Apple Studio Display hits a lifetime low price in this amazing deal
Apple's fantastic Studio Display is available with a massive $300 discount, dropping its price to a record low of $1,300. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

2024 App Store Award winners include Kino, Moises and many more
Apple honored the winners of its 2024 App Store Awards, honoring the best software for iPhone, Mac and more. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Adobe Lightroom, Balatro+ honored in Apple's App Store Awards
Apple has recognized 17 developers as part of the App Store Awards for 2024, with winning apps sparking creativity and creating everyday moments with others.App Store Awards - Image credit: AppleIn November, Apple released a list of 45 finalists for the App Store Awards. On Wednesday, it revealed the 17 winners from the class of 2024."We are thrilled to honor this impressive group of developers who are harnessing the power of Apple devices and technology to deliver experiences that enrich the lives of users and have a profound impact on their communities," said CEO Tim Cook. "The remarkable achievements of this year's winners demonstrate the incredible ingenuity that can be unlocked through apps." Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple reveals 2024 App Store Award winners
Apple on Wednesday revealed the winners of the 2024 App Store Awards, honoring 17 apps and games that helped users ignite their… The post appeared first on MacDailyNews.

Read more »

HomePod 18.2 upgrades Siri’s most used feature with one big change
This hasn’t been a great year for the HomePod, but Apple’s finally showing its smart speaker some love. Today’s HomePod 18.2 software update brings a key upgrade to what’s surely the device’s most used Siri feature: Apple Music requests. more…

Read more »

Apple may be partnering with Broadcom to make AI processors for servers
To power its Apple Intelligence servers, Apple is now said to be at least in part working with Broadcom on a new processor design.Siri icon in a datacenterApple makes much of how Apple Intelligence works on-device, but it's also clear that there are requests that need use of a greater Large Language Model. Such requests are sent to Apple's servers, and the company has been working to produce server processors specifically for this purpose.According to The Information, that work includes a partnership with Broadcom to make a processor codenamed Baltra for release in 2026. Reportedly, this does not mean Broadcom designing and producing the new processor, but possibly only providing one of several "chiplets.". Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple rumored to work with Broadcom on first server chip for AI, putting conversational Siri timeline in focus
In a heavily paywalled article, The Information reports that Apple is partnering with Broadcom to develop a new AI chip specifically designed for server use. Apple currently runs Apple Intelligence through its M-series chips on its servers through a system known as Private Cloud Compute. The distinction, according to the report, is that the new chip expected as soon as 2026, will be Apple’s first server chip specifically designed for AI tasks. more…

Read more »

Court forces removal of login box in WordPress vs WP Engine battle [U]
You may be aware of a bizarre feud between WordPress co-creator Matt Mullenweg and website hosting platform WP Engine. If not, you’ll find a recap below. But things took a very silly turn today when the WordPress login acquired a new checkbox requiring users to declare that they are not in any way connected with WP Engine. Update: On 10th December, a judge granted WP Engine a preliminary injunction, requiring access to be restored, and the login box to be removed. more…

Read more »

iOS 18.2 is coming today! Here’s what’s in it and how to get it right now
Macworld We got our first taste of Apple Intelligence in iOS 18.1, but there were many missing features. With iOS 18.2, we get a lot of them, including Visual Intelligence, image generation, ChatGPT integration, and more. And if you have an older iPhone or just aren’t interested in Apple Intelligence, there are quite a few welcome improvements in the iOS/iPadOS 18.2 release that are not related to AI, too. However, while Siri’s interface changed in iOS 18.1, the new smarter Siri, one of the premier Apple Intelligence features, still isn’t a part of this release. That will likely be coming in iOS 18.3 in January or 18.4, due for release around March 2025. You can learn more about it in our article about upcoming Apple Intelligence features. Apple announced Wednesday morning that iOS 18.2 will be arriving today. Apple usually pushes its software updates at 10am PT, but it could arrive at any moment. Update December 11: Apple has announced that iOS 18.2 will be available today. OS updates usually arrive at 10am PT (1pm ET). iOS 18.2: New Apple Intelligence features The Apple Intelligence features part of iOS 18.2 are still limited to just six phones: the entire iPhone 16 lineup and the iPhone 15 Pro and 15 Pro Max. If your phone supports it, there is a secondary waiting list to access certain features. If you were on the original waiting list for Apple Intelligence features in iOS 18.1 you will get access to ChatGPT integration, Visual Intelligence, and the new Writing Tools features. But you’ll have to hop onto a second waiting list for the image generation features—Genmoji, Image Playground, and the Image Wand tool. Here’s are all of the new Apple Intelligence features available in iOS 18.2: Writing Tools: Instead of just choosing to make a selection of text more professional, causal, or concise, you will have a freeform field to describe how you want to transform text. Examples: make this a poem, include a lot of dad jokes, or use a lot of sarcasm. Genmoji: Create a new emoji right on the system keyboard. Image Playground: Generate new images based on text prompts. Apple will suggest new costumes, items, or locations, and will make suggestions based on the context of a Messages thread or note in the Notes app. Images can be based on people you know by using identified images in Photos. Images are limited to cartoon or illustrative styles rather than realistic. Visual Intelligence: For iPhone 16 owners with the Camera Control button. Press and hold Camera Control to get additional information about a location, translate a sign or poster, detect phone numbers and addresses to quickly add to Contacts, and more. You can also tap a button to ask ChatGPT about what’s on screen, or another to perform a Google image search. Image Wand: An offshoot of Image Playground, this uses Apple’s image generation tools to create an image in an open area on a note in the Notes app, using the context from the surrounding area and the rest of the note. Start with a blank area or a rough sketch you make yourself. ChatGPT integration: If Siri can’t answer a question, it now has the option to ask ChatGPT. You need to give permission for each request and only limited data is shared. You don’t need to log into ChatGPT, but you are able to if you want to, or have a premium ChatGPT account you wish to use. You can ask Siri to have ChatGPT generate images., and use ChatGPT in the Writing Tools to generate text, too. Foundry iOS 18.2: Other new features In addition to the new user-facing features below, there are new developer tools for integrating image generation and writing tools into third-party apps. Apple Intelligence is localized into English for Australia, Canada, New Zealand, South Africa, and the UK in this release. Default Apps: Users worldwide have a new “Default Apps” section at the top Settings > Apps, where you can choose your default email, messaging, calling, call filtering, browser, password app, and keyboard. The messaging and calling options are new, and the other options have all been brought under a single menu. EU-specific features: In the EU, third-party browser that use their own custom web engines can now add web apps. EU users will also be able to delete the App Store. AE/AF Lock: In Settings > Camera, you’ll find a new toggle for a light press on the Camera Control button to lock exposure and focus. Find My share item location: Find My will let you share the location of an AirTag (or other Find My compatible item) with a trusted person. The link can be opened on a non-Apple device and expires after a week. Mail app categories: The Mail app gets its AI-powered auto-category feature, splitting your inbox into Primary, Transactions, Updates, and Promotions. Volume limits and lock screen slider: You’ll be able to set volume limits for media playing from the iPhone’s speaker, and can restore the volume bar to the media card on the lock screen. The iPhone 16 is one of six phones able to run Apple Intelligence.Chris Martin / Foundry iOS 18.2: Release notes These are Apple’s official release notes for iOS 18.2: Apple Intelligence (All iPhone 16 models, iPhone 15 Pro, iPhone 15 Pro Max) Image Playground A new app that lets you use concepts, descriptions, and people from your photo library to create fun, playful images in multiple styles Swipe through previews and choose from as you add concepts to your playground Choose from animation and illustration styles when creating your image Create images in Messages and Freeform, as well as third party apps Images are synced in your Image Playground library across all your devices with iCloud Genmoji Genmoji allows you to create a custom emoji right from the keyboard Genmoji are synced in your sticker drawer across all your devices with iCloud ChatGPT support ChatGPT from OpenAI can be accessed right from Siri or Writing Tools Compose in Writing Tools allows you to create something from scratch with ChatGPT Siri can tap into ChatGPT when relevant to provide you an answer A ChatGPT account is not required and your requests will be anonymous and won’t be used to train OpenAI’s models Sign in with ChatGPT to access your account benefits, and requests will be covered by OpenAI’s data policies Image Wand turns sketches and handwritten or typed notes into images in Notes Describe your change in Writing Tools allows you to suggest how you’d like something rewritten, for example as a poem Camera Control (iPhone 16, iPhone 16 Plus, iPhone 16 Pro, iPhone 16 Pro Max) Visual Intelligence with Camera Control helps you instantly learn about places or interact with information simply by pointing your iPhone at the object, with the option to tap into Google Search or ChatGPT Camera Control two-stage shutter lets you lock focus and exposure in Camera when light pressing the Camera Control Mail Mail Categorization sorts your messages to help you prioritize the most important messages Digest view groups all of the messages from one sender into a single bundle for easy browsing Photos Video viewing improvements, including the ability to scrub frame-by-frame and a setting to turn off auto-looping video playback Improvements when navigating Collections views, including the ability to swipe right to go back to the previous view Recently Viewed and Recently Shared album history can be cleared Favorites album appears in the Utilities collection in addition to Pinned Collections Safari New background images to customize your Safari Start Page Import and Export enables you to export your browsing data from Safari and import browsing data from another app into Safari HTTPS Priority upgrades URLs to HTTPS whenever possible File Download Live Activity shows the progress of a file download in the Dynamic Island and on your home screen This update also includes the following improvements and bug fixes: Voice Memos supports layered recording, letting you add vocals over an existing song idea without the need for headphones — then import your two-track projects directly into Logic Pro (iPhone 16 Pro, iPhone 16 Pro Max) Share Item Location in Find My helps you locate and recover misplaced items by easily and securely sharing the location of an AirTag or Find My network accessory with trusted third parties, such as airlines Natural language search in Apple Music and Apple TV app lets you describe what you’re looking for using any combination of categories like genres, moods, actors, decades, and more Favorite Categories in Podcasts allows you to choose your favorite categories and get relevant show recommendations that you can easily access in your Library Personalized Search page in Podcasts highlights the most relevant categories and editorially curated collections tailored to you Sudoku for News+ Puzzles provided in three difficulty levels and available for News+ subscribers Support for the Hearing Test feature on AirPods Pro 2 in Cyprus, Czechia, France, Italy, Luxembourg, Romania, Spain, United Arab Emirates, and United Kingdom Support for the Hearing Aid feature on AirPods Pro 2 in United Arab Emirates Pre-market price quotes in Stocks lets you track NASDAQ and NYSE tickers prior to market open Fixes an issue where recently captured photos do not appear immediately in the All Photos grid Fixes an issue where Night mode photos in Camera could appear degraded when capturing long exposures (iPhone 16 Pro, iPhone 16 Pro Max) iOS 18.2: Security updates As with all updates, iOS 18.2 will include numerous security patches and fixes that are crucial to compatible iPhones. More information can be found on Apple’s security releases support page. iOS 18.2: How to install To get the latest version of iOS 18 on your phone, head over to the Settings app, then General and Software Update. Then follow the prompts to restart and install the update. If you don’t want to wait until the official update arrives, you can install the most recent release candidate, which will be identical to the public release, by turning on Beta Updates in the Software Update tab.

Read more »

Government says DOJ subpoenaed Apple without authorization
DOJ demands for message and call data from Apple during the Trump administration, failed to obtain authorization, says the Office of the Inspector General in the current Biden administration.United States Department of Justice — image credit: DOJIt was previously revealed in 2021 that the Department of Justice under President Trump subpoenaed Apple for data concerning at least two House Democrats, their aides and families, in an investigation into alleged leaking of information. Now a report from the Office of the Inspector General (OIG) says the DOJ's demands were issued without the required legal authorization.The full OIG report also says that the DOJ did not have authorization for the gag orders that it imposed on both Apple and Google. It also reveals that the scope of the demands was wider than previously known, with the DOJ issuing 40 non-disclosure orders (NDOs) to the two companies. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple confirms these missing Apple Intelligence features are still being developed
Apple announced today that iOS 18.2 is coming today, including the next round of Apple Intelligence-powered features. Meanwhile, there are still plenty of major Apple Intelligence features announced at Apple’s developer conference last summer to come. A few smaller features, however, have only been partially released. So where are the missing components of Apple Intelligence? more…

Read more »

Apple's iOS 18.2 & macOS Sequoia updates with Genmoji, Image Playground are due today
Apple has confirmed that iOS 18.2, iPadOS 18.2, and macOS 15.2 will be released to the public on Wednesday, bringing with them new imaging-based Apple Intelligence features.An iPhone running Apple IntelligenceApple provided beta testers with the second release candidate of iOS 18.2 earlier in the week, to give a final shakedown to inbound Apple Intelligence features ahead of the public release. On Wednesday, Apple said the release will be happening later in the day.In a post to its newsroom, it confirmed that iOS 18.2, iPadOS 18.2, and macOS Sequoia 15.2 will be out on Wednesday. It will also bring out a "brand-new set" of Apple Intelligence features to the platforms, that will focus largely on generative AI imaging. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Here are the winners of the 2024 App Store Awards
After unveiling the finalists last month, Apple today officially took the wraps off the 2024 App Store Awards winners. This year, the company crowned Kino from Lux Optics as the iPhone App of the Year, Adobe Lightroom as the Mac App of the Year, and Moises as the iPad App of The Year. Head below for the full rundown of all the winners… more…

Read more »

Apple, where the %&#@ is Face ID for MacBook?
By leaving Face ID out of the M4 MacBook Pro, Apple missed another opportunity to make its computers easier to use. Time for that to change! (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple releases iOS 18.2, iPadOS 18.2, and macOS Sequoia 15.2 with Apple Intelligence now featuring Image Playground, Genmoji, Writing Tools enhancements, seamless support for ChatGPT, and visual intelligence
Apple on Wednesday announced the release of iOS 18.2, iPadOS 18.2, and macOS Sequoia 15.2, with a new set of Apple Intelligence features… The post appeared first on MacDailyNews.

Read more »

You can again turn your iPhone into a classic iPod (if you’re quick)
Every now and then a developer creates an app that lets you turn your iPhone display into a classic iPod. They never last long before Apple pulls them from the App Store, but there’s a new one you can grab before Tim spoils the fun. To skirt Apple’s rules, developers have to employ various tricks to disguise the functionality, and this latest example is no exception … more…

Read more »

macOS Sequoia 15.2 coming today with these new features
Apple is releasing a new software update for Macs today, bringing a fresh wave of Apple Intelligence features and more. Here’s everything new in macOS 15.2. more…

Read more »

Apple published a new Press Release
Apple just published a new Press Release:Apple Intelligence now features Image Playground, Genmoji, and more

Read more »

Google’s Willow Chip Has Quantum Developers Weeping With Joy
Willow performed a computation in under five minutes that would take one of today’s fastest supercomputers 10 septillion years -- that’s 10 followed by 25 zeroes. The post appeared first on TechNewsWorld.

Read more »

iOS 18.2 launching today with most compelling Apple Intelligence features yet
Apple has confirmed that iOS 18.2 is rolling out to iPhone users today. The update includes major new Apple Intelligence features, upgrades to the Camera Control on iPhone 16, a redesign for the Mail app, and much more. Head below for the full details on all the new iOS 18.2 and iPadOS 18.2 features. more…

Read more »

DOJ forced Apple to hand over customer call and message data without the required authorization
An official government report has concluded that the Trump-era Department of Justice (DOJ) did not obtain the required authorizations before demanding customer call and message data from Apple and others. It also failed to obtain authorization from the Attorney General before imposing a gag order on Apple, preventing it from disclosing the fact that it had been forced to hand over the personal data … more…

Read more »

Best 10th-gen iPad deals
Macworld You can find great deals on a new iPad if you know where to look. We’ve checked all the best places to pick up the iPad at the best price for you so that you can get a bargain. Following Apple’s May 2024 event (where new iPad Pro and iPad Air models were announced) Apple removed the 9th-gen iPad from the lineup and adjusted pricing for the 10th-gen iPad to $349/£349. The company then adjusted the pricing once again in the U.K. and Europe in October 2024 with the launch of the iPad mini, so now the price of the iPad starts at £329 in the U.K and €399 in Europe. Pricing is now as follows: iPad (10th gen), 64GB: $349/£329 (was $449/£499 and briefly £349) iPad (10th gen), 256GB: $499/£479 (was was $599/£679 and briefly £499) The 9th-gen iPad from 2021 has been discontinued, but you can still find deals on that model while stock holds out. At launch, the 9th-gen iPad cost $329/£319/€379, but it actually went up in price to $329/£369/€439 before being killed off. Make sure you’re paying less than that. If you’d like to see the best prices for the standard iPad’s more expensive siblings, including iPad Air, iPad mini and iPad Pro, click those links for dedicated deals roundups. Also, have a look at our iPad buying buide if you’re not sure which model you want. You may also like to read our best iPad for kids, best iPad for students, and best iPad for seniors guides. Before you shop, be aware that we are likely to see a new iPad in the spring of 2025, so if you would like to find out what the next generation might bring read our rumors about the new 11th-gen iPad. You can also check out our roundup of the best Apple deals. Best standard iPad deals right now While there are deals on the 10th-gen iPad we aren’t seeing huge discounts, probably because it’s already the cheapest iPad and recently received a large price cut. But you may be able to save some money and get the 9th-gen model on clearance at some stores. U.S. Amazon, 10th gen iPad (64GB): $279 ($70 off, MRSP $349) Amazon, 10th-gen iPad (256GB): $429 ($70 off, MSRP $499) U.K. John Lewis, 10th-gen iPad (64GB): £289 (£40 off, RRP £329) Amazon, 10th-gen iPad (256GB): £429 (£50 off, RRP £479) Check below to see other deals that are available, including the cellular models. Best deals for 10th-gen iPad The 10th-gen iPad, with its larger 10.9-inch display, launched in October 2022. 10th-gen iPad (64GB, Wi-Fi): $349/£329 (was $449/£499, briefly £349) New Refurbished Retailer Price $259.99 View Deal $279 View Deal $299 View Deal $319 View Deal $339 View Deal $348 View Deal $449 View Deal Price comparison from over 24,000 stores worldwide View more prices Product Price iPad 10.9 (2022) 64GB – Blue – (WiFi) $326 View Deal iPad 10.9 (2022) 64GB – Silver – (WiFi) $339 View Deal iPad 10.9 (2022) 64GB – Pink – (WiFi) $349 View Deal $409.99 View Deal Price comparison from Backmarket 10th-gen iPad (256GB, Wi-Fi): $499/£479 (was $599/£679, briefly £499) New Refurbished Retailer Price $429 View Deal $429 View Deal $429.95 View Deal $429.99 View Deal $464 View Deal $479 View Deal Price comparison from over 24,000 stores worldwide View more prices Product Price iPad 10.9 (2022) 256GB – Blue – (WiFi) $433.25 View Deal iPad 10.9 (2022) 256GB – Silver – (WiFi) $448.57 View Deal iPad 10.9 (2022) 256GB – Yellow – (WiFi) $473.39 View Deal iPad 10.9 (2022) 256GB – Silver – (WiFi) with Nano-texture glass $509 View Deal Price comparison from Backmarket 10th-gen iPad (64GB, cellular): $499/£479 (was $599/£679, briefly £499) New Refurbished Retailer Price $429 View Deal $429 View Deal $459 View Deal $464 View Deal $489 View Deal $499 View Deal $499 View Deal Price comparison from over 24,000 stores worldwide View more prices Product Price iPad 10.9 (2022) 64GB – Blue – (Wi-Fi + 5G) $309.67 View Deal iPad 10.9 (2022) 64GB – Silver – (Wi-Fi + 5G) $312 View Deal iPad 10.9 (2022) 64GB – Pink – (Wi-Fi + 5G) $343.43 View Deal Price comparison from Backmarket 10th-gen iPad (256GB, cellular): $649/£629 (was $749/£859, briefly £649) New Refurbished Retailer Price $429 View Deal $464 View Deal $499 View Deal $579 View Deal $629.99 View Deal $649 View Deal $649 View Deal $749 View Deal Price comparison from over 24,000 stores worldwide View more prices Product Price iPad 10.9 (2022) 256GB – Pink – (Wi-Fi + 5G) $520 View Deal Price comparison from Backmarket Best price for 10.2-inch iPad (9th gen) Below are the best prices we’ve seen on the 9th-gen iPad from a variety of retailers. Since this iPad has been on sale since 2021 there are more in the way of deals, but since it’s always been such a cheap model the discounts don’t tend to be as big as you might see on other iPads. 9th-gen iPad (64GB, Wi-Fi): MSRP was $329/£369 (now discontinued) You can check out the lowest current prices from a range of major retailers in the automated tables below. New Refurbished Retailer Price $199.99 View Deal $199.99 View Deal $258 View Deal $269.49 View Deal $279 View Deal $329 View Deal Price comparison from over 24,000 stores worldwide View more prices Product Price iPad 10.2 (2021) 64GB – Space Gray – (WiFi) $216.30 View Deal iPad 10.2 (2021) 64GB – Silver – (WiFi) $235 View Deal Price comparison from Backmarket 9th-gen iPad (256GB, Wi-Fi): MSRP was $479/£549 (now discontinued) New Refurbished Retailer Price $329.99 View Deal $349.99 View Deal $399 View Deal $409 View Deal $449 View Deal $449 View Deal Price comparison from over 24,000 stores worldwide View more prices Product Price iPad 10.2 (2021) 64GB – Space Gray – (Wi-Fi + LTE) $206.63 View Deal iPad 10.2 (2021) 64GB – Silver – (Wi-Fi + LTE) $235.40 View Deal $259.99 View Deal $Not Available View Deal iPad 10.2 (2021) 256GB – Space Gray – (WiFi) $299 View Deal iPad 10.2 (2021) 256GB – Silver – (WiFi) $342.37 View Deal Price comparison from Backmarket View more prices 9th-gen iPad (64GB, cellular): MSRP was $479/£519 (now discontinued) Retailer Price $329.99 View Deal $444 View Deal $449 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket 9th-gen iPad (256GB, cellular): MSRP was $609/£699 (now discontinued) New Refurbished Retailer Price $479.99 View Deal $519.99 View Deal $609 View Deal Price comparison from over 24,000 stores worldwide Product Price iPad 10.2 (2021) 256GB – Space Gray – (Wi-Fi + LTE) $276.86 View Deal iPad 10.2 (2021) 256GB – Silver – (Wi-Fi + LTE) $285.31 View Deal $429.99 View Deal Price comparison from Backmarket Where to buy the iPad (10th gen and 9th gen) In 2021 the 9th-gen iPad suffered from stock shortages, so half the challenge was finding a retailer that has one in stock. Hopefully this won’t also be the case with the 10th-gen iPad, but if it is you might find a unit at one of these major retailers: U.S. retailers Apple Amazon Best Buy Costco Target Walmart U.K. retailers Apple Amazon Argos Currys John Lewis KRCS Very Apple has a number of Apple Premium Resellers who stock iPads in the U.K., and also offer other services, try the following: KRCS, often the first to discount new products iStore Select Western Computer Where to buy the iPad on contract If you want to buy the iPad on contract you could try these networks: U.S. network carriers AT&T Verizon T-Mobile U.K. network carriers EE O2 Sky Vodafone Virgin Media Three Best refurbished iPad deals The deals you will see above are generally from Apple resellers rather than Apple itself, which very rarely drops the prices. Apple does, however, sell reconditioned iPads in its refurbished store. So you might be able to grab a bargain. The iPads in Apple’s refurbished store may be ex-display stock, or they may have been returned to Apple due to a fault, but they are fully reconditioned now and come with a full year’s warranty. It’s not like buying secondhand. The U.S. refurbished store has a selection that includes: Standard iPad (8th and 9th generation) iPad Air (4th generation) 11-inch iPad Pro (2nd and 3rd generation) 12.9-inch iPad Pro (4th and 5th generation) iPad mini (5th and 6th generation) Compared to the original price, you can save as much as $320 on a 12.9-inch iPad Pro. Get a refurbished iPad at Apple's refurbished store (U.S.) In the U.K. you’ll find a similar selection of iPads available from Apple’s refurbished store. You’ll find the following: Standard iPad (9th generation) iPad Air (4th generation) 11-inch iPad Pro (2nd and 3rd generation) 12.9-inch iPad Pro (5th generation) iPad mini (5th and 6th generation) There are savings of £480 on a 12.9-inch iPad Pro, compared to the original price. Get a refurbished iPad at Apple's refurbished store (U.K.) Another place to look is BackMarket US and BackMarket UK, which sells refurbished Macs and other Apple products. Amazon also has a certified refurbished store for Apple products, but we would advise against buying any products that are older than five years. Most of the products we see on the Amazon refurbished store are unfortunately very old. There is a large refurbished market for the iPad. We’d recommend taking a look at these refurbished resellers for iPad offers: Amazon AWD Big Phone Store eBay Envirofone Affordable Mac Tech Trade 4Gadgets Handtec Laptops Direct Music Magpie Preloved Smartfone Store

Read more »

Tap to Pay on iPhone comes to Chile and Egypt
Apple has now launched its Tap to Pay on iPhone service in both Egypt and Chile, making a total of 20 countries that have received the feature since it started in 2022.Tap to Pay on iPhone lets merchants take payments without a separate contactless deviceFollowing quickly on the heels of its launch in the United Arab Emirates, Tap to Pay on iPhone has now also arrived in both Chile and Egypt. The latter has been confirmed by Egypt Today, which says that Apple has initially partnered with three major banks in the country.It also says that the launch was enabled by how in 2023, the Central Bank of Egypt (CBE) approved new regulations over payment services using electronic devices and apps. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple’s UK investment tops £18B, supports 550k jobs, inc ‘critical’ engineering
Apple’s UK investment exceeds £18B ($23B) over the past five years, and the company says that it now supports over 550,000 direct and indirect jobs. CEO Tim Cook said Apple had been serving UK customers for more than 40 years, and now has 40 retail stores in the country … more…

Read more »

Tim Cook says Apple has invested over $18 billion in the UK since 2019
As he visits Apple Stores in London, Tim Cook says the company is continuing to expand on its more than $18 billion investment in the country, and how it has doubled its engineering teams there.Tim Cook (left) has a pint with "Slow Horses" star Jack LowdenOn his return trip from China, Apple CEO Tim Cook has been in London, visiting the city's Apple Covent Garden store. He saw a performance by musician Jamie Cullum, and also drank a pint with "Slow Horses" star and Golden Globe nominee Jack Lowden."We've been serving customers in the UK for more than 40 years, and we're proud of our deep connection with communities across this country," said Cook in a statement about Apple's investment in the UK. "We're thrilled to be growing our Apple teams here, and to keep supporting the extraordinary innovators, creators, and entrepreneurs who are pushing the boundaries of technology in so many ways." Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Turn your iPhone into an iPod before Apple won’t let you anymore
Macworld We recently reported on how someone managed to figure out how to connect an original iPod to an M4 MacBook Pro. If you’re not interested in investing in $100 worth of adapters but still yearn for an iPod-like experience, there’s now an app for that. An app called My Classic-Retro Console can display a GameBoy-like app that acts as a UI for the Music, Podcasts, and Camera app, and also includes a Breakout-type game. But the app also has an option within its settings for Device and if you select My Classic it opens up an iPod-like app that you can use to access your Music library. You can even use the digital click wheel to scroll up and down, and tap the fast-forward, rewind, play/pause, and menu icons to make selections. Once you’re in iPod mode, you can also customize your iPod color: Special (black with a red clickwheel, like the U2 iPod) Silver, Dark (black with a black clickwheel), Black (black with a gray clickwheel), and White. It’s just like you’re in 2004 all over again–all that’s missing are wired Earpods. The My Classic-Retro Console app is just $2.99 (with an in-app donation button if you’re feeling kind) and as commenters on X have pointed out, it will probably not be in the App Store for very long as Apple has a history of taking down or rejecting iPod emulators. So if you want to turn your iPhone into an iPod, you should probably grab it like right now.

Read more »

These are the Apple stories that were bigger than the iPhone in 2024
Macworld 2024 is fast fading behind us and thus, as is our custom, it’s time to cast our eyes back at the year that was and see how things shook out for Apple. A lot has happened to the company over the past twelve months–not all of it to Apple’s liking. As Apple has gotten larger and larger, it’s found itself increasingly in the crosshairs of governments, not to mention its equally weighty competitors. While the company remains wildly successful from a financial standpoint, it’s struggled somewhat when it comes to its vision of the future. In short, there are definitely cracks puncturing Cupertino’s traditionally invincible image. Let’s take a trip down memory lane and see the stories that shaped Apple’s 2024. Continental drift If there’s one story from 2024 that is likely to have an outsized impact on Apple’s existence going forward, it’s the company’s clashes with the European Commission. This came to a head in 2024 as Apple was forced to comply with the region’s Digital Markets Act and release a substantial platform update that allows for third-party app distribution on iOS and iPadOS. Apple continues to throw its weight around, sometimes using its bully pulpit of notarizations for reasons that would seem to go beyond the stated intentions of platform safety and security. And yet, as simple as that sentence seems, the reality was anything but cut and dried. Apple did its darnedest to comply with the letter of the law but still keep its traditional App Store model on top, even as the EC attempted to enforce the spirit of its rules. The result has been an uneasy stalemate: yes, third-party app stores are currently available in the European Union, but they haven’t had a big impact yet. And Apple continues to throw its weight around, sometimes using its bully pulpit of notarizations for reasons that would seem to go beyond the stated intentions of platform safety and security. The story’s hardly at an end, either. A preliminary ruling from the EC in June deemed that Apple was not in compliance with the DMA, with a final decision to be handed down in March of 2025. Depending on how it all shakes out, the App Store model may be on the wane. Between that and other pending legal and governmental matters elsewhere around the world—including the U.S. where the company found itself targeted by an antitrust action—Apple may find itself fighting battles on multiple fronts in the year to come. Intelligence gathering After more than a year of being deemed late to the AI party—and what an awkward face-melting, variable number of fingers party it is—Apple made a splash at this year’s Worldwide Developers Conference by unveiling its own foray into the market: Apple Intelligence, a suite of AI tools that touches everything from writing to image generation to improvements to Siri. With this announcement, Apple seemed to be banking heavily on its reputation of delivering not the first solution to market, but the best. We’ll be hearing more about Apple Intelligence in 2025.Apple But even now, those Apple Intelligence features have only just started to roll out, with the arrival of the second round—including contentious AI image generation features—expected imminently, as of this writing. Response to the first round was mixed to underwhelmed, especially when compared to offerings from competitors that have already pushed well past where even Apple’s not-yet-here features promise to be. Apple Intelligence is a multi-year endeavor, however, and next year will bring some of its most anticipated features, including a smarter Siri that’s aware of users’ personal context. More than anything else, that seems poised to answer the question of just how far behind Apple really is when it comes to AI features that set it apart from everyone else. Apple’s clearly invested a lot of time and energy on this front, even if it started somewhat later than its rivals. The real question hovering out there is whether generative AI is a flash in the pan or a technology that really will transform the industry. The outcome of that larger issue could dictate just how relevant Apple Intelligence ends up being—and how smart Apple looks. Automotive vision Much attention in the Apple-watching realm is focused on what big project the company will tackle next. This year shows just how much of a struggle Apple itself has had in answering that question. Remember the Apple Vision Pro?Foundry After a decade, the Apple Car project drove its way into the grave without ever getting to the product stage. The stuff of perennial rumors, the car project was Apple’s attempt to find the next big thing, but it was mired in an unclear vision and high turnover in its leadership. In the end, the most positive sign was that the company had the courage to pull the plug on something that wasn’t working. But with the car project gone, all eyes turned elsewhere for Apple’s future. It’s almost quaint to think back to the beginning of the year, when the most anticipated Apple product was the arrival of the Vision Pro. But as was largely expected, its high price tag and limited feature set outweighed its impressive technology. It was only saved from being a flop by virtue of the fact that Apple didn’t really expect it to do a blockbuster business in the first place. The real proof will be in whatever changes the company makes for the product’s successor: will it shed features and cost to appeal to more customers, or will Apple stick to its high expectations and damn the torpedoes. The rest of the story Elsewhere, Apple made the jump to its latest chip architecture, which powered an impressive and well-regarded revamp to the Mac mini, as well as nice updates to the MacBook Pro line and the iMac. And, of course, the iPhone 16 line debuted, marking the first time ever the company added a physical control for the second year running, perhaps proving that Steve Jobs and Jony Ive’s stranglehold on Apple design may finally be coming to an end. As for what looms ahead for Apple in 2025, well, there’s plenty on the horizon–it may just be one of the company’s biggest years ever. We’ll break down exactly what to expect next time.

Read more »

Rumor: iPhone SE 4 to receive 48-megapixel rear camera, OLED screen
Apple’s fourth-generation iPhone SE 4 is said to be en route, and it’s rumored that the new handset’s changes will extend beyond an OLED display and include a 48-megapixel camera. Per ET News, LG Innotek and LG Display are supplying the cameras and displays for the iPhone SE 4. In the case of LG Innotech, […] Source

Read more »

Resident Evil 2 arrives for the Mac, iPhone, and iPad
A classic game is a classic game, and if it winds up on your oPhone or iPad at 75 percent off its usual price, that’s never a bad thing. Capcom’s Resident Evil 2 has arrived for the iPhone and iPad, complete with a limited part of the game being playable, after which players must purchase […] Source

Read more »

Wondershare Recoverit Review: an excellent Mac data recovery package
Macworld At a glanceExpert's Rating Pros Clean, inviting user interface offers easy access to a good set of tools Decent value for the retail price Good performance Able to save critical data from a presumed-dead SD card Cons USB boot drive creation module struggled to perform Some grammatical errors within dialog boxes No trial version Our Verdict The inviting user interface offers easy access to a good set of tools – and at a decent price. Price When Reviewed This value will show the geolocated pricing text for product undefined Best Pricing Today Price When Reviewed1 month/2 Macs: $79.99 (usually $109.99); 1 year/2 Macs: $89.99 (usually $139.99); perpetual license/2 Macs: $139.99 (usually $169.99) Best Prices Today: Retailer Price Wondershare (annual) $89.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket There’s no shortage of good data recovery utilities available for the Mac, and while Wondershare Recoverit may not have the name recognition that seminal titles like Data Rescue or DiskWarrior might have, there’s still something good to be had here. The software, which is centered around the usual modules that you might see in this kind of suite (Hard Drives and Locations and SD Card for file recovery, Enhanced Recovery and Corrupted Video Repair for video and photo restoration and System Crashed Computer and NAS and Linux for additional recovery features), is easy to download and install, assign permissions to, and begin to work with. It requires macOS 10.13 (High Sierra) or later to install Wondershare Recoverit is variably priced, the package currently on offer and retailing for $79.99/£63.99 (usually $109.99/£93.97) for a one month license for unlimited recovery for two Macs, $89.99/£66.99 (usually $139.99/£113.97) for a one year license for unlimited recovery for two Macs, and $139.99/£118.97 (usually $169.99/£144.97) for a perpetual license for two Macs. The company also offers discounts for students, educators, and small and medium businesses. While no trial version exists, the free version allows for all of Wondershare Recoverit’s features to be used, although the program caps data recovery at 100 megabytes until an activation code has been entered. A friendly home screen and user interface pulls you in, and the modules themselves generally work as well as expected. Data recovery for hard drives, locations, and SD cards is simple and reliable, Wondershare Recoverit executing both a quick scan and diving into a deep scan as well, sifting through its target volume sector, by sector, and doing the best it can with what’s there. Choosing types of data to recover in Recoverit.Foundry The process is thorough, and the SD Card module was able to sift through a damaged 8GB SD card, pull some video data I needed and thought I’d lost for an upcoming video project, and deliver the data back cleanly to a recovery folder without issue. The video and photo repair modules work well with damaged files, and the remote-based utilities allow for network-based drives to be located or accessed manually to have data recovered from them, which could prove to be useful for network administrators. Something of an unexpected bonus, the program can also save recovered data to a NAS drive or Google Drive, which proves to be a nice feature. Like similar applications, Wondershare Recoverit can be left on its own to chug through larger volumes, and ran well in the background even when digging through my 4TB Time Machine backup drive over the course of a day of testing. Sifting through recovered data options in Wondershare Recoverit.Foundry In spite of its hardy ethos/work ethic towards data recovery and effective modules, the USB boot drive creation module fell flat on its face during testing, and it proved almost impossible to create a working USB thumb drive to boot my M2 Mac Studio from. Here, the module succeeded only once in writing boot code to an SD card, and failed to either correctly format or write to several USB flash drives and external SSD units, the program suggesting I try this function on a Mac running macOS 12 (Sierra) or older. Granted, Apple hasn’t made creating boot drives on recent Macs easy and this is becoming a trickier process for third-party software vendors, but it felt as if this feature was all but useless. Other irritants included grammatical errors within dialog windows and Wondershare Recoverit asking you to send review feedback as to how you liked it after paying for the application indicates that the marketing department needs to take a break and let the QA and engineering teams resolve the issues involved with the USB boot drive creation module. Should you buy Wondershare Recoverit? The boot drive creation module issue aside, Wondershare Recoverit presents an excellent data recovery package at something of a wince-worthy, but not-unreasonable, price. $139.99/£118.97 may feel a little steep at first, but given that this buys a perpetual license for two Macs and the fact that there are education and SMB-related discounts helps this pill go down a bit easier. Yes, an official free trial with access to all the bells and whistles would help, and it’d be nice to see everything the software’s capable of over the course of a week or a month, but what’s present helped pull some critical data from an SD card I thought was dead, easily backed my data up to Google Drive, and put something worthwhile on the table worthy of my consideration, and yours too.

Read more »

Patch Tuesday, December 2024 Edition
Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common… Read More »

Read more »

U.S. Offered $10M for Hacker Just Arrested by Russia
In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as "Wazawaka," a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies.

Read more »

Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) -- such as .shop, .top, .xyz -- that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds. Meanwhile, the nonprofit entity that oversees the domain name industry is moving forward with plans to introduce a slew of new gTLDs.

Read more »

Vulnerability Summary for the Week of November 25, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Portfolio Management System MCA  A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-26 7.3 CVE-2024-11744 1000 Projects--Portfolio Management System MCA  A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-27 7.3 CVE-2024-11819 1000projects -- beauty_parlour_management_system  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11646 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11647 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11648 1000projects -- beauty_parlour_management_system  A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11649 AbsolutePlugins--Absolute Addons For Elementor  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AbsolutePlugins Absolute Addons For Elementor allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through 1.0.14. 2024-11-28 7.5 CVE-2024-52496 Advantech--EKI-6333AC-2G  A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (securityEngineID to local_record.engineid without proper bounds checking. 2024-11-27 3 CVE-2024-36468 Zabbix--Zabbix  When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd- >data in the code below will remain NULL and an attempt to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42328 Zabbix--Zabbix  The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd- >error will be NULL and trying to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42329 Zabbix--Zabbix  In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd- >browser heap pointer is freed by garbage collection. 2024-11-27 3.3 CVE-2024-42331 Zabbix--Zabbix  The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host. 2024-11-27 3.7 CVE-2024-42332 Zabbix--Zabbix  When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element. 2024-11-26 2.2 CVE-2024-22117 Zabbix--Zabbix  When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords. 2024-11-27 2.7 CVE-2024-36464 Zabbix--Zabbix  The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c 2024-11-27 2.7 CVE-2024-42333 Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info autolab--Autolab  Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature. 2024-11-25 not yet calculated CVE-2024-53258 BoidCMS--BoidCMS  BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code. This code could be used to steal the user's session cookie, perform phishing attacks, or deface the website. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-25 not yet calculated CVE-2024-53255 bunkerity--bunkerweb  bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-27 not yet calculated CVE-2024-53264 Century Systems Co., Ltd.--FutureNet NXR-G110 series  FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs. 2024-11-29 not yet calculated CVE-2024-50357 Checkmk GmbH--Checkmk  Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions type] may result in an out-of-bounds access. To spot such missed invocations early in the future, checking the validity of link- >type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed. 2024-11-25 not yet calculated CVE-2024-53099 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp: don't access released socket during error recovery") added a mutex_lock() call for the queue- >queue_lock in nvme_tcp_get_address(). However, the mutex_lock() races with mutex_destroy() in nvme_tcp_free_queue(), and causes the WARN below. DEBUG_LOCKS_WARN_ON(lock- >magic != lock) WARNING: CPU: 3 PID: 34077 at kernel/locking/mutex.c:587 __mutex_lock+0xcf0/0x1220 Modules linked in: nvmet_tcp nvmet nvme_tcp nvme_fabrics iw_cm ib_cm ib_core pktcdvd nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc ppdev 9pnet_virtio 9pnet pcspkr netfs parport_pc parport e1000 i2c_piix4 i2c_smbus loop fuse nfnetlink zram bochs drm_vram_helper drm_ttm_helper ttm drm_kms_helper xfs drm sym53c8xx floppy nvme scsi_transport_spi nvme_core nvme_auth serio_raw ata_generic pata_acpi dm_multipath qemu_fw_cfg [last unloaded: ib_uverbs] CPU: 3 UID: 0 PID: 34077 Comm: udisksd Not tainted 6.11.0-rc7 #319 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:__mutex_lock+0xcf0/0x1220 Code: 08 84 d2 0f 85 c8 04 00 00 8b 15 ef b6 c8 01 85 d2 0f 85 78 f4 ff ff 48 c7 c6 20 93 ee af 48 c7 c7 60 91 ee af e8 f0 a7 6d fd 0b e9 5e f4 ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 RSP: 0018:ffff88811305f760 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88812c652058 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88811305f8b0 R08: 0000000000000001 R09: ffffed1075c36341 R10: ffff8883ae1b1a0b R11: 0000000000010498 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812c652058 FS: 00007f9713ae4980(0000) GS:ffff8883ae180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcd78483c7c CR3: 0000000122c38000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? __warn.cold+0x5b/0x1af ? __mutex_lock+0xcf0/0x1220 ? report_bug+0x1ec/0x390 ? handle_bug+0x3c/0x80 ? exc_invalid_op+0x13/0x40 ? asm_exc_invalid_op+0x16/0x20 ? __mutex_lock+0xcf0/0x1220 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx___mutex_lock+0x10/0x10 ? __lock_acquire+0xd6a/0x59e0 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx_nvme_tcp_get_address+0x10/0x10 [nvme_tcp] nvme_sysfs_show_address+0x81/0xc0 [nvme_core] dev_attr_show+0x42/0x80 ? __asan_memset+0x1f/0x40 sysfs_kf_seq_show+0x1f0/0x370 seq_read_iter+0x2cb/0x1130 ? rw_verify_area+0x3b1/0x590 ? __mutex_lock+0x433/0x1220 vfs_read+0x6a6/0xa20 ? lockdep_hardirqs_on+0x78/0x100 ? __pfx_vfs_read+0x10/0x10 ksys_read+0xf7/0x1d0 ? __pfx_ksys_read+0x10/0x10 ? __x64_sys_openat+0x105/0x1d0 do_syscall_64+0x93/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? __pfx_ksys_read+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? do_syscall_64+0x9f/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9713f55cfa Code: 55 48 89 e5 48 83 ec 20 48 89 55 e8 48 89 75 f0 89 7d f8 e8 e8 74 f8 ff 48 8b 55 e8 48 8b 75 f0 4 ---truncated--- 2024-11-25 not yet calculated CVE-2024-53100 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr- >ia_mode, attr- >ia_uid and attr- >ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0. 2024-11-25 not yet calculated CVE-2024-53101 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: make keep-alive synchronous operation The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race between the fabric controller admin queue destroy code path (invoked while shutting down controller) and hw/hctx queue dispatcher called from the nvme keep-alive async request queuing operation. This race could lead to the kernel crash shown below: Call Trace: autoremove_wake_function+0x0/0xbc (unreliable) __blk_mq_sched_dispatch_requests+0x114/0x24c blk_mq_sched_dispatch_requests+0x44/0x84 blk_mq_run_hw_queue+0x140/0x220 nvme_keep_alive_work+0xc8/0x19c [nvme_core] process_one_work+0x200/0x4e0 worker_thread+0x340/0x504 kthread+0x138/0x140 start_kernel_thread+0x14/0x18 While shutting down fabric controller, if nvme keep-alive request sneaks in then it would be flushed off. The nvme_keep_alive_end_io function is then invoked to handle the end of the keep-alive operation which decrements the admin- >q_usage_counter and assuming this is the last/only request in the admin queue then the admin- >q_usage_counter becomes zero. If that happens then blk-mq destroy queue operation (blk_mq_destroy_ queue()) which could be potentially running simultaneously on another cpu (as this is the controller shutdown code path) would forward progress and deletes the admin queue. So, now from this point onward we are not supposed to access the admin queue resources. However the issue here's that the nvme keep-alive thread running hw/hctx queue dispatch operation hasn't yet finished its work and so it could still potentially access the admin queue resource while the admin queue had been already deleted and that causes the above crash. This fix helps avoid the observed crash by implementing keep-alive as a synchronous operation so that we decrement admin- >q_usage_counter only after keep-alive command finished its execution and returns the command status back up to its caller (blk_execute_rq()). This would ensure that fabric shutdown code path doesn't destroy the fabric admin queue until keep-alive request finished execution and also keep-alive thread is not running hw/hctx queue dispatch operation. 2024-11-25 not yet calculated CVE-2024-53102 Mozilla--Firefox  The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. 2024-11-26 not yet calculated CVE-2024-11696 Mozilla--Firefox  On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133. 2024-11-26 not yet calculated CVE-2024-11703 msg Suisse AG--EasyTax  A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS. 2024-11-29 not yet calculated CVE-2024-9044 n/a--n/a  FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. 2024-11-29 not yet calculated CVE-2024-35366 n/a--n/a  FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer 2024-11-29 not yet calculated CVE-2024-35367 n/a--n/a  FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. 2024-11-29 not yet calculated CVE-2024-35368 n/a--n/a  Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions. 2024-11-29 not yet calculated CVE-2024-35371 n/a--n/a  LinkStack 2.7.9 through 4.7.7 allows resourcesviewscomponentsfavicon.blade.php link SSRF. 2024-11-29 not yet calculated CVE-2024-35451 n/a--n/a  A deserialization vulnerability exists in the Stub class of the VarDumper module in Symfony v7.0.3. The vulnerability stems from deficiencies in the original implementation when handling properties with null or uninitialized values. An attacker could construct specific serialized data and use this vulnerability to execute unauthorized code. 2024-11-29 not yet calculated CVE-2024-36610 n/a--n/a  In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. 2024-11-29 not yet calculated CVE-2024-36611 n/a--n/a  Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. 2024-11-29 not yet calculated CVE-2024-36612 n/a--n/a  FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. 2024-11-29 not yet calculated CVE-2024-36615 n/a--n/a  An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. 2024-11-29 not yet calculated CVE-2024-36616 n/a--n/a  FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. 2024-11-29 not yet calculated CVE-2024-36617 n/a--n/a  FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. 2024-11-29 not yet calculated CVE-2024-36618 n/a--n/a  moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. 2024-11-29 not yet calculated CVE-2024-36620 n/a--n/a  moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. 2024-11-29 not yet calculated CVE-2024-36621 n/a--n/a  In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter. 2024-11-29 not yet calculated CVE-2024-36622 n/a--n/a  moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes. 2024-11-29 not yet calculated CVE-2024-36623 n/a--n/a  nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. 2024-11-29 not yet calculated CVE-2024-36671 n/a--n/a  MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. 2024-11-29 not yet calculated CVE-2024-45495 n/a--n/a  WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. 2024-12-01 not yet calculated CVE-2024-45520 n/a--n/a  OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files. 2024-11-27 not yet calculated CVE-2024-46054 n/a--n/a  Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the power(uct_int_t x, uct_int_t n) in src/uct_upstream.c. 2024-11-29 not yet calculated CVE-2024-48406 n/a--n/a  Incorrect access control in Adapt Learning Adapt Authoring Tool

Read more »

Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

Read more »

Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass, MailChimp, Okta, T-Mobile and Twilio.

Read more »

Fintech Giant Finastra Investigating Data Breach
The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world's top 50 banks, notified customers of a potential breach after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company. 

Read more »

Vulnerability Summary for the Week of November 11, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Beauty Parlour Management System  A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 7.3 CVE-2024-11100 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11257 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11258 1000 Projects--Portfolio Management System MCA  A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11256 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47441 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47442 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47443 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-45114 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47450 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47451 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47452 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49507 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49508 adobe -- indesign  InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49509 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47426 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47427 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47428 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47429 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47430 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47431 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47432 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47433 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47434 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49515 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49516 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49517 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49518 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49519 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49520 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49525 Adobe--Adobe Commerce  Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction. 2024-11-12 7.7 CVE-2024-49521 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49526 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49528 Adobe--Photoshop Desktop  Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49514 adonesevangelista -- agri-trading_online_shopping_system  A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout. 2024-11-14 7.5 CVE-2024-50968 algolplus--Advanced Order Export For WooCommerce  The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2024-11-13 8.1 CVE-2024-10828 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21974 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21975 AMD--AMD Cloud Manageability Service Software  Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21939 AMD--AMD Management Console  Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21957 AMD--AMD Management Plug-In for SCCM  Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21938 AMD--AMD Provisioning Console (APC) Software  Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21958 AMD--AMD Ryzen AI Software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 8.8 CVE-2024-21976 AMD--AMD Ryzen Master Monitoring SDK  Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21945 AMD--AMD Ryzen Master Utility for Overclocking Control  Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21946 AMD--AMD Software: PRO Edition  Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21937 AMI--AptioV  APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode. 2024-11-12 7.2 CVE-2024-42442 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 9 CVE-2024-51490 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51484 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51485 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL?-?Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.4 CVE-2024-51486 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51487 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. 2024-11-13 7.2 CVE-2024-50971 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. 2024-11-13 7.2 CVE-2024-50972 angeljudesuarez -- tailoring_management_system  A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.php. The manipulation of the argument inccat/desc/date/amount leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "inccat" to be affected. But it must be assumed "desc", "date", and "amount" are affected as well. 2024-11-11 9.8 CVE-2024-11074 anisha -- job_recruitment  A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument e_hash leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11076 anisha -- job_recruitment  A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11077 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 9.8 CVE-2024-11099 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 8.8 CVE-2024-11127 Anthony Carbon--WDES Responsive Mobile Menu  Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18. 2024-11-16 9.8 CVE-2024-52414 Apache Software Foundation--Apache Airflow  Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability. If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets. 2024-11-15 7.5 CVE-2024-45784 Apache Software Foundation--Apache CloudStack  Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that can register templates, can use them to deploy malicious instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.5 or 4.19.1.3, or later, which addresses this issue. Additionally, all user-registered KVM-compatible templates can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run the following command on their file-based primary storage(s) and inspect the output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. However, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; doneFor checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-11-12 8.5 CVE-2024-50386 Apache Software Foundation--Apache Traffic Server  Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue. 2024-11-14 9.1 CVE-2024-50306 Apache Software Foundation--Apache Traffic Server  Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-38479 Apache Software Foundation--Apache Traffic Server  Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-50305 Arttia Creative--Datasets Manager by Arttia Creative  Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative.This issue affects Datasets Manager by Arttia Creative: from n/a through 1.5. 2024-11-14 10 CVE-2024-52375 Autodesk--Installer  A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management. 2024-11-15 7.2 CVE-2024-9500 Avigilon--VideoIQ iCVR HD camera  Avigilon - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-45253 axelkeller--GPX Viewer  The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-13 8.8 CVE-2024-10629 ays-pro--Chartify WordPress Chart Plugin  The Chartify - WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included. 2024-11-14 9.8 CVE-2024-10571 Baxter--Life2000 Ventilation System  The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 10 CVE-2024-48966 Baxter--Life2000 Ventilation System  The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance. 2024-11-14 10 CVE-2024-48967 Baxter--Life2000 Ventilation System  The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48970 Baxter--Life2000 Ventilation System  The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges. 2024-11-14 9.3 CVE-2024-48971 Baxter--Life2000 Ventilation System  The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-48973 Baxter--Life2000 Ventilation System  The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48974 Baxter--Life2000 Ventilation System  There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-9832 Baxter--Life2000 Ventilation System  Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-9834 BdThemes--Instant Image Generator  Unrestricted Upload of File with Dangerous Type vulnerability in BdThemes Instant Image Generator allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through 1.5.4. 2024-11-14 10 CVE-2024-52377 Bigfive--CF7 Reply Manager  Unrestricted Upload of File with Dangerous Type vulnerability in Bigfive CF7 Reply Manager.This issue affects CF7 Reply Manager: from n/a through 1.2.3. 2024-11-16 9.9 CVE-2024-52404 Bikram Joshi--B-Banner Slider  Unrestricted Upload of File with Dangerous Type vulnerability in Bikram Joshi B-Banner Slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through 1.1. 2024-11-16 9.9 CVE-2024-52405 BlackBerry--SecuSUITE  A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege. 2024-11-12 7.3 CVE-2024-51721 Boa web server--Boa web server 0.94.14rc21  Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-47916 Bosch Rexroth AG--IndraDrive FWA-INDRV*-MP*  A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages. 2024-11-13 7.5 CVE-2024-48989 Ciprian Popescu--W3P SEO  Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO allows Stored XSS.This issue affects W3P SEO: from n/a before 1.8.6. 2024-11-14 7.1 CVE-2024-51684 Cisco--Cisco BroadWorks  A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.6 CVE-2023-20125 Cisco--Cisco Cyber Vision  A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.5 CVE-2022-20685 Cisco--Cisco Industrial Network Director  A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit this vulnerability by altering the request that is sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITYSYSTEM on the underlying operating system of an affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 9.9 CVE-2023-20036 Cisco--Cisco IOS XR Software  A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root. 2024-11-15 8.8 CVE-2022-20655 Cisco--Cisco Modeling Labs  A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.This vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. 2024-11-15 9.1 CVE-2023-20154 Cisco--Cisco Redundancy Configuration Manager  A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container.This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user.The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.1 CVE-2022-20649 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.  The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic.Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20814 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.  2024-11-15 7.4 CVE-2022-20853 Citrix Session Recording--Citrix Session Recording  Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server 2024-11-12 8.8 CVE-2024-8069 Clarisse K.--Writer Helper  Unrestricted Upload of File with Dangerous Type vulnerability in Clarisse K. Writer Helper allows Upload a Web Shell to a Web Server.This issue affects Writer Helper: from n/a through 3.1.6. 2024-11-16 9.9 CVE-2024-52399 cli--cli  The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image]( https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-... https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers#using-the-default-dev-container-configuration) . GitHub CLI [retrieves SSH connection details]( https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/inv... https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/invoker.go#L230-L244 ), such as remote username, which is used in [executing `ssh` commands]( https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L2... https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L263 ) for `gh codespace ssh` or `gh codespace logs` commands. This exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand="echo hacked" #`. The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored. In `2.62.0`, the remote username information is being validated before being used. 2024-11-14 8 CVE-2024-52308 cmorillas1--External Database Based Actions  The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin settings and log in as any existing user on the site, such as an administrator. 2024-11-15 7.5 CVE-2024-10311 cmsMinds--Boat Rental Plugin for WordPress  Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through 1.0.1. 2024-11-14 10 CVE-2024-52376 code-projects--Job Recruitment  A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11241 codeSavory--BasePress Migration Tools  Unrestricted Upload of File with Dangerous Type vulnerability in codeSavory BasePress Migration Tools allows Upload a Web Shell to a Web Server.This issue affects BasePress Migration Tools: from n/a through 1.0.0. 2024-11-16 9.9 CVE-2024-52407 craftcms--cms  Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5. 2024-11-13 8.4 CVE-2024-52291 craftcms--cms  Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, reads the file's content, and converts it into a Base64-encoded string. By embedding this function within a system notification template, the attacker can exfiltrate the Base64-encoded file content through a triggered system email notification. Once the email is received, the Base64 payload can be decoded, allowing the attacker to read arbitrary files on the server. This is fixed in 5.4.9 and 4.12.8. 2024-11-13 7.7 CVE-2024-52292 craftcms--cms  Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3. 2024-11-13 7.2 CVE-2024-52293 creativeinteractivemedia--Real3D Flipbook Lite 3D FlipBook, PDF Viewer, PDF Embedder  The 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-16 8.8 CVE-2024-9849 cyberlord92--Login using WordPress Users ( WP as SAML IDP )  The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.15.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2024-11-16 7.2 CVE-2024-9887 Dang Ngoc Binh--Audio Record  Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through 1.0. 2024-11-11 10 CVE-2024-51792 Davor Zeljkovic--Convert Docx2post  Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through 1.4. 2024-11-16 9.1 CVE-2024-52397 decidim--decidim  Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0. 2024-11-13 7.7 CVE-2024-45594 decidim-ice--decidim-module-decidim_awesome  An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands. 2024-11-12 9 CVE-2024-43415 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. 2024-11-12 7.8 CVE-2024-49557 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 2024-11-12 7.8 CVE-2024-49558 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. 2024-11-12 7.8 CVE-2024-49560 Dell--SmartFabric OS10 Software  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution 2024-11-12 7.8 CVE-2024-48837 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39354 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39605 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-47131 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user's password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user's account. 2024-11-11 9.8 CVE-2024-11068 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11062 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11063 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11064 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11065 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page. 2024-11-11 7.2 CVE-2024-11066 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password. 2024-11-11 7.5 CVE-2024-11067 DMC--Airin Blog  Deserialization of Untrusted Data vulnerability in DMC Airin Blog allows Object Injection.This issue affects Airin Blog: from n/a through 1.6.1. 2024-11-16 9.8 CVE-2024-52413 DonnellC--Global Gateway e4 | Payeezy Gateway  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0. 2024-11-14 8.6 CVE-2024-52371 DoThatTask--Do That Task  Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task allows Upload a Web Shell to a Web Server.This issue affects Do That Task: from n/a through 1.5.5. 2024-11-14 10 CVE-2024-52374 dotnetzip.semverd_project -- dotnetzip.semverd  Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer. 2024-11-13 9.8 CVE-2024-48510 Elastic--Kibana  A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. A successful attack requires a malicious user to have a combination of both specific Elasticsearch indices privileges https://www.elastic.co/guide/en/elasticsearch/reference/current/defining-roles.html#roles-indices-priv  and Kibana privileges https://www.elastic.co/guide/en/fleet/current/fleet-roles-and-privileges.html  assigned to them. The following Elasticsearch indices permissions are required * write privilege on the system indices .kibana_ingest** The allow_restricted_indices flag is set to true Any of the following Kibana privileges are additionally required * Under Fleet the All privilege is granted* Under Integration the Read or All privilege is granted* Access to the fleet-setup privilege is gained through the Fleet Server's service account token 2024-11-14 9.1 CVE-2024-37285 Eugen Bobrowski--Debug Tool  Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through 2.2. 2024-11-16 10 CVE-2024-52416 Flowcraft UX Design Studio--Advanced Personalization  Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2. 2024-11-16 9.8 CVE-2024-52411 fortinet -- forticlient  A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts. 2024-11-12 8.8 CVE-2024-36513 fortinet -- forticlient  A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. 2024-11-12 7.8 CVE-2024-36507 Fortinet--FortiClientWindows  A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. 2024-11-13 7.8 CVE-2024-47574 Fortinet--FortiManager  A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigDataat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. 2024-11-12 7.5 CVE-2024-23666 Fortinet--FortiOS  A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link. 2024-11-12 7.5 CVE-2023-50176 FraudLabs Pro--FraudLabs Pro SMS Verification  Cross-Site Request Forgery (CSRF) vulnerability in FraudLabs Pro FraudLabs Pro SMS Verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through 1.10.1. 2024-11-14 7.1 CVE-2024-51688 FreeBSD--FreeBSD  The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option. 2024-11-12 7.5 CVE-2024-45289 GeekRMX--Twitter @Anywhere Plus  Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus allows Stored XSS.This issue affects Twitter @Anywhere Plus: from n/a through 2.0. 2024-11-14 7.1 CVE-2024-51659 GentleSource--Appointmind  Cross-Site Request Forgery (CSRF) vulnerability in GentleSource Appointmind allows Stored XSS.This issue affects Appointmind: from n/a through 4.0.0. 2024-11-14 7.1 CVE-2024-51679 GeoVision--GV-VS12  Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports. 2024-11-15 9.8 CVE-2024-11120 GitLab--GitLab  An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations. 2024-11-14 8.5 CVE-2024-9693 glpi-project--glpi  GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. 2024-11-15 8.1 CVE-2024-40638 gogs--gogs/gogs  A remote command execution vulnerability exists in gogs/gogs versions

Read more »

An Interview With the Target & Home Depot Hacker
In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel, who confirmed using the Rescator identity in a recent interview, also admitted reaching out because he is broke and seeking publicity for several new money making schemes.

Read more »

Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed prior to today.

Read more »

Clearance 15-inch M3 MacBook Airs available for only $999 with optional free local store pickup
Best Buy has clearance 15" MacBook Airs with M3 CPUs and 8GB of RAM on sale for $300 off original MSRP on their online store this week. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 15" M3 MacBook Air (8GB RAM/256GB SSD): $999 $300 off MSRP - 15" M3 MacBook Air (8GB RAM/512GB SSD): $1199 $300 off MSRP For the latest sales & prices, see our 15" MacBook Air Price Tracker.

Read more »

Clearance 14-inch M3 MacBook Pros available for $500 off original MSRP with optional free local store pickup
Best Buy is offering a $300-$500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at $1299. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1299, $300 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP Yes, that means they have models with 1TB of storage available at the same price as those with 512GB, at least at the time of this post. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Clearance 14-inch M3 MacBook Pros available for $500 off original MSRP with optional free local store pickup
Best Buy is offering a $300-$500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at $1299. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1299, $300 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP Yes, that means they have models with 1TB of storage available at the same price as those with 512GB, at least at the time of this post. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Clearance 14-inch M3 MacBook Pros available for $500 off original MSRP with optional free local store pickup
Best Buy is offering a $300-$500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at $1299. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1299, $300 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP Yes, that means they have models with 1TB of storage available at the same price as those with 512GB, at least at the time of this post. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Holiday Sale: 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP, at Amazon
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Holiday sale this week for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Discount applies to all colors, and shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP This is the lowest price available for a new MacBook with 16GB of RAM among the Apple retailers we track. For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Holiday Sale: 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP, at Amazon
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Holiday sale this week for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Discount applies to all colors, and shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP This is the lowest price available for a new MacBook with 16GB of RAM among the Apple retailers we track. For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Holiday Sale: 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP, at Amazon
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Holiday sale this week for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Discount applies to all colors, and shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP This is the lowest price available for a new MacBook with 16GB of RAM among the Apple retailers we track. For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

16-inch M4 Pro MacBook Pros are on Holiday sale this week for $250 off Apple’s MSRP
Amazon is offering a $250 discount on Apple's new 16-inch M4 Pro MacBook Pros as part of their Holiday sales this week. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller, and clip any coupons Amazon may present to you: - 16" M4 Pro MacBook Pro (24GB/512GB): $2249, $250 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2649, $250 off MSRP For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

16-inch M4 Pro MacBook Pros are on Holiday sale this week for $250 off Apple’s MSRP
Amazon is offering a $250 discount on Apple's new 16-inch M4 Pro MacBook Pros as part of their Holiday sales this week. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller, and clip any coupons Amazon may present to you: - 16" M4 Pro MacBook Pro (24GB/512GB): $2249, $250 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2649, $250 off MSRP For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Holiday Sale: Apple Watch SE GPS models for $60 off MSRP
Walmart has the Apple Watch SE, GPS-only, on Holiday sale this week for $60 off MSRP with prices starting at only $189. These are the cheapest new Apple Watch prices available today: - Apple Watch SE 40mm GPS: $189, $60 off MSRP - Apple Watch SE 44mm GPS: $219, $60 off MSRP Sale prices at Walmart are for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

13-inch M3 MacBook Airs with 16GB of RAM back on Holiday sale this week for $200 off MSRP, prices start at $899
Amazon and Best have Apple's 13-inch M3 MacBook Airs with 16GB of memory, the newest models recently upgraded by Apple, back on Holiday sale this week for the same prices they had posted over Black Friday. Save $200 on each MacBook Air right now, with prices available starting at only $899. Sale prices below apply to all colors. (1): Amazon has new 13" 16GB M3 MacBook Airs on sale for $200 off MSRP, each including free shipping: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Note that stock at Amazon varies, and be sure to select Amazon as the seller rather than choosing a third-party retailer. (2): Best Buy has new 13" 16GB M3 MacBook Airs on sale for $200 off MSRP as well. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

iPads are back on Holiday sale for $70 off MSRP on Best Buy’s online store
Best Buy has Apple's 10th-generation iPads back on Holiday sale this week for $70 off MSRP on their online store, starting at $279. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 10" 10th-generation 64GB WiFi iPads: $279 $70 off MSRP - 10" 10th-generation 256GB WiFi iPads: $429 $70 off MSRP - 10" 10th-generation 64GB WiFi + Cellular iPads: $429 $70 off MSRP - 10" 10th-generation 256GB WiFi + Cellular iPads: $579 $70 off MSRP These are the lowest prices available for base-model iPads among the Apple retailers we track. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »