Best MacBook for students 2024-2025
Macworld Thinking of buying a Mac or MacBook for school, college or university? Here, in our best Mac for students guide, we take a look at Apple’s current line-up to evaluate which Mac is best for students. We’ll compare the MacBook Air vs MacBook Pro for college and examine whether a desktop Mac might actually be a better choice. Choosing the best Mac for college or university depends on what you are going to be studying as well as how much you have to spend. Luckily registered students can save money on a new Mac by shopping at Apple’s Education Store, or with one of Apple’s partners. We discuss How to get an Apple student discount at Apple’s Education Store separately, although we also talk about the different ways you can save money as a student below. You can save hundreds on a MacBook Air, MacBook Pro, iMac, Mac mini, Mac Studio and even a Mac Pro at Apple’s Education Store all year round. Click on the following links for the Education stores in the countries where most of our readers reside: Apple’s U.S. Education Store Apple’s U.K. Education Store (in the UK you will need to verify your student status via UNiDAYS). Apple’s Canada Education Store Apple’s Australian Education Store While students can get money off all year round, in the summer months Apple gives away either vouchers or AirPods with purchases of Macs or iPads made by those in higher education. The Back to School deal (called Back to Uni in the U.K. and elsewhere so as not to suggest it is for school age children) runs from June to end of September in the U.S., July to mid October in the U.K. and Europe, and January to March in Australia and New Zealand. If you’re a student, you can also get Apple Music for half price with free Apple TV+ included. Buy a Mac or iPad for university during the summer months and take advantage of Apple’s Higher Education deal. Apple We’ll run through exactly how much money you can save on a new Mac if you are a student below, then we will assess which Mac to choose based on your needs as a student and the course you are taking. Our advise is to shop around for deals that may be better than the student discount: you may be able to get even more money off your Mac purchase if you go straight to a reseller. Read on to find the best deals for each Mac. If you’re doing a degree in film and video, or music, or graphic design then it might make sense to also look at one of our other Best Mac For… guides for that subject area: Best Mac for graphic design Best Mac for making music Best Mac for video editing Best Mac for programming Best Mac for photo editing Best Mac for gaming (in case you have any free time) We also have a guide to help you get the best MacBook deals for students. We also offer advice about how much storage, RAM and cores in How much MacBook do you really need? How much can students save on a Mac? Before we begin let’s look at what is available and how much you can save with the education discount. Students can typically save $100 to $200 in the U.S., in the U.K. the savings are from £100 to £200, Australian students can save between $150 and $330 and Canadian students can typically save from $130 to $270. Savings are even bigger on high-end products like the Mac Pro, although we aren’t sure that many students need one of those. ProductU.S.U.K.AustraliaCanada13.6-inch MacBook Air, M2, MSRP$999£999$1,599$1,29913.6-inch MacBook Air, M2, Student discount$899£899$1,439$1,16913.6-inch MacBook Air, M3, MSRP$1,099£1,099$1,799$1,44913.6-inch MacBook Air, M3, Student discount$999£999$1,649$1,29915-inch MacBook Air, M3, MSRP$1,299£1,299$2,199$1,74915-inch MacBook Air, M3, Student discount$1,199£1,199$1,999$1,59914-inch MacBook Pro M4 MSRP$1,599£1,599$2,499$2,09914-inch MacBook Pro M4 Student discount$1,499£1,499$2,349$1,96914-inch MacBook Pro, M4 Pro MSRP$1,999£1,999$3,299$2,69914-inch MacBook Pro, M4 Pro Student discount$1,849£1,849$3,069$2,50916-inch MacBook Pro, M4 Pro MSRP$2,499£2,499$3,999$3,29916-inch MacBook Pro, M4 Pro Student discount$2,299£2,299$3,699$3,049iMac M4 MSRP$1,299£1,299$1,999$1,699iMac M4 Student discount$1,249£1,249$1,919$1,629Mac mini M4 MSRP$599£599$999$799Mac mini M4 Student discount$499£499$849$669Mac Studio M2 Max MSRP$1,999£2,099$3,299$2,699Mac Studio M2 Max Student discount$1,799£1,889$2,969$2,429Mac Pro M2 Max MSRP$6,999£7,199$11,999$8,999Mac Pro M2 Max Student discount$6,599£6,789$11,309$8,479Apple’s discounted price for students compared to the usual price. MacBook Air vs MacBook Pro for college/university? This is likely the question you are hoping to get an answer to: should I buy a MacBook Air or a MacBook Pro for college? We compare the MacBook Air vs MacBook Pro in detail separately. Below we’ll evaluate the different MacBooks from the perspective of a typical student in the order that we recommend them for students. 1. MacBook Air, 13-inch, M3, 2024 Price When Reviewed: $1,099 Best Prices Today: $999 at B&H$1014 at Walmart Electronics$1,059.99 at Amazon You might assume that the MacBook Air is low-powered in comparison to the MacBook Pro, but until September 2024 the 13-inch MacBook Air offered the same M3 chip as the 13-inch MacBook Pro. That changed in with the introduction of the M4 MacBook Pro in October 2024, but it is unlikely to be long until Apple updates the MacBook Air with the same chip. If you don’t want to wait for the M4 MacBook Air, this is still a good choice, especially because Apple increased the amount on RAM (unified memory) included from 8GB to 16GB in October 2024 without changing the price. If you’re looking for a MacBook that doesn’t break the bank and offers the ultimate in portability and great battery life, then the MacBook Air is the perfect fit. The model we are recommending here is not the cheapest MacBook Air, but it offers the best value for money and the price difference between this and the older M2 model is so small that it is one of those cases where spending a little more gets you a lot more. This MacBook Air offers 18 hours of battery life, according to Apple. This is less than the 13-inch MacBook Pro’s 20 hours, but it’s sure to be enough to get you through a day and an all-nighter at university. There are no USB-A ports on the MacBook Air or MacBook Pro, just two USB-C, a headphone jack, and a MagSafe port so you can charge your laptop and still have two USB ports free. You may feel that you need more storage than the entry-level model offers, in which case, the 512GB model costs $200/£200 more. Previously there were additional benefits to choosing the 512GB version because Apple’s smaller SSDs weren’t as fast as the larger ones, but for the M3 MacBook Air Apple seems to have addressed this issue. Rather than fork out for extra storage built-in you may find external storage, or even iCloud storage, works out cheaper. (If you have a big Music library, for example, pay for iTunes Match so you can keep your music in the cloud. If you have a big photo library turn on iCloud Photos and get additional iCloud storage). How much can students save on the 13-inch MacBook Air, M3? MSRP: $1,099 / £1,099 / AU$1,799 / CA$1,449Student: $999 / £999 / AU$1,649 / CA$1,299 Students save: $100 / £100 / AU$150 / CA$150 You’ll see the best prices right now in the block above, which may be even better than Apple’s education pricing. 2. MacBook Air, 15-inch, M3, 2024 Price When Reviewed: $1,299 Best Prices Today: $1199 at B&H$1199 at Walmart Electronics$1,229.55 at Amazon There is only one reason not to buy the 13-inch MacBook Air with M3: the 15-inch MacBook Air with M3… although as of the end of 2024 we’d add the fact that Apple is likely to update the MacBook Air with the M4 chip early in 2025. The 15-inch MacBook Air costs $200 more than the entry-level 13-inch M3 model, but it offers a better M3 chip as standard with a 10-core GPU, rather than an 8-core GPU. And there’s also a bigger screen. Another benefit relates to the speakers, which are better than the smaller MacBook Air’s. Here you get a six-speaker sound system with force-canceling woofers rather than the four-speaker sound system of the 13-inch M3 (and M2). The 15-inch MacBook Air weighs a little more and will take up more space in your bag, but if you want a bigger screen then that’s a fair price to pay. Battery life is the same 18-hours as the other 13-inch MacBook Air models. How much can students save on the 15-inch MacBook Air, M3? MSRP: $1,299 / £1,299 / AU$2,199 / CA$1,749Student: $1,199 / £1,199 / AU$1,999 / CA$1,599 Students save: $100 / £110 / AU$200 / CA$150 You’ll see the best prices right now in the block above, which may be even better than Apple’s education pricing. 3. Apple 14-inch MacBook Pro, M4, 2024 Price When Reviewed: $1,599 | $1,799 | $1,999 Best Prices Today: $1399 at B&H$1474 at Walmart Electronics$1499 at Best Buy The 14-inch MacBook Pro with M4 is quite a leap up from the MacBook Air in terms of price, so you may be wondering why anyone would want to pay more for the MacBook Pro. There is a reason to buy the MacBook Pro rather than the MacBook Air though and that’s basically if the MacBook Air won’t be powerful enough for your needs. The thing about the MacBook Air is that it lacks a fan, which means that if you really push it then the Mac might slow down to avoid overheating. For this reason, if you want to use your Mac for heavy processing then you might be better off with a MacBook Pro. In this case, if you have the budget, you might actually want to consider the M4 Pro option (discussed next). One other benefit of the MacBook Pro is the wider selection of ports than on the MacBook Air, including HDMI and an SDXC card reader. But if you aren’t doing anything too demanding then the MacBook Air is going to be more than powerful enough for your needs and we’d suggest that you save the money you’d be spending on the MacBook Pro and buy an external display to plug into when you are back in your dorm room, or something equally as useful (like food). How much can students save on the 14-inch MacBook Pro, M4? MSRP: $1,599 / £1,599 / AU$2,499 / CA$2,099Student: $1,499 / £1,499 / AU$2,349 / CA$1,969 Students save: $100 / £100 / AU$150 / CA$130 Read our full Apple 14-inch MacBook Pro (M4) review 4. MacBook Pro, 14-inch, M4 Pro, 2024 Price When Reviewed: $1,999 | $2,399 Best Prices Today: $1749 at B&H$1,829 at Amazon$1839 at Walmart Electronics It is unlikely that students need the power of the M4 Pro in the 14-inch MacBook Pro (or 16-inch MacBook Pro for that matter) and the price is likely to be prohibitive anyway. But we do see some good MacBook Pro deals, so if you can get a bargain then these more powerful MacBook Pro models are worth considering. If you need a more powerful Mac because your course calls for it, or perhaps because you are a gamer looking for a machine that can meet those demands, then you can save a bit of money by choosing the 14-inch MacBook Pro over the 16-inch model. Both models offer the same specs, so you aren’t forfeiting any high-power options. Read: 14-inch vs 16-inch MacBook Pro. How much can students save on the 14-inch MacBook Pro, M4 Pro? MSRP: $1,999 / £1,999 / AU$3,299 / CA$2,699Student: $1,849 / £1,849 / AU$3,069 / CA$2,509 Students save: $150 / £150 / AU$230 / CA$190 5. MacBook Air, 13-inch, M2, 2022 Price When Reviewed: $999 Best Prices Today: $899 at B&H$924 at Amazon$924 at Walmart Electronics Students looking to spend as little money as possible may well be considering the M2 MacBook Air, which is just $899/£899 for students. That’s $100/£100 less than the student price of the newer M3 MacBook Air. Even better, Apple upped the RAM (unified memory) from 8GB to 16GB as standard in October 2024 without increasing the price, so this is still a good Mac to buy if you are on a budget. That’s not a huge saving though, so we suggest you shop around a bit before you buy: you may find a discount on the M3 13-inch MacBook Air that beats Apple’s Student discount on the older model. Just make sure that you note whether there is 8GB or 16GB RAM inside when deciding whether a deal is good enough. If you can spare the extra money, we recommend spending the extra $100/£100 because the M3 MacBook Air is the better purchase thanks to the newer M3 chip and faster storage. Our advice is to avoid the 256GB M2 MacBook Air because the storage is known to be slower. We’d recommend upgrading to the 512GB model, but by that point, you might as well spend the money on the M3 MacBook Air which isn’t hampered by the same storage issue. But, if you can’t spare the extra money the M2 MacBook Air will be more than adequate for a student, especially those predominantly writing essays and conducting research. This model came with a bigger and brighter screen, and better FaceTime cameras than its predecessor, and still has a lot of benefits compared to the MacBook Pro. The M2 MacBook Air offers 18 hours of battery life, just like the M3 model. That is less than the 13-inch MacBook Pro’s 20 hours, but it is enough to get you through a day and an all-nighter at university. It offers the same ports as the M3 MacBook Air: two USB-C, a headphone jack, and a MagSafe port for charging. How much can students save on the 13-inch MacBook Air, M2? MSRP: $999 / £999 / AU$1,599 / CA$1,299Student: $899 / £899 /AU$1,439 / CA$1,169 Students save: $100 / £100 / AU$160 / CA$130 MacBook vs Mac desktop for students? Student life normally involves a fair amount of mobility – traveling to lectures, libraries, the occasional coffee shop, and then possibly home for weekends and term breaks–so it makes sense to consider a laptop rather than a desktop Mac. While the screen sizes in MacBooks are smaller than iMacs, you can always buy a cheap screen and use that with your laptop when you are home. Or, if you also have an iPad, you might be able to link your iPad to your MacBook and use the iPad screen too (here’s how to use your iPad as a second screen for your Mac). You could also use that iPad for taking notes when you are at lectures (read our guide to the best iPad for students). However, there are some benefits to buying a Mac desktop. Generally, it is the case that you pay more for a Mac laptop, compared to the same specs on a desktop. The Mac mini, for example, is Apple’s cheapest Mac despite having some pretty impressive specs. However, if you compare the 24-inch iMac with a similarly speced Mac laptop the iMac is considerably more expensive.  iMac vs Mac mini vs Mac Studio for students While we appreciate that there are plenty of benefits associated with choosing a laptop for university, you may be better off with a desktop. 1. Mac mini, M4, 2024 Price When Reviewed: $599 | $799 | $999 Best Prices Today: $574 at Walmart Electronics$589 at B&H$598.93 at Amazon The Mac mini was upgraded in October 2024 when it gained the M4 chip (and the M4 Pro chip option discussed below). It also got a brand new, much smaller, design. It now measures a diminutive 5-inches by 5-inches (12.7cm x 12.7cm). So you can find room for it on your desk, or in your bag when heading home for the holidays. In the U.K. Apple also reduced the price, so it’s now $599/£599 (the price hasn’t changed in the U.S.). Depending on where you are based, the cheapest Mac going is now even cheaper! The only real compromise is the lack of monitor and keyboard. If you are on a budget the Mac mini is the way to go. Get an entry-level Mac mini and ask around for an old keyboard, mouse and monitor. How much can students save on the Mac mini, M4? MSRP: $599 / £599 / AU$999 / CA$799Student: $499 / £499 / AU$829 / CA$669 Students save: $100 / £110 / AU$170 / CA$130 2. Apple Mac mini (M4 Pro) Price When Reviewed: $1,399 Best Prices Today: $1299 at B&H$1399 at Apple$1399 at Best Buy The M4 Pro Mac mini offers all the benefits of the Mac mini discussed above along with the more powerful M4 Pro chip which brings more GPUs and support for more RAM (unified memory). If you need an M4 Pro chip the Mac mini with M4 Pro is a lot cheaper, at $1,299 (student price) than a 14-inch MacBook Pro, which starts at $1,849 for students. Sure, you need to buy a monitor, mouse and keyboard, but you can probably find good deal on those accessories. How much can students save on the Mac mini, M4 Pro? MSRP: $1,999 / £1,999 / AU$3,299 / CA$2,699Student: $1,849 / £1,849 / AU$3,069 / CA$2,509 Students save: $150 / £150 / AU$230 / CA$190 Read our full Apple Mac mini (M4 Pro) review 3. Mac Studio, M2 Max, 2023 Price When Reviewed: £1,999 Best Prices Today: $1749 at B&H$1799 at Adorama$1949 at Walmart Electronics The M2 Max Mac Studio used to be celebrated for its powerful chip, with more GPU cores and support for more RAM, at a much lower price than similarly specced Mac laptops. However, it’s now a few years on from its introduction and Apple is yet to update it. We anticipate that the M4 Mac Studio will arrive in mid 2025. If you need a powerful Mac, either because your course demands it, or because you want to spend your free time gaming, the Mac Studio is worth consideration, and the student discount is pretty good. We’d wait for the new model to launch though. As with the 14-inch and 16-inch MacBook Pro models though, we’d suggest that you probably don’t need this much power and could probably use the money for something more important, like accommodation or food. How much can students save on the Mac Studio? MSRP: $1,999 / £2,099 / AU$3,299 / CA$2,699Student: $1,799 / £1,889 / AU$2,969 / CA$2,429 Students save: $200 / £210 / AU$330 / CA$270 Read our full Apple Mac Studio (M2 Max, 2023) review 4. iMac, 24-inch, M4 Price When Reviewed: $1,299 | $1,499 | $1,699 | $1,899 Best Prices Today: $1199 at Best Buy$1204 at Walmart Electronics$1,264.99 at Amazon Back in May 2021 Apple introduced an M1-equipped 24-inch iMac with a brand new design in a choice of seven different colors, it then took until October 2023 before Apple updated the machine, adding an M3 chip and nothing else. Now Apple has update the iMac again, this time with an M4 chip in October 2024. We haven’t recommended the iMac for students, and we aren’t fully recommending it now. But the iMac does have a few qualities that might appeal to you. Thanks to its design it’s certainly a Mac that will make a statement to anyone entering your dorm room. That 24-inch display could also be a great screen for streaming your favorite shows and movies. The iMac is a non-portable Mac though, which might deter many students from purchasing one. You won’t be able to take it with you to lectures–or cart it home on a train for the holidays–but you will be able to work more efficiently thanks to its 24-inch screen. How much can students save on the iMac? MSRP: $1,299 / £1,299 / AU$1,999 / CA$1,699Student discount: $1,249 / £1,249 / AU$1,919 / CA$1,629 Students save: $50 / £50 / AU$80 / CA$70 Read our full Apple iMac (M4) review Which Mac should you get for university? Our pick of the entire Mac range, if you’re a student, is the M3 MacBook Air. It will give you a better screen, better webcam and an attractive new design to show off in lectures. It’s light, fast, and with student pricing starting at $999/£999 it’s very good value. However, we’d wait until Apple updates it with the M4 chip. You could save by opting for the older M2 MacBook Air, but, if you are looking for the cheapest Mac you can get, the M4 Mac mini is a very good option. It’s powerful and with Apple’s education discount, it’s just $499/£499. You just need a monitor, mouse and keyboard. The only reason to delay buying one is the fact that a Mac mini may be coming soon. How to get a discount on a Mac for university or school You can get a student discount at Apple’s education stores, but you have to qualify as a student in higher education, be a teacher, someone buying for an education institution, or a home educator. School-age children can only take advantage if the equipment is being purchased by their school or if their parent is home-educating them. If you are a registered student you’ll be able to get a discount on a new Mac if you shop in Apple’s various Education Stores (below). You can find out all about it in more detail in our Apple Education Store explainer. Apple’s U.S. Education Store Apple’s U.K. Education Store (in the UK you will need to verify your student status via UNiDAYS). Apple’s Canada Education Store Apple’s Australian Education Store Getting a student discount from Apple’s education store isn’t the only way to get a cheaper Mac as a student though. There are various ways to get a bargain: Look out for reseller discounts: Another way to get a bargain is to look out for deals at Apple resellers and Amazon, where we have see Macs with as much as $500 off the price. Take a look at our round ups of the best Mac deals to get the best prices right now: Best MacBook Air deals this month Best Mac Studio deals available now Best MacBook Pro deals this month Best iMac deals this month Best Mac mini deals this month Buy a refurbished Mac: Take advantage of Apple’s refurbished store where the company sells ex-display, returned, and previous-generation Macs at a discount. The benefit of buying refurbished from Apple is that the products are fully checked and come with a one-year warranty. You can also get a refurbished Mac elsewhere with many resellers offering the same service, but beware that not all refurbished Macs are equal. Usually refurbished means that the Mac is guaranteed to be in full working order, but do check with the reseller. Here’s a guide to how to buy a refurbished Mac. We also look at why you should buy a refurbished Mac. One thing to note: if you find what you think is a good deal on an older Intel Mac we do not recommend that you buy one. Intel Macs will likely only be supported with security updates for a couple more years, so you may find yourself needing to upgrade before the end of your course. Buy second-hand/used: One advantage of buying refurbished is that it should be guaranteed to work and you should have no problem returning it if there is a problem. These are reasons why we don’t recommend buying a secondhand Mac. If you do see a deal on a secondhand or used Mac just be especially cautious. The best Mac bargains are usually on older models, although we do see discounts on current Macs as well. If you see a good discount on an older Mac it’s important to be aware of what the newer models offers so that you know what you are missing out on and can judge whether the deal is as good as it appears to be. For one thing, older Macs are likely to feature Intel processors rather than Apple’s M1, M2, M3 or their variants, which could put you at a disadvantage in the future (and will certainly mean your Mac depreciates in value very quickly). Considering an Intel Mac? Our advice is: avoid. See: How long does Apple support Macs for. If you are a student here’s how to get Apple Music for half price. Plus students with an Apple Music student subscription also get free access to Apple TV+ for a limited time.

Read more »

The iPad Pro is tapped to get the M5 chip before the Mac (again)
Macworld Apple is expected to update the iPad Pro in 2025 with an M5 chip, according to analyst Ming-Chi Kuo in a report about upcoming smart home products. Kuo believes the new iPad will “enter mass production” in the second half of 2025. That could mean that the M5 iPad Pro may become available to customers in the fall or about 18 months after the release of the M4 model. A recent report by The Elec (subscription required) stated that Apple has ordered M5 chips from chip manufacturer TSMC and that the M5 will be manufactured using a 3nm process. Previous reports stated that the M5 will be a 2nm chip, but Apple has reportedly switched to 3nm over cost concerns. TSMC has a new 3D chip-stacking process that should improve the chip’s thermal management and increase efficiency. While previous M-series chips debuted in a Mac, Apple surprisingly launched the M4 in the iPad Pro several months before it appeared in a Mac. With the first M5 Macs expected to launch in late 2025, the M5 iPad Pro may arrive in September alongside the iPhone 17. Kuo does not provide further details about the M5 chip’s specifications or any iPad Pro, nor did he mention any other changes. The M4 iPad Pro underwent a major design change this year with a thinner encloser and tandem OLED display, so it’s unlikely to get much more than a chip refresh. Apple and TSMC seem to have developed a chip production cycle that’s gained some consistency. After the M1 was released in 2020, chip production has had some hiccups due to the pandemic and the implementation of new production processes. Barring any other unforeseen issues, the iPad Pro could be entering a product cycle that spans 12 to 18 months between upgrades. Apple released the current M4 iPad Pro last May, so an M5 iPad Pro would arrive over a year later. The typical performance boosts from one chip generation to another is usually in the 15 to 25 percent range, and the M4 iPad Pro is already the fastest tablet available. It’s up for debate whether an M5 is even needed in the iPad Pro, but the upgrade will certainly maintain Apple’s lead and could be an appealing option for owners of older iPad Pro models.

Read more »

Apple reportedly hits snags adapting Apple Intelligence for CCP-controlled China
Apple is facing challenges in introducing Apple Intelligence to the Chinese market due to the Chinese Communist Party's strict… The post appeared first on MacDailyNews.

Read more »

Deals: Apple Watch Ultra 2 $99 off, iPhone 15 Pro $449 off, 2024 Bose speakers, MagSafe chargers, more
Joining ongoing Cyber Monday prices on Apple Watch Series 10 and AirPods 4, today we spotted a large selection of natural Apple Watch Ultra 2 configurations at $99 off the going rate courtesy of Amazon – you can still score the OG Apple Watch Ultra at $429 off too. We also spotted a massive price drop on Amazon Renewed Premium iPhone 15 Pro units at $449 off the original new price tags joined by the Bose speaker holiday sale that is delivering deals matching the best we have tracked on its 2024 slate of portable and home releases, some solid offers on MagSafe charging gear, and more. Everything awaits below in today’s 9to5Toys Lunch Break. more…

Read more »

Best Black Friday Apple deals that you can still grab today
Black Friday and Cyber Monday are in the rearview mirror, but numerous Apple deals are still in effect. Here are the best choices.There's still a chance to grab Black Friday pricing on Apple devices.With prices jumping up after Black Friday and Cyber Monday, shoppers looking for the best deals would normally have to sift through dozens of product listings. But we've rounded up the top picks that are still available at Black Friday prices to help save you time and money. You can also find the latest offers on hundreds of Macs, iPad Pros and more in our Apple Price Guide. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Stellantis denies hiring Apple's Luca Maestri to solve its massive problems
Netherlands car firm Stellantis may be best known for buying Jeep, Dodge, Ram, and Chrysler, but it says it is definitely not buying ex-Apple CFO Luca Maestri.Luca Maestri — image credit: AppleStellantis cars waited until its shares rose before denying reports that it has hired ex-Apple CFO Luca Maestri as its new CEO. And that rise in shares is among the best news it's had in a while, as its car sales reportedly fell 14% in 2024 — and its profits nearly halved.In comparison, Maestri went out on a high as Apple's Chief Financial Officer in October 2024. He has been replaced there by Kevan Parekh, though reportedly Maestri has just moved down the hall at Apple Park and isn't going anywhere. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Will it ever arrive? Apple’s HomePod with a screen reportedly delayed again
Macworld And so the wait goes on for Apple’s long-rumored HomePod upgrade. We’ve been hearing for years that the nice-sounding but functionally limited smart speaker will soon be redesigned to get a proper display, but it never seems to happen. And now the predicted release date has been pushed back once again. The respected analyst Ming-Chi Kuo had previously claimed that a HomePod with a screen would launch at some point in 2024. But the same pundit now believes it won’t arrive until the third quarter of next year, after WWDC 2025. “The mass production schedule for the display-equipped HomePod has been delayed multiple times,” Kuo writes on Medium. “Initially forecasted for 2024 (as I predicted in 2023), it was postponed to 1Q25, and more recently, further delayed to after WWDC 2025/3Q25.” The analyst blames software development for the delay in production, although he doesn’t clarify why the software is taking longer than expected to develop. He does note that the device will “emphasize smart home functionalities more” than existing HomePod products, but this was always understood to be the plan; perhaps the challenges are related to Apple Intelligence, which Kuo says will be supported but might not have been part of the plan when the device was expected to launch in 2024. Apple last updated the HomePod in early 2023 with a surprise second-generation model that didn’t change much other than a getting new chip and losing a couple of microphones. Most notably it isn’t capable of running Apple Intelligence, which we’d expect to be rectified in the next release. But at this point, as is often the case with tech products that have been delayed multiple times, we have to start wondering if it will ever launch. I’ve written before about my doubts as to whether a screen can fix the HomePod’s problems, and I very much doubt that installing a display and putting up the price is the way to bring a niche product to the mainstream. Apple has certainly been working on a smart speaker with a screen–there’s far too much evidence to doubt it—but I think there’s a decent chance it will think better of the whole thing and move on.

Read more »

How would you improve this dual-monitor MacBook Pro rig? [Setups]
Today's MacBook Pro setup got a lot of advice on social media about its dual LG UltraFine displays -- how to mount them and more. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

New Apple TV+ German-language drama ‘Berlin ER’ premieres February 26th
Apple TV+ on Wednesday revealed the premiere date for “Berlin ER” (formerly known as “KRANK Berlin”), the upcoming edgy German… The post appeared first on MacDailyNews.

Read more »

Today in Apple history: Secret project ports Mac OS to PCs
On December 4, 1992, Apple engineers demonstrated a "proof of concept" that's part of a secret project to run the Mac OS on Intel PCs. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple TV+ knows what you want: German hospital dramas [Updated]
"Krank Berlin" is a gritty, vibrant and dynamic German medical drama series coming soon, Apple TV+ said Tuesday. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Disney+ app debuts new ESPN tile, adds free Hulu and sports content
Almost a year ago exactly, Disney+ started adding Hulu content to its app. Now, the streamer is integrating ESPN as well via a new tile that will start appearing in the Disney+ app today. And in a nice perk, non-bundle subscribers are getting some Hulu and ESPN content thrown in at no extra charge. more…

Read more »

HomePod with a large display is still on the way
Get the latest on the upcoming HomePod with a display, a new smart home device with a focus on home automation. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

HomePad: Apple’s display-equipped HomePod delayed again – Ming-Chi Kuo
Apple's highly anticipated HomePod with a built-in smart display has been delayed. According to analyst Ming-Chi Kuo, the device is now… The post appeared first on MacDailyNews.

Read more »

Scan your iPhone for Pegasus spyware using a $1 app
A newly-released app lets you regularly scan your iPhone for Pegasus spyware – which can access almost all the data on a phone – for a one-off cost of just one dollar. A mobile security firm created the app, which allows you to scan your iPhone or Android phone and send the results to them for analysis – and they’ve so far detected seven phones infected by the spyware … more…

Read more »

Apple is struggling to make Apple Intelligence comply with China's demands
The deal between Apple and local firm Baidu to bring a form of Apple Intelligence to China is reportedly faltering because of technical and philosophical privacy issues.Apple Intelligence faces delays in ChinaApple Intelligence could provide the boost to iPhone sales in China that Apple needs, after years of decline and increasing local competition. But while Apple theoretically could go it alone with Apple Intelligence in the country, in practice it has to partner with a Chinese firm — and it's facing difficulties.While it has now partnered with Baidu, after local media first denied it had, The Information says that the partnership is struggling. The difficulty includes how Baidu's large language models (LLMs) have been failing to provide the kind of responses Apple wants for typical iPhone user questions. Rumor Score: 🤯 Likely Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Kuo: Next iPad Pro with M5 chip coming in fall 2025
Apple’s iPad Pro got a huge upgrade this year with the M4 chip, tandem OLED display, nano-texture option, and more. But the next version is already in the works, and now we have an idea of when to expect it. more…

Read more »

Baidu confirmed as China Apple Intelligence model provider, but privacy concerns mount
Apple hopes to bring its Apple Intelligence suite of AI features to China in 2025, but the company has reportedly clashed with its partner Baidu over technical and privacy issues. more…

Read more »

Two reasons to suggest the iPhone 17 may have Face ID embedded in the display
Apple has been granted another patent for technology that would allow it to have Face ID embedded in the display, enabling the company to reduce the size of the camera cutout. While Apple has been working on this for many years, there are a couple of reasons to suspect that the tech may perhaps debut in the iPhone 17 line-up … more…

Read more »

Car maker Stellantis debunks report that outgoing Apple CFO Maestri will be its next CEO
It turns out that Apple’s outgoing CFO Luca Maestri won’t be the next CEO of car maker Stellantis — which was apparently a rumor in the automotive industry. more…

Read more »

Stellantis denies report about choosing Apple CFO Luca Maestri as new CEO
Stellantis has denied a recent report claiming that Luca Maestri, the outgoing CFO of Apple, would be appointed as the new CEO of the company… The post appeared first on MacDailyNews.

Read more »

Spotify Wrapped 2024 launches with AI Podcast powered by Google’s NotebookLM
Spotify Wrapped 2024 is here and features an AI Podcast that’s “Built with Google’s NotebookLM.” Two AI hosts from the viral note-taking/research tool “unwrap” your year in music. more…

Read more »

M5 iPad Pro rumored to arrive sometime in late 2025
Apple's next update to the iPad Pro line with an M5 chip is quite a way from release, an analyst claims, with mass production of the tablet expected to happen in late 2025.13-inch iPad Pro, running on the M4 chipThe most recent iPad Pro release was in May 2024, ushering in the M4 generation of Apple Silicon by being the first device to use it. However, it could be quite some time before the next iteration becomes available.According to a Medium post by TF Securities analyst Ming-Chi Kuo on Wednesday, Apple will be using BYD Electronic for assembling more iPads in future. The post also touches briefly on the iPad Pro's next release. Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Tim Cook denies OpenAI rumors; talks AI energy use; Apple Glasses; saving lives
A wide-ranging interview with Apple CEO Tim Cook reveals him (kind of) denying OpenAI rumors; addressing the potential conflict between the power requirements of AI and Apple’s environmental goals; the journey toward Apple Glasses; and how Apple’s greatest legacy may be saving lives. Cook kicks off by denying that Apple was late to AI, pointing out that the company first built a neural engine into its products back in 2017 … more…

Read more »

How to get an Apple student discount at Apple’s Education Store
Macworld Students, teachers, and those who work for an educational institution can save money on a new Mac, MacBook, or iPad by shopping at the Apple Education Store, which offers discounts all year round. In this article, we will explain how much the Apple education discount is and who qualifies for an Apple student discount, before explaining how to get an Apple student discount at the Apple Education Store. Click the link below to go to Apple’s education storefront in your country: Apple’s U.S. Education Store Apple’s U.K. Education Store (in the U.K. you will need to verify your student status via UNiDAYS). Apple’s Canada Education Store Apple’s Australian Education Store What products does Apple discount for students? The discounts are only available for iPads, MacBooks and Macs. Education discounts are not available on the iPhone, Apple TV, Apple Watch, HomePods, accessories, or software (Adobe and Microsoft both offer student discounts though). AirPods aren’t discounted for students either, but Apple has been known to give away AirPods as part of a student-focused deal during the back-to-school buying season (between June and October in the northern hemisphere and between January and March in the southern hemisphere). For example, in January-March 2024 Brazil and South Korean students could claim free AirPods with purchases, but Australian and New Zealand students were given Apple gift vouchers. Similarly, Apple’s Back To School offer kicked off in June 2024 in the U.S. where students are able to get vouchers with qualifying purchases until mid-September. In Europe and the U.K. the same offer will start in mid-July and will run until October. Students can also get Apple Music for half price with free Apple TV+ included. How much is the Apple student discount? Apple doesn’t offer a single, universal discount to students. It sets different prices for each product range. Students can save up to $200/£220 on Macs and up to $100/£100 on iPads. Here’s how the iPad MSRP compares to the student price: ProductU.S.U.K.AustraliaCanadaiPad (10th gen) MSRP$349£329$599$499iPad (10th gen) Student Price$329£309$559$469iPad mini (A17 Pro) MSRP$499£499$799$679iPad mini (A17 Pro) Student Price$449£449$719$609iPad Air (11-inch, M2) MSRP$599£599$999$799iPad Air (11-inch, M2) Student Price$549£549$919$729iPad Air (13-inch, M2)MSRP$799£799$1,299$1,099iPad Air (13-inch, M2) Student Price$749£749$1,219$1,029iPad Pro (11-inch, M4) MSRP$999£999$1,699$1,399iPad Pro (11-inch, M4) Student Price$899£899$1,529$1,249iPad Pro (13-inch, M4) MSRP$1,299£1,299$2,199$1,799iPad Pro (13-inch, M4) Student Price$1,199£1,199$2,029$1,649Apple’s discounted price for students compared to the usual price. Here’s how the Mac and MacBook MSRP compares to the student price: ProductU.S.U.K.AustraliaCanada13.6-inch MacBook Air, M2, MSRP$999£999$1,599$1,29913.6-inch MacBook Air, M2, Student discount$899£899$1,439$1,16913.6-inch MacBook Air, M3, MSRP$1,099£1,099$1,799$1,44913.6-inch MacBook Air, M3, Student discount$999£999$1,649$1,29915-inch MacBook Air, M3, MSRP$1,299£1,299$2,199$1,74915-inch MacBook Air, M3, Student discount$1,199£1,199$1,999$1,59914-inch MacBook Pro M4 MSRP$1,599£1,599$2,499$2,09914-inch MacBook Pro M4 Student discount$1,499£1,499$2,349$1,96914-inch MacBook Pro, M4 Pro MSRP$1,999£1,999$3,299$2,69914-inch MacBook Pro, M4 Pro Student discount$1,849£1,849$3,069$2,50916-inch MacBook Pro, M4 Pro MSRP$2,499£2,499$3,999$3,29916-inch MacBook Pro, M4 Pro Student discount$2,299£2,299$3,699$3,049iMac M4 MSRP$1,299£1,299$1,999$1,699iMac M4 Student discount$1,249£1,249$1,919$1,629Mac mini M4 MSRP$599£599$999$799Mac mini M4 Student discount$499£499$849$669Mac Studio M2 Max MSRP$1,999£2,099$3,299$2,699Mac Studio M2 Max Student discount$1,799£1,889$2,969$2,429Mac Pro M2 Max MSRP$6,999£7,199$11,999$8,999Mac Pro M2 Max Student discount$6,599£6,789$11,309$8,479Apple’s discounted price for students compared to the usual price. MacBook student discounts Below are the discounts on the base model Macs, there are bigger discounts on the more expensive models. How much can students save on the 13-inch MacBook Air, M2? MSRP: $999 / £999 / AU$1,599 / CA$1,299Student: $899 / £899 /AU$1,439 / CA$1,169 Students save: $100 / £100 / AU$160 / CA$130 How much can students save on the 13-inch MacBook Air, M3? MSRP: $1,099 / £1,099 / AU$1,799 / CA$1,449Student: $999 / £999 / AU$1,649 / CA$1,299 Students save: $100 / £100 / AU$150 / CA$150 How much can students save on the 15-inch MacBook Air, M3? MSRP: $1,299 / £1,299 / AU$2,199 / CA$1,749Student: $1,199 / £1,199 / AU$1,999 / CA$1,599 Students save: $100 / £100 / AU$200 / CA$150 How much can students save on the 14-inch MacBook Pro, M4? MSRP: $1,599 / £1,599 / AU$2,499 / CA$2,099Student: $1,499 / £1,499 / AU$2,349 / CA$1,969 Students save: $100 / £100 / AU$150 / CA$130 How much can students save on the 14-inch MacBook Pro, M4 Pro? MSRP: $1,999 / £1,999 / AU$3,299 / CA$2,699Student: $1,849 / £1,849 / AU$3,069 / CA$2,509 Students save: $150 / £150 / AU$230 / CA$190 How much can students save on the 16-inch MacBook Pro, M4 Pro? MSRP: $2,499 / £2,499 / AU$3,999 / CA$3,299Student: $2,299 / £2,299 / AU$3,699 / CA$3,049 Students save: $200 / £200 / AU$300 / CA$250 How much can students save on the Mac mini, M4 Pro? MSRP: $1,399 / £1,399 / AU$2,199 / CA$1,899Student: $1,299 / £1,299 / AU$2,049 / CA$1,769 Students save: $100 / £100 / AU$150 / CA$130 How much can students save on the Mac mini, M4? MSRP: $599 / £599 / AU$999 / CA$799Student: $499 / £499 / AU$829 / CA$669 Students save: $100 / £110 / AU$170 / CA$130 How much can students save on the iMac M4? MSRP: $1,299 / £1,299 / AU$1,999 / CA$1,699Student discount: $1,249 / £1,249 / AU$1,919 / CA$1,629 Students save: $50 / £50 / AU$80 / CA$70 Get the student discount at: Apple’s U.S. Education Store Apple’s U.K. Education Store (in the UK you will need to verify your student status via UNiDAYS). Apple’s Canada Education StoreApple’s Australian Education Store You may be able to get better discounts if you shop elsewhere. We round up the best MacBook Pro deals, the best MacBook Air deals, the best iMac deals, and the best Mac mini deals. We also have a guide to the best Mac for students that you might find useful. iPad student discounts Apple Below are the discounts on the base model iPads, there are bigger discounts on the more expensive models. How much can students save on the iPad mini (A17 Pro)? MSRP: $499 / £499 / AU$799 / CA$679Students: $449 / £449 / AU$719 / CA $609 Students save: $50 / £50 / AU$80 / CA$70 How much can students save on the 10th gen iPad? MSRP: $349 / £349 / AU$599 / CA$499Students; $329 / £329 / AU$559 / CA$469 Students save: $20 / £20 / AU$40 / CA$30 How much can students save on the 11-inch iPad Air (M2)? MSRP: $599 / £599 / AU$999 / CA$799Student: $549 / £549 / AU$919 / CA$729 Students save: $50 / £50 / AU$80 / CA$70 How much can students save on the 11-inch iPad Pro (M4)? MSRP: $999 / £999 / AU$1,699 / CA$1,399Students: $899 / £899 / AU$1,529 / CA$1,249 Students save: $100 / £100 / AU$170 / CA$150 Get the student discount at: Apple’s U.S. Education Store Apple’s U.K. Education Store (in the U.K. you will need to verify your student status via UNiDAYS). Apple’s Canada Education StoreApple’s Australian Education Store You may find a better deal or discount if you check out our deals round-ups: best iPad Air deals, best iPad mini deals, best iPad 10.2in deals, and the best iPad Pro deals. If you’re thinking of buying an iPad for college or university you also might like to read our guide to the Best iPad for students. Who can get an Apple student discount? Now we have told you how much you can save, the big question is whether you can save anything at all. Do you qualify for Apple’s student discounts? In order to shop at Apple’s Education Stores and take advantage of the lower prices you need to qualify as a student or work in an education institution. If you were hoping that you could get a discount for the Mac you want to buy your 13-year-old the bad news is that you can’t, unless you are employed by the school and buying for the institution, or you are a home educator. Students in high school don’t qualify for this discount. There are three types of people who can qualify for a student discount: Students in higher education (post-secondary education, e.g. university, college). People who are buying for education institutions. Parents of higher education students buying on their behalf. Home-based educators. Apple spells this out in more detail in its terms and conditions. For the U.S. these state that the following groups are “eligible to purchase from the Apple Store for Education:” K-12 staff: Any employee of a public or private K-12 institution in the United States is eligible, including homeschool teachers (this doesn’t include people educating their children during lockdowns). In addition, school board members who are currently serving as elected or appointed members are eligible. PTA or PTO executives currently serving as elected or appointed officers are eligible. Higher education staff and students: Faculty and staff of higher educational institutions in the U.S.; and students attending, or accepted into a higher educational institution in the U.S. are eligible to purchase. Purchases from the Apple Store for Education Individuals are not for institutional purchase or resale. Higher education parents: Parents purchasing on behalf of their child, who is a student currently attending or accepted into a public or private higher educational institution in the U.S. are eligible to purchase. Apple has a similar set of terms and conditions for eligibility in the U.K.: Employees of any education institution: Any employee of a public or private education institution in the U.K. Post-secondary education students: Students attending or accepted into a post-secondary education institution in the U.K. Parents of post-secondary students: Parents purchasing on behalf of their child, who is a student currently attending or accepted into a public or private post-secondary education institution in the U.K. If you’re attending higher education, or have been accepted into a higher education/post-secondary institution, you qualify for an Apple discount. (In the U.K. post-secondary means university, or any other formal education that takes place after secondary education is complete. Therefore, this excludes sixth-form colleges, although it may be worth inquiring at an Apple Store to see if the company is prepared to relax the rules.) Parents of post-secondary/higher education students do not qualify when buying for themselves, but they can pick up a discounted Mac for their child from the education store. Anybody who works in an educational environment qualifies for a discount on certain Apple products. It’s not just limited to teachers and lecturers but also covers administrative workers and other staff members. Essentially, it’s anybody who works at or for a school, college, or university. (This is not limited to post-secondary institutions. Apple refers to “any education institution.”) This does mean that you can’t get a discount for a Mac or iPad for your child who is currently at school, although the school could make the purchase and provide the equipment for students. If you don’t qualify for an Apple Education Store discount, we’d recommend instead checking out the Apple Refurbished Store, which offers discounts for everyone. You can’t apply a student discount in Apple’s Refurbished Store. We also recommend that you check our round-ups of the latest and best Apple deals we find at various Apple resellers. How many products can I buy? According to this Sales Policy document (or here) on the U.S. Apple site and the same on the U.K. Apple Education site, students can purchase the following with education pricing: Desktop Mac: One may be purchased per year Laptop Mac: One may be purchased per year iPad: Two may be purchased per year Accessories: Two accessories with Education Pricing may be purchased per year How to get a student discount at Apple Having established that you qualify for an education discount, how can you get money off at Apple? You may think that all you need to do is visit the Apple Store for Education and you will find the products you want at a lower price. However, before you can access Apple’s Education Store you will need to verify that you are a student or that you qualify in another way (e.g. you work in a school or college). Different countries have different sequences of steps to go through, which we will run through below.  How to get an Apple student discount in the U.S. If you are a student in the U.S. it is quite easy to get an Education discount at the U.S. Apple Store–in fact, a loophole may mean it is possible to get a student discount without any proof that you are a student. If you are a student you should follow these steps: Visit Apple’s U.S. Education Store. Choose the Mac or iPad you want and click on your selection. Once you have customized your Apple product, click Continue. Enter your delivery details and check out. Beware that Apple can request to see evidence that you are a student at any point during or after the purchase and will charge an additional fee if you fail to provide it. If you have any problems, we recommend you get your student status verified with UNiDAYS or log on from your university network. Make sure you have quick access to some form of official identification that proves you qualify for the education discount. Your student ID is a good choice. In January 2022, Apple changed the U.S. Education Discount Store to require validation from UNiDAYS before students can get a discount, but it then removed the requirement. Apple could re-implement this validation step that students in other countries have to go through. If it does it may still be possible for non-students in the U.S. to avoid the validation step, as per this Reddit post. Canadian students can follow the same steps as the U.S. Start shopping at Apple’s Canada Education Store. How to get an Apple student discount in the U.K. U.K. students will need to register with UNiDAYS before they can get a discount from the Apple Education Store. Visit Apple’s U.K. Education Store to access the Apple Education site. Once there you’ll be encouraged to sign up on the student discount website UNiDAYS. You can also use the alternative service Student Beans to register for Apple’s educational discounts. On whichever site you use, you’ll need to provide your email address and a password, your name, institution, subject of study, years of study, and course length. Once you have completed the registration process and signed in you will be able to access Apple’s student discounts. If you don’t want to register via a verification site, you can also call Apple, use Apple’s Chat online feature, or visit an Apple Store. The staff there will guide you through the process. How to get an Apple student discount in Australia or Canada Visit Apple’s Australian Education Store or Apple’s Canada Education Store. It’s usually best to log on from your university network if you can. You will also want to make sure you have quick access to some form of official identification that proves you qualify for the education discount. Your student ID is a good choice. However, you may find you don’t actually require any sort of login or ID to order from the Apple Education Store–but beware that Apple can request to see evidence that you are a student at any point during or after the purchase and will charge an additional fee if you fail to provide it. How to buy Apple products for an education institution If you have been tasked with buying new Macs or iPads for a school, college, or university then Apple has a different store for you. This store is designed for those who are buying a Mac for an educational institution (for students to work on rather than for individual students to own). You should visit the U.S. Apple Store for Education Institutions (if that link doesn’t work), the U.K. Apple Store for Education Institutions (if that link doesn’t work), or the Canadian or Australian equivalent. You’ll need to search for your Educational Institution: enter your institution’s details and click on search.  If your institution is found you will be able to sign in to access your institution’s store. You may still need to register before you can use the store. If your school, college, or other institution isn’t found then you may need to call Apple to discuss registering your school. How to get a student discount for Apple Music and Apple TV+ Apple’s student membership scheme for Apple Music offers those in full-time education a 50 percent subscription discount and this deal is better than ever right now because the Student Apple Music deal also includes Apple TV+ for a limited time (following a 2023 price hike Apple TV+ now costs $9.99/£8.99 a month, up from $6.99/£6.99 per month). If you are a student, here’s how to get Apple Music for half price. Apple regularly offers three months free for new subscribers to Apple Music, so you might want to take that up first. Get three months free here or read How to get Apple Music for free. The student discount brings the monthly cost of Apple Music membership down from $10.99/£10.99 to $5.99/£5.99, with identical schemes in Ireland, the U.S., Australia, New Zealand, Germany, and Denmark, each offering half off the usual price. And with Apple TV+ bundled in for free, it’s a great deal! To qualify for the student discount, you’ll need to prove that you’re enrolled at an eligible university or college. The discount runs for up to 48 months (four years). The Student Membership tier is the third membership tier Apple has offered to consumers, alongside Individual Membership ($10.99/£10.99 per month) and Family Membership ($16.99/£16.99). Visit Apple’s site for more details and to sign up. If you’re a student and signing up for Apple Music on your iPhone or iPad, tap where it says “Are you a University Student?” and you’ll be directed to a verification system. If your college or university is eligible you’ll get a reduced subscription rate. Read our guide to Apple Music and How to get Apple Music for free for the best trial options.

Read more »

M4 MacBook Air to iPhone SE — What to expect from Apple in early 2025
Apple is set to have a packed spring with an AirTag refresh, the AI-powered Home Hub, an M4 MacBook Air, iPhone SE 4, iPad 11, and possibly more. Here's what to expect.Apple's early 2025 is packed with possible product announcementsRumor season never ends, though it never fails that one leaker or another predicts every hope and dream is set to release at once. Evidence continues to pour in suggesting that it'll be a busy quarter for Apple, but there's always room for products to shift.Most of Apple's product line has been updated since the start of 2024 with a few exceptions. The M4 chipset could make its way to the final holdout Macs, and new products could emerge as well. Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Spotify Wrapped 2024: your year in songs and podcasts is here
The long-awaited Spotify Wrapped is back, now with a recap of the songs and podcasts you listened to most in 2024. This year, in addition to a new design, Spotify has also added some AI-based features to make the Wrapped experience even more personal. Read on as we detail what’s new and how you can access your Spotify Wrapped. more…

Read more »

Apple Intelligence has been seven years in the making, says Cook
In a new interview, CEO Tim Cook says that Apple began looking into what became Apple Intelligence in 2017, just as Apple Park was opening.Credit: AppleIt's been repeatedly claimed that Apple is behind the industry on artificial intelligence, and that's just as often been refuted. Now before it became known as Apple Intelligence, Tim Cook says that AI crept up on Apple — but crept up a long time ago."I wouldn't say there was an aha moment," he told Steven Levy in Wired. "It built like a wave, or like rolling thunder." Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Software issues delay HomePod with display until late 2025 – Kuo
Apple analyst Ming-Chi Kuo says a HomePod with display now won’t launch until the third quarter of next year. He’d initially expected it to be launched in the first half of 2024, then said it had been pushed back to the first half of 2025. The reason for the latest delay, he says, is that software development for the new device is taking longer than expected … more…

Read more »

Use encrypted apps while US faces hacking threat, says FBI
The FBI and Cybersecurity and Infrastructure Security Agency say that Americans should use encrypted apps such as iMessage and FaceTime to be safe from foreign hackers.Image credit: Elchinator on PixabayIt's an about-face for the FBI, which has for years demanded that Apple allow the agency unencrypted access to Messages. The new warning comes in the face of what it and the Cybersecurity and Infrastructure Security Agency (CISA) say is China's ongoing Salt Typhoon hack."Our suggestion, what we have told folks internally, is not new here: Encryption is your friend, whether it's on text messaging or if you have the capacity to use encrypted voice communication," Jeff Greene, executive assistant director for cybersecurity at the CISA, told NBC News in a press call. "Even if the adversary is able to intercept the data, if it is encrypted, it will make it impossible." Continue Reading on AppleInsider | Discuss on our Forums

Read more »

U.S. Offered $10M for Hacker Just Arrested by Russia
In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as "Wazawaka," a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies.

Read more »

Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) -- such as .shop, .top, .xyz -- that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds. Meanwhile, the nonprofit entity that oversees the domain name industry is moving forward with plans to introduce a slew of new gTLDs.

Read more »

Vulnerability Summary for the Week of November 25, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Portfolio Management System MCA  A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-26 7.3 CVE-2024-11744 1000 Projects--Portfolio Management System MCA  A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-27 7.3 CVE-2024-11819 1000projects -- beauty_parlour_management_system  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11646 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11647 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11648 1000projects -- beauty_parlour_management_system  A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11649 AbsolutePlugins--Absolute Addons For Elementor  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AbsolutePlugins Absolute Addons For Elementor allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through 1.0.14. 2024-11-28 7.5 CVE-2024-52496 Advantech--EKI-6333AC-2G  A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (securityEngineID to local_record.engineid without proper bounds checking. 2024-11-27 3 CVE-2024-36468 Zabbix--Zabbix  When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd- >data in the code below will remain NULL and an attempt to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42328 Zabbix--Zabbix  The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd- >error will be NULL and trying to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42329 Zabbix--Zabbix  In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd- >browser heap pointer is freed by garbage collection. 2024-11-27 3.3 CVE-2024-42331 Zabbix--Zabbix  The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host. 2024-11-27 3.7 CVE-2024-42332 Zabbix--Zabbix  When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element. 2024-11-26 2.2 CVE-2024-22117 Zabbix--Zabbix  When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords. 2024-11-27 2.7 CVE-2024-36464 Zabbix--Zabbix  The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c 2024-11-27 2.7 CVE-2024-42333 Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info autolab--Autolab  Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature. 2024-11-25 not yet calculated CVE-2024-53258 BoidCMS--BoidCMS  BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code. This code could be used to steal the user's session cookie, perform phishing attacks, or deface the website. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-25 not yet calculated CVE-2024-53255 bunkerity--bunkerweb  bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-27 not yet calculated CVE-2024-53264 Century Systems Co., Ltd.--FutureNet NXR-G110 series  FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs. 2024-11-29 not yet calculated CVE-2024-50357 Checkmk GmbH--Checkmk  Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions type] may result in an out-of-bounds access. To spot such missed invocations early in the future, checking the validity of link- >type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed. 2024-11-25 not yet calculated CVE-2024-53099 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp: don't access released socket during error recovery") added a mutex_lock() call for the queue- >queue_lock in nvme_tcp_get_address(). However, the mutex_lock() races with mutex_destroy() in nvme_tcp_free_queue(), and causes the WARN below. DEBUG_LOCKS_WARN_ON(lock- >magic != lock) WARNING: CPU: 3 PID: 34077 at kernel/locking/mutex.c:587 __mutex_lock+0xcf0/0x1220 Modules linked in: nvmet_tcp nvmet nvme_tcp nvme_fabrics iw_cm ib_cm ib_core pktcdvd nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc ppdev 9pnet_virtio 9pnet pcspkr netfs parport_pc parport e1000 i2c_piix4 i2c_smbus loop fuse nfnetlink zram bochs drm_vram_helper drm_ttm_helper ttm drm_kms_helper xfs drm sym53c8xx floppy nvme scsi_transport_spi nvme_core nvme_auth serio_raw ata_generic pata_acpi dm_multipath qemu_fw_cfg [last unloaded: ib_uverbs] CPU: 3 UID: 0 PID: 34077 Comm: udisksd Not tainted 6.11.0-rc7 #319 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:__mutex_lock+0xcf0/0x1220 Code: 08 84 d2 0f 85 c8 04 00 00 8b 15 ef b6 c8 01 85 d2 0f 85 78 f4 ff ff 48 c7 c6 20 93 ee af 48 c7 c7 60 91 ee af e8 f0 a7 6d fd 0b e9 5e f4 ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 RSP: 0018:ffff88811305f760 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88812c652058 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88811305f8b0 R08: 0000000000000001 R09: ffffed1075c36341 R10: ffff8883ae1b1a0b R11: 0000000000010498 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812c652058 FS: 00007f9713ae4980(0000) GS:ffff8883ae180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcd78483c7c CR3: 0000000122c38000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? __warn.cold+0x5b/0x1af ? __mutex_lock+0xcf0/0x1220 ? report_bug+0x1ec/0x390 ? handle_bug+0x3c/0x80 ? exc_invalid_op+0x13/0x40 ? asm_exc_invalid_op+0x16/0x20 ? __mutex_lock+0xcf0/0x1220 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx___mutex_lock+0x10/0x10 ? __lock_acquire+0xd6a/0x59e0 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx_nvme_tcp_get_address+0x10/0x10 [nvme_tcp] nvme_sysfs_show_address+0x81/0xc0 [nvme_core] dev_attr_show+0x42/0x80 ? __asan_memset+0x1f/0x40 sysfs_kf_seq_show+0x1f0/0x370 seq_read_iter+0x2cb/0x1130 ? rw_verify_area+0x3b1/0x590 ? __mutex_lock+0x433/0x1220 vfs_read+0x6a6/0xa20 ? lockdep_hardirqs_on+0x78/0x100 ? __pfx_vfs_read+0x10/0x10 ksys_read+0xf7/0x1d0 ? __pfx_ksys_read+0x10/0x10 ? __x64_sys_openat+0x105/0x1d0 do_syscall_64+0x93/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? __pfx_ksys_read+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? do_syscall_64+0x9f/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9713f55cfa Code: 55 48 89 e5 48 83 ec 20 48 89 55 e8 48 89 75 f0 89 7d f8 e8 e8 74 f8 ff 48 8b 55 e8 48 8b 75 f0 4 ---truncated--- 2024-11-25 not yet calculated CVE-2024-53100 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr- >ia_mode, attr- >ia_uid and attr- >ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0. 2024-11-25 not yet calculated CVE-2024-53101 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: make keep-alive synchronous operation The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race between the fabric controller admin queue destroy code path (invoked while shutting down controller) and hw/hctx queue dispatcher called from the nvme keep-alive async request queuing operation. This race could lead to the kernel crash shown below: Call Trace: autoremove_wake_function+0x0/0xbc (unreliable) __blk_mq_sched_dispatch_requests+0x114/0x24c blk_mq_sched_dispatch_requests+0x44/0x84 blk_mq_run_hw_queue+0x140/0x220 nvme_keep_alive_work+0xc8/0x19c [nvme_core] process_one_work+0x200/0x4e0 worker_thread+0x340/0x504 kthread+0x138/0x140 start_kernel_thread+0x14/0x18 While shutting down fabric controller, if nvme keep-alive request sneaks in then it would be flushed off. The nvme_keep_alive_end_io function is then invoked to handle the end of the keep-alive operation which decrements the admin- >q_usage_counter and assuming this is the last/only request in the admin queue then the admin- >q_usage_counter becomes zero. If that happens then blk-mq destroy queue operation (blk_mq_destroy_ queue()) which could be potentially running simultaneously on another cpu (as this is the controller shutdown code path) would forward progress and deletes the admin queue. So, now from this point onward we are not supposed to access the admin queue resources. However the issue here's that the nvme keep-alive thread running hw/hctx queue dispatch operation hasn't yet finished its work and so it could still potentially access the admin queue resource while the admin queue had been already deleted and that causes the above crash. This fix helps avoid the observed crash by implementing keep-alive as a synchronous operation so that we decrement admin- >q_usage_counter only after keep-alive command finished its execution and returns the command status back up to its caller (blk_execute_rq()). This would ensure that fabric shutdown code path doesn't destroy the fabric admin queue until keep-alive request finished execution and also keep-alive thread is not running hw/hctx queue dispatch operation. 2024-11-25 not yet calculated CVE-2024-53102 Mozilla--Firefox  The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. 2024-11-26 not yet calculated CVE-2024-11696 Mozilla--Firefox  On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133. 2024-11-26 not yet calculated CVE-2024-11703 msg Suisse AG--EasyTax  A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS. 2024-11-29 not yet calculated CVE-2024-9044 n/a--n/a  FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. 2024-11-29 not yet calculated CVE-2024-35366 n/a--n/a  FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer 2024-11-29 not yet calculated CVE-2024-35367 n/a--n/a  FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. 2024-11-29 not yet calculated CVE-2024-35368 n/a--n/a  Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions. 2024-11-29 not yet calculated CVE-2024-35371 n/a--n/a  LinkStack 2.7.9 through 4.7.7 allows resourcesviewscomponentsfavicon.blade.php link SSRF. 2024-11-29 not yet calculated CVE-2024-35451 n/a--n/a  A deserialization vulnerability exists in the Stub class of the VarDumper module in Symfony v7.0.3. The vulnerability stems from deficiencies in the original implementation when handling properties with null or uninitialized values. An attacker could construct specific serialized data and use this vulnerability to execute unauthorized code. 2024-11-29 not yet calculated CVE-2024-36610 n/a--n/a  In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. 2024-11-29 not yet calculated CVE-2024-36611 n/a--n/a  Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. 2024-11-29 not yet calculated CVE-2024-36612 n/a--n/a  FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. 2024-11-29 not yet calculated CVE-2024-36615 n/a--n/a  An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. 2024-11-29 not yet calculated CVE-2024-36616 n/a--n/a  FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. 2024-11-29 not yet calculated CVE-2024-36617 n/a--n/a  FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. 2024-11-29 not yet calculated CVE-2024-36618 n/a--n/a  moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. 2024-11-29 not yet calculated CVE-2024-36620 n/a--n/a  moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. 2024-11-29 not yet calculated CVE-2024-36621 n/a--n/a  In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter. 2024-11-29 not yet calculated CVE-2024-36622 n/a--n/a  moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes. 2024-11-29 not yet calculated CVE-2024-36623 n/a--n/a  nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. 2024-11-29 not yet calculated CVE-2024-36671 n/a--n/a  MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. 2024-11-29 not yet calculated CVE-2024-45495 n/a--n/a  WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. 2024-12-01 not yet calculated CVE-2024-45520 n/a--n/a  OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files. 2024-11-27 not yet calculated CVE-2024-46054 n/a--n/a  Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the power(uct_int_t x, uct_int_t n) in src/uct_upstream.c. 2024-11-29 not yet calculated CVE-2024-48406 n/a--n/a  Incorrect access control in Adapt Learning Adapt Authoring Tool

Read more »

Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

Read more »

Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass, MailChimp, Okta, T-Mobile and Twilio.

Read more »

Fintech Giant Finastra Investigating Data Breach
The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world's top 50 banks, notified customers of a potential breach after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company. 

Read more »

Vulnerability Summary for the Week of November 11, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Beauty Parlour Management System  A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 7.3 CVE-2024-11100 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11257 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11258 1000 Projects--Portfolio Management System MCA  A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11256 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47441 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47442 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47443 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-45114 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47450 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47451 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47452 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49507 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49508 adobe -- indesign  InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49509 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47426 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47427 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47428 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47429 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47430 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47431 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47432 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47433 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47434 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49515 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49516 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49517 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49518 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49519 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49520 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49525 Adobe--Adobe Commerce  Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction. 2024-11-12 7.7 CVE-2024-49521 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49526 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49528 Adobe--Photoshop Desktop  Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49514 adonesevangelista -- agri-trading_online_shopping_system  A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout. 2024-11-14 7.5 CVE-2024-50968 algolplus--Advanced Order Export For WooCommerce  The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2024-11-13 8.1 CVE-2024-10828 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21974 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21975 AMD--AMD Cloud Manageability Service Software  Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21939 AMD--AMD Management Console  Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21957 AMD--AMD Management Plug-In for SCCM  Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21938 AMD--AMD Provisioning Console (APC) Software  Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21958 AMD--AMD Ryzen AI Software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 8.8 CVE-2024-21976 AMD--AMD Ryzen Master Monitoring SDK  Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21945 AMD--AMD Ryzen Master Utility for Overclocking Control  Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21946 AMD--AMD Software: PRO Edition  Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21937 AMI--AptioV  APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode. 2024-11-12 7.2 CVE-2024-42442 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 9 CVE-2024-51490 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51484 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51485 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL?-?Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.4 CVE-2024-51486 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51487 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. 2024-11-13 7.2 CVE-2024-50971 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. 2024-11-13 7.2 CVE-2024-50972 angeljudesuarez -- tailoring_management_system  A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.php. The manipulation of the argument inccat/desc/date/amount leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "inccat" to be affected. But it must be assumed "desc", "date", and "amount" are affected as well. 2024-11-11 9.8 CVE-2024-11074 anisha -- job_recruitment  A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument e_hash leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11076 anisha -- job_recruitment  A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11077 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 9.8 CVE-2024-11099 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 8.8 CVE-2024-11127 Anthony Carbon--WDES Responsive Mobile Menu  Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18. 2024-11-16 9.8 CVE-2024-52414 Apache Software Foundation--Apache Airflow  Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability. If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets. 2024-11-15 7.5 CVE-2024-45784 Apache Software Foundation--Apache CloudStack  Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that can register templates, can use them to deploy malicious instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.5 or 4.19.1.3, or later, which addresses this issue. Additionally, all user-registered KVM-compatible templates can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run the following command on their file-based primary storage(s) and inspect the output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. However, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; doneFor checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-11-12 8.5 CVE-2024-50386 Apache Software Foundation--Apache Traffic Server  Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue. 2024-11-14 9.1 CVE-2024-50306 Apache Software Foundation--Apache Traffic Server  Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-38479 Apache Software Foundation--Apache Traffic Server  Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-50305 Arttia Creative--Datasets Manager by Arttia Creative  Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative.This issue affects Datasets Manager by Arttia Creative: from n/a through 1.5. 2024-11-14 10 CVE-2024-52375 Autodesk--Installer  A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management. 2024-11-15 7.2 CVE-2024-9500 Avigilon--VideoIQ iCVR HD camera  Avigilon - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-45253 axelkeller--GPX Viewer  The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-13 8.8 CVE-2024-10629 ays-pro--Chartify WordPress Chart Plugin  The Chartify - WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included. 2024-11-14 9.8 CVE-2024-10571 Baxter--Life2000 Ventilation System  The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 10 CVE-2024-48966 Baxter--Life2000 Ventilation System  The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance. 2024-11-14 10 CVE-2024-48967 Baxter--Life2000 Ventilation System  The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48970 Baxter--Life2000 Ventilation System  The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges. 2024-11-14 9.3 CVE-2024-48971 Baxter--Life2000 Ventilation System  The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-48973 Baxter--Life2000 Ventilation System  The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48974 Baxter--Life2000 Ventilation System  There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-9832 Baxter--Life2000 Ventilation System  Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-9834 BdThemes--Instant Image Generator  Unrestricted Upload of File with Dangerous Type vulnerability in BdThemes Instant Image Generator allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through 1.5.4. 2024-11-14 10 CVE-2024-52377 Bigfive--CF7 Reply Manager  Unrestricted Upload of File with Dangerous Type vulnerability in Bigfive CF7 Reply Manager.This issue affects CF7 Reply Manager: from n/a through 1.2.3. 2024-11-16 9.9 CVE-2024-52404 Bikram Joshi--B-Banner Slider  Unrestricted Upload of File with Dangerous Type vulnerability in Bikram Joshi B-Banner Slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through 1.1. 2024-11-16 9.9 CVE-2024-52405 BlackBerry--SecuSUITE  A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege. 2024-11-12 7.3 CVE-2024-51721 Boa web server--Boa web server 0.94.14rc21  Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-47916 Bosch Rexroth AG--IndraDrive FWA-INDRV*-MP*  A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages. 2024-11-13 7.5 CVE-2024-48989 Ciprian Popescu--W3P SEO  Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO allows Stored XSS.This issue affects W3P SEO: from n/a before 1.8.6. 2024-11-14 7.1 CVE-2024-51684 Cisco--Cisco BroadWorks  A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.6 CVE-2023-20125 Cisco--Cisco Cyber Vision  A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.5 CVE-2022-20685 Cisco--Cisco Industrial Network Director  A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit this vulnerability by altering the request that is sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITYSYSTEM on the underlying operating system of an affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 9.9 CVE-2023-20036 Cisco--Cisco IOS XR Software  A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root. 2024-11-15 8.8 CVE-2022-20655 Cisco--Cisco Modeling Labs  A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.This vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. 2024-11-15 9.1 CVE-2023-20154 Cisco--Cisco Redundancy Configuration Manager  A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container.This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user.The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.1 CVE-2022-20649 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.  The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic.Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20814 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.  2024-11-15 7.4 CVE-2022-20853 Citrix Session Recording--Citrix Session Recording  Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server 2024-11-12 8.8 CVE-2024-8069 Clarisse K.--Writer Helper  Unrestricted Upload of File with Dangerous Type vulnerability in Clarisse K. Writer Helper allows Upload a Web Shell to a Web Server.This issue affects Writer Helper: from n/a through 3.1.6. 2024-11-16 9.9 CVE-2024-52399 cli--cli  The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image]( https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-... https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers#using-the-default-dev-container-configuration) . GitHub CLI [retrieves SSH connection details]( https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/inv... https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/invoker.go#L230-L244 ), such as remote username, which is used in [executing `ssh` commands]( https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L2... https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L263 ) for `gh codespace ssh` or `gh codespace logs` commands. This exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand="echo hacked" #`. The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored. In `2.62.0`, the remote username information is being validated before being used. 2024-11-14 8 CVE-2024-52308 cmorillas1--External Database Based Actions  The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin settings and log in as any existing user on the site, such as an administrator. 2024-11-15 7.5 CVE-2024-10311 cmsMinds--Boat Rental Plugin for WordPress  Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through 1.0.1. 2024-11-14 10 CVE-2024-52376 code-projects--Job Recruitment  A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11241 codeSavory--BasePress Migration Tools  Unrestricted Upload of File with Dangerous Type vulnerability in codeSavory BasePress Migration Tools allows Upload a Web Shell to a Web Server.This issue affects BasePress Migration Tools: from n/a through 1.0.0. 2024-11-16 9.9 CVE-2024-52407 craftcms--cms  Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5. 2024-11-13 8.4 CVE-2024-52291 craftcms--cms  Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, reads the file's content, and converts it into a Base64-encoded string. By embedding this function within a system notification template, the attacker can exfiltrate the Base64-encoded file content through a triggered system email notification. Once the email is received, the Base64 payload can be decoded, allowing the attacker to read arbitrary files on the server. This is fixed in 5.4.9 and 4.12.8. 2024-11-13 7.7 CVE-2024-52292 craftcms--cms  Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3. 2024-11-13 7.2 CVE-2024-52293 creativeinteractivemedia--Real3D Flipbook Lite 3D FlipBook, PDF Viewer, PDF Embedder  The 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-16 8.8 CVE-2024-9849 cyberlord92--Login using WordPress Users ( WP as SAML IDP )  The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.15.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2024-11-16 7.2 CVE-2024-9887 Dang Ngoc Binh--Audio Record  Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through 1.0. 2024-11-11 10 CVE-2024-51792 Davor Zeljkovic--Convert Docx2post  Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through 1.4. 2024-11-16 9.1 CVE-2024-52397 decidim--decidim  Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0. 2024-11-13 7.7 CVE-2024-45594 decidim-ice--decidim-module-decidim_awesome  An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands. 2024-11-12 9 CVE-2024-43415 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. 2024-11-12 7.8 CVE-2024-49557 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 2024-11-12 7.8 CVE-2024-49558 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. 2024-11-12 7.8 CVE-2024-49560 Dell--SmartFabric OS10 Software  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution 2024-11-12 7.8 CVE-2024-48837 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39354 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39605 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-47131 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user's password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user's account. 2024-11-11 9.8 CVE-2024-11068 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11062 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11063 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11064 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11065 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page. 2024-11-11 7.2 CVE-2024-11066 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password. 2024-11-11 7.5 CVE-2024-11067 DMC--Airin Blog  Deserialization of Untrusted Data vulnerability in DMC Airin Blog allows Object Injection.This issue affects Airin Blog: from n/a through 1.6.1. 2024-11-16 9.8 CVE-2024-52413 DonnellC--Global Gateway e4 | Payeezy Gateway  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0. 2024-11-14 8.6 CVE-2024-52371 DoThatTask--Do That Task  Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task allows Upload a Web Shell to a Web Server.This issue affects Do That Task: from n/a through 1.5.5. 2024-11-14 10 CVE-2024-52374 dotnetzip.semverd_project -- dotnetzip.semverd  Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer. 2024-11-13 9.8 CVE-2024-48510 Elastic--Kibana  A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. A successful attack requires a malicious user to have a combination of both specific Elasticsearch indices privileges https://www.elastic.co/guide/en/elasticsearch/reference/current/defining-roles.html#roles-indices-priv  and Kibana privileges https://www.elastic.co/guide/en/fleet/current/fleet-roles-and-privileges.html  assigned to them. The following Elasticsearch indices permissions are required * write privilege on the system indices .kibana_ingest** The allow_restricted_indices flag is set to true Any of the following Kibana privileges are additionally required * Under Fleet the All privilege is granted* Under Integration the Read or All privilege is granted* Access to the fleet-setup privilege is gained through the Fleet Server's service account token 2024-11-14 9.1 CVE-2024-37285 Eugen Bobrowski--Debug Tool  Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through 2.2. 2024-11-16 10 CVE-2024-52416 Flowcraft UX Design Studio--Advanced Personalization  Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2. 2024-11-16 9.8 CVE-2024-52411 fortinet -- forticlient  A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts. 2024-11-12 8.8 CVE-2024-36513 fortinet -- forticlient  A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. 2024-11-12 7.8 CVE-2024-36507 Fortinet--FortiClientWindows  A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. 2024-11-13 7.8 CVE-2024-47574 Fortinet--FortiManager  A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigDataat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. 2024-11-12 7.5 CVE-2024-23666 Fortinet--FortiOS  A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link. 2024-11-12 7.5 CVE-2023-50176 FraudLabs Pro--FraudLabs Pro SMS Verification  Cross-Site Request Forgery (CSRF) vulnerability in FraudLabs Pro FraudLabs Pro SMS Verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through 1.10.1. 2024-11-14 7.1 CVE-2024-51688 FreeBSD--FreeBSD  The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option. 2024-11-12 7.5 CVE-2024-45289 GeekRMX--Twitter @Anywhere Plus  Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus allows Stored XSS.This issue affects Twitter @Anywhere Plus: from n/a through 2.0. 2024-11-14 7.1 CVE-2024-51659 GentleSource--Appointmind  Cross-Site Request Forgery (CSRF) vulnerability in GentleSource Appointmind allows Stored XSS.This issue affects Appointmind: from n/a through 4.0.0. 2024-11-14 7.1 CVE-2024-51679 GeoVision--GV-VS12  Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports. 2024-11-15 9.8 CVE-2024-11120 GitLab--GitLab  An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations. 2024-11-14 8.5 CVE-2024-9693 glpi-project--glpi  GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. 2024-11-15 8.1 CVE-2024-40638 gogs--gogs/gogs  A remote command execution vulnerability exists in gogs/gogs versions

Read more »

An Interview With the Target & Home Depot Hacker
In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel, who confirmed using the Rescator identity in a recent interview, also admitted reaching out because he is broke and seeking publicity for several new money making schemes.

Read more »

Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed prior to today.

Read more »

FBI: Spike in Hacked Police Emails, Fake Subpoenas
The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based technology companies.

Read more »

Canadian Man Arrested in Snowflake Data Extortions
A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka's alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.

Read more »

Holiday Sale: 16-inch M4 Pro/M4 Max MacBook Pros for $200-$250 off MSRP at B&H
B&H Photo is offering a $200-$250 discount on new 16-inch MacBook Pros with M4 Pro or M4 Max MacBook Pros as part of their ongoing Holiday sales. B&H offers free 1-2 day shipping to most US addresses: - 16" M4 Pro MacBook Pro (24GB/512GB): $2299, $200 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2699, $200 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB): $3249, $250 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB): $3799, $200 off MSRP Their prices are the lowest available today for new 16" MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Cheapest iMacs for sale today at Apple: Refurbished 24-inch M3 iMacs for $1019, M1 iMacs for only $969
Apple has last year's 24-inch M3 iMacs available starting at $1019, Certified Refurbished. Each iMac is in like-new condition and comes with Apple's standard one-year warranty: - 24-inch M3 iMac 8-Core CPU/8-Core GPU (all colors): $1019, original MSRP $1299 - 24-inch M3 iMac 8-Core CPU/10-Core GPU/256GB SSD (all colors): $1189, original MSRP $1499 - 24-inch M3 iMac 8-Core CPU/10-Core GPU/512GB SSD (all colors): $1359, original MSRP $1699 Apple has clearance M1 iMacs available in their Certified Refurbished store starting at $969. These are the cheapest iMacs for sale at Apple: - 24-inch M1 iMac 8-Core CPU/7-Core GPU (all colors): $969 - 24-inch M1 iMac 8-Core CPU/8-Core GPU/256GB SSD (all colors): $1139 - 24-inch M1 iMac 8-Core CPU/8-Core GPU/512GB SSD (all colors): $1299 Details at Apple here. For the latest prices and deals, see our iMac Price Tracker, updated daily.

Read more »

Apple Watch Series 9 in stock today at Apple starting at $299, Certified Refurbished
Apple has a full line of Certified Refurbished Apple Watch Series 9 models available in their online store starting at $299. Each Watch includes Apple's standard one-year warranty, a new outer case, new band, and free shipping: - 41mm Apple Watch Series 9 GPS: $299 - 45mm Apple Watch Series 9 GPS: $319 - 41mm Apple Watch Series 9 GPS + Cellular: $379 - 45mm Apple Watch Series 9 GPS + Cellular: $399 Note that availability of specific models and colors vary and can change rapidly. Details available at Apple here. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Full size 2nd-generation HomePods in stock at Apple for $249, $50 off MSRP
Apple has Certified Refurbished White and Midnight HomePods available for $249, Certified Refurbished. That's $50 off MSRP and the lowest price currently available for a full-size Apple HomePod today. Shipping is free, and each HomePod includes Apple's standard 1-year warranty. The outer case is new. According to Apple, "Each Apple Certified Refurbished Product: - Undergoes full functionality testing and any defective modules identified in testing are replaced. - Is put through a thorough cleaning process and inspection. - Is repackaged (including appropriate manuals, cables, new boxes). - Includes either the Operating System originally shipped with the unit or, in some cases, a more recent version. - Is placed into a Final QA inspection prior to being added to sellable refurbished stock." For the latest prices & sales, see our HomePod Price Tracker, updated daily.

Read more »

Holiday Sale at Verizon: HomePod minis for $84.99, save $14 (15% off)
Snag an Apple HomePod mini in your favorite color at Holiday sale prices, now $15 off at Verizon ($84.99). Compact yet powerful, the HomePod mini delivers rich, 360-degree sound and integrates seamlessly with your Apple devices and smart home setup. Their sale price applies to all mini colors and represents a rare HomePod sale price. Verizon service is not required for purchase. Buy online and choose free shipping or free local store pickup (if available). Sale price for online orders only, in-store price may vary. See our HomePod Price Tracker for the latest prices and deals from Apple and its retailers.

Read more »

Cyber Monday deals are live at Apple, final day to get a gift card worth up to $200 with these purchases
Apple's four day Black Friday/Cyber Monday 2024 Shopping Event is now live and will run from November 29, 2024 to December 2, 2024. That means today is the final day! Receive a free $150-$200 Apple Gift Card with the purchase of select Macs and $75-$100 with select iPads. Get a $25-$75 Apple Gift Card with select iPhone models as well as $50 with select Apple Watch models. AirPods qualify for $25 to $75 Gift Cards, depending on the model. Click through to see how much is included with each product...

Read more »

Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Cyber Monday Sale: 14-inch M4 Pro and M4 Max MacBook Pros for $250-$300 off MSRP
Amazon is offering a $250-$300 discount on Apple's 14-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) as part of their Cyber Monday sales. Shipping is free. These are the lowest prices currently available for these MacBook Pros. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 Pro MacBook Pro (24GB/512GB): $1749, $250 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB): $2149, $250 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB): $2899, $300 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Cyber Monday Sale: 14-inch M4 Pro and M4 Max MacBook Pros for $250-$300 off MSRP
Amazon is offering a $250-$300 discount on Apple's 14-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) as part of their Cyber Monday sales. Shipping is free. These are the lowest prices currently available for these MacBook Pros. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 Pro MacBook Pro (24GB/512GB): $1749, $250 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB): $2149, $250 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB): $2899, $300 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Cyber Monday Sale: 14-inch M4 MacBook Pros for $200 off Apple’s MSRP, prices start at $1399
Here are the lowest prices on 14-inch MacBook Pros with M4 CPUs for Cyber Monday this year. Save $200 at the following retailers, with prices starting at $1399 today: (1): Amazon is offering a $200 discount on Apple 14-inch M4 MacBook Pros as part of their Cyber Monday sales. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 MacBook Pro (16GB/512GB): $1399, $200 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1599, $200 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $200 off MSRP (2): Best Buy is offering a $100 discount on Apple 14-inch M4 MacBook Pros as part of their Cyber Monday sales. Shipping is free. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 14" M4 MacBook Pro (16GB/512GB): $1499, $100 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1699, $100 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $100 off MSRP (3): B&H Photo has 14-inch M4 MacBook Pros on Cyber Monday sale for $200 off MSRP. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 MacBook Pro (16GB/512GB): $1399, $200 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1599, $200 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $200 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »