекровь - монстр (2005)5\nЛюди в черном (1997)5\nАвария - дочь мента (1989)5\nВластелин колец: Братство кольца (2001)5\nАлые паруса (1961)5\nДюна (1984)4\nПираты Карибского моря 2: Сундук мертвеца (2006)4\nлюди Икс (2000)3Гарри Поттер и Орден Феникса (2007)3\nПатриот (1998)3\nГарфилд (2004)3\nСтрасти Христовы (2004)3\nВан Хельсинг (2004)3\nЗвездные войны: Эпизод 1 - Скрытая угроза (1999)3\nЭдди (1998)3\nЗвездные войны: Эпизод 2 - Атака клонов (2002)3\nТроя (2004)2\nУбить Билла (2003)2\nУбить Билла 2 (2004)2\nТакси 4 (2007)2\nЛара Крофт: Расхитительница гробниц (2001)1\n","date":"August 31, 2017","externalUrl":null,"permalink":"/2017/08/31/nedaigne/","section":"Blog","summary":" Тот самый Мюнхгаузен (1979)10\nОбыкновенное чудо (1978)10\nКонцерт (2009)9\nБлагочестивая Марта (1980)9\nБриллиантовая рука (1968)9\nОсторожно, бабушка! (1961)9\nИван Васильевич меняет профессию (1973)9\nМедведь (1938)9\n","title":"nedaigne","type":"blog"},{"content":" Враг мой(1985)10\nБоги наверное сошли с ума(1980)10\nФутурама: В дикую зеленую даль(2009)10\nДругие ипостаси(1980)9\nЗвездные войны: Эпизод 6 - Возвращение Джедая(1983)9\nМалавита(2013)9\nПатруль времени(2013)9\nАватар(2009)9\nДень сурка(1993)9\nБоевой конь(2011)9\nАвтостопом по галактике(2005)9\nЖизнь Пи(2012)8\nИллюзия обмана(2013)8\nРеквием по мечте(2000)8\nПосле нашей эры(2013)8\nМаугли. Последняя охота Акелы(1969)8\nМаугли. Битва(1970)8\nМаугли(1967)8\nЧужой(1979)8\nМаугли. Возвращение к людям(1971)8\nАноним(2011)8\nСлезы стали(2012)8\nТри богатыря на дальних берегах(2012)8\nВластелин колец 2: Две крепости(2002)8\nСемейка Аддамс(1991)8\nДух времени: Приложение(2008)8\nИгра Эндера(2013)8\nХрабрые перцем(2010)8\nКриминальное чтиво(1994)8\nУльтиматум Борна(2007)8\nОбливион(2013)8\nЛол (Ржунимагу)(2008)8\nПришельцы 2: Коридоры времени(1998)8\n1+1(2011)8\nЕжик в тумане(1975)8\nДевчата(1961)7\nХоббит: Нежданное путешествие(2012)7\nТрудно быть Богом(2013)7\nРонал-варвар(2011)7\nСолярис(1972)7\nКонстантин: повелитель тьмы(2005)7\nХроники Нарнии: Лев Колдунья и Волшебный Шкаф(2005)7\nНочной Дозор(2004)7\nОсобенности национальной рыбалки(1997)7\nЭффект бабочки 2(2006)7\nЕвгений Гришковец. Одновременно(2004)7\n99 франков(2007)7\nЛюди в черном(1997)7\nОбитаемый остров(2008)7\nУбить Билла(2003)7\nГарри Поттер и Принц-полукровка(2009)6\nСимпсоны в кино(2007)6\nОз: Великий и Ужасный(2013)6\nДевушка которая играла с огнем(2009)6\nМоя Госпожа(2013)6\nМогила светлячков(1988)6\nГравитация(2013)6\nМеланхолия(2011)6\nСволочи(2006)6\nСекс в большом городе 2(2010)3\nВысоцкий: Спасибо, что живой(2011)3\nДружинники(2012)5\nТитаник(1997)4\nЖелезное небо(2012)5\nМуви 43(2013)5\nПыль(2005)5\nСумерки. Сага. Новолуние(2009)1\nПила 5(2008)1\nГруз 200(2007)1\nСудная ночь(2013)Нет оценки\nЛучшее предложение(2012)Мне интересно\nСтражи Галактики(2014)Мне интересно\nЖизнь Адель(2013)Мне интересно\nМизинец Будды(2013)Мне интересно\nМашина Джейн Мэнсфилд(2012)Мне интересно\n300 спартанцев: Расцвет империи(2013)Мне интересно\nСтарый Брехун(1957)Мне интересно\nОтель «Гранд Будапешт»(2014)\nТеорема Зеро(2013)Мне интересно\nПревосходство(2014)Мне интересно\nГрязь(2013)Мне интересно\nБесконечно белый медведь(2014)Мне интересно\nГолый завтрак(1991)Мне интересно\nГолодные игры: И вспыхнет пламя(2013)Мне интересно\nКак приручить дракона(2010)Мне интересно\nБеглецы(1986)Мне интересно\nПапаши(1983)Мне интересно\n","date":"August 10, 2017","externalUrl":null,"permalink":"/2017/08/10/imhonet/","section":"Blog","summary":" Враг мой(1985)10\nБоги наверное сошли с ума(1980)10\nФутурама: В дикую зеленую даль(2009)10\nДругие ипостаси(1980)9\nЗвездные войны: Эпизод 6 - Возвращение Джедая(1983)9\nМалавита(2013)9\nПатруль времени(2013)9\nАватар(2009)9\n","title":"imhonet is dead","type":"blog"},{"content":" Migrate a code repository from SourceForge (SVN) to Github (GIT) # To do a migration you will need a system that allows you to install Ruby, Ruby Gems and Git. We are running the entire process on a CentOS 6 box (YMMV).\nPreparation\nInstall svn2git. Need to be administrator or have sudo rights. Install the following libraries svn, git, git-svn, ruby and rubygems\nyum install svn git git-svn ruby rubygems Install svn2git\ngem install svn2git Also check that you can run svn2git (i.e. svn2git is in the PATH). If it is not run the following command\nln -s /usr/lib/ruby/gems/1.8/gems/svn2git-2.2.1/bin/svn2git /usr/bin/svn2git Fix up steps. Skip this step. You only need to come back to this if you have issues in the installation/implementation. FIX1: Issue with running command git config --local svn.authorsfile {path-to-authors-file}. The issue here is that some \u0026ldquo;git config\u0026rdquo; installations cannot interpret the \u0026ndash;local parameter. Locate the file migration.rb\nmay be located in /usr/lib/ruby/gems/1.8/gems/svn2git-2.2.1/lib/svn2git/migration.rb look for any line that has the text \u0026ldquo;\u0026ndash;local\u0026rdquo; and delete it so:\nrun_command(\u0026quot;git config \u0026lt;b\u0026gt;--local\u0026lt;/b\u0026gt; svn.authorsfile #{authors}\u0026quot;) unless authors.nil? will change to (note: you are just deleting the \u0026ldquo;\u0026ndash;local\u0026rdquo; parameter only): run_command(\u0026quot;git config svn.authorsfile #{authors}\u0026quot;) unless authors.nil? FIX2: Issue with Use of uninitialized value $u When you get the error is may look like this\nUse of uninitialized value $u in substitution (s///) at /usr/lib/git-core/git-svn line 1728.\nUse of uninitialized value $u in concatenation (.) or string at /usr/lib/git-core/git-svn line 1728.\nrefs/remotes/svn/trunk: '#############################' not found in '' Locate the git-svn perl script\nmay be located in ``/usr/libexec/git-core/git-svn Go to the line (in the example above #1728) and change the following lines:\n$u =~ s!^\\Q$url\\E(/|$)!! or die\n\u0026quot;$refname: '$url' not found in '$u'\\n\u0026quot;; to if(!$u) {\n$u = $pathname;\n} else {\n$u =~ s!^\\Q$url\\E(/|$)!! or die\n\u0026quot;$refname: '$url' not found in '$u'\\n\u0026quot;;\n} Installation Steps\nIn your home directory create a folder and give it a name that related to the project\nmkdir ~/myproject_svn Go to the directory you just created\ncd ~/myproject_svn Copy the project from sourceforge using rsync\n$ rsync -av {project name}.svn.sourceforge.net::svn/{project name}/* .\ne.g. $ rsync -av myproject.svn.sourceforge.net::svn/myproject/* . Generate the authors list from the SVN repository (this list can be placed in any folder, so I put it in the home directory)\n$ svn log -q https://myproject.svn.sourceforge.net/svnroot/myproject | awk -F '|' '/^r/ {sub(\u0026quot;^ \u0026quot;, \u0026quot;\u0026quot;, $2); sub(\u0026quot; $\u0026quot;, \u0026quot;\u0026quot;, $2); print $2\u0026quot; = \u0026quot;$2\u0026quot; \u0026lt;\u0026quot;$2\u0026quot;\u0026gt;\u0026quot;}' | sort -u \u0026gt; ~/authors.txt What you get as an authors file should look like this:\nsomebody1 = somebody1 \u0026lt;somebody1\u0026gt;\nsomebody2 = somebody2 \u0026lt;somebody2\u0026gt;\n.... Simply replace the last two fields with the appropriate entries like this:\nsomebody1 = John Doe \u0026lt;john.doe@test.com\u0026gt;\nsomebody2 = John Alexender \u0026lt;alex@smellyfoot.org\u0026gt;\n.... Create a new directory for the Git repository and initialize it\nmkdir ~/myproject\ncd ~/myproject\ngit init Run the svn2git command while in the git repository directory you just created\n$ svn2git file:///home/mickymouse/myproject_svn/ --authors ~/authors.txt -v if your trunk, branches and tags are not in the root folder of your SVN repository, you will need to specify them like this: $ svn2git file:///home/mickymouse/myproject_svn/ --trunk {path/to/trunk} --branches {path/to/branches} --tags {path/to/tags} --authors ~/authors.txt -v\ne.g. $ svn2git file:///home/mickymouse/myproject_svn/ --trunk sparql/trunk --branches sparql/branches --tags sparql/tags --authors ~/authors.txt -v For other ways you can run the svn2git command check here: [https://github.com/nirvdrum/svn2git/blob/master/README.markdown](https://github.com/nirvdrum/svn2git/blob/master/README.markdown). Note: The -v is used so that you can see a better description of your errors 1\\. If you get an error that has to do with this command: `git config --local svn.authorsfile {path-to-authors-file}`, see FIX1 in the Preparation section above. 2\\. If you get an error that has to do with this command: `Use of uninitialized value $u`, see FIX2 in Preparation section above. If you want to check that the number of commits in the new git repo is the same as the SVN repo, run the following commands.\n$ svn log -q | grep '^r[0-9]' | wc -l (count subversion revisions) $ git log --oneline | wc -l (count git commits) Create the Github repository online and add the remote information to your local repository and push the code to Github.\n$ git remote add origin https://github.com/user/repo.git# Set a new remote and verify by running the following:\n$ git remote -v# Verify new remote\n# origin https://github.com/user/repo.git (fetch)\n# origin https://github.com/user/repo.git (push) That is it. Something else that might be nice to do is redirect all the user that go to SourceForge to the new git repository. Log into SourceForge and go to Project Admin -\u0026gt; Feature Settings. Select **Manage **next to Subversion and go to Non-SF.net Resource (Active). This page allows you to leave a short message and a link to the new project page. ","date":"July 28, 2017","externalUrl":null,"permalink":"/2017/07/28/svn2git/","section":"Blog","summary":"Migrate a code repository from SourceForge (SVN) to Github (GIT) # To do a migration you will need a system that allows you to install Ruby, Ruby Gems and Git. We are running the entire process on a CentOS 6 box (YMMV).\n","title":"Migrate a code repository from SourceForge (SVN) to Github (GIT)","type":"blog"},{"content":"###Index\nСписки книг Language Agnostic Bash CoffeeScript Git JavaScript LaTeX Lisp MetaPost Node.js NoSQL Perl R Ruby RSpec Ruby on Rails Scilab SQL Параллельные технологии ###Language Agnostic\nScrum и XP: заметки с передовой ###Bash\nAdvanced Bash-Scripting Guide ###CoffeeScript\nДокументация CoffeeScript ###JavaScript\nСовременный учебник JavaScript JavaScript Garden ###Git\nВолшебство Git Pro Git ###LaTeX\nLaTeX, GNU/Linux и русский стиль (сборник статей) ###Lisp\nLisp In Small Pieces (translation) ###MetaPost\nСоздание иллюстраций в MetaPost ###Node.js\nNode.js для начинающих ###NoSQL\nМаленькая книга о MongoDB Маленькая книга о Redis ###Perl\nPragmatic Perl (журнал) ###R\nАнализ данных с R Рандомизация и бутстреп: статистический анализ в биологии и экологии с использованием R. (PDF) ###Ruby\nКруглов А. — Ruby ###RSpec\nBetter Specs (RSpec Guidelines with Ruby) ###Ruby on Rails\nRuby on Rails Guides Ruby on Rails Tutorial ###Scilab\nВведение в Scilab Программирование в Scilab ###SQL\nРабота с PostgreSQL: настройка и масштабирование История о PostgreSQL ###Parallel\nПараллельные технологии ","date":"June 15, 2017","externalUrl":null,"permalink":"/2017/06/15/free-programming-books/","section":"Blog","summary":"###Index\nСписки книг Language Agnostic Bash CoffeeScript Git JavaScript LaTeX Lisp MetaPost Node.js NoSQL Perl R Ruby RSpec Ruby on Rails Scilab SQL Параллельные технологии ###Language Agnostic\n","title":"Free Programming Books","type":"blog"},{"content":" OnionShare # OnionShare lets you securely and anonymously share files of any size. It works by starting a web server, making it accessible as a Tor onion service, and generating an unguessable URL to access and download the files. It doesn\u0026rsquo;t require setting up a server on the internet somewhere or using a third party file-sharing service. You host the file on your own computer and use a Tor onion service to make it temporarily accessible over the internet. The other user just needs to use Tor Browser to download the file from you.\nTo learn how OnionShare works, what its security properties are, and how to use it, check out the wiki.\nYou can download OnionShare for Windows and macOS from https://onionshare.org/. It should be available in your package manager for Linux, and it\u0026rsquo;s included by default in Tails.\nYou can set up your development environment to build OnionShare yourself by following these instructions.\n","date":"June 7, 2017","externalUrl":null,"permalink":"/2017/06/07/onionshare/","section":"Blog","summary":"OnionShare # OnionShare lets you securely and anonymously share files of any size. It works by starting a web server, making it accessible as a Tor onion service, and generating an unguessable URL to access and download the files. It doesn’t require setting up a server on the internet somewhere or using a third party file-sharing service. You host the file on your own computer and use a Tor onion service to make it temporarily accessible over the internet. The other user just needs to use Tor Browser to download the file from you.\n","title":"OnionShare","type":"blog"},{"content":" Linux System Administrator/DevOp Interview Questions # A collection of linux sysadmin/devop interview questions. Feel free to contribute via pull requests, issues or email messages.\nTable of Contents # Contributors General Questions Simple Linux Questions Medium Linux Questions Hard Linux Questions Expert Linux Questions Networking Questions DevOp Questions Fun Questions Demo Time Other Great References ####[⬆] Contributors:\nmoregeek typhonius martin negesti peter andreashappe quatrix biyanisuraj The majority of the questions were collected from:\nhttps://github.com/gurmeet1109/docgurmeet/tree/master/InterviewQuestionsSamples https://github.com/kylejohnson/linux-sysadmin-interview-questions/blob/master/test.md ####[⬆] General Questions:\nWhat did you learn yesterday/this week? Talk about your preferred development/administration environment. (OS, Editor, Browsers, Tools etc.) Tell me about the last major Linux project you finished. Tell me about the biggest mistake you\u0026rsquo;ve made in [some recent time period] and how you would do it differently today. What did you learn from this experience? Why we must choose you? What function does DNS play on a network? What is HTTP? What is an HTTP proxy and how does it work? Describe briefly how HTTPS works. What is SMTP? Give the basic scenario of how a mail message is delivered via SMTP! What is RAID? What is RAID0, RAID1, RAID5, RAID10? What is a level 0 backup? What is an incremental backup? Describe the general file system hierarchy of a Linux system. ####[⬆] Simple Linux Questions:\nWhat is the name and the UID of the administrator user? How to list all files, including hidden one, in a directory? What is the Unix/Linux command to remove a directory and its contents? Which command will show you free/used memory? Does free memory exist on Linux? How to search for the string \u0026ldquo;my konfi is the best\u0026rdquo; in files of a directory recursively? How to connect to a remote server or what is SSH? How to get all environment variables and how can you use them? I get \u0026ldquo;command not found\u0026rdquo; for ifconfig -a. What can be wrong? What happens if I type TAB-TAB? What command will show the available disk space on the Unix/Linux system? What command is used to lookup DNS records? What Unix/Linux commands will alter a files ownership, files permissions? What does chmod +x FILENAMEdo? What does the permission 0750 on a file mean? What does the permission 0750 on a directory mean? How to add a new system user without login permissions? How to add/remove a group from a user? What is a bash alias? How do you set the mail address of the root/a user? What does CTRL-c do? What is in /etc/services? How to redirect STDOUT and STDERR in bash? (\u0026gt; /dev/null 2\u0026gt;\u0026amp;1) What is the difference between UNIX and Linux What is the difference between Telnet and SSH? Explain the three load averages and what do they indicate ####[⬆] Medium Linux Questions:\nWhat do the following commands do? tee awk tr cut tac curl wget watch tail What does a \u0026amp; after a command do? What does \u0026amp; disown after a command do? What is a packet filter and how does it work? What is swap and what is it used for? What is an A record, an NS record, a PTR record, a CNAME record, an MX record? Are there any other RRs and what are they used for? What is a Split-Horizon DNS? What is the sticky bit? What is the difference between hardlinks and symlinks? What happens when you remove the source to a symlink/hardlink? What is an inode and what fields are stored in an inode? Howto force/trigger a file system check on next reboot? What is SNMP and what is it used for? What is a runlevel and how to get the current runlevel? What is SSH port forwarding? What is the difference between local and remote port forwarding? What steps to add a user to a system without using useradd/adduser? What is MAJOR and MINOR numbers of special files? Describe a scenario when you get a \u0026ldquo;filesystem is full\u0026rdquo; error, but \u0026lsquo;df\u0026rsquo; shows there is free space. Describe a scenario when deleting a file, but \u0026lsquo;df\u0026rsquo; not showing the space being freed. Describe how \u0026lsquo;ps\u0026rsquo; works. What happens to a child process that dies and has no parent process to wait for it and what’s bad about this? How to know which process listens on a specific port? You run a bash script and you want to see its output on your terminal and save it to a file at the same time. How could you do it? Explain what echo \u0026ldquo;1\u0026rdquo; \u0026gt; /proc/sys/net/ipv4/ip_forward does. Describe briefly the steps you need to take in order to create and install a valid certificate for the site https://foo.example.com. Can you have several HTTPS virtual hosts sharing the same IP? What is a wildcard certificate? ####[⬆] Hard Linux Questions:\nWhat is the difference between processes and threads? What is a tunnel and how you can bypass a http proxy? What is the difference between IDS and IPS? What shortcuts do you use on a regular basis? What is the Linux Standard Base? What is an atomic operation? Your freshly configured http server is not running after a restart, what can you do? What kind of keys are in ~/.ssh/authorized_keys and what it is this file used for? I\u0026rsquo;ve added my public ssh key into authorized_keys but I\u0026rsquo;m still getting a password prompt, what can be wrong? Did you ever create RPM\u0026rsquo;s, DEB\u0026rsquo;s or solaris pkg\u0026rsquo;s? What does :(){ :|:\u0026amp; };: do on your system and why you would care about that? How trace system call and signal? What\u0026rsquo;s happening when the Linux kernel is starting the OOM killer, how does it choose which process to kill first. Describe the linux boot process with as much detail as possible, starting from when the system is powered on and ending when you get a prompt. What\u0026rsquo;s a chroot jail? When trying to umount a directory it says it\u0026rsquo;s busy, how to find out which PID holds the directory? What\u0026rsquo;s LD_PRELOAD and when it\u0026rsquo;s used? You run a binary and nothing happens, how do you debug what\u0026rsquo;s doing? ####[⬆] Expert Linux Questions:\nA running process gets EAGAIN: Resource temporarily unavailable on reading a socket. How you can close this bad socket/file descriptor without killing the process? ####[⬆] Networking Questions:\nWhat is localhost and why would ping localhost fail? What is the similarity between \u0026ldquo;ping\u0026rdquo; \u0026amp; \u0026ldquo;traceroute\u0026rdquo; ? How is traceroute able to find the hops. What command is used to show all open ports and/or socket connections on a machine? Is 300.168.0.123 a valid IPv4 address? Which IP ranges/subnets are \u0026ldquo;private\u0026rdquo; or \u0026ldquo;non-routable\u0026rdquo; (RFC 1918)? What is a VLAN? What is ARP and what is it used for? What is the difference between TCP and UDP? What is the purpose of a default gateway? What command is used to show the route table for a machine? A TCP connection on a network can be uniquely defined by 4 things. What are those things? When a client running a web browser connects to a web server, what is the source port and what is the destination port of the connection? How do you add an IPv6 address to a specific interface? You have added an IPv4 and IPv6 address to interface eth0. A ping to the v4 address is working but a ping to the v6 address gives yout the response sendmsg: operation not permitted. What could be wrong? What is SNAT and when should be used? Explain how could you ssh login into a Linux system that DROPs all new incomming packets using a SSH tunnel. What \u0026ldquo;netns\u0026rdquo; feature of \u0026ldquo;ip\u0026rdquo; package is used for? Briefly explain the mechanism of it\u0026rsquo;s work. How FreeBSD analog of this is called? ####[⬆] DevOp Questions:\nCan you describe your workflow when you create a script? What is GIT? What is a dynamically/statically linked file? What does \u0026ldquo;configure \u0026amp;\u0026amp; make \u0026amp;\u0026amp; make install\u0026rdquo;? What is puppet/chef/ansible used for? How do you create a new mysql user? How do you create a new postgres user? What is a virtual IP address? What is a cluster? How print the strings of printable characters in files? How look shared library dependencies? What is Automake and Autoconf? ./configure shows an error that libfoobar is missing on your system, how could you fix this, what could be wrong? Advantages/disadvantages of script vs compiled program. What is the difference between fork and thread? And parent and child process in fork system call? What\u0026rsquo;s the relationship between continuous delivery and DevOps? What are the important aspects of a system of continous integration and deployment? Can CEPH filesystem be utilised using Filesystem in User Space (FUSE) API? (yes/no) ####[⬆] Fun Questions:\nA careless sysadmin executes the following command: chmod 444 /bin/chmod - what do you do to fix this? I\u0026rsquo;ve lost my root password, what can I do? I\u0026rsquo;ve rebooted a remote server but after 10 minutes I\u0026rsquo;m still not able to ssh into it, what can be wrong? If you were stuck on a desert island with only 5 command-line utilities, which would you choose? You come across a random computer and it appears to be a command console for the universe. What is the first thing you type? Tell me about a creative way that you\u0026rsquo;ve used SSH? You have deleted by error a running script, what could you do to restore it? ####[⬆] Demo Time:\nUnpack test.tar.gz without man pages or google. Remove all \u0026ldquo;*.pyc\u0026rdquo; files from testdir recursively? Search for \u0026ldquo;my konfu is the best\u0026rdquo; in all *.py files. Replace the occurrence of \u0026ldquo;my konfu is the best\u0026rdquo; with \u0026ldquo;I\u0026rsquo;m a linux jedi master\u0026rdquo; in all *.txt files. :interrobang: more on files \u0026hellip; cut, tr, awk \u0026hellip; Test if port 443 on a machine with IP address X.X.X.X is reachable. Get http://myinternal.webserver.local/test.html via telnet. How to send an email without a mail client, just on the command line? Write a get_prim method in python/perl/bash/pseudo. Find all files which have been accessed within the last 30 days. Explain the following command (date ; ps -ef | awk ‘{print $1}’ | sort | uniq | wc -l ) \u0026gt;\u0026gt; Activity.log Write a script to list all the differences between two directories. Write a program in any language you choose, to reverse a file. In a log file with contents as \u0026lt;TIME\u0026gt; : [MESSAGE] : [ERROR_NO] - Human readable text display summary/count of specific error numbers that occured every hour or a specific hour ####[⬆] Other Great References:\nSome questions are \u0026lsquo;borrowed\u0026rsquo; from other great references like:\nhttps://github.com/darcyclarke/Front-end-Developer-Interview-Questions https://github.com/kylejohnson/linux-sysadmin-interview-questions/blob/master/test.md https://github.com/gurmeet1109/docgurmeet/tree/master/InterviewQuestionsSamples http://slideshare.net/kavyasri790693/linux-admin-interview-questions ","date":"May 28, 2017","externalUrl":null,"permalink":"/2017/05/28/interview/","section":"Blog","summary":"Linux System Administrator/DevOp Interview Questions # A collection of linux sysadmin/devop interview questions. Feel free to contribute via pull requests, issues or email messages.\n","title":"Linux System Administrator(DevOp) Interview Questions","type":"blog"},{"content":" Domini # SKILLS # System administrator, technical support engineer: Unix FreeBSD Linux Solaris Open Source Software\nSystem, application programmer, web-developer: С++ Perl Haskell\nOPERATING SYSTEMS: Linux(nixos,gentoo,exherbo,Debian,RH,Slack,Mandrake,Caldera\u0026hellip;) FreeBSD(8,9.1),PCBSD OS/2(Warp3,Merlin4) Netware(v3-4), DOS(PC,MS,DR,Free,Open) Windows(v1,v2,v3.1x,95/98/ME/win2k/ winXP/8/10) illumos,openindiana\nLANGUAGES \u0026amp; Programming Systems : C\u0026amp;C++ ( ANSI, MSVCv6, BCBv1-5, Cygwin, DJGPP) Pascal (Delphi v1-5, bp, tp) HTML, XML, WSDL, UDDI, SOAP, UIML Java, JavaScript, Perl, bash, rexx Forth, Prolog, Lisp, Lex\u0026amp;Yacc, 80x86/DEC assembly\nAPIs and SDKs : CGI, CSS, HTTP cookies, ISAPI, JDBC, JDK, JSP MFC, OWL, wxlib multi-threading, POSIX, RPC, sockets, Win16/Win32API\nDatabase Managment Systems : BDE, FlashFiler, FoxPro(2.5/2.6/Visual) Clipper 5.1, Btrieve, SleepyCat Microsoft Access and SQL Server MySQL, Oracle, PostgreSQL\nSERVERS: HTTPD(Apache/Comanche/, Eserv, IPWS, Microsoft Internet Information Server) Tomcat(v3-5), SQL(postgress,MySQL,MS) mars, sendmail, innd,bind, proftpd, samba, mdaemon, wingate\nEditors\u0026amp;Web design : HomeSite, Office(Star, MS), Corel, PhotoShop, FrontPage TopStyle, ColdFusion, MultiEdit, WordPerfect\nBROWSERS : Lynx, Opera, Mozilla\nE-MAIL CLIENTS : Bat, pine, emacs, Eudora Pro, Microsoft Exchange, Netscape Navigator/Communicator\nUNIX TOOLS : Acrobat, Apache Modules, Apache JServ, bash, FastCGI, ftp, GNU tools, GnuJSP, ghostscript JDK, JSDK, lex, make, XServer, MySQL, perl, samba, satan, telnet, tcp_wrappers, vnc, vi, yacc\nWINDOWS TOOLS : Access, Delphi, GNU Tools (Cygwin, DJGPP), UWIN, JDK Partition Magic, SourceSafe, System Commander, Visual C++, Visual Cafe, Visual Fox, Visual J++\nEMPLOYMENT # programmer, JSC AEM-technology TyazhBumMash=Petrozavodskmash(Heavy paper building factory) (1989-01 — 1990-01) # The system of virtual machines made a bunch clipper+ Intel assembler\nprogrammer, Joint Stock Company «Timber Holding Company «KarelLesProm» () (1990-01 — 1993-01) # SuperCalc, QuattroPro\nprogrammer, Petrozavodsk Machine-Tool Plant, Production Enterprise(1992-01 — 1993-01) # SM-4 + kermit + AT/XT/EC, Industrial accounting\nprogrammer, Design Institute of Technology(1993-01 — 1994-01) # A graphics package in assembler for DVK-4, Electronics-85.\nprogrammer, Marine Computer Systems (1994-01 — 1995-01) # Adding features to old programs\nprogrammer,Belomoro Onega Shipping Company (1995-01 — 1996-01) # foxpro dos/win\nprogrammer, The Botanical Garden (1996-01 - 1997-01) # The first design and content of the botanical garden site of PetrSU. Netscape v3 + Win v3.11\n* The inspector on booking, * Military Commissariat of the Republic of Karelia (1997-01 — 1998-01) # foxpro, Registration of burials.\nprogrammer, Karelian advanced training Institute for the Enhancement of the Qualifications of Education Workers (1997-01 — 1998-01) # programmer, ЭЧ-8 power supply distance of Russian Railways (1998-01 — 1999-01) # Network IOLA, support for NT-server, Delphi, fox, with \\ + \\ + workstations.\nprogrammer, Petroglyph (1999-01 — 2002-01) # Participated in writing the automation of accounting (VCv6, BCv3, Btrieve, CrystalReports, perl) configured NT server, wingate, NortonPCAnywhere, mdaemon v3.56. Collected, serviced, installed Debian GNU Linux 2.2r2, sendmail, apache, bind, proftpd, sshd, webmin, mysql, tomcat \u0026hellip; on a single server. Developed a system for generating and updating the site on perl, counter, B2B Internet shop. ..\n*Technical support engineer *, NordHost (2002-01 — 2003-01) # Support nordhost.com, administration apache,postfix,mysql,bind,webmin,php. The fight against billing, switching subnets, answers in ICQ, virtuals, \u0026hellip;\nprogrammer,Karelian TV Company Nika (1998-01 — 2006-01) # BCB, mysql, fox, sql, newsfactory, Service more than 4 years.\nprogrammer, Hitech inc/ (2006-01 — \u0026hellip;) # telecommuting, organizations on contracts service / accounting, subscribers, web, salary, payment, tax, \u0026hellip;/. freelance\nEDUCATION # Petrozavodsk State University (1991-01 — 1999-01) # ","date":"December 1, 2016","externalUrl":null,"permalink":"/2016/12/01/rieziumie/","section":"Blog","summary":"Domini # SKILLS # System administrator, technical support engineer: Unix FreeBSD Linux Solaris Open Source Software\n","title":"Curriculum Vitae","type":"blog"},{"content":" комедии # !!Cюрприз / De Surprise La totale! боги сошли с ума http://www.kinopoisk.ru/film/182416/\nПрекрасная зеленая / La belle verte\nпредложение\nзолото дураков\nСмерть на похоронах / Death at a Funeral Хороший год / A Good Year Красный отель /L\u0026rsquo;auberge rouge Мышиная охота / Mousehunt Храбрые перцем / Your Highness болливуд # Безмолвие / Nirbaak\nЗвёздочки на земле Taare Zameen Par аля Лондон # На грани / The Edge о животных # Медведь / L\u0026rsquo;ours притчи # Сладкий фильм Sweet Movie\nМашинист El Maquinista\nБыть Джоном Малковичем / Being John Malkovich Ложь Gojitmal\n(!Ким Ки Дук / Kim Ki Duk!)\nЯ всегда хотел быть гангстером / J\u0026rsquo;ai toujours rêvé d\u0026rsquo;être un gangster\nСтолетний старик, который вылез в окно и исчез / Hundraåringen som klev ut genom fönstret och försvann\nЗамок Балабанова\nТрюкач / The Stunt Man вообще с отулом плохих фильмов не видал\nГород Зеро Болдинская осень\nПростые вещи\nДети чугунных богов\nбоевик # Убийца сёгуна Shogun Assassin \u0026ldquo;мистика\u0026rdquo; # !!!!!! Мирный воин Другие ипостаси / Altered States Колдовство / The Craft Пророчество Селесты / The Celestine Prophecy хулиганские # Вальсирующие / Les valseuses Кен Парк / Ken Park\nДетки / Kids сказки # Скачок во времени / A Wrinkle in Time Страшные сказки / Il racconto dei racconti кроненберг # Видеодром / Videodrome братишки(british) # Keeping Mum\nНежная мишень\nCible émouvante Дикая штучка Wild Target мульт # Освободите Джимми Slipp Jimmy fri (!Рене Лалу!) # Дикая планета / La planète sauvage Кот раввина / Le chat du rabbin мальчишеские # ! Револьвер / Revolver Кровавый четверг / Thursday Бойцовский клуб / Fight Club\nКарты, деньги, два ствола /Lock, Stock and Two Smoking Barrels\nфантастика # Враг мой / Enemy Mine\nЧерез тернии к звездам приключения # Ремо Уильямс: Приключение начинается / Remo Williams: The Adventure Begins документальный # Счастливые люди сериалы # Северная сторона / Northern Exposure медитативные # Qatsi trilogy Годфри Реджио\n«Койяанискаци» (1983)\n«Поваккаци» (1988)\n«Накойкаци» (2002)\nПепел и снег Ashes and Snow Стеклянное сердце Herz aus Glas исторические # Агора Agora китайское # Крадущийся тигр, затаившийся дракон Wo hu cang long антиутопии # Гаррисон Бержерон (ТВ) Harrison Bergeron\nМетропия Metropia\nАльфавиль Alphaville, une étrange aventure de Lemmy Caution\nUltraviolet Эон Флакс Æon Flux\nСексмиссия Seksmisja\nдополнения # власть убийц игра в имитацию остров проклятых\nубей меня нежно (о доверии)\nтретья персона соблазн часы шикарная актерская игра # ужин в четыре руки\nЧасы\nМаленькая смерть The Little Death\nБесконечно белый медведь\nInfinitely Polar Bear\n","date":"November 22, 2016","externalUrl":null,"permalink":"/2016/11/22/second/","section":"Blog","summary":"комедии # !!Cюрприз / De Surprise La totale! боги сошли с ума http://www.kinopoisk.ru/film/182416/\n","title":"List of favourite movies","type":"blog"},{"content":"Domini\u0026rsquo;s Simple Blog\nHello everyone, I\u0026rsquo;m dominicusin l\u0026rsquo;esprit de mort Which way did the extinguished fire go? Honi soit qui mal y pens herzlich willkommen bei सच्चिदानंद Activity: ♡ umbra mortis ♧ Temet Nosce ♢ Hic locus est, ubi mors gaudet succurrere vitae ♤ Separabis terram ab igne, subtile a spisso, suaviter mango cum inqenio Interests: commedia dell\u0026rsquo;arte, triathlon, burning hearts with a soldering iron on a cake, guilloche The favorite music: Wu-Tang Clan\nCan you hear the corkscrew sound of sorrow? He, like us, suffers from separation. And if the Friend is far away, and the bottle is close, Then I am your friend: a corkscrew from the reed I am the target, the arrow and I am the bowstring Stretched and flying while the soul is alive Shoot at myself, I could not get to See the shooting I missed the lesson\nYou don’t need a weatherman to know which way the wind blows Le temps détruit tout\nWhen the dew drops Collect on the scarlet maple leaves Look at the scarlet beads! The tree is bare, All colors and smells have disappeared, But already on a bitch Carefree spring! Returning from the world of passions To the world of dispassion You make a pause If it rains - let it fall, If the wind blows - let it blow. 。 Every day the priests every minute Explore the dharma And endlessly chant complex sutras But before doing this, they must learn to Read love letters Sent by the wind and rain, snow and moon\nIf you say: it is! People think: it is. But although it answers Where is it, the mountain echo? If you say: it is not, But it answers, Mountain echo. Like a flash of lightning, Like a disappearing drop of dew, Like a ghost - Thought of myself\nthe ability to think is completely devalued by the inability not to think\npost hoc ergo propter hoc\nHic sunt dracones\n2 ^ 340 == 1 (mod 341)\nChanges are inevitable\nInception\n","date":"November 19, 2015","externalUrl":null,"permalink":"/2015/11/19/first/","section":"Blog","summary":"Domini’s Simple Blog\nHello everyone, I’m dominicusin l’esprit de mort Which way did the extinguished fire go? Honi soit qui mal y pens herzlich willkommen bei सच्चिदानंद Activity: ♡ umbra mortis ♧ Temet Nosce ♢ Hic locus est, ubi mors gaudet succurrere vitae ♤ Separabis terram ab igne, subtile a spisso, suaviter mango cum inqenio Interests: commedia dell’arte, triathlon, burning hearts with a soldering iron on a cake, guilloche The favorite music: Wu-Tang Clan\n","title":"First post","type":"blog"},{"content":"","date":"November 19, 2015","externalUrl":null,"permalink":"/categories/jekyll/","section":"Categories","summary":"","title":"Jekyll","type":"categories"},{"content":"","date":"November 19, 2015","externalUrl":null,"permalink":"/categories/update/","section":"Categories","summary":"","title":"Update","type":"categories"},{"content":"","externalUrl":null,"permalink":"/404/","section":"Dominicus In","summary":"","title":"404","type":"page"},{"content":" DI \u0026lt;div class=\u0026quot;about-header-content\u0026quot;\u0026gt; \u0026lt;h1 class=\u0026quot;about-title\u0026quot;\u0026gt;Dominicus In\u0026lt;/h1\u0026gt; \u0026lt;p class=\u0026quot;about-subtitle\u0026quot;\u0026gt;Industrial \u0026amp; Systems Engineer\u0026lt;/p\u0026gt; \u0026lt;p class=\u0026quot;about-description\u0026quot;\u0026gt; Passionate about optimizing complex systems, data-driven decision making, and building scalable engineering solutions. Specializing in industrial automation, process optimization, and systems integration. \u0026lt;/p\u0026gt; \u0026lt;div class=\u0026quot;about-social\u0026quot;\u0026gt; \u0026lt;a href=\u0026quot;https://github.com/dominicusin\u0026quot; class=\u0026quot;social-link\u0026quot; target=\u0026quot;_blank\u0026quot; rel=\u0026quot;noopener\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;social-icon\u0026quot;\u0026gt;📦\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;social-text\u0026quot;\u0026gt;GitHub\u0026lt;/span\u0026gt; \u0026lt;/a\u0026gt; \u0026lt;a href=\u0026quot;https://linkedin.com/in/dominicusin\u0026quot; class=\u0026quot;social-link\u0026quot; target=\u0026quot;_blank\u0026quot; rel=\u0026quot;noopener\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;social-icon\u0026quot;\u0026gt;💼\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;social-text\u0026quot;\u0026gt;LinkedIn\u0026lt;/span\u0026gt; \u0026lt;/a\u0026gt; \u0026lt;a href=\u0026quot;https://twitter.com/dominicusin\u0026quot; class=\u0026quot;social-link\u0026quot; target=\u0026quot;_blank\u0026quot; rel=\u0026quot;noopener\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;social-icon\u0026quot;\u0026gt;🐦\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;social-text\u0026quot;\u0026gt;Twitter\u0026lt;/span\u0026gt; \u0026lt;/a\u0026gt; \u0026lt;a href=\u0026quot;mailto:contact@dominicu_sin.io\u0026quot; class=\u0026quot;social-link\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;social-icon\u0026quot;\u0026gt;📧\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;social-text\u0026quot;\u0026gt;Email\u0026lt;/span\u0026gt; \u0026lt;/a\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; Professional Background 2022 - Present Senior Systems Engineer Leading complex industrial automation projects and implementing cutting-edge optimization strategies for manufacturing processes.\n\u0026lt;div class=\u0026quot;timeline-item\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;timeline-date\u0026quot;\u0026gt;2019 - 2022\u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;timeline-content\u0026quot;\u0026gt; \u0026lt;h3\u0026gt;Industrial Engineer\u0026lt;/h3\u0026gt; \u0026lt;p\u0026gt;Designed and implemented process improvements resulting in 25% efficiency gains and 30% cost reduction.\u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;timeline-item\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;timeline-date\u0026quot;\u0026gt;2017 - 2019\u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;timeline-content\u0026quot;\u0026gt; \u0026lt;h3\u0026gt;Systems Analyst\u0026lt;/h3\u0026gt; \u0026lt;p\u0026gt;Analyzed complex manufacturing systems and developed data-driven solutions for operational challenges.\u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/section\u0026gt; \u0026lt;section class=\u0026quot;about-section\u0026quot;\u0026gt; \u0026lt;h2 class=\u0026quot;section-title\u0026quot;\u0026gt;Core Competencies\u0026lt;/h2\u0026gt; \u0026lt;div class=\u0026quot;skills-grid\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;skill-category\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;skill-title\u0026quot;\u0026gt;Industrial Engineering\u0026lt;/h3\u0026gt; \u0026lt;ul class=\u0026quot;skill-list\u0026quot;\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Process Optimization\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Quality Management\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Lean Manufacturing\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Six Sigma\u0026lt;/li\u0026gt; \u0026lt;/ul\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;skill-category\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;skill-title\u0026quot;\u0026gt;Systems Engineering\u0026lt;/h3\u0026gt; \u0026lt;ul class=\u0026quot;skill-list\u0026quot;\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;System Integration\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Automation Design\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Control Systems\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;IoT Implementation\u0026lt;/li\u0026gt; \u0026lt;/ul\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;skill-category\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;skill-title\u0026quot;\u0026gt;Data Science\u0026lt;/h3\u0026gt; \u0026lt;ul class=\u0026quot;skill-list\u0026quot;\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Statistical Analysis\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Machine Learning\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Data Visualization\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Predictive Modeling\u0026lt;/li\u0026gt; \u0026lt;/ul\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;skill-category\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;skill-title\u0026quot;\u0026gt;Technical Tools\u0026lt;/h3\u0026gt; \u0026lt;ul class=\u0026quot;skill-list\u0026quot;\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Python / R\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;MATLAB / Simulink\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;SQL / NoSQL\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;skill-item\u0026quot;\u0026gt;Cloud Platforms\u0026lt;/li\u0026gt; \u0026lt;/ul\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/section\u0026gt; \u0026lt;section class=\u0026quot;about-section\u0026quot;\u0026gt; \u0026lt;h2 class=\u0026quot;section-title\u0026quot;\u0026gt;Featured Projects\u0026lt;/h2\u0026gt; \u0026lt;div class=\u0026quot;projects-grid\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;project-card\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;project-header\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;project-title\u0026quot;\u0026gt;Smart Manufacturing System\u0026lt;/h3\u0026gt; \u0026lt;span class=\u0026quot;project-status\u0026quot;\u0026gt;Completed\u0026lt;/span\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;p class=\u0026quot;project-description\u0026quot;\u0026gt; Implemented IoT-based monitoring and optimization system for large-scale manufacturing facility, resulting in 40% efficiency improvement and real-time predictive maintenance capabilities. \u0026lt;/p\u0026gt; \u0026lt;div class=\u0026quot;project-tags\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;project-tag\u0026quot;\u0026gt;IoT\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;project-tag\u0026quot;\u0026gt;Automation\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;project-tag\u0026quot;\u0026gt;Machine Learning\u0026lt;/span\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;project-card\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;project-header\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;project-title\u0026quot;\u0026gt;Supply Chain Optimization\u0026lt;/h3\u0026gt; \u0026lt;span class=\u0026quot;project-status\u0026quot;\u0026gt;In Progress\u0026lt;/span\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;p class=\u0026quot;project-description\u0026quot;\u0026gt; Developing AI-powered supply chain optimization platform using advanced algorithms and real-time data analysis to minimize costs and maximize efficiency. \u0026lt;/p\u0026gt; \u0026lt;div class=\u0026quot;project-tags\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;project-tag\u0026quot;\u0026gt;AI/ML\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;project-tag\u0026quot;\u0026gt;Optimization\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;project-tag\u0026quot;\u0026gt;Data Science\u0026lt;/span\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;project-card\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;project-header\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;project-title\u0026quot;\u0026gt;Quality Management System\u0026lt;/h3\u0026gt; \u0026lt;span class=\u0026quot;project-status\u0026quot;\u0026gt;Completed\u0026lt;/span\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;p class=\u0026quot;project-description\u0026quot;\u0026gt; Designed comprehensive quality management system with automated inspection, statistical process control, and continuous improvement methodologies. \u0026lt;/p\u0026gt; \u0026lt;div class=\u0026quot;project-tags\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;project-tag\u0026quot;\u0026gt;Quality\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;project-tag\u0026quot;\u0026gt;Statistics\u0026lt;/span\u0026gt; \u0026lt;span class=\u0026quot;project-tag\u0026quot;\u0026gt;Process Control\u0026lt;/span\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/section\u0026gt; \u0026lt;section class=\u0026quot;about-section\u0026quot;\u0026gt; \u0026lt;h2 class=\u0026quot;section-title\u0026quot;\u0026gt;Education \u0026amp; Certifications\u0026lt;/h2\u0026gt; \u0026lt;div class=\u0026quot;education-grid\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;education-item\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;education-title\u0026quot;\u0026gt;M.S. Industrial Engineering\u0026lt;/h3\u0026gt; \u0026lt;p class=\u0026quot;education-institution\u0026quot;\u0026gt;Technical University\u0026lt;/p\u0026gt; \u0026lt;p class=\u0026quot;education-period\u0026quot;\u0026gt;2015 - 2017\u0026lt;/p\u0026gt; \u0026lt;p class=\u0026quot;education-details\u0026quot;\u0026gt;Focus on Systems Optimization and Data Analytics\u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;education-item\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;education-title\u0026quot;\u0026gt;B.S. Industrial Engineering\u0026lt;/h3\u0026gt; \u0026lt;p class=\u0026quot;education-institution\u0026quot;\u0026gt;Engineering Institute\u0026lt;/p\u0026gt; \u0026lt;p class=\u0026quot;education-period\u0026quot;\u0026gt;2011 - 2015\u0026lt;/p\u0026gt; \u0026lt;p class=\u0026quot;education-details\u0026quot;\u0026gt;Graduated Magna Cum Laude\u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;certifications\u0026quot;\u0026gt; \u0026lt;h3 class=\u0026quot;certifications-title\u0026quot;\u0026gt;Professional Certifications\u0026lt;/h3\u0026gt; \u0026lt;ul class=\u0026quot;certification-list\u0026quot;\u0026gt; \u0026lt;li class=\u0026quot;certification-item\u0026quot;\u0026gt;Certified Six Sigma Black Belt\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;certification-item\u0026quot;\u0026gt;AWS Solutions Architect\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;certification-item\u0026quot;\u0026gt;PMP Project Management\u0026lt;/li\u0026gt; \u0026lt;li class=\u0026quot;certification-item\u0026quot;\u0026gt;Lean Manufacturing Expert\u0026lt;/li\u0026gt; \u0026lt;/ul\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/section\u0026gt; \u0026lt;section class=\u0026quot;about-section\u0026quot;\u0026gt; \u0026lt;h2 class=\u0026quot;section-title\u0026quot;\u0026gt;Blog Focus Areas\u0026lt;/h2\u0026gt; \u0026lt;div class=\u0026quot;blog-areas\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;area-card\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;area-icon\u0026quot;\u0026gt;⚙️\u0026lt;/div\u0026gt; \u0026lt;h3 class=\u0026quot;area-title\u0026quot;\u0026gt;Industrial Engineering\u0026lt;/h3\u0026gt; \u0026lt;p class=\u0026quot;area-description\u0026quot;\u0026gt; Process optimization, quality management, lean principles, and manufacturing excellence. \u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;area-card\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;area-icon\u0026quot;\u0026gt;🔗\u0026lt;/div\u0026gt; \u0026lt;h3 class=\u0026quot;area-title\u0026quot;\u0026gt;Systems Integration\u0026lt;/h3\u0026gt; \u0026lt;p class=\u0026quot;area-description\u0026quot;\u0026gt; Complex system design, automation, IoT implementation, and cross-platform integration. \u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;area-card\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;area-icon\u0026quot;\u0026gt;📊\u0026lt;/div\u0026gt; \u0026lt;h3 class=\u0026quot;area-title\u0026quot;\u0026gt;Data Science\u0026lt;/h3\u0026gt; \u0026lt;p class=\u0026quot;area-description\u0026quot;\u0026gt; Statistical analysis, machine learning, data visualization, and predictive modeling. \u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;div class=\u0026quot;area-card\u0026quot;\u0026gt; \u0026lt;div class=\u0026quot;area-icon\u0026quot;\u0026gt;🚀\u0026lt;/div\u0026gt; \u0026lt;h3 class=\u0026quot;area-title\u0026quot;\u0026gt;Technology Trends\u0026lt;/h3\u0026gt; \u0026lt;p class=\u0026quot;area-description\u0026quot;\u0026gt; Emerging technologies, industry 4.0, digital transformation, and innovation. \u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/section\u0026gt; \u0026lt;section class=\u0026quot;about-section\u0026quot;\u0026gt; \u0026lt;h2 class=\u0026quot;section-title\u0026quot;\u0026gt;Get In Touch\u0026lt;/h2\u0026gt; \u0026lt;div class=\u0026quot;contact-section\u0026quot;\u0026gt; \u0026lt;p class=\u0026quot;contact-text\u0026quot;\u0026gt; I'm always interested in collaborating on challenging projects, sharing knowledge, or discussing the latest developments in engineering and technology. Feel free to reach out! \u0026lt;/p\u0026gt; \u0026lt;div class=\u0026quot;contact-methods\u0026quot;\u0026gt; \u0026lt;a href=\u0026quot;mailto:contact@dominicu_sin.io\u0026quot; class=\u0026quot;contact-method\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;contact-icon\u0026quot;\u0026gt;📧\u0026lt;/span\u0026gt; \u0026lt;div class=\u0026quot;contact-info\u0026quot;\u0026gt; \u0026lt;h4\u0026gt;Email\u0026lt;/h4\u0026gt; \u0026lt;p\u0026gt;contact@dominicu_sin.io\u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/a\u0026gt; \u0026lt;a href=\u0026quot;https://linkedin.com/in/dominicusin\u0026quot; class=\u0026quot;contact-method\u0026quot; target=\u0026quot;_blank\u0026quot; rel=\u0026quot;noopener\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;contact-icon\u0026quot;\u0026gt;💼\u0026lt;/span\u0026gt; \u0026lt;div class=\u0026quot;contact-info\u0026quot;\u0026gt; \u0026lt;h4\u0026gt;LinkedIn\u0026lt;/h4\u0026gt; \u0026lt;p\u0026gt;/in/dominicusin\u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/a\u0026gt; \u0026lt;a href=\u0026quot;https://github.com/dominicusin\u0026quot; class=\u0026quot;contact-method\u0026quot; target=\u0026quot;_blank\u0026quot; rel=\u0026quot;noopener\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;contact-icon\u0026quot;\u0026gt;📦\u0026lt;/span\u0026gt; \u0026lt;div class=\u0026quot;contact-info\u0026quot;\u0026gt; \u0026lt;h4\u0026gt;GitHub\u0026lt;/h4\u0026gt; \u0026lt;p\u0026gt;/dominicusin\u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/a\u0026gt; \u0026lt;a href=\u0026quot;https://twitter.com/dominicusin\u0026quot; class=\u0026quot;contact-method\u0026quot; target=\u0026quot;_blank\u0026quot; rel=\u0026quot;noopener\u0026quot;\u0026gt; \u0026lt;span class=\u0026quot;contact-icon\u0026quot;\u0026gt;🐦\u0026lt;/span\u0026gt; \u0026lt;div class=\u0026quot;contact-info\u0026quot;\u0026gt; \u0026lt;h4\u0026gt;Twitter\u0026lt;/h4\u0026gt; \u0026lt;p\u0026gt;@dominicusin\u0026lt;/p\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/a\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/div\u0026gt; \u0026lt;/section\u0026gt; ","externalUrl":null,"permalink":"/about/","section":"Dominicus In","summary":" DI \u003cdiv class=\"about-header-content\"\u003e \u003ch1 class=\"about-title\"\u003eDominicus In\u003c/h1\u003e \u003cp class=\"about-subtitle\"\u003eIndustrial \u0026 Systems Engineer\u003c/p\u003e \u003cp class=\"about-description\"\u003e Passionate about optimizing complex systems, data-driven decision making, and building scalable engineering solutions. Specializing in industrial automation, process optimization, and systems integration. \u003c/p\u003e \u003cdiv class=\"about-social\"\u003e \u003ca href=\"https://github.com/dominicusin\" class=\"social-link\" target=\"_blank\" rel=\"noopener\"\u003e \u003cspan class=\"social-icon\"\u003e📦\u003c/span\u003e \u003cspan class=\"social-text\"\u003eGitHub\u003c/span\u003e \u003c/a\u003e \u003ca href=\"https://linkedin.com/in/dominicusin\" class=\"social-link\" target=\"_blank\" rel=\"noopener\"\u003e \u003cspan class=\"social-icon\"\u003e💼\u003c/span\u003e \u003cspan class=\"social-text\"\u003eLinkedIn\u003c/span\u003e \u003c/a\u003e \u003ca href=\"https://twitter.com/dominicusin\" class=\"social-link\" target=\"_blank\" rel=\"noopener\"\u003e \u003cspan class=\"social-icon\"\u003e🐦\u003c/span\u003e \u003cspan class=\"social-text\"\u003eTwitter\u003c/span\u003e \u003c/a\u003e \u003ca href=\"mailto:contact@dominicu_sin.io\" class=\"social-link\"\u003e \u003cspan class=\"social-icon\"\u003e📧\u003c/span\u003e \u003cspan class=\"social-text\"\u003eEmail\u003c/span\u003e \u003c/a\u003e \u003c/div\u003e \u003c/div\u003e Professional Background 2022 - Present Senior Systems Engineer Leading complex industrial automation projects and implementing cutting-edge optimization strategies for manufacturing processes.\n","title":"About","type":"page"},{"content":"","externalUrl":null,"permalink":"/en/categories/","section":"Categories","summary":"","title":"Categories","type":"categories"},{"content":"","externalUrl":null,"permalink":"/en/","section":"Dominicus In","summary":"","title":"Dominicus In","type":"page"},{"content":"","externalUrl":null,"permalink":"/domini/","section":"Dominis","summary":"","title":"Dominis","type":"domini"},{"content":"","externalUrl":null,"permalink":"/people/","section":"People","summary":"","title":"People","type":"people"},{"content":"","externalUrl":null,"permalink":"/en/tags/","section":"Tags","summary":"","title":"Tags","type":"tags"}]