bagder

Slop

This collection is limited to only include the reports that were submitted as security vulnerabilities to the curl bug-bounty program on Hackerone.

Several other issues not included here are highly suspcious as well.

Reports

1. [Critical] Curl CVE-2023-38545 vulnerability code changes are disclosed on the internet. #2199174

onomatopellan

Waydroid in WSL2 with sound

Requirements

Recommended to install Waydroid in a brand new Ubuntu 25.04 install. Waydroid needs a custom linux kernel. Actually just needs latest kernel for WSL2 with just these changes before compiling:

CONFIG_ANDROID_BINDER_IPC=y
CONFIG_ANDROID_BINDER_DEVICES="binder,hwbinder,vndbinder"

JySzE

Moved to https://github.com/JySzE/SoM-MPV-Config

daveschumaker

/**
* Various Stable Diffusion models massively benefit from prompt descriptions that contain
* additional descriptors. Much recent research has gone into training text generation models for
* expanding existing Stable Diffusion prompts with relevant and context appropriate descriptors.
*
* Since it isn't feasible to run LLMs and text generation models inside most users' web browsers
* at this time, I present my "Poor Man's Prompt Expansion Model". It uses a number of examples
* I've acquired from Fooocus and Hugging Face to generate completely random 
* (though not context appropriate) prompt expansions.
*/

Dan-Q

<?php
// half-hearted CSS minification
$css = preg_replace(
  array('/\s*(\w)\s*{\s*/','/\s*(\S*:)(\s*)([^;]*)(\s|\n)*;(\n|\s)*/','/\n/','/\s*}\s*/'), 
  array('$1{ ','$1$3;',"",'} '),
  file_get_contents('linked.css')
);

// embed as a data: uri
$base64css = rtrim(strtr(base64_encode($css), '+/', '-_'), '=');

lucsoft

#!/bin/sh

# Remove the performance overlay, it meddles with some tasks
unset LD_PRELOAD

# Fetch Resolution
RES=$(xdpyinfo | awk '/dimensions/{print $2}')

# Apply Resolution in env and start a new nested gnome with a new dbus
env MUTTER_DEBUG_DUMMY_MODE_SPECS=$RES dbus-run-session -- gnome-shell --wayland --nested

davidedmundson

#!/bin/sh

# Remove the performance overlay, it meddles with some tasks
unset LD_PRELOAD

## Shadow kwin_wayland_wrapper so that we can pass args to kwin wrapper 
## whilst being launched by plasma-session
mkdir $XDG_RUNTIME_DIR/nested_plasma -p
cat <<EOF > $XDG_RUNTIME_DIR/nested_plasma/kwin_wayland_wrapper
#!/bin/sh

Efreak

#!/usr/bin/env bash

if [ "$1" = "csearch" ]; then shift; fi #remove subcommand if called via `cargo csearch`

c33=$'\033[33m'
c34=$'\033[34m'
c35=$'\033[35m'
c0=$'\033[0m'

list="$(cargo search $@)"

garbled1

#!/bin/bash

source ~/venv/bin/activate

rm /comics/download/WebToons/*/complete.txt
dosage -b /comics/download -c @

COMIC_DL=/comics/download
COMIC_CBZ=/comics/cbz
COMIC_TMP=/comics/tmp

rrrnld

#!/usr/bin/env fish

# Put this in your .config/fish/functions folder and you'll get an `airsonic`
# command that you can use to interact with the rest api. If you just want to
# play around with it, you can execute it directly.

function _airsonic_usage
  echo 'Usage: airsonic [-h|--help] -u $user -p $pass [$url] $endpoint [...$params]'
  echo
  echo 'Interact with an airsonic server via REST. See http://www.subsonic.org/pages/api.jsp for additional documentation.'