Code Monkey home page Code Monkey logo

mage-ios's Introduction

MAGE iOS

11/04/2015

This is the MAGE client for iOS devices. Depends on the MAGE iOS SDK.

About

The Mobile Awareness GEOINT Environment, or MAGE, provides mobile situational awareness capabilities. The MAGE app on your mobile device allows you to create geotagged field reports that contain media such as photos, videos, and voice recordings and share them instantly with who you want. Using the GPS in your mobile device, MAGE can also track users locations in real time. Your locations can be automatically shared with the other members of your team.

The app remains functional if your mobile device loses its network connection, and will upload its local content when a connection is re-established. When disconnected from the network, MAGE will use local data layers to continue to provide relevant GEOINT. Data layers, including map tiles and vector data, can stored on your mobile device and are available at all times.

MAGE is very customizable and can be tailored for your situation.

MAGE iOS was developed at the National Geospatial-Intelligence Agency (NGA) in collaboration with BIT Systems. The government has "unlimited rights" and is releasing this software to increase the impact of government investments by providing developers with the opportunity to take things in new directions. The software use, modification, and distribution rights are stipulated within the Apache license.

Pull Requests

If you'd like to contribute to this project, please make a pull request. We'll review the pull request and discuss the changes. All pull request contributions to this project will be released under the Apache license.

Software source code previously released under an open source license and then modified by NGA staff is considered a "joint work" (see 17 USC § 101); it is partially copyrighted, partially public domain, and as a whole is protected by the copyrights of the non-government authors and must be released according to the terms of the original open source license.

License

Copyright 2015 BIT Systems

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

mage-ios's People

Contributors

danielbarela avatar newmanw avatar bosborn avatar lemmingapex avatar bradh avatar cwas avatar finnessyj avatar mend-for-github-com[bot] avatar

Watchers

James Cloos avatar

mage-ios's Issues

CVE-2020-7595 (High) detected in nokogiri-1.10.5.gem

CVE-2020-7595 - High Severity Vulnerability

Vulnerable Library - nokogiri-1.10.5.gem

Nokogiri (���) is an HTML, XML, SAX, and Reader parser. Among Nokogiri's many features is the ability to search documents via XPath or CSS3 selectors.

Library home page: https://rubygems.org/gems/nokogiri-1.10.5.gem

Path to dependency file: /tmp/ws-scm/mage-ios/Gemfile.lock

Path to vulnerable library: /var/lib/gems/2.3.0/cache/nokogiri-1.10.5.gem

Dependency Hierarchy:

  • slather-2.4.7.gem (Root Library)
    • nokogiri-1.10.5.gem (Vulnerable Library)

Vulnerability Details

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

Publish Date: 2020-01-21

URL: CVE-2020-7595

CVSS 3 Score Details (7.5)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Network
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: None
    • Scope: Unchanged
  • Impact Metrics:
    • Confidentiality Impact: None
    • Integrity Impact: None
    • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7595

Release Date: 2020-01-21

Fix Resolution: 5.2.1

WS-2019-0052 (Medium) detected in AFNetworking/Serialization-3.2.1

WS-2019-0052 - Medium Severity Vulnerability

Vulnerable Library - AFNetworking/Serialization-3.2.1

Library home page: https://api.github.com/AFNetworking/AFNetworking/zipball/3.2.1

Path to dependency file: /tmp/ws-scm/mage-ios/Podfile.lock

Path to vulnerable library: /tmp/ws-scm/mage-ios/Podfile.lock

Dependency Hierarchy:

  • mage-ios-sdk-3.0.4 (Root Library)
    • AFNetworking-3.2.1
      • AFNetworking/Serialization-3.2.1 (Vulnerable Library)

Found in HEAD commit: 8d0125e4ecc4831ef0bf231c2d2f4879e1f3d31b

Vulnerability Details

AFNetworking is generating random numbers to add a boundary to multiform data using the unsecured arc4random. Currently, there is no fix for the vulnerability issue (version 3.2.1 is still vulnerable)

Publish Date: 2019-04-23

URL: WS-2019-0052

CVSS 2 Score Details (5.0)

Base Score Metrics not available

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.