Best iPad for students
Macworld Preparing for student life can be exciting and stressful. To make things easier, it’s good to know that you’ve got the right tech to help you write your essays, take notes in lessons, and kick back with Netflix and games when the work is done. The iPad has evolved in recent years to something that can now act as a laptop replacement for many students, with accessories like the Magic Keyboard and Apple Pencil making it one of the most versatile devices you can buy.  Choosing the best iPad can be tricky, as Apple currently offers a wide range of models with different prices and features, including the M4 iPad Pro and M2 iPad Air models updated in May 2024 and the iPad mini A17 Pro that arrived in October 2024. These three iPads are all capable of supporting Apple Intelligence, which is Apple’s AI tool that powers several features, including some centered around reading and writing and image generation. These features may be useful for you as a student. The only iPad on sale currently that doesn’t support Apple Intelligence is the standard iPad (10th generation) which is due an update. [Read the rumors about the 11th gen iPad.] Can students get discounts on iPads? Students can save money on all sorts of Apple products by shopping at Apple’s education store in their country. Apple offers money off new iPad purchases to students in higher education all year round. In a separate article, you can read all about how to get an Apple Student Discount. Plus, if you’re a student and you buy an iPad (or a Mac) from Apple, you might be able to get a free gift such as a pair of AirPods or vouchers while the company’s “Back To School/Uni” event is running. This usually runs from June to September in the U.S. and Canada, from July to October in the U.K. and Europe, and from January to March in Australia, New Zealand and other southern hemisphere locations. Click on the following links for the Education stores in the countries where most of our readers reside: Apple’s U.S. Education Store Apple’s U.K. Education Store (in the U.K. you will need to verify your student status via UNiDAYS). Apple’s Canada Education Store Apple’s Australian Education Store Another bonus if you’re a student: you can get Apple Music for half price with free Apple TV+ included. How much can students save on an iPad? Students can save as much as $100 in the U.S., £100 in the U.K., $170 in Australia, and $150 in Canada if they buy from the education store. ProductU.S.U.K.AustraliaCanadaiPad (10th gen) MSRP$349£329$599$499iPad (10th gen) Student Price$329£309$559$469iPad mini (A17 Pro) MSRP$499£499$799$679iPad mini (A17 Pro) Student Price$449£449$719$609iPad Air (11-inch, M2) MSRP$599£599$999$799iPad Air (11-inch, M2) Student Price$549£549$919$729iPad Air (13-inch, M2)MSRP$799£799$1,299$1,099iPad Air (13-inch, M2) Student Price$749£749$1,219$1,029iPad Pro (11-inch, M4) MSRP$999£999$1,699$1,399iPad Pro (11-inch, M4) Student Price$899£899$1,529$1,249iPad Pro (13-inch, M4) MSRP$1,299£1,299$2,199$1,799iPad Pro (13-inch, M4) Student Price$1,199£1,199$2,029$1,649Apple’s discounted price for students compared to the usual price of the entry-level models. How to get an iPad student discount Apple offers a student discount via its country-specific education stores. To recap: Apple’s U.S. Education Store Apple’s U.K. Education Store (in the U.K. you will need to verify your student status via UNiDAYS). Apple’s Canada Education Store Apple’s Australian Education Store Depending on your location you may only need to sign up with details of your student status and course and prove your identity. Some countries have less stringent checks than others. In the U.K. you need to be registered with UNiDAYS in order to even see the student prices. We explain how to do this in our article How to get an Apple student discount. To qualify for a discount you also need to meet Apple’s conditions. You either need to be a student in higher education, or a teacher at a teaching institution. The only way to get a discount for a child still at school is to be home educating them or to be a teacher yourself. If you can’t get a student discount that doesn’t mean you won’t be able to get money off a new iPad though. Read our round-up of the best iPad deals. You will also find links to the best deals for each type of iPad below. 11-inch iPad Air (2024, M2): Best All-Rounder Pros M2 processor 128GB of storage in base model Lots of color options Cons It’s not cheap Price When Reviewed: $599 (128GB, Wi-Fi only) Best Prices Today: $499 at Best Buy$549 at B&H$554 at Walmart Electronics The 11-inch iPad Air (M2), with its 11-inch display, modern design, low weight (462g), great cameras, and hugely powerful processor, is a great choice for students. Unfortunately, it’s a bit on the pricey side for a tablet, with the current prices starting at $599/£599 ($549 for students), but this does now include 128GB of storage, which is double that of the baseline iPad Air (2022, M1) it replaced. This makes it the perfect combination of power, storage and features, for a price that isn’t unreasonable, and one we can heartily recommend for those starting out on their studies.   The biggest feature of the model introduced in 2024 is the inclusion of the M2 processor. This is the same chip that powered the previous generation of iPad Pro models, not to mention several Macs. In an iPad Air, it makes the device fly.  The camera is a 12MP Wide lens (also like on the iPad Pro), which can record video up to 4K/60fps, and as with other iPads on this list, the front-facing camera is a 12MP Ultra-Wide that allows for Center Stage and is now sensibly positioned on the longer side of the chassis to allow landscape views. Essentially, the 2024 iPad Air is a 2022 iPad Pro for a cheaper price. The only major feature it’s missing is the 120Hz ProMotion screen refresh rate, but that’s not something most people will even notice.  There are plenty of colors to choose from, and if you want to complete the Apple-flavoured package then the 11-inch iPad Air supports the Magic Keyboard ($299/£299), Apple Pencil Pro ($129/£129) and Apple Pencil USB-C ($79/£79). See: Apple Pencils compared: Which Apple Pencil works with your iPad? If you prefer a larger display, there is also the 13-inch iPad Air (M2) that comes with all the same specs and features. It starts at $799/£799 (or $749 for students). We highly recommend the 11-inch iPad Air (M2) for students who need premium performance and the best iPad you can buy without the Pro name. Read iPad Air (M2) vs iPad Pro (M4) to find out how the iPad Air compares to the iPad Pro. How much can students save on the iPad Air? MSRP: $599 / £599 / AU$999 / CA$799Student: $549 / £549 / AU$919 / CA$729 Students save: $50 / £50 / AU$80 / CA$70 Get the best deal on a new iPad Air. Read our full Apple iPad Air 11-inch (M2, 2024) review iPad mini (A17 Pro, 2024): Best for Note-Taking and Reading Pros Small and light More storage Centre Stage for FaceTime calls Cons May feel cramped depending on your needs Price When Reviewed: $499 (128GB); $599 (256GB); $799 (512GB) Best Prices Today: $469 at Best Buy$484 at Walmart Electronics$499 at Adorama If the most important factor to you is portability there’s one iPad in particular that you might want to consider. The iPad mini, updated in October 2024 with the Apple Intelligence-capable A17 Pro, is the smallest and lightest iPad you can buy, weighing in at 293g. Of course, the low weight is a result of the iPad itself being smaller, thanks to the 8.3-inch display (which is bigger than it used to be since Apple got rid of the Home button and relocated Touch ID to the power button on the top edge a few generations ago). The result is a compact but powerful device that doesn’t feel too small. We think this screen size is perfect for reading books or taking notes (especially with an Apple Pencil), so it may well be ideal if that’s how you intend to use your iPad. And don’t let the diminutive form fool you: the A17 Pro chip is the same as that found in the iPhone 15 Pro, so there’s no shortage of power on tap. Connectivity is top-notch too, with support for Wi-Fi 6E and 5G networks available, depending on the model you choose.  The front-facing camera is an Ultra-Wide lens, so it can track you and keep you in the center of the frame on video calls thanks to Center Stage, while the 12MP Wide camera on the back can capture great photos and videos that could be used in presentations or for media-based assignments.  There are three storage options available (128GB, 256GB and 512GB). We are glad Apple has stopped selling the 64GB model as we didn’t think that was enough storage. 128GB should be enough for you to store your apps, music, movies, photos, and videos, and if you need more space we recommend iCloud’s various storage options.  One disadvantage is that the mini only works with Bluetooth keyboards, rather than Apple’s range of iPad-specific keyboard, but whether that’s a significant disadvantage is debatable–at this size, a built in keyboard would be too small to type on comfortably. Prices start at $499/£499 ($449 for students) for the 128GB model (which is what the 64GB model used to cost). The 256GB option raising the cost to $599/£599 (down from $649/£649 previously), and the 512GB model costing $799/£799. In Australia the price of the iPad mini dropped with the arrival of the new model from $829 to $799). How much can students save on the iPad mini? MSRP: $499 / £499 / AU$799 / CA$679Students: $449 / £449 / AU$719 / CA $609 Students save: $50 / £50 / AU$80 / CA$70 Get the best deal on a new iPad mini. iPad (10th gen, 2022): Best Balance of Price and Power Pros Air-style design 10.9-inch Liquid Retina display Cons 64GB storage on base model No compatibility for Apple Intelligence New model coming soon (we hope) Price When Reviewed: From $349 (64GB) | $499 (256GB) (was $449 and $599) Best Prices Today: $279.99 at Target $319 at Amazon$331 at Walmart Electronics Thanks to a price cut in 2024, and the retirement of the iPad 10.2-inch (9th gen), the iPad 10.9-inch (10th gen) model that arrived in October 2022 is now the cheapest iPad available from Apple. But that doesn’t mean it’s a budget device, as it features the same design approach as the iPad mini and iPad Air. This means you don’t have the traditional Home button, which has been replaced with swipe gestures and the Touch ID sensor repositioned in the power button on the top edge. This makes room for a larger display than on its predecessor and ensures that the Home button is now officially a thing of the past. On this iPad, the 10.9-inch Liquid Retina display, unlike on the mini, Air or Pro models, is unlaminated. This means there’s a slight air gap between the glass and the digitizer beneath. You probably won’t notice it at all, but if you intend to use the Apple Pencil for notes (1st-gen 1 and USB-C Apple Pencils are supported) then you may experience slight delays in the tracking. One welcome addition (that arrived with this model, and is now a feature of the M4 iPad Pro and M2 iPad Air) is that the front-facing camera is located on the longer end of the panel, meaning it offers a true landscape view that’s centrally located. This is much better suited to FaceTime and other video calling apps. That new landscape 12MP Ultra Wide camera has a f/2.4 aperture that delivers a 122-degree view; it’s also compatible with the Center Stage feature that keeps you in the center of the frame even if you move about while on video calls. Apple bestows this iPad with a 12MP f/1.8 rear camera so you can get some great shots and shoot video 4K video at 60fps. If your course requires any kind of video content, then either the front or back optics of the iPad (10th gen) should prove more than sufficient. Plus you can call home and look good doing so. An A14 Bionic processor is at the heart of this iPad, which is the same chip that powered the iPhone 12 (including the Pros). So there’s more than enough power for word processing, note-taking, coding, and most other education apps, not to mention gaming and entertainment duties. The switch from a Lightning port to USB-C also opens up the ability to use various peripherals and even power an external display if you want the iPad to become more like a fully-fledged computer. However, the A14 is not powerful enough for Apple Intelligence, Apple’s AI features that are available on the other iPads on sale right now. Whether that matters depends on your needs, but the editing assistance that is one of the Apple Intelligence features may be useful for a student. Read about what is in Apple Intelligence. Apple kits out the baseline model with 64GB, which feels a bit bit inadequate now, especially since Apple has doubled the storage in the iPad mini from 64GB to 128GB. There is no 128GB iPad right now, so you would have to opt for the 256GB version if you want the space for movie downloads, music, games and all your photos and videos on the device. The extra space will serve you better in the long run, but if you don’t want to blow that extra cash, then there’s always the option of expanding your iCloud storage so that you can keep stuff safe in the cloud instead. There are four colors to choose from (Blue, Yellow, Silver, and Pink) so you should be able to find one that suits your personality, and for extra functionality, you could invest in the new two-piece Magic Keyboard Folio, although the $249/£249 price tag does seem very high. Of course, a standard Bluetooth keyboard will get you the same results for a lot less money. As mentioned above, the new iPad supports the first-generation Apple Pencil, but as the charging port is now USB-C you’ll need an adaptor from Apple if you’ve already bought the Pencil. Otherwise, the dongle is now included in the box when you buy a new Apple Pencil (1st gen). Of course, there’s also the compatible Apple Pencil (USB-C) which gets around the dongle madness. As you can see, there are a few caveats, but with its modern design, solid processor, and larger display, the 10.9-inch iPad (10th gen) is a great all-rounder that would prove a wise investment for those heading off to pursue their studies. For more information, you can read our iPad 10.9-inch (10th gen) guide. We expect to see an 11th-generation iPad early in 2025, more here: What you need to know about the next iPad. How much can students save on the 10th gen iPad? MSRP: $349 / £329 / AU$599 / CA$499Students; $329 / £309 / AU$559 / CA$469 Students save: $20 / £20 / AU$40 / CA$30 Read our full Apple iPad (10th gen, A14, 2022) review 11-inch iPad Pro (2024): Best for Power and Performance Pros M4 Processor OLED display Stupidly light and thin Cons Expensive Probably overkill for students Price When Reviewed: $999 (Wi-Fi only) Best Prices Today: $899 at B&H$899 at Best Buy$924 at Walmart ElectronicsNot Available at Amazon The Pro iPads are the pinnacle of Apple’s tablet range, and as such they feel like the power and price are probably overkill for your average student. That being said, if you want the best, then this is where you’ll find it. The 11-inch iPad Pro (M4), was introduced in May 2024, boasting incredibly light and thin construction, but with a stupid amount of power inside. In an unprecedented step, Apple introduced the new M4 processor in the iPad before the Mac, making the 11-inch iPad Pro and 13-inch iPad Pro the most up-to-date devices in the Apple catalog. The question really, is do you need all that grunt? If you’re after an iPad for taking notes, writing essays, watching Netflix, playing some games and using it for video calls home, then the iPad Air is a better balance of power and price. But, for those with money burning a hole in their pockets, and those planning to do a lot of gaming when they should be studying, the 11-inch iPad Pro comes with a new Ultra Retina XDR OLED display that has two layers (Apple calls this Tandem OLED) to produce the brightest panel they’re ever made, kicking out up to 1600 nits. It’s also ProMotion, with an ultra-smooth 120Hz refresh rate. Cameras are 12Mp sensors, with the rear unit a Wide lens that can record video up to 4K/60fps, plus ProRes capabilities which would be of interest to video content creators. The front-facing lens also has the TrueDepth array, allowing Face ID, which remains a Pro-only features on iPads. You get Centre Stage for video calls, and the placement of the camera on the longer edge means you get landscape view. The two size variants offer the same capabilities, with 256GB of storage the baseline, and prices starting at $999/£999 ($899 for students) for the 11-inch model and $1,299/£1,299 for the 13-inch variant. As we’ve said, the iPad Pros are probably too much for your typical student, but that doesn’t mean they aren’t excellent products for those who can afford them and take advantage of all the power on offer. How much can students save on the 11-inch iPad Pro? MSRP: $999 / £999 / AU$1,699 / CA$1,399Students: $899 / £899 / AU$1,529 / CA$1,249 Students save: $100 / £100 / AU$170 / CA$150 Get the best deal on a new iPad Pro. Read our full Apple iPad Pro 11-inch (M4, 2024) review iPad 10.2in (9th gen, 2021): Best Bargain Hunt iPad Pros Cheap Centre Stage support for FaceTime Compatible with any Bluetooth keyboard Cons No longer sold by Apple 64GB storage may be too little Price When Reviewed: $329 (64GB) | $479 (256GB) Best Prices Today: $199.99 at Best Buy$199.99 at Target $258 at Adorama Since we expect that students are likely to be looking to save money where they can, we’d suggest that the 10.2in iPad (9th gen) is the closest you can get to a bargain iPad. True, it is no longer in production, being discontinued in early 2024 by Apple, but there may still be stock available from third-party sellers out there, and refurbished models could make the ticket price even lower. If you want an iPad to cover the basics, it offers enough performance and features to make it an excellent choice for many students. The final 2021 model featured the more than adequate A13 that previously powered the iPhone 11 range (this won’t work with Apple Intelligence though). The FaceTime cameras has an Ultra-Wide lens and support for Center Stage, making video calls home a lot better looking than on previous iPads. It can happily run the Microsoft Office apps for iPad if that is what you want to use, but there are free productivity apps from Apple and others that will make note-taking and working on assignments a doddle. Add a Bluetooth keyboard and mouse and you have a very workable laptop that should cope with most coursework demands. Support for Apple Pencil (gen 1) means you can annotate documents, sketch, and of course practice your handwriting.  The iPad 10.2-inch is still a great pick if you can find one and your demands aren’t too onerous. It will handle academic life with ease, and provide plenty of entertainment when lessons are over. One word of caution, though. The base model comes with only 64GB of storage, which in this day and age seems pretty mean. With that in mind, we’d recommend opting for the 256GB version as it would be more practical, albeit more expensive. As a rough guide, here’s the prices for the iPad (9th Gen) when it was still available from Apple – $329 / £369 / AU$549 / CA$449. Get the best deal on a new 10.2-inch iPad Read our full Apple iPad 10.2in (2021) review Should students buy an iPad or a laptop? Before you go ahead and buy your iPad you may want to consider its suitability for your purpose. As a student you probably have a few requirements: Low price Great apps for things like note-taking, recording lectures and revision Light enough to carry around all-day Keyboard and stylus support Suitable for making video calls home You might be wondering whether a tablet or a laptop would be better for those needs, and if you lean towards the latter, take a look at our guide to the best Macs for students. We think, however, that an iPad is a great choice. It runs many of the apps you’ll find on a laptop, including Office apps like Word and PowerPoint and the Apple equivalents, and in some cases, an iPad is actually more powerful than a laptop thanks to the super-fast processors Apple uses. Another benefit is that you can have all the books you need for your course on your iPad and carry them with you to lectures and tutorials. You could even photograph pages from books in the library and use optical character recognition to save the text to your iPad. Not only do you not need to lug all your books around with you, but an iPad is also far lighter than even the lightest laptop, so you won’t get backache from carrying it to lectures and the library. With battery life of 10 hours–plenty for a day on campus–you aren’t going to need to find a space beside a plug socket in order to get through a day at uni. Think that having an iPad will mean you have to type on an on-screen keyboard. No! You could sync any Bluetooth keyboard or plug in one of Apple’s own iPad keyboards and effectively turn your iPad into a laptop. There’s also the Apple Pencil, which could come in useful if you wanted to jot down some notes on your iPad screen in a lecture. See Best stylus for iPad. And when you’ve finished studying there are loads of games, and apps for video calling your parents. Still not sure? We have more information comparing a MacBook laptop and an iPad. Are iPads good for students? The next question you might want some reassurance on is whether the iPad is the best option for a student. There are a lot of other tablets available, many of which are cheaper than an iPad. So you might be thinking of saving some money. We think if you do so you will regret it. There are many reasons why Apple’s iPads are so popular: The App Store is heaving with great apps designed specifically for the iPad. Many of those apps will be ideal for students: note-taking apps, apps for converting handwriting to text, apps for recording lectures, timetable management, and of course video calling (so you can stay in touch with mum and dad). There is an ecosystem of great accessories designed to work with the iPad. Apple’s iPadOS is stable and easy to use, especially if you already have an iPhone. If you’ve got a Mac you can use an iPad as a second screen, provided you’re running Big Sur or later.  Apple Intelligence, powered by AI, may simplify your studies by carrying out summarisations of text, creating images for illustrations, and other useful features. That’s all of our student-related buying advice, but if you’re buying for someone younger, check out our guide to the best iPad for Kids.

Read more »

iOS 18.2: These great non-AI features are coming soon to your iPhone
Macworld When iOS 18.2 rolls out to all iPhones next week (we think), it’s going to bring a ton of great new features. Most of the focus is on the new Apple Intelligence capabilities, and for good reason: AI is Apple’s big marketing hook but the features are rolling out gradually over several months. The iOS 18.2 (and macOS 15.2) adds long-awaited image tools and ChatGPT integration that make Apple Intelligence a lot more useful. But if you don’t have an iPhone 16 or iPhone 15 Pro, none of that matters to you. Fortunately, iOS 18.2 isn’t just an Apple Intelligence drop, it adds a host of other quality-of-life features and changes, too. Here are all the new things in iOS 18.2 that have nothing to do with Apple Intelligence. Camera Control improvements After months of criticism, Apple is making several tweaks to the Camera Control button in iOS 18.2, for those with an iPhone 16. First, pressing and holding the button will launch the new Visual Intelligence feature. But there are some other quality-of-life improvements, too. In Settings > Accessibility > Camera Control you’ll be able to adjust the double-click speed. You can also enable an autofocus/exposure lock in Settings > Camera > Camera Control, so a light press on the button locks exposure and focus much as it usually does on the shutter button of a DLSR. Finally, there’s a new toggle that requires the screen to be on for the Camera Control button to launch a camera app. You’ll find that in Settings > Display & Brightness, which is sort of a confusing place for it. Foundry New Mail app with smart categories The Mail app will analyze the content of your emails and automatically categorize them into four categories: Primary: Your personal mail or mail that needs to be acted on right away. Transactions: Receipts, order confirmations, shipping notices, etc. Updates: News and newsletters, social media notifications, and the like. Promotions: Coupons, marketing offers, and so on. The four categories will exist as buttons at the top of the Mail app, and you can swipe left on them to show All Mail. And no, Apple isn’t reading your emails. All of this happens on the device. Volume limit and lock screen slider In the Settings > Sound & Haptics menu, there’s a new Volume Limit feature for your iPhone’s built-in speaker (volume limits for headphones have been around for a long time). It only affects media playback, not calls/FaceTime, alerts, or system sounds. There’s also a new option in Settings > Accessibility > Audio & Visual called “Always Show Volume Control.” This will put the volume control slider back on the bottom of the media playback controls on your Lock screen. That volume slider was removed back in iOS 16 (unless you were using AirPlay), and if you miss it, you can have it back now. Default messaging and calling apps In iOS 18.2’s Settings > Apps you’ll find a new selection at the top, before your list of installed apps, called Default Apps. In this menu, you’ll choose default applications for things like email, browser, passwords & codes, and more. Most are options you had before (albeit scattered throughout Settings), but Messaging and Calling are new. There are no applications that qualify to populate those areas right now, but that’s probably just a matter of existing apps needing new versions that use new frameworks. Foundry Sudoku puzzles in News+ If you’re a News+ subscriber, you have access to several puzzles in the News app. Apple publishes daily crosswords, crosswords mini, and a word game called Quartiles. Now, daily Sudoku puzzles join the list. There is an easy, moderate, and challenging puzzle available each day. Foundry AirTag item location sharing You’ve been able to share an AirTag with another iPhone user, but that’s only really helpful for family members or trusted friends. With iOS 18.2, Apple is going to let you create a secure link you can share with someone else to let them see the location of an AirTag. They’ll be able to open it on any device, even just a web browser on any computer, and see the location of that AirTag. The link automatically expires after 7 days or when the AirTag is reunited with its owner, and of course the owner can turn off the sharing at any time. What’s more, Apple is working with a bunch of major airlines to make this sharing process a part of their customer service flow for lost luggage. Apple Charge time estimates This isn’t yet available in the IOS 18.2 beta, but 9to5Mac discovered code that suggests Apple will soon show you how much longer your iPhone has until it reaches a full charge. The feature first appeared in the iOS 18.2 beta, but it’s not live yet. There’s a very good chance it will be switched on by the time iOS 18.2 is available for all. If not expect it in iOS 18.3 sometime in February.

Read more »

Apple outshines Samsung in India with surging iPhone shipments
Apple shipped over 4 million iPhone in India in Q3 2024 and is on track to ship over 12 million iPhones in the country this year. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple releases dedicated iCloud Passwords add-on for Firefox web browser
This could come in handy. Apple has released a dedicated iCloud Passwords add-on designed for the Firefox web browser, allowing Firefox users to access passwords and logins stored in the Passwords app or iCloud Keychain when using Firefox on a Mac. The extension is being distributed by Apple, but it appears that it was originally […] Source

Read more »

Rumor: Display-equipped HomePod delayed until 2025 as Apple struggles with software elements for the device
If you’re hankering for Apple’s rumored HomePod with a display, you might have to wait a little while longer. According to noted analyst Ming-Chi Kuo, the purported device may not launch until the third quarter of 2025. Kuo stated is that the software development for the new device is taking longer than expected. Rumors about […] Source

Read more »

How to find your music stats with Apple Music Replay 2024
Apple Music Replay 2024 is where you find your most-played songs, artists and albums from the past year. Here's how to find it. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

OWC ThunderBlade review: Super rugged, dead quiet, solid-state storage for pros
Macworld At a glanceExpert's Rating Pros Very fast RAID 0 performance 2TB to 32TB capacity Cross-platform SoftRAID Pro included Rugged carrying case. Cons Super expensive Our Verdict It’s pricey, but OWC’s Thunderblade four-slot, NVMe SSD Thunderbolt 3 enclosure delivers the performance goods–with up to 32TB of capacity–to the pros that need it. Price When Reviewed This value will show the geolocated pricing text for product undefined Best Pricing Today Retailer Price OWC $800 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket Price When Reviewed$800 for 2TB Best Prices Today: OWC Thunderblade NVMe RAID enclosure Retailer Price OWC $800 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket OWC’s ThunderBlade delivers excellent read and write performance in a handsome, svelte package that is available in capacities up to a whopping 32TB. In fact it’s the third fastest external SSD we’ve tested, and the fastest Thunderbolt SSD in the charts. What it is not, is cheap. Expect to lay down thousands, not hundreds for the experience. For a product aimed at film and video pros, that’s not generally an issue. For you and me… The ThunderBlade is a black, radiator-finned, 4-slot NVMe M.2 SSD enclosure measuring approximately 7.5-inches long, by 4.75-inches wide, by 1-inch tall. It’s a rather hefty (and sexy by my lights) beast at 1-pound, 10-ounces. No inadvertently sliding off the table with this one. The Thunderbolt 3 ports and power connector on the back of the ThunderBlade. A 3-inch long slit on the front is home to the power/activity LED, while the rear of the unit offers up two Thunderbolt 3 ports as well as the DC input jack. The power brick (AC adapter) that fits into said input is 15 volts and 4.8 amps. As it’s envisioned as fast, rugged storage for video fieldwork, the ThunderBlade comes in a sturdy carrying case that fits both the drive and the power adapter. The case is made of thick, impact-resistant plastic that we’re sure will hold up. The ThunderBlade sitting in its rugged carrying case. The ThunderBlade ships with a three-year license for the Pro version of the company’s cross-platform SoftRAID software. After three years, you lose the ability to create new arrays, but basic functionality remains intact–you don’t lose use of the drive. You may of course also use macOS’s or Window’s own software solutions, but you’re then tied to one or the other operating system. One reason I prefer hardware RAID is that it’s OS-independent. Many of the recovery tools I use are Linux-based. Note that the ThunderBlade is also available in an eight-slot version, logically monikered the ThunderBlade X8. Alas, you’d think it would top out at 64TB, but it’s currently sitting at 16TB with a 32TB version out soon. We wish there were unpopulated versions of both the four-slot and eight-slot. OWC ThunderBlade: Price Hold onto your hats folks: the entry-level 2TB ThunderBlade we tested costs a cool $800. It gets steeper from there, with the 4TB version costing $1,180, the 8TB version is $1,800, the 16TB version is $2800, and the 32TB version setting you back a rather daunting $6,000. The ThunderBlade sitting on its side, upright. The pricing places the ThunderBlade firmly in AV professional territory, as there are certainly cheaper ways for end users to get this type of performance and capacity. At least up to 16TB. 8TB SSDs still carry a hefty premium at well over $1,000 each (four are in the 32TB version). OWC’s own 1M2 and especially Adata’s SE920 40Gbps USB 4 SSDs come to mind as more affordable options for end users. Still, OWC makes high-quality goods and the warranty is three years which is good for an external drive. But given the price, we do wish the SoftRAID Pro license was perpetual, not limited to three years. How fast is the ThunderBlade? Pretty darn fast would be the answer to this question. Even with the four smaller 480GB SSDs OWC shipped in our test unit, the ThunderBlade proved the third fastest external SSD I’ve tested. It’s bested only by the aforementioned Adata SE920 and OWC’s 1M2–both 40Gbps USB 4 drives. Testing on a Mac Studio with AmorphousDiskMark and Disk Speed test proceeded without incident, but there were one or two incidents with PCWorld’s test bed that are described at the end of this section. We tested in RAID 0 and RAID 1+0, which you might consider for redundancy in the larger capacity configurations. We also tested the ThunderBlade in non-RAID as single drives but performance was as weak as it was with the recently reviewed OWC Express 4M2. About 840MBps reading, and 750MBps writing. IMHO, there’s no reason to buy a ThunderBlade if you don’t run it in RAID 0. NVMe SSDs are not the failure risks that hard drives are, and there are cheaper options for single drives. Nothing wrong with these sequential and random transfer numbers from AmorphousDiskMark. . Blackmagicdesign’s Disk Speed Test rated the ThunderBlade as considerably slower than AmorphousDiskMark, with the latter being more in line with the Windows test tools shown after the Disk Speed Test graphic. Disk Speed Test didn’t rate the ThunderBlade at highly as AmorphousDiskMark CrystalDiskMark 8 on IDG’s PCWorld Windows test bed thought very highly of the TunderBlade’s sequential transfer capabilities as you can see below. Though not as fast as the USB 4 drives, the ThunderBlade is pretty darn fast. Random performance under CrystalDiskMark 8 was good, but not as good as the USB 4 drives. Random performance under CrystalDiskMark 8 was good, but not as good as the USB 4 drives. The ThunderBlade was very fast in our 48GB transfer tests. Holding its own against the two extremely fast USB 4 SSDs. The ThunderBlade was very fast in our 48GB transfer tests. Holding it’s own with the two extremely fst USB 4 SSDs. The SSDs being only 480GB did rule out our 450GB (483 billion bytes) write to a single drive, but we expect it would be as slow as the 4M2’s[link when possible) we recently reviewed. The ThunderBlade in RAID 0 is fantastic in this large file write, portending good things when you stream 4K or 8K video to it. The ThunderBlade as fantastic in this large file write, portending good things when you stream 4K or 8K video to it. As to those Window idiosyncrasies, in a couple of instances, a reboot was required before a SoftRAID volume or the separate drives would show up. And bizarrely, when I forgot to reformat to NTFS from APFS, SoftRAID still mounted the APFS volume and CrystalDiskMark 8 and AS SSD both ran fine. By what mechanism this was possible, I have no idea (no other suitable software installed) unless SoftRAID sports an APFS driver for Windows. If it does, it isn’t perfect as our real-world 48GB test write froze at the 88 percent mark. Once reformatted to NTFS, everything was hunky-dory and the ThunderBlade performed as advertised. Should you buy the OWC Thunderblade 4? We like the styling, we love the rugged enclosure and carrying case, and the performance is excellent in RAID 0–the only way the ThunderBlade should be utilized by my lights. That leaves financial wherewithal as your sole consideration when buying a ThunderBlade.

Read more »

Macworld Podcast: Five years of Apple TV+
Macworld The Apple TV+ service recently had its five-year anniversary, so on this episode of the Macworld Podcast, we talk about Apple’s foray into the entertainment streaming industry. What has the experience been, what can we expect in the future, and, of course, what are our favorite shows. This is episode 912 with Jason Cross, Michael Simon, and Roman Loyola.  Watch episode 912 on YouTube Listen to episode 912 on Apple Podcasts

Read more »

Say goodbye to iCloud Drive with cheap lifetime cloud storage for Cyber Week
Macworld How long have you been blindly paying for iCloud Drive? If you’re still paying subscription fees, it’s time to ditch them and grab lifetime cloud storage instead. We recommend FolderFort, which is now only $59.97 during Cyber Week (reg. $251)! You’ll never have to pay a recurring fee again — or scout for a lower price anywhere else — with this one-time payment for FolderFort. 1TB of storage is more than enough to last you a lifetime and is easy enough to expand as needed). It can hold about 250,000 photos, 500 hours of videos, and more (depending on file size).   ​Worried about privacy? All your photos, videos, and documents saved on FolderFort are secured with world-leading encryption from Backblaze. You’ll also have easy organization tools to move your files into folders, create shareable links, or add people to your workspace. Each person you add also gets their own 1GB cloud for free. Say goodbye to your monthly iCloud Drive fee when you grab lifetime access to FolderFort, now $59.97 through December 8 at 11:59 PM PT. No coupon is needed to get this price.   FolderFort 1TB Cloud Storage Pro Plan: Lifetime Subscription – $59.97 See Deal StackSocial prices subject to change.  

Read more »

Apple’s iCloud Passwords extension arrives for Firefox fans
A new iCloud Passwords extension for Firefox from Apple will make accessing your saved passwords in the Mozilla web browser easier. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

How to renew your DHCP lease on macOS
DHCP is a networking protocol used to assign an IP address to your Apple device. Here's how to force a new IP address on macOS.Force-renew the DHCP lease on your Mac.Dynamic Host Configuration Protocol (DHCP) allows a network device to request an IP address from a DHCP server on a network. DHCP makes starting and configuring computers easier since it's usually automatic and doesn't require any user intervention.There are separate versions of the DHCP protocol for IP4 and IP6 (DHCPv6). Continue Reading on AppleInsider

Read more »

Apple Savings APY hits new low of 3.90% after Federal Reserve rate cut
The Apple Savings APY falls again after another Federal Reserve rate cut in November, reaching a new all-time low of 3.90% APY.Apple Savings APY drops to 3.90%Apple launched a high-yield savings account attached to the Apple Card in April 2023 at 4.15% APY. It climbed up to 4.5% by January 2024 and saw its first rate cut in April to 4.4%, then a second cut to 4.25% in September, and another to 4.10% in October.Apple has begun notifying Apple Savings users of another APY dip on Wednesday night. The 4.10% rate was already an all-time low for the high-yield savings account, but it has reached a new low of 3.90%. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Former Apple employees allegedly stole $152k through donation matching scam
An alleged donation theft scheme involving six former Apple employees, tax fraud, and an inside man funneling money away from charities robbed Apple of about $152k over three years.Apple ParkLike many big companies, Apple matches donations made by employees to various organizations. Somehow, a group of employees (now former) allegedly figured out a loophole that would let them keep their money, take the matched donation, and make a claim on their taxes.According to a report from CBS based on a release from The County of Santa Clara, the six people defrauded the State of California and Apple's Matching Gifts Program. The report states that ringleader Siu Kei Kwan directed five employees to make donations to two organizations he had access to. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple Card Savings Account gets another interest rate cut
Apple and Goldman Sachs have announced another rate cut for Apple Card Savings Account. Starting today, Apple Card Savings Account offers a 3.90% annual percentage yield, down from 4.10%. more…

Read more »

Dockcase MagSafe SSD Enclosure review: Small and nimble storage on the go
This MagSafe SSD enclosure helps bring your storage wherever you are and connect to any of your devices.Dockcase MagSafe SSD Enclosure reviewIn 2024, USB-C is king. Connecting all your devices through power, storage, and display is easier than ever.Dockcase takes advantage of this with a MagSafe design to put an SSD on the back of your iPhone while you record video or transfer files. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Threads now lets users follow fediverse accounts – but there are limitations
From the beginning, Meta built its Threads microblogging platform with fediverse integration in mind. However, this integration has been rolling out in parts, and there’s another important update coming. Threads users can finally follow accounts from other fediverses, although there are still many limitations. more…

Read more »

9to5Mac Daily: December 4, 2024 – Apple and Amazon, Spotify Wrapped
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. This Black Friday, discover Dreame Technologies’ innovative family of smart home cleaning solutions—designed to revolutionize your cleaning routine! Don’t miss out on groundbreaking deals, plus enjoy an extra 5% off with code DM9to55off at checkout. Experience the future of cleaning today! more…

Read more »

Mac Firefox users can now get access to iCloud passwords
Macworld Apple’s iCloud Keychain is fantastic when using Safari on different devices, but it’s not as useful when switching to a different browser. Not anymore. Mozilla has announced that a new iCloud Passwords extension for Firefox for macOS is now available. The extension will allow Firefox to access iCloud Keychain and fill in usernames and passwords when needed for accessing accounts online. The iCloud Passwords extension for Firefox can also create passwords that are saved to the iCloud Keychain and synced to the Passwords app. The extension requires macOS Sonoma or later. An iCloud Bookmarks extension for Firefox for Windows is also available and requires iCloud for Windows. It allows Windows PC users to sync bookmarks with iCloud. With macOS Sequoia, Apple introduced a new Passwords app where users can manage password information. The password integration came built into Safari, while Google Chrome has its own iCloud Passwords extension. Learn more about password manager apps for iOS and macOS.

Read more »

Feature-packed mobile game controller cools your iPhone while you play
The newly launched GameSir X3 Pro Mobile Gaming Controller packs plenty of features, including built-in cooling. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple shares hit new all-time closing high
In Nasdaq trading today, shares of Apple Inc. rose to hit a new all-time closing high. Apple’s all-time intraday high was set on… The post appeared first on MacDailyNews.

Read more »

Apple shows how the iPhone’s Action Mode helps people with Parkinson’s shoot videos
Apple puts a lot of effort into promoting accessibility with things like the hearing aid feature for AirPods Pro. This time, however, the company showed an example of how the iPhone’s Action Mode has been helping people with Parkinson’s in their routines. more…

Read more »

Here are the best Apple ecosystem ‘magic moments’ you should know
We’ve all heard the term the Walled Garden when talking about the Apple ecosystem. Apple’s biggest competitive advantage is the fact that they control everything from both a hardware and software perspective, allowing its customers to experience these little features I like to call Magic Moments. These are smaller utilities or features that are only possible because you have multiple Apple products that work off of each other giving us these wow moments. So here are some of my favorite Magic moments of the Apple Walled Garden. more…

Read more »

Tim Cook defends Vision Pro’s sales performance with three words
Apple launched the Vision Pro less than a year ago. This is its first holiday season. Yet already, there’s a prominent general narrative that the device has flopped. Tim Cook, however, has recently and repeatedly used three key words to defend the Vision Pro’s sales performance. more…

Read more »

Apple TV+ announces second season for beloved kids series ‘Eva the Owlet’
Apple TV+ on Wednesday announced a second season for the beloved animated kids and family series “Eva the Owlet,” based on the… The post appeared first on MacDailyNews.

Read more »

The Beats Studio Pro is $150 Off
The over-ear Beats Studio Pro headphones is marked 43% off on Amazon, bringing the price down to $199.99 Featuring the custom Beats Acoustic Platform, the Beats Studio Pro delivers immersive surround sound, comparable to 64 speakers, when watching movies, listening to music, or playing games. Lossless and spatial audio enhances your experience with high-quality audio […] The post appeared first on iLounge.

Read more »

Apple rumored to use titanium Chassis for the iPhone 17 Pro model
The iPhone 17 Pro and Pro Max models anticipated by next year will be having a titanium chassis similar to the Pro lineup of the iPhone 16. Back in November, it was reported that the iPhone 17 Pro models may be the first iPhones leaning towards the higher end that would come in a frame […] The post appeared first on iLounge.

Read more »

Pat Gelsinger, Intel CEO, announces retirement
Pat Gelsinger, CEO of Intel, has announced his retirement following significant challenges in the multinational corporation’s struggles with the competition against other major players in the chip industry like Apple. Gelsinger’s stepping down was announced on December 1st, marking the end of a career that lasted 40 years in the company. Intel was facing a […] The post appeared first on iLounge.

Read more »

Apple Watch getting Tesla app later this month
Tesla’s dedicated app on the Apple Watch will roll out starting next week, with the automotive company announcing today that its owners will receive the ability to use their Apple Watch as a digital key for their vehicle. Once the OTA update is ready, users can control and unlock their car using the watchOS app. […] The post appeared first on iLounge.

Read more »

These are my favorite Find My accessories this holiday season
There’s a robust ecosystem of Find My accessories on the market nowadays. All of these accessories would make great holiday gifts this year across all kinds of different form factors. What’s a better gift than giving someone a way to keep track of their most important possessions? That person will thank you for years to come. more…

Read more »

President Trump picks Gail Slater to lead DOJ’s antitrust division
U.S. President-elect Donald Trump on Wednesday chose Gail Slater, an antitrust veteran and economic adviser for J.D. Vance… The post appeared first on MacDailyNews.

Read more »

U.S. Offered $10M for Hacker Just Arrested by Russia
In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as "Wazawaka," a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies.

Read more »

Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) -- such as .shop, .top, .xyz -- that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds. Meanwhile, the nonprofit entity that oversees the domain name industry is moving forward with plans to introduce a slew of new gTLDs.

Read more »

Vulnerability Summary for the Week of November 25, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Portfolio Management System MCA  A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-26 7.3 CVE-2024-11744 1000 Projects--Portfolio Management System MCA  A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-27 7.3 CVE-2024-11819 1000projects -- beauty_parlour_management_system  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11646 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11647 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11648 1000projects -- beauty_parlour_management_system  A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11649 AbsolutePlugins--Absolute Addons For Elementor  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AbsolutePlugins Absolute Addons For Elementor allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through 1.0.14. 2024-11-28 7.5 CVE-2024-52496 Advantech--EKI-6333AC-2G  A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (securityEngineID to local_record.engineid without proper bounds checking. 2024-11-27 3 CVE-2024-36468 Zabbix--Zabbix  When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd- >data in the code below will remain NULL and an attempt to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42328 Zabbix--Zabbix  The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd- >error will be NULL and trying to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42329 Zabbix--Zabbix  In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd- >browser heap pointer is freed by garbage collection. 2024-11-27 3.3 CVE-2024-42331 Zabbix--Zabbix  The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host. 2024-11-27 3.7 CVE-2024-42332 Zabbix--Zabbix  When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element. 2024-11-26 2.2 CVE-2024-22117 Zabbix--Zabbix  When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords. 2024-11-27 2.7 CVE-2024-36464 Zabbix--Zabbix  The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c 2024-11-27 2.7 CVE-2024-42333 Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info autolab--Autolab  Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature. 2024-11-25 not yet calculated CVE-2024-53258 BoidCMS--BoidCMS  BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code. This code could be used to steal the user's session cookie, perform phishing attacks, or deface the website. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-25 not yet calculated CVE-2024-53255 bunkerity--bunkerweb  bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-27 not yet calculated CVE-2024-53264 Century Systems Co., Ltd.--FutureNet NXR-G110 series  FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs. 2024-11-29 not yet calculated CVE-2024-50357 Checkmk GmbH--Checkmk  Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions type] may result in an out-of-bounds access. To spot such missed invocations early in the future, checking the validity of link- >type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed. 2024-11-25 not yet calculated CVE-2024-53099 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp: don't access released socket during error recovery") added a mutex_lock() call for the queue- >queue_lock in nvme_tcp_get_address(). However, the mutex_lock() races with mutex_destroy() in nvme_tcp_free_queue(), and causes the WARN below. DEBUG_LOCKS_WARN_ON(lock- >magic != lock) WARNING: CPU: 3 PID: 34077 at kernel/locking/mutex.c:587 __mutex_lock+0xcf0/0x1220 Modules linked in: nvmet_tcp nvmet nvme_tcp nvme_fabrics iw_cm ib_cm ib_core pktcdvd nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc ppdev 9pnet_virtio 9pnet pcspkr netfs parport_pc parport e1000 i2c_piix4 i2c_smbus loop fuse nfnetlink zram bochs drm_vram_helper drm_ttm_helper ttm drm_kms_helper xfs drm sym53c8xx floppy nvme scsi_transport_spi nvme_core nvme_auth serio_raw ata_generic pata_acpi dm_multipath qemu_fw_cfg [last unloaded: ib_uverbs] CPU: 3 UID: 0 PID: 34077 Comm: udisksd Not tainted 6.11.0-rc7 #319 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:__mutex_lock+0xcf0/0x1220 Code: 08 84 d2 0f 85 c8 04 00 00 8b 15 ef b6 c8 01 85 d2 0f 85 78 f4 ff ff 48 c7 c6 20 93 ee af 48 c7 c7 60 91 ee af e8 f0 a7 6d fd 0b e9 5e f4 ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 RSP: 0018:ffff88811305f760 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88812c652058 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88811305f8b0 R08: 0000000000000001 R09: ffffed1075c36341 R10: ffff8883ae1b1a0b R11: 0000000000010498 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812c652058 FS: 00007f9713ae4980(0000) GS:ffff8883ae180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcd78483c7c CR3: 0000000122c38000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? __warn.cold+0x5b/0x1af ? __mutex_lock+0xcf0/0x1220 ? report_bug+0x1ec/0x390 ? handle_bug+0x3c/0x80 ? exc_invalid_op+0x13/0x40 ? asm_exc_invalid_op+0x16/0x20 ? __mutex_lock+0xcf0/0x1220 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx___mutex_lock+0x10/0x10 ? __lock_acquire+0xd6a/0x59e0 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx_nvme_tcp_get_address+0x10/0x10 [nvme_tcp] nvme_sysfs_show_address+0x81/0xc0 [nvme_core] dev_attr_show+0x42/0x80 ? __asan_memset+0x1f/0x40 sysfs_kf_seq_show+0x1f0/0x370 seq_read_iter+0x2cb/0x1130 ? rw_verify_area+0x3b1/0x590 ? __mutex_lock+0x433/0x1220 vfs_read+0x6a6/0xa20 ? lockdep_hardirqs_on+0x78/0x100 ? __pfx_vfs_read+0x10/0x10 ksys_read+0xf7/0x1d0 ? __pfx_ksys_read+0x10/0x10 ? __x64_sys_openat+0x105/0x1d0 do_syscall_64+0x93/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? __pfx_ksys_read+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? do_syscall_64+0x9f/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9713f55cfa Code: 55 48 89 e5 48 83 ec 20 48 89 55 e8 48 89 75 f0 89 7d f8 e8 e8 74 f8 ff 48 8b 55 e8 48 8b 75 f0 4 ---truncated--- 2024-11-25 not yet calculated CVE-2024-53100 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr- >ia_mode, attr- >ia_uid and attr- >ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0. 2024-11-25 not yet calculated CVE-2024-53101 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: make keep-alive synchronous operation The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race between the fabric controller admin queue destroy code path (invoked while shutting down controller) and hw/hctx queue dispatcher called from the nvme keep-alive async request queuing operation. This race could lead to the kernel crash shown below: Call Trace: autoremove_wake_function+0x0/0xbc (unreliable) __blk_mq_sched_dispatch_requests+0x114/0x24c blk_mq_sched_dispatch_requests+0x44/0x84 blk_mq_run_hw_queue+0x140/0x220 nvme_keep_alive_work+0xc8/0x19c [nvme_core] process_one_work+0x200/0x4e0 worker_thread+0x340/0x504 kthread+0x138/0x140 start_kernel_thread+0x14/0x18 While shutting down fabric controller, if nvme keep-alive request sneaks in then it would be flushed off. The nvme_keep_alive_end_io function is then invoked to handle the end of the keep-alive operation which decrements the admin- >q_usage_counter and assuming this is the last/only request in the admin queue then the admin- >q_usage_counter becomes zero. If that happens then blk-mq destroy queue operation (blk_mq_destroy_ queue()) which could be potentially running simultaneously on another cpu (as this is the controller shutdown code path) would forward progress and deletes the admin queue. So, now from this point onward we are not supposed to access the admin queue resources. However the issue here's that the nvme keep-alive thread running hw/hctx queue dispatch operation hasn't yet finished its work and so it could still potentially access the admin queue resource while the admin queue had been already deleted and that causes the above crash. This fix helps avoid the observed crash by implementing keep-alive as a synchronous operation so that we decrement admin- >q_usage_counter only after keep-alive command finished its execution and returns the command status back up to its caller (blk_execute_rq()). This would ensure that fabric shutdown code path doesn't destroy the fabric admin queue until keep-alive request finished execution and also keep-alive thread is not running hw/hctx queue dispatch operation. 2024-11-25 not yet calculated CVE-2024-53102 Mozilla--Firefox  The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. 2024-11-26 not yet calculated CVE-2024-11696 Mozilla--Firefox  On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133. 2024-11-26 not yet calculated CVE-2024-11703 msg Suisse AG--EasyTax  A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS. 2024-11-29 not yet calculated CVE-2024-9044 n/a--n/a  FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. 2024-11-29 not yet calculated CVE-2024-35366 n/a--n/a  FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer 2024-11-29 not yet calculated CVE-2024-35367 n/a--n/a  FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. 2024-11-29 not yet calculated CVE-2024-35368 n/a--n/a  Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions. 2024-11-29 not yet calculated CVE-2024-35371 n/a--n/a  LinkStack 2.7.9 through 4.7.7 allows resourcesviewscomponentsfavicon.blade.php link SSRF. 2024-11-29 not yet calculated CVE-2024-35451 n/a--n/a  A deserialization vulnerability exists in the Stub class of the VarDumper module in Symfony v7.0.3. The vulnerability stems from deficiencies in the original implementation when handling properties with null or uninitialized values. An attacker could construct specific serialized data and use this vulnerability to execute unauthorized code. 2024-11-29 not yet calculated CVE-2024-36610 n/a--n/a  In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. 2024-11-29 not yet calculated CVE-2024-36611 n/a--n/a  Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. 2024-11-29 not yet calculated CVE-2024-36612 n/a--n/a  FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. 2024-11-29 not yet calculated CVE-2024-36615 n/a--n/a  An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. 2024-11-29 not yet calculated CVE-2024-36616 n/a--n/a  FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. 2024-11-29 not yet calculated CVE-2024-36617 n/a--n/a  FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. 2024-11-29 not yet calculated CVE-2024-36618 n/a--n/a  moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. 2024-11-29 not yet calculated CVE-2024-36620 n/a--n/a  moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. 2024-11-29 not yet calculated CVE-2024-36621 n/a--n/a  In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter. 2024-11-29 not yet calculated CVE-2024-36622 n/a--n/a  moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes. 2024-11-29 not yet calculated CVE-2024-36623 n/a--n/a  nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. 2024-11-29 not yet calculated CVE-2024-36671 n/a--n/a  MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. 2024-11-29 not yet calculated CVE-2024-45495 n/a--n/a  WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. 2024-12-01 not yet calculated CVE-2024-45520 n/a--n/a  OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files. 2024-11-27 not yet calculated CVE-2024-46054 n/a--n/a  Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the power(uct_int_t x, uct_int_t n) in src/uct_upstream.c. 2024-11-29 not yet calculated CVE-2024-48406 n/a--n/a  Incorrect access control in Adapt Learning Adapt Authoring Tool

Read more »

Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

Read more »

Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass, MailChimp, Okta, T-Mobile and Twilio.

Read more »

Fintech Giant Finastra Investigating Data Breach
The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world's top 50 banks, notified customers of a potential breach after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company. 

Read more »

Vulnerability Summary for the Week of November 11, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Beauty Parlour Management System  A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 7.3 CVE-2024-11100 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11257 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11258 1000 Projects--Portfolio Management System MCA  A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11256 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47441 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47442 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47443 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-45114 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47450 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47451 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47452 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49507 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49508 adobe -- indesign  InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49509 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47426 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47427 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47428 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47429 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47430 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47431 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47432 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47433 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47434 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49515 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49516 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49517 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49518 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49519 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49520 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49525 Adobe--Adobe Commerce  Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction. 2024-11-12 7.7 CVE-2024-49521 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49526 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49528 Adobe--Photoshop Desktop  Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49514 adonesevangelista -- agri-trading_online_shopping_system  A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout. 2024-11-14 7.5 CVE-2024-50968 algolplus--Advanced Order Export For WooCommerce  The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2024-11-13 8.1 CVE-2024-10828 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21974 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21975 AMD--AMD Cloud Manageability Service Software  Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21939 AMD--AMD Management Console  Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21957 AMD--AMD Management Plug-In for SCCM  Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21938 AMD--AMD Provisioning Console (APC) Software  Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21958 AMD--AMD Ryzen AI Software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 8.8 CVE-2024-21976 AMD--AMD Ryzen Master Monitoring SDK  Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21945 AMD--AMD Ryzen Master Utility for Overclocking Control  Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21946 AMD--AMD Software: PRO Edition  Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21937 AMI--AptioV  APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode. 2024-11-12 7.2 CVE-2024-42442 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 9 CVE-2024-51490 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51484 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51485 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL?-?Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.4 CVE-2024-51486 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51487 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. 2024-11-13 7.2 CVE-2024-50971 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. 2024-11-13 7.2 CVE-2024-50972 angeljudesuarez -- tailoring_management_system  A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.php. The manipulation of the argument inccat/desc/date/amount leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "inccat" to be affected. But it must be assumed "desc", "date", and "amount" are affected as well. 2024-11-11 9.8 CVE-2024-11074 anisha -- job_recruitment  A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument e_hash leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11076 anisha -- job_recruitment  A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11077 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 9.8 CVE-2024-11099 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 8.8 CVE-2024-11127 Anthony Carbon--WDES Responsive Mobile Menu  Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18. 2024-11-16 9.8 CVE-2024-52414 Apache Software Foundation--Apache Airflow  Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability. If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets. 2024-11-15 7.5 CVE-2024-45784 Apache Software Foundation--Apache CloudStack  Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that can register templates, can use them to deploy malicious instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.5 or 4.19.1.3, or later, which addresses this issue. Additionally, all user-registered KVM-compatible templates can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run the following command on their file-based primary storage(s) and inspect the output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. However, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; doneFor checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-11-12 8.5 CVE-2024-50386 Apache Software Foundation--Apache Traffic Server  Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue. 2024-11-14 9.1 CVE-2024-50306 Apache Software Foundation--Apache Traffic Server  Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-38479 Apache Software Foundation--Apache Traffic Server  Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-50305 Arttia Creative--Datasets Manager by Arttia Creative  Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative.This issue affects Datasets Manager by Arttia Creative: from n/a through 1.5. 2024-11-14 10 CVE-2024-52375 Autodesk--Installer  A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management. 2024-11-15 7.2 CVE-2024-9500 Avigilon--VideoIQ iCVR HD camera  Avigilon - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-45253 axelkeller--GPX Viewer  The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-13 8.8 CVE-2024-10629 ays-pro--Chartify WordPress Chart Plugin  The Chartify - WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included. 2024-11-14 9.8 CVE-2024-10571 Baxter--Life2000 Ventilation System  The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 10 CVE-2024-48966 Baxter--Life2000 Ventilation System  The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance. 2024-11-14 10 CVE-2024-48967 Baxter--Life2000 Ventilation System  The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48970 Baxter--Life2000 Ventilation System  The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges. 2024-11-14 9.3 CVE-2024-48971 Baxter--Life2000 Ventilation System  The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-48973 Baxter--Life2000 Ventilation System  The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48974 Baxter--Life2000 Ventilation System  There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-9832 Baxter--Life2000 Ventilation System  Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-9834 BdThemes--Instant Image Generator  Unrestricted Upload of File with Dangerous Type vulnerability in BdThemes Instant Image Generator allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through 1.5.4. 2024-11-14 10 CVE-2024-52377 Bigfive--CF7 Reply Manager  Unrestricted Upload of File with Dangerous Type vulnerability in Bigfive CF7 Reply Manager.This issue affects CF7 Reply Manager: from n/a through 1.2.3. 2024-11-16 9.9 CVE-2024-52404 Bikram Joshi--B-Banner Slider  Unrestricted Upload of File with Dangerous Type vulnerability in Bikram Joshi B-Banner Slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through 1.1. 2024-11-16 9.9 CVE-2024-52405 BlackBerry--SecuSUITE  A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege. 2024-11-12 7.3 CVE-2024-51721 Boa web server--Boa web server 0.94.14rc21  Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-47916 Bosch Rexroth AG--IndraDrive FWA-INDRV*-MP*  A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages. 2024-11-13 7.5 CVE-2024-48989 Ciprian Popescu--W3P SEO  Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO allows Stored XSS.This issue affects W3P SEO: from n/a before 1.8.6. 2024-11-14 7.1 CVE-2024-51684 Cisco--Cisco BroadWorks  A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.6 CVE-2023-20125 Cisco--Cisco Cyber Vision  A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.5 CVE-2022-20685 Cisco--Cisco Industrial Network Director  A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit this vulnerability by altering the request that is sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITYSYSTEM on the underlying operating system of an affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 9.9 CVE-2023-20036 Cisco--Cisco IOS XR Software  A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root. 2024-11-15 8.8 CVE-2022-20655 Cisco--Cisco Modeling Labs  A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.This vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. 2024-11-15 9.1 CVE-2023-20154 Cisco--Cisco Redundancy Configuration Manager  A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container.This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user.The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.1 CVE-2022-20649 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.  The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic.Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20814 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.  2024-11-15 7.4 CVE-2022-20853 Citrix Session Recording--Citrix Session Recording  Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server 2024-11-12 8.8 CVE-2024-8069 Clarisse K.--Writer Helper  Unrestricted Upload of File with Dangerous Type vulnerability in Clarisse K. Writer Helper allows Upload a Web Shell to a Web Server.This issue affects Writer Helper: from n/a through 3.1.6. 2024-11-16 9.9 CVE-2024-52399 cli--cli  The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image]( https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-... https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers#using-the-default-dev-container-configuration) . GitHub CLI [retrieves SSH connection details]( https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/inv... https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/invoker.go#L230-L244 ), such as remote username, which is used in [executing `ssh` commands]( https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L2... https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L263 ) for `gh codespace ssh` or `gh codespace logs` commands. This exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand="echo hacked" #`. The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored. In `2.62.0`, the remote username information is being validated before being used. 2024-11-14 8 CVE-2024-52308 cmorillas1--External Database Based Actions  The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin settings and log in as any existing user on the site, such as an administrator. 2024-11-15 7.5 CVE-2024-10311 cmsMinds--Boat Rental Plugin for WordPress  Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through 1.0.1. 2024-11-14 10 CVE-2024-52376 code-projects--Job Recruitment  A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11241 codeSavory--BasePress Migration Tools  Unrestricted Upload of File with Dangerous Type vulnerability in codeSavory BasePress Migration Tools allows Upload a Web Shell to a Web Server.This issue affects BasePress Migration Tools: from n/a through 1.0.0. 2024-11-16 9.9 CVE-2024-52407 craftcms--cms  Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5. 2024-11-13 8.4 CVE-2024-52291 craftcms--cms  Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, reads the file's content, and converts it into a Base64-encoded string. By embedding this function within a system notification template, the attacker can exfiltrate the Base64-encoded file content through a triggered system email notification. Once the email is received, the Base64 payload can be decoded, allowing the attacker to read arbitrary files on the server. This is fixed in 5.4.9 and 4.12.8. 2024-11-13 7.7 CVE-2024-52292 craftcms--cms  Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3. 2024-11-13 7.2 CVE-2024-52293 creativeinteractivemedia--Real3D Flipbook Lite 3D FlipBook, PDF Viewer, PDF Embedder  The 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-16 8.8 CVE-2024-9849 cyberlord92--Login using WordPress Users ( WP as SAML IDP )  The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.15.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2024-11-16 7.2 CVE-2024-9887 Dang Ngoc Binh--Audio Record  Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through 1.0. 2024-11-11 10 CVE-2024-51792 Davor Zeljkovic--Convert Docx2post  Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through 1.4. 2024-11-16 9.1 CVE-2024-52397 decidim--decidim  Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0. 2024-11-13 7.7 CVE-2024-45594 decidim-ice--decidim-module-decidim_awesome  An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands. 2024-11-12 9 CVE-2024-43415 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. 2024-11-12 7.8 CVE-2024-49557 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 2024-11-12 7.8 CVE-2024-49558 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. 2024-11-12 7.8 CVE-2024-49560 Dell--SmartFabric OS10 Software  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution 2024-11-12 7.8 CVE-2024-48837 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39354 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39605 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-47131 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user's password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user's account. 2024-11-11 9.8 CVE-2024-11068 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11062 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11063 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11064 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11065 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page. 2024-11-11 7.2 CVE-2024-11066 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password. 2024-11-11 7.5 CVE-2024-11067 DMC--Airin Blog  Deserialization of Untrusted Data vulnerability in DMC Airin Blog allows Object Injection.This issue affects Airin Blog: from n/a through 1.6.1. 2024-11-16 9.8 CVE-2024-52413 DonnellC--Global Gateway e4 | Payeezy Gateway  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0. 2024-11-14 8.6 CVE-2024-52371 DoThatTask--Do That Task  Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task allows Upload a Web Shell to a Web Server.This issue affects Do That Task: from n/a through 1.5.5. 2024-11-14 10 CVE-2024-52374 dotnetzip.semverd_project -- dotnetzip.semverd  Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer. 2024-11-13 9.8 CVE-2024-48510 Elastic--Kibana  A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. A successful attack requires a malicious user to have a combination of both specific Elasticsearch indices privileges https://www.elastic.co/guide/en/elasticsearch/reference/current/defining-roles.html#roles-indices-priv  and Kibana privileges https://www.elastic.co/guide/en/fleet/current/fleet-roles-and-privileges.html  assigned to them. The following Elasticsearch indices permissions are required * write privilege on the system indices .kibana_ingest** The allow_restricted_indices flag is set to true Any of the following Kibana privileges are additionally required * Under Fleet the All privilege is granted* Under Integration the Read or All privilege is granted* Access to the fleet-setup privilege is gained through the Fleet Server's service account token 2024-11-14 9.1 CVE-2024-37285 Eugen Bobrowski--Debug Tool  Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through 2.2. 2024-11-16 10 CVE-2024-52416 Flowcraft UX Design Studio--Advanced Personalization  Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2. 2024-11-16 9.8 CVE-2024-52411 fortinet -- forticlient  A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts. 2024-11-12 8.8 CVE-2024-36513 fortinet -- forticlient  A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. 2024-11-12 7.8 CVE-2024-36507 Fortinet--FortiClientWindows  A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. 2024-11-13 7.8 CVE-2024-47574 Fortinet--FortiManager  A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigDataat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. 2024-11-12 7.5 CVE-2024-23666 Fortinet--FortiOS  A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link. 2024-11-12 7.5 CVE-2023-50176 FraudLabs Pro--FraudLabs Pro SMS Verification  Cross-Site Request Forgery (CSRF) vulnerability in FraudLabs Pro FraudLabs Pro SMS Verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through 1.10.1. 2024-11-14 7.1 CVE-2024-51688 FreeBSD--FreeBSD  The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option. 2024-11-12 7.5 CVE-2024-45289 GeekRMX--Twitter @Anywhere Plus  Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus allows Stored XSS.This issue affects Twitter @Anywhere Plus: from n/a through 2.0. 2024-11-14 7.1 CVE-2024-51659 GentleSource--Appointmind  Cross-Site Request Forgery (CSRF) vulnerability in GentleSource Appointmind allows Stored XSS.This issue affects Appointmind: from n/a through 4.0.0. 2024-11-14 7.1 CVE-2024-51679 GeoVision--GV-VS12  Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports. 2024-11-15 9.8 CVE-2024-11120 GitLab--GitLab  An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations. 2024-11-14 8.5 CVE-2024-9693 glpi-project--glpi  GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. 2024-11-15 8.1 CVE-2024-40638 gogs--gogs/gogs  A remote command execution vulnerability exists in gogs/gogs versions

Read more »

An Interview With the Target & Home Depot Hacker
In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel, who confirmed using the Rescator identity in a recent interview, also admitted reaching out because he is broke and seeking publicity for several new money making schemes.

Read more »

Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed prior to today.

Read more »

FBI: Spike in Hacked Police Emails, Fake Subpoenas
The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based technology companies.

Read more »

Canadian Man Arrested in Snowflake Data Extortions
A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka's alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.

Read more »

Apple has clearance 15-inch M2 MacBook Airs available starting at $929, Certified Refurbished
Apple has clearance, Certified Refurbished, 15" M2 MacBook Airs now available starting at $929 and ranging up to $410 off original MSRP. These are the cheapest 15" MacBook Airs for sale today at Apple. Apple's one-year warranty is included, shipping is free, and each MacBook has a new outer shell. The following standard-configurations are available: - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Space Gray: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Silver: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Starlight: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 8-Core GPU/8GB RAM/256GB SSD/Midnight: $929, $370 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Space Gray: $1089, $410 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Silver: $1089, $410 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Starlight: $1089, $410 off original MSRP - 15" MacBook Air/8-Core M2 CPU, 10-Core GPU/8GB RAM/512GB SSD/Midnight: $1089, $410 off original MSRP According the Apple, “You will receive a 'like new' device with genuine Apple replacement parts (as needed) that has been thoroughly cleaned and inspected. Every device will come with all accessories, cables and operating systems. All Apple Certified Refurbished products are packaged in a brand new white box and will be sent to you with free shipping and returns.” Note that stock status may vary, check Apple's site for availability. For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Holiday Sale: 14-inch M4 Pro/M4 Max MacBook Pros for $200 off MSRP at B&H
B&H Photo is offering a $200 discount on new 14-inch MacBook Pros with M4 Pro or M4 Max MacBook Pros as part of their ongoing Holiday sales. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 Pro MacBook Pro (24GB/512GB): $1799, $200 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB): $2199, $200 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB): $2999, $200 off MSRP Their prices are the lowest available today for new 14" M4 Pro/Max MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Holiday Sale: 16-inch M4 Pro/M4 Max MacBook Pros for $200-$250 off MSRP at B&H
B&H Photo is offering a $200-$250 discount on new 16-inch MacBook Pros with M4 Pro or M4 Max MacBook Pros as part of their ongoing Holiday sales. B&H offers free 1-2 day shipping to most US addresses: - 16" M4 Pro MacBook Pro (24GB/512GB): $2299, $200 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2699, $200 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB): $3249, $250 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB): $3799, $200 off MSRP Their prices are the lowest available today for new 16" MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Cheapest iMacs for sale today at Apple: Refurbished 24-inch M3 iMacs for $1019, M1 iMacs for only $969
Apple has last year's 24-inch M3 iMacs available starting at $1019, Certified Refurbished. Each iMac is in like-new condition and comes with Apple's standard one-year warranty: - 24-inch M3 iMac 8-Core CPU/8-Core GPU (all colors): $1019, original MSRP $1299 - 24-inch M3 iMac 8-Core CPU/10-Core GPU/256GB SSD (all colors): $1189, original MSRP $1499 - 24-inch M3 iMac 8-Core CPU/10-Core GPU/512GB SSD (all colors): $1359, original MSRP $1699 Apple has clearance M1 iMacs available in their Certified Refurbished store starting at $969. These are the cheapest iMacs for sale at Apple: - 24-inch M1 iMac 8-Core CPU/7-Core GPU (all colors): $969 - 24-inch M1 iMac 8-Core CPU/8-Core GPU/256GB SSD (all colors): $1139 - 24-inch M1 iMac 8-Core CPU/8-Core GPU/512GB SSD (all colors): $1299 Details at Apple here. For the latest prices and deals, see our iMac Price Tracker, updated daily.

Read more »

Apple Watch Series 9 in stock today at Apple starting at $299, Certified Refurbished
Apple has a full line of Certified Refurbished Apple Watch Series 9 models available in their online store starting at $299. Each Watch includes Apple's standard one-year warranty, a new outer case, new band, and free shipping: - 41mm Apple Watch Series 9 GPS: $299 - 45mm Apple Watch Series 9 GPS: $319 - 41mm Apple Watch Series 9 GPS + Cellular: $379 - 45mm Apple Watch Series 9 GPS + Cellular: $399 Note that availability of specific models and colors vary and can change rapidly. Details available at Apple here. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Full size 2nd-generation HomePods in stock at Apple for $249, $50 off MSRP
Apple has Certified Refurbished White and Midnight HomePods available for $249, Certified Refurbished. That's $50 off MSRP and the lowest price currently available for a full-size Apple HomePod today. Shipping is free, and each HomePod includes Apple's standard 1-year warranty. The outer case is new. According to Apple, "Each Apple Certified Refurbished Product: - Undergoes full functionality testing and any defective modules identified in testing are replaced. - Is put through a thorough cleaning process and inspection. - Is repackaged (including appropriate manuals, cables, new boxes). - Includes either the Operating System originally shipped with the unit or, in some cases, a more recent version. - Is placed into a Final QA inspection prior to being added to sellable refurbished stock." For the latest prices & sales, see our HomePod Price Tracker, updated daily.

Read more »

Holiday Sale at Verizon: HomePod minis for $84.99, save $14 (15% off)
Snag an Apple HomePod mini in your favorite color at Holiday sale prices, now $15 off at Verizon ($84.99). Compact yet powerful, the HomePod mini delivers rich, 360-degree sound and integrates seamlessly with your Apple devices and smart home setup. Their sale price applies to all mini colors and represents a rare HomePod sale price. Verizon service is not required for purchase. Buy online and choose free shipping or free local store pickup (if available). Sale price for online orders only, in-store price may vary. See our HomePod Price Tracker for the latest prices and deals from Apple and its retailers.

Read more »

Cyber Monday deals are live at Apple, final day to get a gift card worth up to $200 with these purchases
Apple's four day Black Friday/Cyber Monday 2024 Shopping Event is now live and will run from November 29, 2024 to December 2, 2024. That means today is the final day! Receive a free $150-$200 Apple Gift Card with the purchase of select Macs and $75-$100 with select iPads. Get a $25-$75 Apple Gift Card with select iPhone models as well as $50 with select Apple Watch models. AirPods qualify for $25 to $75 Gift Cards, depending on the model. Click through to see how much is included with each product...

Read more »

Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Cyber Monday Sale: 14-inch M4 Pro and M4 Max MacBook Pros for $250-$300 off MSRP
Amazon is offering a $250-$300 discount on Apple's 14-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) as part of their Cyber Monday sales. Shipping is free. These are the lowest prices currently available for these MacBook Pros. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 Pro MacBook Pro (24GB/512GB): $1749, $250 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB): $2149, $250 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB): $2899, $300 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »