PSA: Avoid faking your Spotify Wrapped results if you’re in Congress
Apple Music did a better Spotify Wrapped than Spotify this year, but that wasn’t the issue for this congressman from New Jersey who got caught poorly faking their results. more…

Read more »

Apple lands record 29 Children’s & Family Emmy Award nominations
Apple on Thursday was honored with a record 29 nominations across 10 programs for the 3rd Annual Children’s & Family Emmy Awards… The post Apple lands record 29 Children’s & Family Emmy Award nominations appeared first on MacDailyNews.

Read more »

Text message job scams are gamified and on the rise, FTC warns
Has your iPhone dinged with a Messages or WhatsApp notification recently about a curious job offer? You’re not alone, as today’s FTC warning about text message gamified job scams—or ‘task scams’—makes clear. more…

Read more »

Apple Vision Pro takes you on an immersive dive with tiger sharks eating lunch
Looking for a weekend activity? Throw on your wetsuit and strap on Apple Vision Pro to take an immersive dive with tiger sharks — wetsuit optional. more…

Read more »

Today in Apple history: AirPods arrive to conquer the audio world
On December 13, 2016, Apple finally launched the original AirPods after months of delay. The wireless earbuds became an instant hit. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Lawmakers remind Apple it must remove TikTok from the App Store next month
As TikTok’s ban in the United States swiftly approaches, lawmakers on Friday reminded Apple that they are on the hook for enforcement. more…

Read more »

How to use ChatGPT with Apple Intelligence on iPhone
With the release of iOS 18.2 this week, you can now use ChatGPT with Apple Intelligence on your iPhone. If you choose to allow your… The post appeared first on MacDailyNews.

Read more »

9to5Mac Daily: December 13, 2024 – iOS delays, USB-C changes
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. From now through December 31, save 20% on all 9to5Mac Daily Plus, 9to5Mac Happy Hour Plus, and 9to5Mac Pro annual subscriptions with promo code HOLIDAY! Visit 9to5mac.com/join to sign up. more…

Read more »

Deals: M4/Pro/Max MacBook Pro up to $300 off, PlugBug Find My charger new low, HomeKit lamp 30% off, more
We are indeed still tracking Wi-Fi + Cell M2 iPad Air models at $150 off alongside the $169 price drop on AirPods Max that is now available to everyone, but there are more inbound today. Firstly, as shipping windows close ahead of the holidays, today might be one of your last chances to secure the new M4/Pro MacBook Pro at up to $200 off alongside M4 Max models at up to $300 off. We also spotted a surprise offer on the fantastic Twelve South PlugBug with Find My – it is now at its best price ever – joining Eve’s HomeKit portable Flare smart lamp back at the Black Friday price, not to mention today being your last chance to secure Christmas delivery on our exclusive deals for the Arc Pulse iPhone 16 bumper cases. All of that and more awaits below.  more…

Read more »

Apple TV+ notches record 29 Children’s & Family Emmy nominations
Apple TV+ Children’s & Family Emmy nominations this year include a record-breaking 29 nods for 10 different programs. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

AirPods Max plunge to $379.99 with Best Buy's doorbuster deal
Save $170 on AirPods Max with Lightning charging during Best Buy's Doorbuster Sale. This is the lowest price we've seen on the over-ear headphones, and delivery is available by Christmas.Grab Best Buy's AirPods Max doorbuster deal before it runs out.Pick up a pair of AirPods Max with a Lightning port for $379.99 at Best Buy, reflecting the lowest AirPods Max price we've seen this season.Get the Doorbuster deal Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Keep handy backups with portable storage options [Setups]
Today's M4 Pro Mac mini user doesn't just rely on cloud backups to safeguard files. They trust Samsung and LaCie portable hard drives. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

iOS 18.2’s launch didn’t cause the ChatGPT outage…probably
Earlier this week, Apple released iOS 18.2 into the world with a new built-in ChatGPT integration. Not long after, ChatGPT and other OpenAI services went down in a major outage. Were the two incidents related? Here’s the official answer from OpenAI. more…

Read more »

Google issues major price hike on YouTube TV
Alphabet subsidiary Google on Thursday notified subscribers of a major price increase for its YouTube TV streaming television service… The post appeared first on MacDailyNews.

Read more »

Apple’s Passwords app makes it easy to replace your existing password manager
Apple’s Passwords app debuted this fall as a new password management solution for Apple devices. It also, helpfully, makes getting started very easy thanks to a key feature in the macOS version. more…

Read more »

Refresh your screens with these vibrant, cubist wallpapers
Designer Basic Apple Guy's new Liminal Spaces designs are some of the best new wallpapers out there (and an antidote to holiday themes). (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Here are the best iPad accessories under $100
Apple products are known for their design, premium quality, and seamless ecosystem. However, when it comes to accessories, Apple’s offerings often come with hefty price tags. From the $350 Magic Keyboard to the $130 Apple Pencil Pro, accessorizing your iPad can quickly become an expensive endeavor. Fortunately, there are budget-friendly alternatives that provide incredible value for a fraction of the cost. Below are some of the best iPad accessories under $100. more…

Read more »

Apple assembler Foxconn to begin AirPods production in southern India early next year
Apple assembler Foxconn will begin producing AirPods wireless earphones in India for the first time early next year, marking a milestone in… The post appeared first on MacDailyNews.

Read more »

How to find and block an AirTag that’s detected near you
Macworld Apple’s AirTag is a compact tracking device that can be attached to personal items to make it easy to find them. Unlike a GPS tracker, which requires cell service and may drain a battery quickly, an AirTag relies on the distributed Find My network of iPhones, iPads, and Macs that hundreds of millions of people around the world carry with them, and uses Bluetooth LE to send a signal to other devices. The concern is that there have been reports of people using AirTags to track others. In response to the early reports of this behavior, Apple added a feature that means if an unknown AirTag is detected near by, you will see an alert on your iPhone. For that reason people are obviously concerned if they see an “AirTag has been detected near you” alert. Of course it’s not always malicious. You might have found a device that someone had lost, or a pet with an AirTag in its collar might have taken a shine to you. You might even be the one who has lost their device and wants to know how to use the AirTag to track it down. Whatever your reasons to find an AirTag detected near you we will explain the process below. Apple AirTag Read our review Price When Reviewed: 1 pack $29 | 4 pack $99 Best Prices Today: $25.99 at B&H | $27 at Walmart | $29 at Apple Are AirTags safe? While there are a thousand positive and legitimate ways to use an AirTag, unfortunately, AirTags have been used to track people without their knowledge. For example, back in December 2021, the York regional police department in Canada announced that AirTags were being placed in hidden areas of target cars parked in public, and then tracked to the driver’s residence, where the cars are stolen while parked in the driveway. In another incident, a woman claimed that she found an AirTag hidden in her wheel well after her iPhone alerted her to an AirTag moving with her. State governments in New York and Pennsylvania have issued warnings about the misuse of AirTags and similar tracking devices. Incidents like this are rare (at the time, York police said there had been five AirTag-involved thefts out of 2,000 in the region). Apple has put some safeguards in place so that an iPhone, iPad, and AirTag provide varying alerts and information if the owner who paired the AirTag with their iPhone or iPad isn’t nearby. There are tools built into the iPhone to find and disable AirTags as well as an Android app that will scan for AirTags nearby. This is why you may have seen a warning that an AirTag has been detected near you. These warnings aren’t restricted to Apple devices: in May 2023, Apple and Google announced a joint initiative to allow Bluetooth location-tracking devices to be compatible with unauthorized tracking detection and alerts across iOS and Android platforms. Read: How to identify unwanted tracking by a compact Bluetooth device. Find the best AirTag accessories, key rings, holders, and bag tags we’ve tested. Also, read our Guide to the AirTag and find out when the new model is coming out. How an AirTag can track you Because AirTags don’t register proximity except to the owner, the only way it can be used to gather information about you is if it travels with you. An AirTag in your home, office, or classroom won’t reveal anything to someone trying to keep tabs. That reduces the “surface area” of unwanted surveillance because the AirTag has to be in your clothes, wallet, or purse, something else you’re carrying, or in a vehicle you’re in and using exclusively or at least regularly. If you’re traveling regularly through urban and suburban areas or on public transportation, other people’s devices will still pick up and relay location information about any AirTag that’s with you. That can include something as innocuous as pulling over to a rest area on a highway, and someone 50 feet away has an iPhone, or even driving on a highway near other people who have iPhones or iPads connected to a cellular network. Bluetooth LE’s range is surprisingly long. I found that an AirTag I temporarily placed in my car, parked two flights of stairs down from our ground floor and about 50 feet from the house still provided regular updates about its location via devices I owned—not to mention those of neighbors walking or driving by. Everyone’s devices participate in relaying secured, privacy-protecting location information about their devices and AirTags unless they opt out of the Find My network. That makes everyone around you a potential participant in tracking you via an AirTag you don’t know about. Once the AirTag is in your possession it will relay its location to the owner via the Find My network and other Bluetooth devices. How do you know if you are being tracked by an AirTag? Apple issues alerts to let someone know that there’s an AirTag near them that isn’t associated with their iCloud account. These alerts happen after some period of time or while you’re moving and the AirTag is moving with you. Should an unknown AirTag be tracking you you will see an alert that will state: “AirTag Found Moving With You”. Apple will invite you to open the Find My app on your iPhone to go through various options to disable the tracking and locate the AirTag, discussed below. (Incidentally, you may also see an alert for other devices moving with you, such as AirPods and other Bluetooth trackers). Apple recognizes that it could be an innocent case of having borrowed an item from someone with an AirTag attached or inside it, so one of the options is to Pause Tracking Notifications. To make sure you will receive an alert like this follow these steps: You will need to have an iPhone or iPad running iOS/iPadOS 14.5 or later. Open the Find My app. Tap the Me tab. Tap Customise Tracking Notifications. Make sure the Allow Notifications slider is green (it should be by default). Via the alert, you can see how long this AirTag has been with you. You can also see a map of the locations where the AirTag has been tracked in your possession, which may give you an indication of where you picked it up. How to find an AirTag Luckily Apple makes it easy to locate an AirTag – and find one that is tracking you. Here’s what to do if you have seen a warning from Apple that an AirTag is detected near you. One option is to use Apple’s Find My app to manually scan for AirTags near you using the Items That Can Track Me option in the Items tab. If you have an Android phone, you can also check for unknown AirTags moving with you using the Tracker Detect app. It’s far less robust than Apple’s Find My app and needs to be run manually. 1. Play a sound to locate the AirTag You may find that the tracking AirTag will play a sound once it has been separated from its owner for a time and then moves. This happens after what Apple calls an “extended period of time” away from its paired iPhone or iPad (the company has disclosed elsewhere that this is three days). After this period, an AirTag makes a beep whenever it’s moved. If you hear an unexpected beep from something you’re carrying or within your vehicle, then it’s time to engage in the hunt for an AirTag. The audio alert winds up being less useful than one might hope. If a stalker or other person engaged in surveillance can come within range of the AirTag at least every three days, and they know you don’t have an iPhone or iPad that’s running 14.5 or later, they can reset that counter. The beep that’s made isn’t ongoing or particularly loud, and it can be muffled without blocking the Bluetooth signal substantially. If you haven’t heard a beep, or want to hear it again, you can force the AirTag to play a sound. If you have received an alert about an AirTag that is traveling with you and want it to make a sound follow these steps: Tap Apple’s Alert. Tap Continue. Tap Play Sound. You will have the option to play the sound again. You may find that there is no option to play a sound, in that case, the item may no longer be near you or it may be back in range of its owner. Another reason why you may not be able to find the AirTag is that it may have changed its identifier (which happens regularly). The Bluetooth ID produced by an AirTag, and by all Apple devices that participate in Find My crowdsourcing, changes on a regular basis to avoid becoming a reverse tracking item: if it were persistent, then someone could track your devices based on the “anonymous” Bluetooth ID. That means that your iPhone or iPad has to notice an AirTag moving with it over a relatively short period of time. Another possibility is that the AirTag speaker has been disabled. After reports of people disabling AirTag speakers, Apple announced that it would add a notification along with the sound on an iPhone, iPad, or iPod touch it is moving with. Apple also says it will adjust the tone sequence that plays when a user has an unknown AirTag traveling with them to make an unknown AirTag easier to find. In a 2022 firmware update version 1.0.301, Apple tweaked the unwanted tracking sound to “more easily locate an unknown AirTag.” If you own the AirTag it is easy to locate it using the Find My app on an iPhone or iPad to play an audible sound on the AirTag. As part of macOS 13.1, this feature also came to the Find My app on Macs. 2. Use Precision Finding to find the AirTag As well as the option to play a sound the alert will also give you the option to use Precision Finding if that is available on your device. Your iPhone would need to support Ultra Wideband via the U1 chip to precisely locate an AirTag, which includes iPhone 11 and later. If Apple’s Alert gives you the option for directions tap Go and you should see directional arrows pointing you in the right direction and a guide to the distance between you and the device. This should help you locate it. So, for example, if you were trying to find an AirTag in your car you could use Find Nearby and follow onscreen directions to locate the AirTag. It should display distance and direction so you can find the AirTag in your car (although, in this case, it would probably be easier to play the alert sound.) 3. Search for the AirTag If you didn’t manage to get it to make a sound and Precision Finding wasn’t the answer for you you will need to look for the AirTag. An AirTag (underside)Apple The first step is to get familiar with what it looks like. If you haven’t seen an AirTag before, consult Apple’s site. They have a rounded white top and a silver base, are somewhat larger than an American quarter or a dollar/pound/single unit coin in many countries, and about three to four times thicker. As we mentioned earlier, the AirTag has to be moving with you for Apple to have sent the alert, so look inside things that you have with you when you move around: Check pockets: In clothing, not just pockets but also check inside the lining or anywhere it could have been sewn in. Check bags: Look inside purses, luggage, messenger bags, and other items, unzip and also feel for an AirTag that’s been placed or sewn in. Check belongings: Someone could have posted you an item with an AirTag in it. Examine your car: A car may have a number of locations that are unreachable or hard to check. Because an AirTag has as long as a year’s worth of power, someone might wrap it in cotton (to stifle the beep it may make; see below), slit a fabric seam, slip it in, and sew it back up. Parking your car away from homes and businesses and using a Bluetooth scanner can help you pinpoint if one is in your car. Even if someone doesn’t have access to your home, work, school, or vehicle, and you don’t receive mail at the address at which you live—you might use a P.O. box or another person’s address—someone could ship you an item with an AirTag in it, and when you take that home, they could have your location. If you’re in that specific situation, you may need to examine all packages received elsewhere before bringing them home. 4. Find the AirTag using a Bluetooth scanner Because AirTag regularly emits Bluetooth signals that Apple devices can pick up, you can use a simple Bluetooth tracker for iOS or iPadOS to scan the area around you and see if an AirTag is nearby. While these tracking apps can’t identify AirTag as such—AirTag changes its Bluetooth ID regularly to avoid being trackable themselves—the apps give you the lay of the landscape. That includes the names of Bluetooth devices that do label themselves in their broadcasts. BLE Scanner is a limited but free app that provides a list of Bluetooth devices your iPhone or iPad can detect, and offers a mapping feature that roughly sorts them by signal strength into distance away. This is particularly useful if you’re checking out whether a car has a hidden AirTag; less so inside when there may be dozens of your own and neighbors’ devices close enough to register. Regular Bluetooth devices typically identify themselves generically (like my “HP OfficeJet Pro 9010 series” printer) or specifically, as with the sharing name of your Macs, iPhones, iPads, Apple TVs, FitBit trackers, and so on. Bluetooth BLE Device Finder (free to download, but $4.99 to unlock needed features) has the advantage of letting you drill down into Bluetooth technical details, which may give additional clues about which devices are legitimate and not. Bluetooth scanning apps can provide cues about unknown devices near you, which may include AirTags. If you can eliminate all known Bluetooth devices, including by powering down equipment that you’re unsure of, and what’s left has no associated name, it can be worth looking further by hand. How to stop an AirTag tracking you There are a number of ways you can stop the AirTag from tracking you. We’ll run through them all below including how to find an AirTag in your car and what to do if there is an AirTag detected near you but you can’t find it. 1. Opt out of the Find My network While you can’t stop other iPhone, iPad, and Mac users from relaying the location of the AirTag, you can at least opt yourself out of the Find My network, though this removes your ability to track your own lost or stolen iPhone, iPad, Apple Watch, Mac, or an AirTag through this extended network. Earlier versions of iOS and macOS don’t include support for the Find My network. In iOS 13 or iPadOS 14 or later go to Settings > Account name > Find My > Find My iPhone/iPad, and disable Find My network. In macOS 10.15 Catalina or later, go to the Apple ID preference pane, select the iCloud link at left, click the Options button to the right of the Find My Mac item, and uncheck Offline Finding or Find My network (the text varies by macOS version). Disabling the Find My network prevents your devices from tracking AirTags or other Find My items and devices near you. 2. Get the AirTag’s serial number and associated phone number If you find an AirTag, you can safely determine more information about it without disclosing to the person who planted it that you’ve done so. The AirTag includes NFC, useful both for pairing the device initially and for letting any smartphone or tablet with an NFC reader pull up a URL from the device. That includes Android phones and other hardware, as it uses an industry standard for NFC encoding. On following the URL, you’re taken to a page that contains the AirTag’s serial number. That page can also show a phone number set by the owner if they marked it lost. The owner isn’t notified in any fashion about the page being loaded, and Apple preserves the owner’s privacy by providing no direct linkage at all. An NFC transmitter lets you pick up information about an AirTag you discover. However, in the case of unwanted tracking, the serial number may help if you pursue civil action, want to obtain a restraining order, or contact law enforcement. Because AirTag tracking requires device pairing, an iCloud account, and an iPhone or iPad that’s logged into the account, anyone actively tracking you is also producing a trail of information stored on their phone, across the cellular network, and in other places. A found AirTag displays its serial number via the NFC link and Apple provides instructions on how to disable it. Apple uses end-to-end encryption to protect the location information sent from an arbitrary device to an iPhone, iPad, or Mac, which has to use the Find My app to view it. But the information isn’t secured in the same way on the device. Police and national investigators would be able to create a close association of logins and access, as well as prove that an AirTag was paired with a specific iPhone or iPad. This may deter abusers and others somewhat if they’re aware of how easily they can be tracked back. 3. Disable the AirTag Once you’ve found the AirTag and obtained the information you want from it, you don’t need a hammer or rock to disable it. Unlike most of Apple’s hardware, the AirTag has a removable battery. Use pressure to rotate the AirTag’s metal underside counter-clockwise (from upper right to upper left). Remove that plate. Then remove the battery. What to do if you are being tracked by an AirTag You probably know already if you’re a candidate for involuntary tracking: someone in your life (or formerly so) or a family member may show up at unexpected times in unexpected places when they have no reason to know you’re there. They may comment in person, via email, or otherwise about your activities or whereabouts. Or you’re in the middle of or long past a nasty break-up of a relationship or marriage or have broken off contact with a parent or family members. Whatever the case, if you’re in need of help, consult one of these U.S.-based services the National Domestic Violence Hotline or more specialized resources for victims of domestic abuse, stalking, and other violence listed by the National Coalition Against Domestic Violence. Local law enforcement, the FBI, or national police in other countries also offer resources. For our recommendations of Mac Antivirus Software that we have tested see: Best Antivirus for Mac 2024: Top Security Software Compared.

Read more »

∞ The Dalrymple Report: HomePod, iOS 18.2, and Voice Memos
Dave is having a problem with his HomePod not recognizing his voice all of a sudden. Apple released iOS 18.2 adding more Apple Intelligence features that aren't really that good. Voice Memos also received an update with some features that are really good, escpaically for musicians. Follow this podcast Show Notes: Apple officially launches iOS 18.2 Voice Memos update brings Layered Recording to iPhone 16 Pro lineup New iOS 18.2 feature will ‘change the way we make music forever,’ says Michael Bublé Apple Stock Hits Record High On Second Wave Of AI Features Shows and movies we're watching Day of the Jackal, Peacock

Read more »

Get a refurbished 12.9-inch iPad Pro for just $699.99
Dreaming of owning an iPad Pro but not quite ready to drop more than a grand on one? Get a refurbished 12.9-inch iPad Pro (2020). (via Cult of Mac – Apple news, rumors, reviews and how-tos)

Read more »

iOS versions: Every version of iOS from the oldest to the latest
Macworld iOS is at the heart of the iPhone experience. It’s the operating system on which everything else sits, while also delivering plenty of features and dedicated apps built by Apple itself. Every year Apple adds new features to compatible iPhones, and through the months that follow more features arrive. If you want to know what the latest version of iOS is, or if you’ve ever wondered about when versions came out and what features they brought, we will answer your questions. We also show you how to check which iOS you’re currently using and how to update to the latest iteration. December 2024: Apple has updated iOS 18. iOS 18.2 arrived on December 11, 2024. iOS version history iOS made its debut in 2007 alongside the first iPhone. However, when Steve Jobs held the little device aloft revealing it to the world for the first time, it wasn’t running iOS 1. Instead, it was reported by Apple to be powered by OS X, the software for the Mac. Over time it was called iPhone OS, until finally gaining its now legendary name in the fourth generation of the software when it was shortened to iOS in 2010. Significant milestones are scattered across the iOS timeline, with the first being the introduction of the App Store in iPhone OS 2 in 2008. iOS 4 saw the iPad joining the scene and using the operating system alongside the iPhone. iOS 5 was introduced along with the iPhone 4S in 2011, which saw the debut of Siri as a built-in part of the operating system. Sadly, this was the last version of the software to be released when Apple CEO and Founder Steve Jobs was still alive. Steve Jobs holding the first iPhone at the launch in 2007.Apple Things changed significantly in iOS 11 in 2017 as it brought the first touch and gesture interface, allowing the first iPhone without a Home button–the iPhone X. Another major shift was with iOS 13 in 2019, as it marked the bifurcation of Apple’s mobile operating systems, with iPhones staying on iOS but the newly announced iPadOS powering the new iPads. This would continue through to the present day, although the version numbers have stayed in sync, with the latest ones being iOS 16 and iPadOS 16. iOS 17 and iPadOS 17 are the latest versions of the software and launched in September 2023. You can install iOS 17 and get iPadOS 17 now. Coming in September 2024 are iOS 18 and iPadOS 18. List of iOS versions and latest versions Here’s a breakdown of all the versions of iOS that have been released, when they were released, when they were last updated, and the latest iOS version. iPhone OS 1 – Released June 29, 2007 (Latest 1.1.5 July 15, 2008) iPhone OS 2 – Released July 11, 2008 (Latest 2.2.1 January 27, 2009) iPhone OS 3 – Released June 17, 2009 (Latest 3.2.2 August 11, 2010) iOS 4 – Released June 22, 2010 (Latest 4.3.5 July 25, 2011) iOS 5 – Released October 12, 2011 (Latest 5.1.1 May 7, 2012) iOS 6 – Released September 19, 2012 (Latest 6.1.6 February 21, 2014) iOS 7 – Released September 18, 2013 (Latest 7.1.2 June 30, 2014) iOS 8 – Released September 17, 2014 (Latest 8.4.1 August 13, 2015) iOS 9 – Released September 16, 2015 (Latest 9.3.6 July 22, 2019) iOS 10 – Released September 13, 2016 (Latest 10.3.4 July 22, 2019) iOS 11 – Released September 19, 2017 (Latest 11.4.1 July 9, 2018) iOS 12 – Released September 17, 2018 (Latest 12.5.7 January 23, 2023) iOS 13 – Released September 19, 2019 (Latest 13.7 September 1, 2020) iOS 14 – Released September 17, 2020 (Latest 14.8.1 October 26, 2021) iOS 15 – Released September 24, 2021 (Latest iOS 15.8.3 July 29, 2024) iOS 16 – Released September 12, 2022 (Latest iOS 16.7.10 August 7, 2024) iOS 17 – Released September 18, 2023 (Latest iOS 17.7.2 November 19, 2024) iOS 18 – Released September 16, 2024 (Latest iOS 18.2 December 11, 2024) List of iPadOS versions While iOS was the initial operating system for iPad, this changed with the release of iPadOS 13 in 2019. Since then, iPads have had their own platform, enabling Apple to better harness the power of its larger devices. Here’s the short release history of iPadOS: iOS 12 – Released September 17, 2018 (Latest 12.5.7 January 23, 2023) iPadOS 13 – Released September 24, 2019 (Latest 13.7 September 1, 2020) iPadOS 14 – Released September 16, 2020 (Latest 14.8.1 October 26, 2021 ) iPadOS 15 – Released September 20, 2021 (Latest 15.8.3 July 29, 2024) iPadOS 16 – Released October 24, 2022 (Latest 16.7.10 August 7, 2024) iPadOS 17 – Released September 18, 2023 (Latest iPadOS 17.7.3 December 11, 2024) iPadOS 18 – Released September 16, 2024 (Latest iPadOS 18.2 December 11, 2024) Also see: How long does Apple support iPads? Which iOS versions are currently supported? In terms of new features, only iOS 18 is currently supported by Apple. For those with iPhones that only run older versions of iOS, Apple supports iOS 17 and, potentially iOS 16 with security updates (although as of December 2024, it is yet to update iOS 16 since the arrival of iOS 18). When iOS 18 arrived Apple stopped support for iOS 15 – leaving the iPhone SE, iPhone 6s, iPhones 7 and 7 Plus vulnerable. Support for iOS 16 and the iPhones 8 and 8 Plus is likely to continue until September 2025. Luckily, many iPhones are able to run supported versions of iOS. See: How long does Apple support iPhones? We run through which iPhone supports which version of iOS in a separate article: iOS compatibility: Find out the latest version your iPhone can run. How to tell which version of iOS your iPhone is running If you’re not sure which version of iOS you’re currently using, it’s very easy to find out. Just go to Settings > General > About and look for the iOS Version number. It’s the same steps for iPadOS. Foundry How to install the latest version of iOS Updating your iPhone to the latest version of iOS is simple, so long as your device is compatible. This doesn’t require much detective work though, as your iPhone will know whether it is eligible for the upgrade or not. To find out, go to Settings > General > Software Update, and your iPhone will check to see if there are any available. You may also see a notification on the Settings page that says ‘Software Update Available’, which you can click to go straight to the update page. iPadOS works the same way. Foundry If there are no updates, you’ll see a message along the lines of ‘iOS is up to date’. Should there be one available, it should tell you on the screen and give you the option to ‘Download and Install’. Do this and your iPhone will automatically apply the update and bring your software to the latest version. You can also read our tutorial on how to update iOS on iPhone for more details. So, there it is. A potted history of iOS. Want to know about all the versions of macOS? Read: Mac OS X and macOS: Every version released so far. You can also find out what the latest version of macOS is.

Read more »

Apple nears switch to in-house Bluetooth and Wi-Fi chip
Apple is set to further its self-reliance in chip manufacturing by developing its own Bluetooth and Wi-Fi chips. This strategic move will… The post appeared first on MacDailyNews.

Read more »

Mozi is a new social media app for people who don’t want a new social media app
Plenty of people have tried to replace Twitter/X, but only a few new social media apps have achieved any traction, notably Threads and Bluesky. But a new app created by Twitter co-founder Ev Williams isn’t trying to replace those, but instead do one of the things I most value about social media, and absolutely nothing else … more…

Read more »

iPhone 17 Slim specs will be an enormous engineering & supply chain challenge
Apple's supply chain will be challenged to produce the rumored iPhone 17 Slim. Here's what features the company is rumored to jam into the thinnest iPhone yet.A render of what the iPhone 17 Slim could look likeThe iPhone 17 Slim is expected to form part of the next batch of flagship launches in fall 2025. To prepare for that launch, Apple's supply chain is starting to perform the initial tasks required to actually manufacture it.According to supply chain sources of DigiTimes, the iPhone 17 Slim or Air has moved to the New Product Introduction (NPI) phase of manufacturing. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple Intelligence in iOS 18.2 & Apple Vision Pro is the gadget of the year on the AppleInsider Podcast
With this week's OS updates, Apple Intelligence is truly here, with more to come. Plus Apple is again or still in trouble for what's it done and what it hasn't, all on the AppleInsider Podcast.Apple Intelligence and the new Siri animation on iPhoneOf course we've still more Apple Intelligence to come, and in particular the much-awaited series of improvements to Siri. But now that iOS 18.2 and macOS Sequoia 15.2, not to mention iPadOS 18.2, it feels as if Apple Intelligence has truly arrived. And the first thing it did was bring down OpenAI's ChatGPT servers because of the demand.So anecdotally, it looks as if a lot of iPhone, Mac and iPad users are at least trying out Apple Intelligence. The question now will be whether they find it useful, or whether it only has that brief new toy kind of appeal. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

The iOS 18 feature backlog has got so bad it’s starting to affect iOS 19
Macworld Troubling news from inside Apple Park, where the engineering team is reportedly struggling to deal with the increasingly dire state of iOS 18 development. The public version of iOS 18.0 launched back in September, but it did so without the inclusion of Apple Intelligence, the most highly anticipated new feature for this cycle. It’s debatable whether the company always planned to hold back Apple Intelligence until a later software update, but it seems unlikely, given that this meant the iPhone 16 launched without its flagship feature. Apple Intelligence eventually arrived as part of the iOS 18.1 update at the end of October, but was still missing many of its features (including Image Playground, the heavily hyped generative AI illustration feature), not to mention support for any countries other than the U.S. England-language users in Australia, Canada, Ireland, South Africa, New Zealand, and the U.K. had to wait until iOS 18.2, which has just arrived, and Apple is set to carry on adding new AI features well into 2025. iPhone owners in other countries who are keen to try out Apple Intelligence may be heartened by a seeming leak by Apple, which claims in the iOS 18.2 press release that the “initial set” of additional languages will arrive in April 2025. It’s not clear which will be first, but the company said it’s working on support for “Chinese, English (India), English (Singapore), French, German, Italian, Japanese, Korean, Portuguese, Spanish, and Vietnamese.” https://twitter.com/aaronp613/status/1866832478255845791 Nevertheless, according to well-informed Bloomberg reporter Mark Gurman, the iOS 18 rollout is not going according to plan. So much so that engineers who were supposed to be working on next year’s iOS 19 update have been told to pitch in with iOS 18 instead. https://twitter.com/markgurman/status/1867080628728107027 Gurman previously reported that Apple was working on a major upgrade for Siri in iOS 19, including the development of a of more advanced large language model. It’s not clear whether this delay will change the schedule for that release or if it was always planned for a mid-cycle launch like the “next-gen Siri” coming as part of iOS 18 in 2025. That diversion of resources may help in the short term, but it’s storing up problems for the future. With the result that iOS 19, according to Gurman, will have a staggered rollout of features much like iOS 18, and features that might have been slated to appear in iOS 19.0 being pushed back to a later release.

Read more »

I love iPhone Mirroring, and would like these three changes
Continuity is one of the biggest strengths of the Apple ecosystem, and iPhone Mirroring is a great addition to that – letting us not only mirror our iPhone to our Mac desktop, but also take full control of it. I’m a huge fan of the feature, and use it every single day, but it does have a few weaknesses that I’d love to see Apple address … more…

Read more »

Apple looking at expanding AirPods manufacture to India to help avoid tariffs
Apple is continuing to find a way to work around impending tariffs on imports from China, with AirPods said to be the latest product to benefit from India assembly.AirPods are soon to be refreshedFoxconn has been Apple's assembly partner for years, and a new report claims that its India division will start picking up AirPods assembly orders. Beyond leveraging the existing workforce in India, the move will help Apple keep the toll down from tariffs that are expected to be placed on imports from China early in 2025.The effort is said to start in the first quarter of 2025, but it's not clear what models will be assembled in the country. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple to discontinue iPhone 14 and iPhone SE sales in the EU
To adhere to the EU mandate, Apple will stop selling the iPhone 14 and iPhone SE (3rd gen) in Europe as they feature a Lightning port. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

How Cryptocurrency Turns to Cash in Russian Banks
A financial firm registered in Canada has emerged as the payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services aimed at Russian-speaking customers, new research finds. Meanwhile, an investigation into the Vancouver street address used by this company shows it is home to dozens of foreign currency dealers, money transfer businesses, and cryptocurrency exchanges -- none of which are physically located there.

Read more »

Patch Tuesday, December 2024 Edition
Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common… Read More »

Read more »

U.S. Offered $10M for Hacker Just Arrested by Russia
In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as "Wazawaka," a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies.

Read more »

Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) -- such as .shop, .top, .xyz -- that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds. Meanwhile, the nonprofit entity that oversees the domain name industry is moving forward with plans to introduce a slew of new gTLDs.

Read more »

Vulnerability Summary for the Week of November 25, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Portfolio Management System MCA  A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-26 7.3 CVE-2024-11744 1000 Projects--Portfolio Management System MCA  A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-27 7.3 CVE-2024-11819 1000projects -- beauty_parlour_management_system  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11646 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11647 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11648 1000projects -- beauty_parlour_management_system  A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11649 AbsolutePlugins--Absolute Addons For Elementor  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AbsolutePlugins Absolute Addons For Elementor allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through 1.0.14. 2024-11-28 7.5 CVE-2024-52496 Advantech--EKI-6333AC-2G  A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (securityEngineID to local_record.engineid without proper bounds checking. 2024-11-27 3 CVE-2024-36468 Zabbix--Zabbix  When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd- >data in the code below will remain NULL and an attempt to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42328 Zabbix--Zabbix  The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd- >error will be NULL and trying to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42329 Zabbix--Zabbix  In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd- >browser heap pointer is freed by garbage collection. 2024-11-27 3.3 CVE-2024-42331 Zabbix--Zabbix  The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host. 2024-11-27 3.7 CVE-2024-42332 Zabbix--Zabbix  When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element. 2024-11-26 2.2 CVE-2024-22117 Zabbix--Zabbix  When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords. 2024-11-27 2.7 CVE-2024-36464 Zabbix--Zabbix  The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c 2024-11-27 2.7 CVE-2024-42333 Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info autolab--Autolab  Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature. 2024-11-25 not yet calculated CVE-2024-53258 BoidCMS--BoidCMS  BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code. This code could be used to steal the user's session cookie, perform phishing attacks, or deface the website. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-25 not yet calculated CVE-2024-53255 bunkerity--bunkerweb  bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-27 not yet calculated CVE-2024-53264 Century Systems Co., Ltd.--FutureNet NXR-G110 series  FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs. 2024-11-29 not yet calculated CVE-2024-50357 Checkmk GmbH--Checkmk  Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions type] may result in an out-of-bounds access. To spot such missed invocations early in the future, checking the validity of link- >type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed. 2024-11-25 not yet calculated CVE-2024-53099 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp: don't access released socket during error recovery") added a mutex_lock() call for the queue- >queue_lock in nvme_tcp_get_address(). However, the mutex_lock() races with mutex_destroy() in nvme_tcp_free_queue(), and causes the WARN below. DEBUG_LOCKS_WARN_ON(lock- >magic != lock) WARNING: CPU: 3 PID: 34077 at kernel/locking/mutex.c:587 __mutex_lock+0xcf0/0x1220 Modules linked in: nvmet_tcp nvmet nvme_tcp nvme_fabrics iw_cm ib_cm ib_core pktcdvd nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc ppdev 9pnet_virtio 9pnet pcspkr netfs parport_pc parport e1000 i2c_piix4 i2c_smbus loop fuse nfnetlink zram bochs drm_vram_helper drm_ttm_helper ttm drm_kms_helper xfs drm sym53c8xx floppy nvme scsi_transport_spi nvme_core nvme_auth serio_raw ata_generic pata_acpi dm_multipath qemu_fw_cfg [last unloaded: ib_uverbs] CPU: 3 UID: 0 PID: 34077 Comm: udisksd Not tainted 6.11.0-rc7 #319 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:__mutex_lock+0xcf0/0x1220 Code: 08 84 d2 0f 85 c8 04 00 00 8b 15 ef b6 c8 01 85 d2 0f 85 78 f4 ff ff 48 c7 c6 20 93 ee af 48 c7 c7 60 91 ee af e8 f0 a7 6d fd 0b e9 5e f4 ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 RSP: 0018:ffff88811305f760 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88812c652058 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88811305f8b0 R08: 0000000000000001 R09: ffffed1075c36341 R10: ffff8883ae1b1a0b R11: 0000000000010498 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812c652058 FS: 00007f9713ae4980(0000) GS:ffff8883ae180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcd78483c7c CR3: 0000000122c38000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? __warn.cold+0x5b/0x1af ? __mutex_lock+0xcf0/0x1220 ? report_bug+0x1ec/0x390 ? handle_bug+0x3c/0x80 ? exc_invalid_op+0x13/0x40 ? asm_exc_invalid_op+0x16/0x20 ? __mutex_lock+0xcf0/0x1220 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx___mutex_lock+0x10/0x10 ? __lock_acquire+0xd6a/0x59e0 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx_nvme_tcp_get_address+0x10/0x10 [nvme_tcp] nvme_sysfs_show_address+0x81/0xc0 [nvme_core] dev_attr_show+0x42/0x80 ? __asan_memset+0x1f/0x40 sysfs_kf_seq_show+0x1f0/0x370 seq_read_iter+0x2cb/0x1130 ? rw_verify_area+0x3b1/0x590 ? __mutex_lock+0x433/0x1220 vfs_read+0x6a6/0xa20 ? lockdep_hardirqs_on+0x78/0x100 ? __pfx_vfs_read+0x10/0x10 ksys_read+0xf7/0x1d0 ? __pfx_ksys_read+0x10/0x10 ? __x64_sys_openat+0x105/0x1d0 do_syscall_64+0x93/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? __pfx_ksys_read+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? do_syscall_64+0x9f/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9713f55cfa Code: 55 48 89 e5 48 83 ec 20 48 89 55 e8 48 89 75 f0 89 7d f8 e8 e8 74 f8 ff 48 8b 55 e8 48 8b 75 f0 4 ---truncated--- 2024-11-25 not yet calculated CVE-2024-53100 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr- >ia_mode, attr- >ia_uid and attr- >ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0. 2024-11-25 not yet calculated CVE-2024-53101 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: make keep-alive synchronous operation The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race between the fabric controller admin queue destroy code path (invoked while shutting down controller) and hw/hctx queue dispatcher called from the nvme keep-alive async request queuing operation. This race could lead to the kernel crash shown below: Call Trace: autoremove_wake_function+0x0/0xbc (unreliable) __blk_mq_sched_dispatch_requests+0x114/0x24c blk_mq_sched_dispatch_requests+0x44/0x84 blk_mq_run_hw_queue+0x140/0x220 nvme_keep_alive_work+0xc8/0x19c [nvme_core] process_one_work+0x200/0x4e0 worker_thread+0x340/0x504 kthread+0x138/0x140 start_kernel_thread+0x14/0x18 While shutting down fabric controller, if nvme keep-alive request sneaks in then it would be flushed off. The nvme_keep_alive_end_io function is then invoked to handle the end of the keep-alive operation which decrements the admin- >q_usage_counter and assuming this is the last/only request in the admin queue then the admin- >q_usage_counter becomes zero. If that happens then blk-mq destroy queue operation (blk_mq_destroy_ queue()) which could be potentially running simultaneously on another cpu (as this is the controller shutdown code path) would forward progress and deletes the admin queue. So, now from this point onward we are not supposed to access the admin queue resources. However the issue here's that the nvme keep-alive thread running hw/hctx queue dispatch operation hasn't yet finished its work and so it could still potentially access the admin queue resource while the admin queue had been already deleted and that causes the above crash. This fix helps avoid the observed crash by implementing keep-alive as a synchronous operation so that we decrement admin- >q_usage_counter only after keep-alive command finished its execution and returns the command status back up to its caller (blk_execute_rq()). This would ensure that fabric shutdown code path doesn't destroy the fabric admin queue until keep-alive request finished execution and also keep-alive thread is not running hw/hctx queue dispatch operation. 2024-11-25 not yet calculated CVE-2024-53102 Mozilla--Firefox  The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. 2024-11-26 not yet calculated CVE-2024-11696 Mozilla--Firefox  On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133. 2024-11-26 not yet calculated CVE-2024-11703 msg Suisse AG--EasyTax  A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS. 2024-11-29 not yet calculated CVE-2024-9044 n/a--n/a  FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. 2024-11-29 not yet calculated CVE-2024-35366 n/a--n/a  FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer 2024-11-29 not yet calculated CVE-2024-35367 n/a--n/a  FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. 2024-11-29 not yet calculated CVE-2024-35368 n/a--n/a  Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions. 2024-11-29 not yet calculated CVE-2024-35371 n/a--n/a  LinkStack 2.7.9 through 4.7.7 allows resourcesviewscomponentsfavicon.blade.php link SSRF. 2024-11-29 not yet calculated CVE-2024-35451 n/a--n/a  A deserialization vulnerability exists in the Stub class of the VarDumper module in Symfony v7.0.3. The vulnerability stems from deficiencies in the original implementation when handling properties with null or uninitialized values. An attacker could construct specific serialized data and use this vulnerability to execute unauthorized code. 2024-11-29 not yet calculated CVE-2024-36610 n/a--n/a  In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. 2024-11-29 not yet calculated CVE-2024-36611 n/a--n/a  Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. 2024-11-29 not yet calculated CVE-2024-36612 n/a--n/a  FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. 2024-11-29 not yet calculated CVE-2024-36615 n/a--n/a  An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. 2024-11-29 not yet calculated CVE-2024-36616 n/a--n/a  FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. 2024-11-29 not yet calculated CVE-2024-36617 n/a--n/a  FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. 2024-11-29 not yet calculated CVE-2024-36618 n/a--n/a  moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. 2024-11-29 not yet calculated CVE-2024-36620 n/a--n/a  moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. 2024-11-29 not yet calculated CVE-2024-36621 n/a--n/a  In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter. 2024-11-29 not yet calculated CVE-2024-36622 n/a--n/a  moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes. 2024-11-29 not yet calculated CVE-2024-36623 n/a--n/a  nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. 2024-11-29 not yet calculated CVE-2024-36671 n/a--n/a  MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. 2024-11-29 not yet calculated CVE-2024-45495 n/a--n/a  WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. 2024-12-01 not yet calculated CVE-2024-45520 n/a--n/a  OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files. 2024-11-27 not yet calculated CVE-2024-46054 n/a--n/a  Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the power(uct_int_t x, uct_int_t n) in src/uct_upstream.c. 2024-11-29 not yet calculated CVE-2024-48406 n/a--n/a  Incorrect access control in Adapt Learning Adapt Authoring Tool

Read more »

Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

Read more »

Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass, MailChimp, Okta, T-Mobile and Twilio.

Read more »

Fintech Giant Finastra Investigating Data Breach
The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world's top 50 banks, notified customers of a potential breach after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company. 

Read more »

Vulnerability Summary for the Week of November 11, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Beauty Parlour Management System  A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 7.3 CVE-2024-11100 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11257 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11258 1000 Projects--Portfolio Management System MCA  A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11256 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47441 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47442 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47443 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-45114 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47450 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47451 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47452 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49507 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49508 adobe -- indesign  InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49509 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47426 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47427 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47428 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47429 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47430 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47431 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47432 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47433 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47434 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49515 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49516 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49517 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49518 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49519 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49520 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49525 Adobe--Adobe Commerce  Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction. 2024-11-12 7.7 CVE-2024-49521 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49526 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49528 Adobe--Photoshop Desktop  Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49514 adonesevangelista -- agri-trading_online_shopping_system  A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout. 2024-11-14 7.5 CVE-2024-50968 algolplus--Advanced Order Export For WooCommerce  The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2024-11-13 8.1 CVE-2024-10828 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21974 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21975 AMD--AMD Cloud Manageability Service Software  Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21939 AMD--AMD Management Console  Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21957 AMD--AMD Management Plug-In for SCCM  Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21938 AMD--AMD Provisioning Console (APC) Software  Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21958 AMD--AMD Ryzen AI Software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 8.8 CVE-2024-21976 AMD--AMD Ryzen Master Monitoring SDK  Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21945 AMD--AMD Ryzen Master Utility for Overclocking Control  Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21946 AMD--AMD Software: PRO Edition  Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21937 AMI--AptioV  APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode. 2024-11-12 7.2 CVE-2024-42442 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 9 CVE-2024-51490 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51484 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51485 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL?-?Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.4 CVE-2024-51486 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51487 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. 2024-11-13 7.2 CVE-2024-50971 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. 2024-11-13 7.2 CVE-2024-50972 angeljudesuarez -- tailoring_management_system  A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.php. The manipulation of the argument inccat/desc/date/amount leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "inccat" to be affected. But it must be assumed "desc", "date", and "amount" are affected as well. 2024-11-11 9.8 CVE-2024-11074 anisha -- job_recruitment  A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument e_hash leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11076 anisha -- job_recruitment  A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11077 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 9.8 CVE-2024-11099 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 8.8 CVE-2024-11127 Anthony Carbon--WDES Responsive Mobile Menu  Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18. 2024-11-16 9.8 CVE-2024-52414 Apache Software Foundation--Apache Airflow  Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability. If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets. 2024-11-15 7.5 CVE-2024-45784 Apache Software Foundation--Apache CloudStack  Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that can register templates, can use them to deploy malicious instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.5 or 4.19.1.3, or later, which addresses this issue. Additionally, all user-registered KVM-compatible templates can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run the following command on their file-based primary storage(s) and inspect the output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. However, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; doneFor checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-11-12 8.5 CVE-2024-50386 Apache Software Foundation--Apache Traffic Server  Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue. 2024-11-14 9.1 CVE-2024-50306 Apache Software Foundation--Apache Traffic Server  Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-38479 Apache Software Foundation--Apache Traffic Server  Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-50305 Arttia Creative--Datasets Manager by Arttia Creative  Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative.This issue affects Datasets Manager by Arttia Creative: from n/a through 1.5. 2024-11-14 10 CVE-2024-52375 Autodesk--Installer  A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management. 2024-11-15 7.2 CVE-2024-9500 Avigilon--VideoIQ iCVR HD camera  Avigilon - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-45253 axelkeller--GPX Viewer  The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-13 8.8 CVE-2024-10629 ays-pro--Chartify WordPress Chart Plugin  The Chartify - WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included. 2024-11-14 9.8 CVE-2024-10571 Baxter--Life2000 Ventilation System  The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 10 CVE-2024-48966 Baxter--Life2000 Ventilation System  The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance. 2024-11-14 10 CVE-2024-48967 Baxter--Life2000 Ventilation System  The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48970 Baxter--Life2000 Ventilation System  The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges. 2024-11-14 9.3 CVE-2024-48971 Baxter--Life2000 Ventilation System  The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-48973 Baxter--Life2000 Ventilation System  The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48974 Baxter--Life2000 Ventilation System  There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-9832 Baxter--Life2000 Ventilation System  Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-9834 BdThemes--Instant Image Generator  Unrestricted Upload of File with Dangerous Type vulnerability in BdThemes Instant Image Generator allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through 1.5.4. 2024-11-14 10 CVE-2024-52377 Bigfive--CF7 Reply Manager  Unrestricted Upload of File with Dangerous Type vulnerability in Bigfive CF7 Reply Manager.This issue affects CF7 Reply Manager: from n/a through 1.2.3. 2024-11-16 9.9 CVE-2024-52404 Bikram Joshi--B-Banner Slider  Unrestricted Upload of File with Dangerous Type vulnerability in Bikram Joshi B-Banner Slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through 1.1. 2024-11-16 9.9 CVE-2024-52405 BlackBerry--SecuSUITE  A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege. 2024-11-12 7.3 CVE-2024-51721 Boa web server--Boa web server 0.94.14rc21  Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-47916 Bosch Rexroth AG--IndraDrive FWA-INDRV*-MP*  A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages. 2024-11-13 7.5 CVE-2024-48989 Ciprian Popescu--W3P SEO  Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO allows Stored XSS.This issue affects W3P SEO: from n/a before 1.8.6. 2024-11-14 7.1 CVE-2024-51684 Cisco--Cisco BroadWorks  A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.6 CVE-2023-20125 Cisco--Cisco Cyber Vision  A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.5 CVE-2022-20685 Cisco--Cisco Industrial Network Director  A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit this vulnerability by altering the request that is sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITYSYSTEM on the underlying operating system of an affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 9.9 CVE-2023-20036 Cisco--Cisco IOS XR Software  A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root. 2024-11-15 8.8 CVE-2022-20655 Cisco--Cisco Modeling Labs  A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.This vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. 2024-11-15 9.1 CVE-2023-20154 Cisco--Cisco Redundancy Configuration Manager  A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container.This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user.The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.1 CVE-2022-20649 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.  The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic.Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20814 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.  2024-11-15 7.4 CVE-2022-20853 Citrix Session Recording--Citrix Session Recording  Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server 2024-11-12 8.8 CVE-2024-8069 Clarisse K.--Writer Helper  Unrestricted Upload of File with Dangerous Type vulnerability in Clarisse K. Writer Helper allows Upload a Web Shell to a Web Server.This issue affects Writer Helper: from n/a through 3.1.6. 2024-11-16 9.9 CVE-2024-52399 cli--cli  The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image]( https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-... https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers#using-the-default-dev-container-configuration) . GitHub CLI [retrieves SSH connection details]( https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/inv... https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/invoker.go#L230-L244 ), such as remote username, which is used in [executing `ssh` commands]( https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L2... https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L263 ) for `gh codespace ssh` or `gh codespace logs` commands. This exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand="echo hacked" #`. The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored. In `2.62.0`, the remote username information is being validated before being used. 2024-11-14 8 CVE-2024-52308 cmorillas1--External Database Based Actions  The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin settings and log in as any existing user on the site, such as an administrator. 2024-11-15 7.5 CVE-2024-10311 cmsMinds--Boat Rental Plugin for WordPress  Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through 1.0.1. 2024-11-14 10 CVE-2024-52376 code-projects--Job Recruitment  A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11241 codeSavory--BasePress Migration Tools  Unrestricted Upload of File with Dangerous Type vulnerability in codeSavory BasePress Migration Tools allows Upload a Web Shell to a Web Server.This issue affects BasePress Migration Tools: from n/a through 1.0.0. 2024-11-16 9.9 CVE-2024-52407 craftcms--cms  Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5. 2024-11-13 8.4 CVE-2024-52291 craftcms--cms  Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, reads the file's content, and converts it into a Base64-encoded string. By embedding this function within a system notification template, the attacker can exfiltrate the Base64-encoded file content through a triggered system email notification. Once the email is received, the Base64 payload can be decoded, allowing the attacker to read arbitrary files on the server. This is fixed in 5.4.9 and 4.12.8. 2024-11-13 7.7 CVE-2024-52292 craftcms--cms  Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3. 2024-11-13 7.2 CVE-2024-52293 creativeinteractivemedia--Real3D Flipbook Lite 3D FlipBook, PDF Viewer, PDF Embedder  The 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-16 8.8 CVE-2024-9849 cyberlord92--Login using WordPress Users ( WP as SAML IDP )  The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.15.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2024-11-16 7.2 CVE-2024-9887 Dang Ngoc Binh--Audio Record  Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through 1.0. 2024-11-11 10 CVE-2024-51792 Davor Zeljkovic--Convert Docx2post  Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through 1.4. 2024-11-16 9.1 CVE-2024-52397 decidim--decidim  Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0. 2024-11-13 7.7 CVE-2024-45594 decidim-ice--decidim-module-decidim_awesome  An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands. 2024-11-12 9 CVE-2024-43415 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. 2024-11-12 7.8 CVE-2024-49557 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 2024-11-12 7.8 CVE-2024-49558 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. 2024-11-12 7.8 CVE-2024-49560 Dell--SmartFabric OS10 Software  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution 2024-11-12 7.8 CVE-2024-48837 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39354 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39605 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-47131 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user's password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user's account. 2024-11-11 9.8 CVE-2024-11068 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11062 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11063 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11064 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11065 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page. 2024-11-11 7.2 CVE-2024-11066 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password. 2024-11-11 7.5 CVE-2024-11067 DMC--Airin Blog  Deserialization of Untrusted Data vulnerability in DMC Airin Blog allows Object Injection.This issue affects Airin Blog: from n/a through 1.6.1. 2024-11-16 9.8 CVE-2024-52413 DonnellC--Global Gateway e4 | Payeezy Gateway  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0. 2024-11-14 8.6 CVE-2024-52371 DoThatTask--Do That Task  Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task allows Upload a Web Shell to a Web Server.This issue affects Do That Task: from n/a through 1.5.5. 2024-11-14 10 CVE-2024-52374 dotnetzip.semverd_project -- dotnetzip.semverd  Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer. 2024-11-13 9.8 CVE-2024-48510 Elastic--Kibana  A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. A successful attack requires a malicious user to have a combination of both specific Elasticsearch indices privileges https://www.elastic.co/guide/en/elasticsearch/reference/current/defining-roles.html#roles-indices-priv  and Kibana privileges https://www.elastic.co/guide/en/fleet/current/fleet-roles-and-privileges.html  assigned to them. The following Elasticsearch indices permissions are required * write privilege on the system indices .kibana_ingest** The allow_restricted_indices flag is set to true Any of the following Kibana privileges are additionally required * Under Fleet the All privilege is granted* Under Integration the Read or All privilege is granted* Access to the fleet-setup privilege is gained through the Fleet Server's service account token 2024-11-14 9.1 CVE-2024-37285 Eugen Bobrowski--Debug Tool  Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through 2.2. 2024-11-16 10 CVE-2024-52416 Flowcraft UX Design Studio--Advanced Personalization  Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2. 2024-11-16 9.8 CVE-2024-52411 fortinet -- forticlient  A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts. 2024-11-12 8.8 CVE-2024-36513 fortinet -- forticlient  A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. 2024-11-12 7.8 CVE-2024-36507 Fortinet--FortiClientWindows  A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. 2024-11-13 7.8 CVE-2024-47574 Fortinet--FortiManager  A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigDataat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. 2024-11-12 7.5 CVE-2024-23666 Fortinet--FortiOS  A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link. 2024-11-12 7.5 CVE-2023-50176 FraudLabs Pro--FraudLabs Pro SMS Verification  Cross-Site Request Forgery (CSRF) vulnerability in FraudLabs Pro FraudLabs Pro SMS Verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through 1.10.1. 2024-11-14 7.1 CVE-2024-51688 FreeBSD--FreeBSD  The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option. 2024-11-12 7.5 CVE-2024-45289 GeekRMX--Twitter @Anywhere Plus  Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus allows Stored XSS.This issue affects Twitter @Anywhere Plus: from n/a through 2.0. 2024-11-14 7.1 CVE-2024-51659 GentleSource--Appointmind  Cross-Site Request Forgery (CSRF) vulnerability in GentleSource Appointmind allows Stored XSS.This issue affects Appointmind: from n/a through 4.0.0. 2024-11-14 7.1 CVE-2024-51679 GeoVision--GV-VS12  Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports. 2024-11-15 9.8 CVE-2024-11120 GitLab--GitLab  An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations. 2024-11-14 8.5 CVE-2024-9693 glpi-project--glpi  GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. 2024-11-15 8.1 CVE-2024-40638 gogs--gogs/gogs  A remote command execution vulnerability exists in gogs/gogs versions

Read more »

An Interview With the Target & Home Depot Hacker
In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel, who confirmed using the Rescator identity in a recent interview, also admitted reaching out because he is broke and seeking publicity for several new money making schemes.

Read more »

Holiday Sale: Get a 13-inch M2 MacBook Air with 8GB of RAM for only $749 at Amazon
Amazon has 13" MacBook Airs with M2 CPUs and 8GB of RAM in stock today and on clearance Holiday sale for $250 off MSRP with prices starting at only $749. Shipping is free. These are the lowest prices available for M2-powered MacBook Airs anywhere: - 13" M2 MacBook Air 8GB/256GB: $749, $250 off MSRP Silver and Starlight models were available at this price point, at the time of this post. Space Gray was $50 more expensive. For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Holiday Sale: Get a 13-inch M2 MacBook Air with 8GB of RAM for only $749 at Amazon
Amazon has 13" MacBook Airs with M2 CPUs and 8GB of RAM in stock today and on clearance Holiday sale for $250 off MSRP with prices starting at only $749. Shipping is free. These are the lowest prices available for M2-powered MacBook Airs anywhere: - 13" M2 MacBook Air 8GB/256GB: $749, $250 off MSRP Silver and Starlight models were available at this price point, at the time of this post. Space Gray was $50 more expensive. For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Apple AirPods Pro 2 with USB-C on Holiday sale for $189, $60 off MSRP
Amazon has Apple AirPods Pro 2 with USB-C in stock and on Holiday sale this weekend for $189.99 including free shipping. Their price is $60 (24%) off MSRP, and it's currently among the lowest prices available for new AirPods Pro 2. For the latest prices & deals, see our Apple AirPods Price Tracker, updated daily.

Read more »

Clearance Mac minis with M2 and M2 Pro CPUs on sale for up to $400 off MSRP
Best Buy has clearance M2 and M2 Pro Mac minis on sale for up to $400 off original MSRP with prices available starting at $499. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - Mac mini M2 CPU (8GB/256GB): $499, save $100 - Mac mini M2 CPU (8GB/512GB): $599, save $200 - Mac mini M2 Pro CPU (16GB/512GB): $899, save $400 For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »

Holiday Promos at Verizon: iPhone 16 or iPhone 16 Pro for free, no trade-in required
Switch to Verizon and open a new line of service, and choose a free iPhone 16 or iPhone 16 Pro, no trade-in required. 36 months of Unlimited service is required, and Verizon will prorate the cost of the phone monthly during that time (meaning if you cancel service early, you will be required to buy out the phone): - Free 128GB iPhone 16 Pro, no trade-in required (details) - Free 128GB iPhone 16, no trade-in required (details) Promotions are valid through at least December 31, 2024. Verizon's deals are live on their site today. For the latest prices & sales, keep an eye on our iPhone Price Tracker, updated daily.

Read more »

Amazon is selling the Black Titanium Apple Watch Ultra 2 for 10% off MSRP right now
Amazon is offering an $80 (10%) discount on the Black Titanium Apple Watch Ultra 2 as part of their ongoing Holiday sale. With the discount, the Watch is now $719 shipped. That's the lowest price available for this new Ultra 2 Watch: - Black Titanium Apple Watch Ultra 2: $719, $80 off MSRP The same Holiday discount is also available on many other Ultra 2 Watches at Amazon. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Holiday Sale: 15-inch M3 MacBook Pros with 16GB of RAM for $200 off MSRP at these Apple retailers
Amazon and Best have Apple's 15-inch M3 MacBook Airs with 16GB of memory...the newest models recently upgraded by Apple..on Holiday sale for $200 off MSRP, with prices available starting at $1099. Sale prices below apply to all colors. (1): Amazon has 15" 16GB M3 MacBook Airs on sale for $200 off MSRP, each including free shipping: - 15" M3 MacBook Air (16GB/256GB): $1099, $200 off MSRP - 15" M3 MacBook Air (16GB/512GB): $1299, $200 off MSRP - 15" M3 MacBook Air (24GB/512GB): $1499, $200 off MSRP (2): Best Buy has 15" 16GB M3 MacBook Airs on sale for $200 off MSRP as well. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 15" M3 MacBook Air (16GB/256GB): $1099, $200 off MSRP - 15" M3 MacBook Air (16GB/512GB): $1299, $200 off MSRP - 15" M3 MacBook Air (24GB/512GB): $1499, $200 off MSRP For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Clearance 15-inch M3 MacBook Airs available for only $999 with optional free local store pickup
Best Buy has clearance 15" MacBook Airs with M3 CPUs and 8GB of RAM on sale for $300 off original MSRP on their online store this week. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 15" M3 MacBook Air (8GB RAM/256GB SSD): $999 $300 off MSRP - 15" M3 MacBook Air (8GB RAM/512GB SSD): $1199 $300 off MSRP For the latest sales & prices, see our 15" MacBook Air Price Tracker.

Read more »

Clearance 14-inch M3 MacBook Pros available for $500 off original MSRP with optional free local store pickup
Best Buy is offering a $300-$500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at $1299. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1299, $300 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP Yes, that means they have models with 1TB of storage available at the same price as those with 512GB, at least at the time of this post. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Clearance 14-inch M3 MacBook Pros available for $500 off original MSRP with optional free local store pickup
Best Buy is offering a $300-$500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at $1299. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1299, $300 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP Yes, that means they have models with 1TB of storage available at the same price as those with 512GB, at least at the time of this post. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Clearance 14-inch M3 MacBook Pros available for $500 off original MSRP with optional free local store pickup
Best Buy is offering a $300-$500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at $1299. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1299, $300 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP Yes, that means they have models with 1TB of storage available at the same price as those with 512GB, at least at the time of this post. For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Holiday Sale: 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP, at Amazon
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Holiday sale this week for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Discount applies to all colors, and shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP This is the lowest price available for a new MacBook with 16GB of RAM among the Apple retailers we track. For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »