Apple TV+ gets Lucky with crime thriller starring Anya Taylor-Joy
Anya Taylor-Joy stars in an upcoming limited series adaptation of the bestselling crime thriller ‘Lucky’ on Apple TV+. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple TV+ unveils trailer for ‘The Secret Lives of Animals’ nature docuseries
Apple TV+ on Tuesday unveiled the trailer for the new 10-part docuseries “The Secret Lives of Animals,” set to premiere globally on Dec. 18th… The post appeared first on MacDailyNews.

Read more »

Today in Apple history: World’s first iPad-only newspaper folds
On December 3, 2012, News Corp pulled the plug on innovative iPad newspaper "The Daily" less than two years after the publication's launch. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Deals: Apple Watch Series 10 $80 off, Apple Watch Ultra $429 off, AirPods 4, Find My tracking card $24, more
The Black Friday and Cyber Monday deals have all but completely disappeared, but there are still a couple notable hangover offers joining some fresh price drops we spotted this morning. Apple Watch Series 10 is starting at the $329 all-time low with $80 in savings across the lineup while AirPods 4 remain at the best price we have tracked on Amazon. We also spotted the OG Apple Watch Ultra at $429 off the original price, some deals on Apple Watch Milanese Loops, Anker’s latest Find My card, and even some handy discounted Uber gift cards you can use to score on deal on your holiday trips and food deliveries. Everything else awaits below.  more…

Read more »

Peer into The Secret Lives of Animals [Apple TV+ trailer]
The new trailer for "The Secret Lives of Animals" docuseries gives you a hi-res peek into some rare and unusual behavior in the wild. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

The Touch Bar’s loyal fans have made a standalone successor inspired by Apple
The Touch Bar was a controversial Apple creation, to say the least. But the now-discontinued MacBook Pro feature is being revised, in a way, through a new Kickstarter campaign for a more versatile standalone product: the Flexbar. more…

Read more »

Apple Podcasts names ‘Hysterical’ the 2024 Show of the Year
Apple has awarded "Hysterical" with the Apple Podcasts Award, a recognition given each year to honor a show that demonstrates quality… The post appeared first on MacDailyNews.

Read more »

Apple wants to cram sensors for everything into Apple Vision Pro
We've already got Face ID sensors and a bunch of health sensors in the Apple Watch, but future Apple devices including the Apple Vision Pro will have many more measuring devices, including one for analyzing breathing through your nose. Here's what else is coming.Future Apple Vision Pro could contain many more sensorsIt's not that long ago that sensors were just something to reveal a plot point on the USS Enterprise. But now we have devices that know when we touch them, when we speak to them, and even when we glance in their direction.Just going through 2024's patents and patent applications, though, there can't be a type of sensor that Apple is not at least investigating. A newly-granted patent regarding a microphone on your nose is just the latest, although it appears to be the first time Apple has expressed interest in nasal passages. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

New Apple TV+ series will star Anya Taylor-Joy in her first big show since The Queen’s Gambit
Apple TV+ has announced a new show in the works for future release—it’s called Lucky, and it has some big names behind it including Anya Taylor-Joy. more…

Read more »

Box review: A great cloud storage solution for enterprise
Macworld At a glanceExpert's Rating Pros Super simple, but with plenty of power, too Web app feels better than most Impressive security Cons Personal plan is more expensive than rivals Our Verdict One of the best cloud storage options for businesses, Box has a whole host of excellent tools but might go beyond a general Consumer’s needs. Price When Reviewed This value will show the geolocated pricing text for product undefined Best Pricing Today Price When ReviewedFree (10GB, limited to 250MB files), $14 (100GB) a month Best Prices Today: Retailer Price Box (monthly) $14 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket In our time testing the best cloud-based storage services for your Mac, I’m not sure I’ve seen one as slick and well-supported as Box. One of the oldest names in the game, Box offers plenty of utility (and a very generous free plan) for individuals, but its real power lies in its enterprise systems. Incorporating a whole host of security options, API calls, and over 1,500 integrations across office mainstays like Slack, Google Workspace, and more, it’s an easy pick for anyone looking for a “plug-and-play” solution for file-sharing across larger teams. It’s no slouch for personal users, either, but there are drastically cheaper consumer-focused alternatives like Google Drive that make it harder to spring for the £11 a month Personal Pro plan. First Impressions Search Bar: The keyboard shortcut is super helpful.Foundry I’m impressed at just how much Box tries to keep itself out of the way until you need it. In terms of the Mac version, it’s essentially just a menu bar app. It can pop out into a handy search bar to trawl through anything inside the specific Box folder, but otherwise, the only telltale sign it’s installed is that it’ll appear in your Finder sidebar. One of my favorite tools is the keyboard shortcut to bring up the search bar, which means Box is always just a keypress away. If you’re juggling a lot of files between members of your team, that alone could save you a lot of time each year. Box features Plugins: There are very few apps Box can’t work with it seems.Foundry The joy of being one of the earliest cloud storage sites around is that Box has built quite the, er, box of tricks. Those come in the form of third-party integrations that range from standards like Microsoft Office apps to Zoom, Google Workspace, and many, many more – over 1,500, in fact. It has options of its own, too, like a note section that syncs across devices and a document signing tool that’s very handy if you’re exchanging a lot of contracts. Its focus on team-based users continues to admin rights, too. Users can use a series of controls to adjust file and folder permissions, meaning you could manage a team through it with ease, and an Admin console can track file movements, too. It’s secure, too, with encryption as standard across all plans and end-to-end encryption offered via Box KeySafe so users can issue their own encryption keys. Web app: Box is easy to use on the web.Foundry I’m also very pleased to say that the web app is fast and stable, something I can’t say about every one of Box’s rivals, and it makes shifting files between folders when away from the Mac a much simpler process as a result. Box annoyances As I mentioned earlier, Box’s free tier is fantastic, offering 10GB of storage and a 250MB file upload limit that could be more than you need depending on your use case. Sadly, the next tier up is $14/£11 monthly for individuals, which is a steep increase on the likes of Google Drive. That does net you multiple file versions and Box Sign for signing 15 docs each month, as well as 5GB file uploads and 100GB of storage. It’s still a solid plan, it’s just priced a little too high for our liking. You can get it down to $10/£8 per month if you pay annually, though. Should you buy Box cloud storage Personal pricing aside, Box nails just about anything you could want from a cloud storage service in 2025. It’s fast, secure, and gets out of the way when you need it to, making it an easy pick for businesses. If you are looking for an onsite backup solution take a look at our choice of the Best Mac Backup apps.

Read more »

Apple faces class action lawsuit from UK developers over App Store commission
A group of UK app developers has filed a class-action lawsuit against Apple, accusing the company of anti-competitive practices. The lawsuit… The post appeared first on MacDailyNews.

Read more »

Give the gift of privacy and security online with Surfshark VPN's winter sale
A virtual private network is a utility as necessary as a lock on your front door, so pick one up at a big discount from Surfshark VPN during its winter sale.Get Surfshark VPN at a discount during the winter sale - Image credit: SurfsharkThere are many uses for a VPN service, like protecting yourself while using an insecure internet connection or catching up on anime exclusive to Netflix in Japan. Either way, Surfshark VPN has you covered.Give your household the gift of a VPN with unlimited simultaneous connections, plus a host of additional features offered across three subscription tiers. They're all discounted for the Surfshark VPN winter sale and include bonus months on a two-year pre-paid subscription. Continue Reading on AppleInsider

Read more »

Apple Podcasts has named Hysterical its 2024 Show of the Year
Apple Podcasts has just named its Show of the Year for 2024, and it’s a limited-run series called Hysterical that tells a fascinating story. Here are the full details. more…

Read more »

Price drop: Add wireless CarPlay to your vehicle for less than $75
Affordable CarPlay display with touchscreen lets you enjoy features like navigating, calling and listening to tunes while driving. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

'Hysterical' named Apple Podcasts top new show of 2024
Apple has bestowed the top spot in the annual 2025 Apple Podcasts Award to "Hysterical," honoring the seven-part show for its high quality as well as longevity in the podcast charts.Dan Taberski with the 2024 Apple Podcasts Award for 'Hysterical'Each year, the Apple Podcasts award is given out by Apple to the show that demonstrates quality and innovation in podcasting. For 2024, that award went to "Hysterical."A seven-part series produced by Wondery and Audacy's Pineapple Street Studios, "Hysterical" investigates how an illness spread among a group of New York high school girls. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple published a new Press Release
Apple just published a new Press Release:Apple Podcasts names Hysterical the 2024 Show of the Year

Read more »

Turn on gentle rain and ocean sounds while you work
Your iPhone has a built-in feature called Background Sounds for playing rain noises or white noise to tune it all out. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple offered Indonesia $10M then $100M, but it now expects $1B within a week
Apple is known for playing hardball when it comes to negotiations, but it seems the Indonesian government is capable of giving as good as it gets. The country banned the sale of the iPhone 16, saying the Cupertino company hadn’t invested enough in the local economy. Apple responded by offering to increase its manufacturing spend from $10M to $100M, but Indonesia now says it expects a billion dollars – and it wants the investment agreed within a week … more…

Read more »

Indonesia expects Apple to commit to $1 billion investment soon
Indonesia is expecting to get a $1 billion investment commitment from Apple within a week, the country's investment minister said… The post appeared first on MacDailyNews.

Read more »

Folding iPhone: Should Apple make a Flip or a Fold? [Poll]
We’ve been hearing reports of a folding iPhone for a great many years now, and the most recent of these suggest that it may finally arrive in late 2026. There are two approaches Apple could take with this product, and so far we haven’t seen a consensus view as to which would be better … more…

Read more »

Anker MagGo 3-in-1 Folding Wireless Charging Station review: Pocket power rocket
Macworld At a glanceExpert's Rating Pros Charges iPhone, Apple Watch, and AirPods Fast-charge Watch 15W Qi2 for iPhone Compact and portable Color choices Cons Our Verdict Highly portable, this is a minimalist wireless multi-charger that will be a boon to all owners of Apple Watch, iPhone, and AirPods, not only on their travels but at home or in the office, too. Price When Reviewed This value will show the geolocated pricing text for product undefined Best Pricing Today Price When Reviewed$89.99 Best Prices Today: Anker MagGo 3-in-1 Folding Wireless Charging Station Retailer Price $89.99 View Deal Anker $89.99 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket We’ve seen some increasingly clever travel-friendly multi-device chargers released recently, and the Anker MagGo 3-in-1 Folding Wireless Charging Station, despite its incredibly long name, is one of the neatest we’ve tested. It’s the first of the pocketable chargers we’ve tested to be able to charge three Apple devices at the same time, yet its shapely, convenient design is comparable to that of rival chargers that can only charge two at once. Design When you put it next to other 3-in-1 Apple chargers, it is remarkably compact: measuring 2.36 x 2.36 x 1.4 inches (6 x 6 x 3.6cm) when folded up into its very pocketable form. You can unfold just the top Apple Watch charging pad or extend to expose all three charging pads. The pads are connected with a silicone strap, within which are unseen wires taking power from the USB-C port that is situated in the middle pad’s body. At the other end to the Watch charger is the Qi2 charging pad on which you magnetically clamp your iPhone for fast 15W wireless charging. In the middle there’s 5W charger for the AirPods case. You can also use this Qi pad to charge another iPhone (from iPhone 8) although non-magnetically and much slower—but it’s fine if you have time on your side. Dominik Tomaszewski / Foundry In some ways, and I mean this as no insult, the Anker 3-in-1 resembles a snail when folded up. That sounds worse when you consider that its closest rival is called the ButterFly. That cuter-named fold-up charger from Twelve South is more glamorous but can charge only two devices at one time, unlike the Anker that can charge three simultaneously. The MagSafe ButterFly and its cheaper Qi2 cousin the ButterFly SE measure 2.4 x 2.4 x 0.9 inches (6.1 x 6.1 x 2.3cm) so are about the same size except not as high because there’s no Watch charger on top. The SE is also a third lighter than the Anker MagGo (105g vs Anker’s 150g). Read our Twelve South ButterFly review and ButterFly SE review for more information on those products. Despite being a little deeper, like the ButterFly the Anker MagGo will easily slip into a pocket but remember that it does require a cable (included) to connect to a separate USB-C wall charger (also included). The iPhone mostly lays flat, but it can be placed into a more useful StandBy mode with some folding magic. The Watch, however, always charges flat so no Nightstand mode is possible. The Twelve South ButterFly does win here as it can be folded 180 degrees to place the Watch in Nightstand mode. Anker The Anker MagGo 3-in-1 Folding Wireless Charging Station comes in four colors: black and white, of course, and also light pastel sort-of-green and pink. It comes with a 5ft (1.5m) USB-C charging cable and a 40W wall charger. The cable and wall charger for the green and pink versions is white rather than being color-coordinated. The inclusion of the charger with the $89 Anker MagGo matches what you get with the original $129 ButterFly (although it’s 40W compared to the ButterFly’s 30W charger). The ButterFly SE ships with no wall charger, so you’ll need to supply your own. Another great benefit for travellers is the inclusion of international plug adapters to slip on to the wall charger’s foldable U.S. plug prongs. Dominik Tomaszewski / Foundry Performance The snail comparison is unfair given the fast speeds at which the MagGo can wirelessly output its power. Like the ButterFly SE, the Anker MagGo uses Qi2 (pronounced “chee too”) tech that matches Apple’s MagSafe at 15W. It’s based on MagSafe so there’s no real difference except for price. (For more on this, see our explanation Is Qi2 is as good as MagSafe?) Again like the ButterFly models, the MagGo is certified by Apple for Watch fast charging. For more options check out our reviews of the best MagSafe Chargers for iPhone and best Apple Watch chargers. Price The Qi2 ButterFly SE costs $89.99 / £89.99 / €74,99, which is $40 cheaper than the MagSafe ButterFly and $10 less than the ButterFly SE. That it comes with a cable, 40W charger and interchangeable international plug heads makes it even greater value for money. Verdict The Anker MagGo 3-in-1 Folding Wireless Charging Station might not be as beautiful a design as the Twelve South ButterFly, or even as well named, but it’s an elegant and uncluttered compact solution that can charge more devices at the same time and just happens to be a little cheaper, too. Highly portable, this is a minimalist wireless charging accessory that will be a boon to all owners of Apple Watch, iPhone, and AirPods, not only on their travels but at home or in the office, too.

Read more »

Aptera To Showcase Solar EV at CES 2025
Aptera Motors has announced that a "production intent" version of its eponymously named solar-powered vehicle will be displayed at the mammoth consumer electronics show, which will be held January 7-10 in Las Vegas. The post appeared first on TechNewsWorld.

Read more »

Data brokers may be banned from selling your personal data without good reason
Data brokers may be banned from selling your personal data without legitimate justification, under a new proposal by the Consumer Financial Protection Bureau (CFPB). Back in the summer it was revealed that one of these brokers was hacked, resulting in the compromise of personal data for every person in the US, UK, and Canada. The proposed change would limit the sharing of sensitive data like your name and social security number by subjecting data brokers to the same rules as credit checking agencies … more…

Read more »

iPad, iPad Air, iPad Pro buyer's guide: which iPad to buy for your budget this holiday season
Apple has updated most of its iPad lineup in 2024, with the iPad mini the latest. Here's how to choose the best tablet for your budget this holiday season.Apple's iPad rangeApple offers its iPads at a wide array of price points. The price range covers everyone from value-oriented consumers to those with heftier budgets and greater demands.The iPad is no exception to this. There's the entry-level iPad if you want a cheap but usable tablet, to the iPad Pro at the highest end of the scale. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Developers told $1B class action lawsuit against Apple can proceed, as second objection rejected
British developers have been told that their billion dollar class action lawsuit against Apple can proceed, after the iPhone maker failed in its second bid to have the case dismissed. Developers behind the antitrust case are seeking repayment of up to £785M ($995M) in commission on apps, in the latest move against Apple’s monopoly on the sale of iPhone apps … more…

Read more »

Indonesia says it expects $1 billion from Apple to lift iPhone 16 ban
A minister in Indonesia says the local government expects Apple to shortly offer $1 billion in investment, in order to end the country's ban on iPhone 16 sales.Members of the Apple Developer Academies in IndonesiaApple used to qualify for Indonesia's import regulations because it invested in development opportunities there, but then fell short of its promised commitment. Since the end of October 2024, the Indonesian government has banned all iPhone 16 sales.According to Reuters, Investment Minister Rosan Roeslani first told Indonesian lawmakers that the country will raise its requirements. The minister then said publicly that he expects to see a $1 billion investment commitment from Apple within a week. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

If you’re using WhatsApp on an older iPhone, you’ll need to upgrade soon
Macworld WhatsApp users who haven’t upgraded their iPhones in a while might not be able to run their favorite messaging app next year. WhatsApp has announced that it will be dropping support for all iPhones running anything older than iOS 15.1, removing several models currently compatible with the service. According to WABetaInfo, WhatsApp will drop support for the iPhone 5s, iPhone 6, and iPhone 6 Plus, all of which haven’t been officially supported with iOS updates since iOS 12. The current version of WhatsApp supports iPhones running iOS 12 or later, which includes these models. Even though WhatsApp is dropping three iOS versions with the jump to iOS 15.1, it only affects those three phone models since iOS 13, 14, and 15 supported the same phones. When WhatsApp drops support for iOS 15, however, it will lose five more phones: the iPhone 6s and 6s Plus, iPhone 7 and 7 Plus, and the original iPhone SE. If it jumps to iOS 17, the iPhone 8 and 8 Plus, and iPhone X will be gone too. If you’re using one of the doomed handsets and want to keep enjoying WhatsApp, check out our iPhone buying guide to find the right upgrade model, and then grab a bargain with our roundup of the best iPhone deals.

Read more »

TV or not, Apple is coming to save the smart home
Macworld As a young mythical beast, the Macalope was raised on a steady diet of Apple rumors. The neighbors were, frankly, concerned. They have very little nutritional value. (“They” being the rumors, not the neighbors.) There was talk of calling child protective services. But it all worked out. Throughout the late 1990s, one of the consistent rumors had Apple working on a set-top box. This was, of course, back when you could put a box on top of your TV set and it wouldn’t immediately fall off because the average TV set was like three feet deep. Some were as much as nine feet deep, burrowing through the wall of the house and out into the driveway. You try to tell Gen Z about it now and they won’t believe you. Most of these rumors came from a site called “Apple Recon” which was pretty hot on the idea of an Apple set-top box. Rumors often reflect more about the focus of the person spreading the rumor than they do about Apple’s plans. Was Apple working on a TV device in the wake of the failure of the Pippin (which was at one point pitched as a potential set-top device) and the return of Steve Jobs? Probably. But Apple works on lots of things that never see the light of day and it’s hard to imagine what form an Apple set-top box could have taken, given that most people were still years away from having high-speed internet and streaming wouldn’t be a thing for a decade. Possibly Apple could have shipped something like the TiVo, which wasn’t released until 1999, or a more comprehensive version of the EyeTV, but the relatively niche appeal of these devices probably explains why the company never shipped anything until the Apple TV. Not that the Apple TV doesn’t have a certain je niche sais quoi. So, yeah, Apple TV rumors are actually older than Apple phone rumors. And now they’re back again thanks to Mark Gurman who last month suggested Apple was “evaluating” making an Apple-branded TV set. Just as rumors of set-top boxes in the late 1990s didn’t mean Apple was making one, this clearly doesn’t mean Apple’s going to make a TV, either. In an age where TV sets are sold on the cheap with manufacturers making it up by cramming them full of ads and scanning software to see what you’re watching, though, an Apple TV set isn’t completely without appeal. And it wouldn’t be the first time the company came into a low-margin market and managed to make big bucks with a premium offering. Apple may make a TV set, but it doesn’t need to. What is encouraging, however, is seeing the company make the home more of its focus. It should. After all, it built that home set for all those keynotes. It’s gotta make back that investment somehow. As The Verge’s Jennifer Pattison Tuohy correctly notes, “The smart home has an interface problem”. After years of interoperability standards things mostly work except for when they don’t, which is too often. And when things don’t work, it’s a baffling confluence of culprits from your security camera to your router to your ISP. IDG “Who did this?! Did you do this?” All three of them just standing there, shuffling their feet and looking guilty. Apple needs to do for the smart home what it did for Bluetooth headphones with AirPods: take the pain out of the experience. OK, sure, sometimes AirPods don’t work exactly right, either, but when they do it’s that saying about advanced science looking like magic. And Apple can take one of the problem children out of the equation. The company’s HomeKit framework and Apple Home smart home platform leverage local control, meaning that, unlike competitors Amazon and Google, it doesn’t rely on a cloud connection. Whether Apple makes a TV or not isn’t that important. What is important is the company getting serious about being in the smart home business beyond the little toes it’s dipped into the market so far. Maybe once it realized it wasn’t going to get into your garage, it decided to go for the house. With rumors of a home hub and camera let’s hope this isn’t set-top box-style smoke but real fire.

Read more »

Best NAS drives for Mac
Macworld There are three types of storage you can use with your Mac. External storage devices like SSDs and hard drives can plug into your Mac and be used to back up your data or to extend your storage. There are also those little USB memory sticks you can use to store or transfer files, these days they can hold up to 2TB of files in your pocket. These days cloud storage is another popular solution, as it offers a simple way to access your data from anywhere, collaborate with teams of people, and it extends the amount of storage available on your Mac. With the advent of home working meaning fewer people are confined to the office, lots are turning to cloud storage for collaboration, but there are downsides to this, not least the fact that typical cloud storage solutions are not really suitable for backing up (iCloud doesn’t work with Time Machine for example). There are various cloud backup services that we look at here: Best Cloud backup for Mac. The third kind of storage is a NAS (network-attached storage). A NAS drive is a good solution if you are looking for a shared storage solution for a team of people in an office, when you want to share data and projects between multiple workstations, or if you are looking for a way to keep your Mac backed up without needing to leave it plugged into a drive. Using a NAS to store your files means you aren’t reliant on a good internet connection, you don’t need to upload your data to an external service, and you don’t (generally) have to pay a monthly subscription.  So, in this article, we round up the best NAS drives for a Mac owner. If you’d like more advice about what to look for in a good NAS drive, such as the amount of storage you’ll need and the features to look for, jump down to our buying advice. Updated December 2024 to add TerraMaster F8 SSD Plus. Best NAS and PCS drives for Mac 2024 Western Digital My Cloud Home – Best overall Price When Reviewed: $149.99 (2TB), $169.99 (4TB), $249.99 (8TB) Best Prices Today: $134.99 at WesternDigital com$149.99 at Western Digital$299 at Amazon You’re spoilt for choice when it comes to Western Digital’s My Cloud range, with several models available for home users and small businesses, as well as a number of Expert and Pro models for larger organizations. The My Cloud Home is a little more expensive than other models in the My Cloud range, but is fast and provides additional features such as support for the Plex Media Server software (although that’s probably not a must-have for Mac users). It comes with a range of storage allocations; 8TB should be more than enough for most homes, as well as small offices and self-employed users. The slimline white-and-silver unit is neatly designed and only measures 2in wide, so it’ll sit easily on your desk or on a shelf close to your router without taking up too much space. There’s also a larger dual-drive model, called the My Cloud Home Duo, which houses two matching drives and offers considerably more storage. That provides RAID 1 mirroring for extra data protection, but if you want more sophisticated RAID features, as well as the ability to install and remove drives yourself, you’ll need to step up to the My Cloud Expert or My Cloud Pro models. Western Digital always does a good job with Mac support, and the My Cloud Home is no exception, with apps that handle a range of tasks quickly and easily. The iOS app can perform automatic backups of your photos and videos, while the Mac app lets you use Time Machine for your backups (and there are Mac and Windows versions of the apps available too). There are some nice touches too, such as the ability to right-click a folder on your Mac and automatically sync the contents of that folder on to the My Cloud Home. That will be handy for people who want an extra backup of their current work files or projects in addition to the basic Time Machine backup. You can also right-click any file that is stored on the My Cloud Home and send a download link in order to quickly share that file with friends or colleagues. And, if you also use an online backup service, such as Dropbox, then you can sync the contents of your Dropbox account on to the My Cloud Home too. You can even back up photos and albums from Facebook on to the drive for safekeeping if you want to. There are a couple of rough edges. You can’t simply double-click the drive’s icon on the Mac desktop in order to open the drive and then drag-and-drop to copy folders or files on to the drive. For some reason you have to open the app’s pulldown menu and view the contents of the drive through the app instead. You can’t create individual user accounts on the Mac either, so you’re forced to use the app on an iPhone or iPad if you want to invite someone else to create their own personal folders on the My Cloud Home drive. Most Mac users will have an iPhone or iPad, of course, but we’d like to see the Mac app updated to allow you full freedom to control the My Cloud Home with your Mac as well. TerraMaster F8 SSD Plus – Uber-fast network/workgroup storage Pros Holds up to 8 NVMe SSDs Up to 1GBps transfers over 10Gbe Cons Non-fatal bugs in the interface Price When Reviewed: $800 Best Prices Today: Not Available at Amazon The TerraMaster F8 SSD Plus is an 8-bay/slot NVMe NAS box with an 8-core Intel Core I3 CPU, 32-execution unit GPU (part of the CPU), 16GB of DRAM, and 10Gbe ethernet connectivity. Ports include 10Gbe ethernet, three 10Gbps USB ports (two Type-A, one Type-C), and an HDMI port for diagnostics rather than direct video output. It’s 7-inch tall, by 2.25-inch wide, and 5.5-inch. It’s not particularly hefty, weighing only 1 pound, 10 ounces with eight SSDs installed. The eight included heat sinks add another 5 ounces if you need them (that depends on how much traffic the fan-cooled box is subjected to). It opens via a single thumb screw and rests on rubber feet. It is stable despite its vertical orientation, but you might want to lay it on its side. Of course, SSDs aren’t as delicate as hard drives that normally inhabit NAS boxes, so a tumble likely wouldn’t be catastrophic. NAS/server features include security, file sharing, media streaming, BitTorrent downloads, video surveillance, Docker and VM hosting. These all require installing applications from TerraMaster. There are numerous backup solutions available, and the File Manager lets you add remote folders from Dropbox, OneDrive, Google Drive, and Amazon S3/S3-compatibles. The operating system, TOS 6.0, isn’t quite as refined as those offered by QNAP and Synology. I couldn’t run file manager or anything else while installing an app, for example. Also, the program didn’t register a deleted storage pool, an added online destination, or a new volume immediately. I had to reboot each time to get changes to register. Despite this, I found TOS 6 attractive, decently intuitive, easy to use, and stable. But it could use some fine-tuning (and multi-tasking), even if none of the issues are particularly deadly. Read our full Terramaster F8 SSD Plus NVMe 10Gbe NAS review Synology DiskStation DS723 – Best for small offices/working from home Price When Reviewed: Fron $450 (unpopulated) Best Prices Today: $435 at Walmart$449.99 at B&H$450 at Synology Many people now rely on cloud storage, such as Apple’s iCloud Drive or Dropbox, for personal use or working from home, but Synology is one of the few companies that still makes conventional NAS drives that provide physical storage for home networks and small offices. The latest addition to its range is the Diskstation DS723+, which provides an affordable and easy-to-use storage system that can be further expanded in the future if required. The compact drive enclosure measures just 166mm high, 106mm wide and 223mm deep, so it’s easy to set up on your desk or any convenient shelf. There are two bays for hard drives on the front, along with two small slots for SSD drives that are located on the underside of the unit. Advanced users who want to configure their own system can buy the DS723+ as an empty enclosure (unpopulated) for around £575/$450 and then provide their own choice of HD or SSD drives. Or, if you’re looking for a simple, all-in-one storage system then some of Synology’s specialist dealers also sell the DS723+ with drive units already installed (populated). The price for ‘populated’ drives will obviously  depend on the amount of storage you require, but the 8TB model that Synology provided for our review should cost around $800/£850. Prices do vary widely online, though, so it’s definitely worth shopping around to find the best price (the starting price quoted above will rise depending on the storage options.) There’s a Gigabit Ethernet port on the back of the for connecting to your home or office network, but the DS723+ also has two expansion ports that allow you to upgrade to 10 Gigabit Ethernet if required, and even to connect some additional drive bays so that you can add even more storage in the future. Synology’s manuals may look a bit daunting for people who haven’t used a NAS drive before – there’s a 50-page PDF just for the initial set-up process, and another 80-page manual covering all the features provided by Synology’s DSM software (Diskstation Manager). However, you don’t have to memorise all that info straight away, as there are quick and easy apps for iOS, Android, Mac and PC that can help you with the set-up process, and we had no trouble at all connecting the DS723+ to our office network and then using the apps to connect our Mac and iPhone to the drive. Synology Beestation – Good for beginners Price When Reviewed: $219 Best Prices Today: $219.99 at Adorama$219.99 at Synology The widespread use of cloud storage services such as iCloud and Google Drive means that NAS drives aren’t as popular as they used to be, and Synology is one of the few companies still making NAS drives that cater to the SOHO market (small office/home office) with its DiskStation range. In fact, Synology is expanding its product range with the introduction of the BeeStation. The BeeStation looks like a fairly conventional desktop hard drive, and it provides 4TB of storage so you’ve got plenty of room for your work or personal files. Like most NAS drives it uses an Ethernet port to connect to your home or office network, but once you’ve connected it to your Wi-Fi router, you can simply scan a QR code with your iPhone or iPad to connect to the drive remotely and set it up using a web browser (although you’ll need to provide an email address to set up your Synology account first). You are then prompted to download two mobile apps called BeePhotos and BeeFiles, which, as the names suggest, allow you to back-up photos and other files onto the BeeStation. Once the drive is set up, you can log in via a web browser on your Mac, and then download the BeeStation desktop app for Macs (running macOS 12 or later) and Windows PCs. These apps provide plenty of useful features, including the ability to automatically upload photos and videos from your mobile devices onto the BeeStation. You can share files with friends, family or colleagues, and sync specific folders on your Mac with the BeeStation. However, these apps can be a bit tricky to use – they tend to throw a lot of settings and information onto the screen, and the Help files on Synology’s website use a lot of techno-jargon that might be confusing for less experienced users. Mac users, for instance, will find that instructions for using the BeeStation with Time Machine are hidden within a rather convoluted Help file about ‘local access’ settings. So it may take a little work to get the BeeStation properly set up, but its ability to provide both online storage for mobile devices and a NAS drive for your home or office network makes it a very versatile back-up device for home and small business users. Western Digital My Cloud EX2 Ultra – The quick and easy option Price When Reviewed: From $150.99 (unpopulated) to $1,299.99 (28TB) Best Prices Today: $150.99 at Western Digital$539 at Amazon Western Digital’s My Cloud Home drive provides a quick and easy option for home users who aren’t familiar with NAS drives and networking technology. In fact, the company doesn’t even call it a ‘NAS drive’, opting for the more user-friendly ‘personal cloud’ label instead. (If you feel a bit more comfortable with jargon such as NAS and RAID, you might want to step up to WD’s ‘expert’ range with the My Cloud EX2 Ultra instead.) The EX2 Ultra is a no-compromises NAS drive with additional features and customisation options, while remaining affordable enough for home users or self-employed people, such as photographers or designers, who need a really reliable backup drive for important work files. It’s a ‘two-bay’ drive that holds two separate hard drives, and allows you to remove the top panel so you can remove the drives for repairs or adding more storage in the future. You can buy the EX2 Ultra with a pair of drives pre-installed, with a wide range of prices depending on the storage you select. WD includes its high-performance Red Drives and 1GB of memory to help the EX2 Ultra multi-task when different people are using the drive on the network at the same time. There’s a Gigabit Ethernet port for connecting to your network, and the EX2 Ultra also has two USB ports that allow you to connect an external USB drive for additional storage. Alternatively, you have the option of buying the EX2 Ultra ‘unpopulated’ – with no drives at all – and then providing your own drives to suit your particular needs. This is the best option if you think you might want to add extra storage in the future, and installation is really easy: the top panel simply pops open at the press of a button to reveal the internal drive bays. Using two separate hard drives also means the EX2 Ultra can work as a ‘RAID’ drive, with either RAID 0 – which improves performance by splitting files across both drives (called ‘striping’) – or RAID 1 ‘mirroring’, which makes separate copies of your files on each drive for extra reliability. If you want even more safeguards for your important files, there’s also an option to back up data from the EX2 Ultra on to an external hard drive connected to one of its USB ports. Despite all these extra features, setting up the EX2 Ultra is still very straightforward, as the drive supports Time Machine for automatically backing up files from your Mac. There’s also a My Cloud app for iOS/iPadOS and Android that allows you to back up and share files using non-Apple devices as well. The app provides remote access to the drive over the internet, and there’s a web browser interface also available for Macs and PCs, which allows more advanced users to configure RAID settings and features such as the FTP server – and even to use it as an ‘iTunes Server’ for streaming music across your network. It’s worth checking out the changes made by the My Cloud OS 5 software update, however; this adds several new features, but reduces compatibility with some web services. Buffalo LinkStation 220D – Versatile & affordable Price When Reviewed: From $119.99 Best Prices Today: $119.99 at Buffalo Technology$264.99 at Dell Home$277.99 at Amazon Buffalo’s LinkStation 220D is a versatile and affordable NAS drive that’s suitable for both home and business users. But, as we’ve seen with Buffalo in the past, its products sometimes lack the straightforward ease of use that Mac and iOS users take for granted. The LinkStation 220D is a dual-bay NAS drive that houses two separate hard drives. You can buy it ‘unpopulated’ – with no drives at all – and then provide the drives that you want to use for yourself. Alternatively, you can buy it with 2TB, 4TB or 8TB. There’s also a more expensive model called the 220DR that’s designed for use with Western Digital’s high-speed Red drives, but the standard 220D model that we review here should be perfectly adequate for most homes and small businesses. The dual-bay setup also means you can use the LinkStation as a RAID drive, supporting either RAID 0 for maximum performance, or RAID 1 for maximum data protection (storing separate copies of your data on both drives). Future upgrades are simple as well, as you can quickly remove the front panel of the LinkStation and pull out the drives by their handles, with no screws or tools required. There’s also a USB port on the back of the LinkStation that can be used to make additional backups to an external USB drive for extra safety. Getting started is quite straightforward, as the 4TB LinkStation that we tested automatically showed up on our office network once we connected it to our router with an Ethernet cable. That allowed us to simply drag-and-drop files onto the LinkStation for quick backups, but things get a bit more complicated when you start to move beyond the basics. The LinkStation does work with Time Machine so that you can back up your Macs over the network, but setting up Time Machine and a ‘shared folder’ for your backups proved rather complicated. Buffalo’s NAS Navigator app for Macs allows you to view the LinkStation on your network and displays basic information, such as its IP address. However, using any other features requires you to open up a web browser in order to view the LinkStation’s web interface. This does include a variety of useful features, including Time Machine support, remote ‘web access’ for when you’re away from home or the office, BitTorrent downloads, and the ability to use the LinkStation as an iTunes server for streaming your music across the network. But this browser interface is very complicated and won’t be easy for non-technical users to understand – and Buffalo’s 125-page jargon-heavy PDF manual doesn’t really make life any easier. And neither do Buffalo’s mobile apps. Buffalo provides two separate apps for iOS devices: Smartphone Navigator for basic setup, and WebAccess to provide access to your files via Wi-Fi when you’re out and about. These apps are getting on a bit, and some users have complained that they’re unreliable. In fact, the apps seemed to run on our office iPhone and iPad without any problems, but they’re still quite complicated and unhelpful for people who aren’t familiar with NAS drives and networking technology. So while the LinkStation is a good option for more experienced home or business users who already know a bit about NAS drives, it’s probably not the best option for first-time users who are still learning the ropes. NAS drive features to look for Here are some essential features you should look out for when selecting a NAS drive for your Mac. Time Machine support One of the great unsung features of macOS is Time Machine, the software that sits inside your System Preferences panel and quietly performs an automatic backup of the entire contents of your Mac’s hard disk every hour, on the hour. If you accidentally delete a file you can go back and check out all the previous versions of that file that you backed up in the past. And if your Mac starts behaving oddly and you think you might have been infected by malware, you can just reboot your Mac and use Time Machine to restore the entire macOS to an earlier, untarnished state. But, of course, in order to use Time Machine you do need to have an external hard drive connected to your Mac that can store all your old backups. Hard drives are pretty cheap these days, but as we all start to own more and more desktop computers, laptops and mobile devices, it starts to become both expensive and rather impractical to buy a separate backup drive for every single device in our home or office. The answer to this problem is a NAS drive. Most NAS drives are ‘Mac-compatible’ – but not all of them are what we might call ‘Mac-friendly’. For instance, not all NAS drives will allow you to use Time Machine to make backups over the network, so support for Time Machine is a key feature that you should check on when thinking about buying a NAS drive for use with one or more Macs. User accounts and sharing Another important feature is the ability to create individual user accounts, so that each person in your home or office can have their own private area on the NAS drive for storing their personal files. And, at the same time, it’s also handy to create ‘shares’, which are like public folders that can be shared by everyone – perhaps for storing music or photos for the whole family. Most NAS drives will allow you to do this, but sometimes you need a bit of network know-how to figure out how each drive handles this process (and some drives, such as Apple’s now-discontinued Time Capsule, just ignore this side of things altogether and focus on the basic task of handling Time Machine backups). Mobile device support And, of course, you’ll also want to check that your new NAS drive provides an app for your iPhone or iPad. Most of us now tend to use iCloud for backing up photos, videos and other files from our mobile devices, but it can give you extra peace of mind to know that you’ve got a spare backup on your NAS drive in case anything goes wrong. A good NAS drive will also let you share your photos and videos with other people by streaming them to mobile devices over your network, or possibly even provide a remote access option that allows you to retrieve files over the internet when you’re away from home (a feature that manufacturers often refer to as a ‘personal cloud’). File streaming Many people also use their NAS drive as a kind of central media server for their home, perhaps streaming music and videos to a games console that is connected to their TV in the front room. Mac users should check to see if a NAS drive can stream files to an Apple TV, or act as an ‘iTunes server’, storing your iTunes/Music library on the NAS drive so that it can stream music to every Mac or iOS device on the network. How much storage do I need? That’s something you’ll need to decide for yourself, but it’s worth mentioning that some NAS drives are more flexible on this point than others. Some of the less expensive NAS drives are sold with a built-in hard drive – generally at least 2TB – but the hard drive is fixed and can’t be replaced once it’s full (although the NAS drive may have a USB port that lets you connect a conventional USB hard drive in order to add some extra storage). This is the simplest option, favored by most home users and small businesses, as it means you can just unpack the NAS drive and connect it to your router to get started. The unpopulated option However, many NAS drives are sold ‘unpopulated’ – without any internal hard drives already installed – and simply provide two or more empty drive bays into which you insert your own choice of hard drives. This option is more expensive, but it allows you to customise the NAS by buying your own hard in order to provide as much storage as you need. And, if you run out of storage space, you can just take out the old drives and insert new, larger drives in the future. This type of NAS drive generally also offers a number of ‘RAID’ options – this stands for “redundant array of independent disks” – which use multiple hard drives to provide additional performance and data protection.

Read more »

Apple @ Work Podcast: Fleet launches iOS device management
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. In this episode of Apple @ Work, I talk with Mike McNeil from Fleet about its recent upgrade to iPhone and iPad device management. more…

Read more »

Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) -- such as .shop, .top, .xyz -- that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds. Meanwhile, the nonprofit entity that oversees the domain name industry is moving forward with plans to introduce a slew of new gTLDs.

Read more »

Vulnerability Summary for the Week of November 25, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Portfolio Management System MCA  A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-26 7.3 CVE-2024-11744 1000 Projects--Portfolio Management System MCA  A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgot_password_process.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-27 7.3 CVE-2024-11819 1000projects -- beauty_parlour_management_system  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11646 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11647 1000projects -- beauty_parlour_management_system  A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11648 1000projects -- beauty_parlour_management_system  A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-25 7.3 CVE-2024-11649 AbsolutePlugins--Absolute Addons For Elementor  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AbsolutePlugins Absolute Addons For Elementor allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through 1.0.14. 2024-11-28 7.5 CVE-2024-52496 Advantech--EKI-6333AC-2G  A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (securityEngineID to local_record.engineid without proper bounds checking. 2024-11-27 3 CVE-2024-36468 Zabbix--Zabbix  When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd- >data in the code below will remain NULL and an attempt to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42328 Zabbix--Zabbix  The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd- >error will be NULL and trying to read from it will result in a crash. 2024-11-27 3.3 CVE-2024-42329 Zabbix--Zabbix  In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap pointer is subsequently utilized by the browser_push_error method in the src/libs/zbxembed/browser_error.c file. A use-after-free bug can occur at this stage if the wd- >browser heap pointer is freed by garbage collection. 2024-11-27 3.3 CVE-2024-42331 Zabbix--Zabbix  The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host. 2024-11-27 3.7 CVE-2024-42332 Zabbix--Zabbix  When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element. 2024-11-26 2.2 CVE-2024-22117 Zabbix--Zabbix  When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords. 2024-11-27 2.7 CVE-2024-36464 Zabbix--Zabbix  The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c 2024-11-27 2.7 CVE-2024-42333 Back to top Severity Not Yet Assigned PrimaryVendor -- Product Description Published CVSS Score Source Info autolab--Autolab  Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the download_all_submissions feature. This can allow for leakage of submissions to unauthorized users, such as downloading submissions from other students in the class, or even instructor test submissions, given they know their user IDs. This issue has been patched in commit `1aa4c769` which is not yet in a release version, but is expected to be included in version 3.0.3. Users are advised to either manually patch or to wait for version 3.0.3. As a workaround administrators can disable the feature. 2024-11-25 not yet calculated CVE-2024-53258 BoidCMS--BoidCMS  BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code. This code could be used to steal the user's session cookie, perform phishing attacks, or deface the website. This issue has been addressed in version 2.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-25 not yet calculated CVE-2024-53255 bunkerity--bunkerweb  bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated "next" parameter for redirects. Ex. visiting: `/loading?next=https://google.com` while authenticated will cause the page will redirect to google.com. This vulnerability could be used in phishing attacks by redirecting users from a legitimate application URL to malicious sites. This issue has been addressed in version 1.5.11. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-27 not yet calculated CVE-2024-53264 Century Systems Co., Ltd.--FutureNet NXR-G110 series  FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server (GUI) or Web authentication is enabled. The factory default configuration makes http-server (GUI) enabled, which means REST-APIs are also enabled. The username and the password for REST-APIs are configured in the factory default configuration. As a result, an attacker may obtain and/or alter the affected product's settings via REST-APIs. 2024-11-29 not yet calculated CVE-2024-50357 Checkmk GmbH--Checkmk  Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions type] may result in an out-of-bounds access. To spot such missed invocations early in the future, checking the validity of link- >type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed. 2024-11-25 not yet calculated CVE-2024-53099 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp: don't access released socket during error recovery") added a mutex_lock() call for the queue- >queue_lock in nvme_tcp_get_address(). However, the mutex_lock() races with mutex_destroy() in nvme_tcp_free_queue(), and causes the WARN below. DEBUG_LOCKS_WARN_ON(lock- >magic != lock) WARNING: CPU: 3 PID: 34077 at kernel/locking/mutex.c:587 __mutex_lock+0xcf0/0x1220 Modules linked in: nvmet_tcp nvmet nvme_tcp nvme_fabrics iw_cm ib_cm ib_core pktcdvd nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc ppdev 9pnet_virtio 9pnet pcspkr netfs parport_pc parport e1000 i2c_piix4 i2c_smbus loop fuse nfnetlink zram bochs drm_vram_helper drm_ttm_helper ttm drm_kms_helper xfs drm sym53c8xx floppy nvme scsi_transport_spi nvme_core nvme_auth serio_raw ata_generic pata_acpi dm_multipath qemu_fw_cfg [last unloaded: ib_uverbs] CPU: 3 UID: 0 PID: 34077 Comm: udisksd Not tainted 6.11.0-rc7 #319 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:__mutex_lock+0xcf0/0x1220 Code: 08 84 d2 0f 85 c8 04 00 00 8b 15 ef b6 c8 01 85 d2 0f 85 78 f4 ff ff 48 c7 c6 20 93 ee af 48 c7 c7 60 91 ee af e8 f0 a7 6d fd 0b e9 5e f4 ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 RSP: 0018:ffff88811305f760 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88812c652058 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88811305f8b0 R08: 0000000000000001 R09: ffffed1075c36341 R10: ffff8883ae1b1a0b R11: 0000000000010498 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812c652058 FS: 00007f9713ae4980(0000) GS:ffff8883ae180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcd78483c7c CR3: 0000000122c38000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ? __warn.cold+0x5b/0x1af ? __mutex_lock+0xcf0/0x1220 ? report_bug+0x1ec/0x390 ? handle_bug+0x3c/0x80 ? exc_invalid_op+0x13/0x40 ? asm_exc_invalid_op+0x16/0x20 ? __mutex_lock+0xcf0/0x1220 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx___mutex_lock+0x10/0x10 ? __lock_acquire+0xd6a/0x59e0 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx_nvme_tcp_get_address+0x10/0x10 [nvme_tcp] nvme_sysfs_show_address+0x81/0xc0 [nvme_core] dev_attr_show+0x42/0x80 ? __asan_memset+0x1f/0x40 sysfs_kf_seq_show+0x1f0/0x370 seq_read_iter+0x2cb/0x1130 ? rw_verify_area+0x3b1/0x590 ? __mutex_lock+0x433/0x1220 vfs_read+0x6a6/0xa20 ? lockdep_hardirqs_on+0x78/0x100 ? __pfx_vfs_read+0x10/0x10 ksys_read+0xf7/0x1d0 ? __pfx_ksys_read+0x10/0x10 ? __x64_sys_openat+0x105/0x1d0 do_syscall_64+0x93/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? __pfx_ksys_read+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? do_syscall_64+0x9f/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9713f55cfa Code: 55 48 89 e5 48 83 ec 20 48 89 55 e8 48 89 75 f0 89 7d f8 e8 e8 74 f8 ff 48 8b 55 e8 48 8b 75 f0 4 ---truncated--- 2024-11-25 not yet calculated CVE-2024-53100 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr- >ia_mode, attr- >ia_uid and attr- >ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0. 2024-11-25 not yet calculated CVE-2024-53101 Linux--Linux  In the Linux kernel, the following vulnerability has been resolved: nvme: make keep-alive synchronous operation The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race between the fabric controller admin queue destroy code path (invoked while shutting down controller) and hw/hctx queue dispatcher called from the nvme keep-alive async request queuing operation. This race could lead to the kernel crash shown below: Call Trace: autoremove_wake_function+0x0/0xbc (unreliable) __blk_mq_sched_dispatch_requests+0x114/0x24c blk_mq_sched_dispatch_requests+0x44/0x84 blk_mq_run_hw_queue+0x140/0x220 nvme_keep_alive_work+0xc8/0x19c [nvme_core] process_one_work+0x200/0x4e0 worker_thread+0x340/0x504 kthread+0x138/0x140 start_kernel_thread+0x14/0x18 While shutting down fabric controller, if nvme keep-alive request sneaks in then it would be flushed off. The nvme_keep_alive_end_io function is then invoked to handle the end of the keep-alive operation which decrements the admin- >q_usage_counter and assuming this is the last/only request in the admin queue then the admin- >q_usage_counter becomes zero. If that happens then blk-mq destroy queue operation (blk_mq_destroy_ queue()) which could be potentially running simultaneously on another cpu (as this is the controller shutdown code path) would forward progress and deletes the admin queue. So, now from this point onward we are not supposed to access the admin queue resources. However the issue here's that the nvme keep-alive thread running hw/hctx queue dispatch operation hasn't yet finished its work and so it could still potentially access the admin queue resource while the admin queue had been already deleted and that causes the above crash. This fix helps avoid the observed crash by implementing keep-alive as a synchronous operation so that we decrement admin- >q_usage_counter only after keep-alive command finished its execution and returns the command status back up to its caller (blk_execute_rq()). This would ensure that fabric shutdown code path doesn't destroy the fabric admin queue until keep-alive request finished execution and also keep-alive thread is not running hw/hctx queue dispatch operation. 2024-11-25 not yet calculated CVE-2024-53102 Mozilla--Firefox  The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed. Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5. 2024-11-26 not yet calculated CVE-2024-11696 Mozilla--Firefox  On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133. 2024-11-26 not yet calculated CVE-2024-11703 msg Suisse AG--EasyTax  A XML External Entity (XXE) vulnerability has been identified in Easy Tax Client Software 2023 1.2 and earlier across multiple platforms, including Windows, Linux, and macOS. 2024-11-29 not yet calculated CVE-2024-9044 n/a--n/a  FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. 2024-11-29 not yet calculated CVE-2024-35366 n/a--n/a  FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer 2024-11-29 not yet calculated CVE-2024-35367 n/a--n/a  FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. 2024-11-29 not yet calculated CVE-2024-35368 n/a--n/a  Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions. 2024-11-29 not yet calculated CVE-2024-35371 n/a--n/a  LinkStack 2.7.9 through 4.7.7 allows resourcesviewscomponentsfavicon.blade.php link SSRF. 2024-11-29 not yet calculated CVE-2024-35451 n/a--n/a  A deserialization vulnerability exists in the Stub class of the VarDumper module in Symfony v7.0.3. The vulnerability stems from deficiencies in the original implementation when handling properties with null or uninitialized values. An attacker could construct specific serialized data and use this vulnerability to execute unauthorized code. 2024-11-29 not yet calculated CVE-2024-36610 n/a--n/a  In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username or password field of a login request is empty. This flaw could lead to various security risks, including improper authentication logic handling or denial of service. 2024-11-29 not yet calculated CVE-2024-36611 n/a--n/a  Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. 2024-11-29 not yet calculated CVE-2024-36612 n/a--n/a  FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. 2024-11-29 not yet calculated CVE-2024-36615 n/a--n/a  An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. 2024-11-29 not yet calculated CVE-2024-36616 n/a--n/a  FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. 2024-11-29 not yet calculated CVE-2024-36617 n/a--n/a  FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. 2024-11-29 not yet calculated CVE-2024-36618 n/a--n/a  moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. 2024-11-29 not yet calculated CVE-2024-36620 n/a--n/a  moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. 2024-11-29 not yet calculated CVE-2024-36621 n/a--n/a  In RaspAP raspap-webgui 3.0.9 and earlier, a command injection vulnerability exists in the clearlog.php script. The vulnerability is due to improper sanitization of user input passed via the logfile parameter. 2024-11-29 not yet calculated CVE-2024-36622 n/a--n/a  moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes. 2024-11-29 not yet calculated CVE-2024-36623 n/a--n/a  nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. 2024-11-29 not yet calculated CVE-2024-36671 n/a--n/a  MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking. 2024-11-29 not yet calculated CVE-2024-45495 n/a--n/a  WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. 2024-12-01 not yet calculated CVE-2024-45520 n/a--n/a  OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files. 2024-11-27 not yet calculated CVE-2024-46054 n/a--n/a  Buffer Overflow vulnerability in SunBK201 umicat through v.0.3.2 and fixed in v.0.3.3 allows an attacker to execute arbitrary code via the power(uct_int_t x, uct_int_t n) in src/uct_upstream.c. 2024-11-29 not yet calculated CVE-2024-48406 n/a--n/a  Incorrect access control in Adapt Learning Adapt Authoring Tool

Read more »

Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

Read more »

Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass, MailChimp, Okta, T-Mobile and Twilio.

Read more »

Fintech Giant Finastra Investigating Data Breach
The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. Finastra, which provides software and services to 45 of the world's top 50 banks, notified customers of a potential breach after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company. 

Read more »

Vulnerability Summary for the Week of November 11, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 1000 Projects--Beauty Parlour Management System  A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 7.3 CVE-2024-11100 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11257 1000 Projects--Beauty Parlour Management System  A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11258 1000 Projects--Portfolio Management System MCA  A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11256 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47441 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47442 adobe -- after_effects  After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47443 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-45114 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47450 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47451 adobe -- illustrator  Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47452 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49507 adobe -- indesign  InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49508 adobe -- indesign  InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49509 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47426 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47427 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47428 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47429 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47430 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47431 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47432 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47433 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-47434 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49515 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49516 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49517 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49518 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49519 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49520 adobe -- substance_3d_painter  Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49525 Adobe--Adobe Commerce  Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction. 2024-11-12 7.7 CVE-2024-49521 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49526 Adobe--Animate  Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49528 Adobe--Photoshop Desktop  Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2024-11-12 7.8 CVE-2024-49514 adonesevangelista -- agri-trading_online_shopping_system  A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout. 2024-11-14 7.5 CVE-2024-50968 algolplus--Advanced Order Export For WooCommerce  The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2024-11-13 8.1 CVE-2024-10828 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21974 amd -- ryzen_ai_software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 7.8 CVE-2024-21975 AMD--AMD Cloud Manageability Service Software  Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21939 AMD--AMD Management Console  Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21957 AMD--AMD Management Plug-In for SCCM  Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21938 AMD--AMD Provisioning Console (APC) Software  Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21958 AMD--AMD Ryzen AI Software  Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. 2024-11-12 8.8 CVE-2024-21976 AMD--AMD Ryzen Master Monitoring SDK  Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21945 AMD--AMD Ryzen Master Utility for Overclocking Control  Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21946 AMD--AMD Software: PRO Edition  Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 2024-11-12 7.3 CVE-2024-21937 AMI--AptioV  APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode. 2024-11-12 7.2 CVE-2024-42442 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 9 CVE-2024-51490 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51484 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51485 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL?-?Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.4 CVE-2024-51486 ampache -- ampache  Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks, potentially enabling them to change website features that should only be managed by administrators through malicious requests. This issue has been addressed in version 7.0.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2024-11-11 8.1 CVE-2024-51487 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter. 2024-11-13 7.2 CVE-2024-50971 angeljudesuarez -- construction_management_system  A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. 2024-11-13 7.2 CVE-2024-50972 angeljudesuarez -- tailoring_management_system  A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of the file /incadd.php. The manipulation of the argument inccat/desc/date/amount leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "inccat" to be affected. But it must be assumed "desc", "date", and "amount" are affected as well. 2024-11-11 9.8 CVE-2024-11074 anisha -- job_recruitment  A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument e_hash leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11076 anisha -- job_recruitment  A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-11 9.8 CVE-2024-11077 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 9.8 CVE-2024-11099 anisha -- job_recruitment  A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-12 8.8 CVE-2024-11127 Anthony Carbon--WDES Responsive Mobile Menu  Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18. 2024-11-16 9.8 CVE-2024-52414 Apache Software Foundation--Apache Airflow  Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability. If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets. 2024-11-15 7.5 CVE-2024-45784 Apache Software Foundation--Apache CloudStack  Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that can register templates, can use them to deploy malicious instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.5 or 4.19.1.3, or later, which addresses this issue. Additionally, all user-registered KVM-compatible templates can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run the following command on their file-based primary storage(s) and inspect the output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. However, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; doneFor checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-11-12 8.5 CVE-2024-50386 Apache Software Foundation--Apache Traffic Server  Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue. 2024-11-14 9.1 CVE-2024-50306 Apache Software Foundation--Apache Traffic Server  Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-38479 Apache Software Foundation--Apache Traffic Server  Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. 2024-11-14 7.5 CVE-2024-50305 Arttia Creative--Datasets Manager by Arttia Creative  Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative.This issue affects Datasets Manager by Arttia Creative: from n/a through 1.5. 2024-11-14 10 CVE-2024-52375 Autodesk--Installer  A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management. 2024-11-15 7.2 CVE-2024-9500 Avigilon--VideoIQ iCVR HD camera  Avigilon - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-45253 axelkeller--GPX Viewer  The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-13 8.8 CVE-2024-10629 ays-pro--Chartify WordPress Chart Plugin  The Chartify - WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included. 2024-11-14 9.8 CVE-2024-10571 Baxter--Life2000 Ventilation System  The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 10 CVE-2024-48966 Baxter--Life2000 Ventilation System  The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance. 2024-11-14 10 CVE-2024-48967 Baxter--Life2000 Ventilation System  The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48970 Baxter--Life2000 Ventilation System  The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges. 2024-11-14 9.3 CVE-2024-48971 Baxter--Life2000 Ventilation System  The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-48973 Baxter--Life2000 Ventilation System  The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-48974 Baxter--Life2000 Ventilation System  There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure. 2024-11-14 9.3 CVE-2024-9832 Baxter--Life2000 Ventilation System  Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. 2024-11-14 9.3 CVE-2024-9834 BdThemes--Instant Image Generator  Unrestricted Upload of File with Dangerous Type vulnerability in BdThemes Instant Image Generator allows Upload a Web Shell to a Web Server.This issue affects Instant Image Generator: from n/a through 1.5.4. 2024-11-14 10 CVE-2024-52377 Bigfive--CF7 Reply Manager  Unrestricted Upload of File with Dangerous Type vulnerability in Bigfive CF7 Reply Manager.This issue affects CF7 Reply Manager: from n/a through 1.2.3. 2024-11-16 9.9 CVE-2024-52404 Bikram Joshi--B-Banner Slider  Unrestricted Upload of File with Dangerous Type vulnerability in Bikram Joshi B-Banner Slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through 1.1. 2024-11-16 9.9 CVE-2024-52405 BlackBerry--SecuSUITE  A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege. 2024-11-12 7.3 CVE-2024-51721 Boa web server--Boa web server 0.94.14rc21  Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2024-11-14 7.5 CVE-2024-47916 Bosch Rexroth AG--IndraDrive FWA-INDRV*-MP*  A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages. 2024-11-13 7.5 CVE-2024-48989 Ciprian Popescu--W3P SEO  Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu W3P SEO allows Stored XSS.This issue affects W3P SEO: from n/a before 1.8.6. 2024-11-14 7.1 CVE-2024-51684 Cisco--Cisco BroadWorks  A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the section of this advisory.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.6 CVE-2023-20125 Cisco--Cisco Cyber Vision  A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit this vulnerability by sending crafted Modbus traffic through an affected device. A successful exploit could allow the attacker to cause the Snort process to hang, causing traffic inspection to stop.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.5 CVE-2022-20685 Cisco--Cisco Industrial Network Director  A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device.This vulnerability is due to improper input validation when uploading a Device Pack. An attacker could exploit this vulnerability by altering the request that is sent when uploading a Device Pack. A successful exploit could allow the attacker to execute arbitrary commands as NT AUTHORITYSYSTEM on the underlying operating system of an affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 9.9 CVE-2023-20036 Cisco--Cisco IOS XR Software  A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root. 2024-11-15 8.8 CVE-2022-20655 Cisco--Cisco Modeling Labs  A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.This vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. 2024-11-15 9.1 CVE-2023-20154 Cisco--Cisco Redundancy Configuration Manager  A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container.This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user.The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 8.1 CVE-2022-20649 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data.  The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic.Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 2024-11-15 7.4 CVE-2022-20814 Cisco--Cisco TelePresence Video Communication Server (VCS) Expressway  A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.  2024-11-15 7.4 CVE-2022-20853 Citrix Session Recording--Citrix Session Recording  Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server 2024-11-12 8.8 CVE-2024-8069 Clarisse K.--Writer Helper  Unrestricted Upload of File with Dangerous Type vulnerability in Clarisse K. Writer Helper allows Upload a Web Shell to a Web Server.This issue affects Writer Helper: from n/a through 3.1.6. 2024-11-16 9.9 CVE-2024-52399 cli--cli  The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image]( https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-... https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers#using-the-default-dev-container-configuration) . GitHub CLI [retrieves SSH connection details]( https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/inv... https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/invoker.go#L230-L244 ), such as remote username, which is used in [executing `ssh` commands]( https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L2... https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L263 ) for `gh codespace ssh` or `gh codespace logs` commands. This exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand="echo hacked" #`. The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored. In `2.62.0`, the remote username information is being validated before being used. 2024-11-14 8 CVE-2024-52308 cmorillas1--External Database Based Actions  The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edba_admin_handle' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin settings and log in as any existing user on the site, such as an administrator. 2024-11-15 7.5 CVE-2024-10311 cmsMinds--Boat Rental Plugin for WordPress  Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through 1.0.1. 2024-11-14 10 CVE-2024-52376 code-projects--Job Recruitment  A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-15 7.3 CVE-2024-11241 codeSavory--BasePress Migration Tools  Unrestricted Upload of File with Dangerous Type vulnerability in codeSavory BasePress Migration Tools allows Upload a Web Shell to a Web Server.This issue affects BasePress Migration Tools: from n/a through 1.0.0. 2024-11-16 9.9 CVE-2024-52407 craftcms--cms  Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5. 2024-11-13 8.4 CVE-2024-52291 craftcms--cms  Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, reads the file's content, and converts it into a Base64-encoded string. By embedding this function within a system notification template, the attacker can exfiltrate the Base64-encoded file content through a triggered system email notification. Once the email is received, the Base64 payload can be decoded, allowing the attacker to read arbitrary files on the server. This is fixed in 5.4.9 and 4.12.8. 2024-11-13 7.7 CVE-2024-52292 craftcms--cms  Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3. 2024-11-13 7.2 CVE-2024-52293 creativeinteractivemedia--Real3D Flipbook Lite 3D FlipBook, PDF Viewer, PDF Embedder  The 3D FlipBook, PDF Viewer, PDF Embedder - Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2024-11-16 8.8 CVE-2024-9849 cyberlord92--Login using WordPress Users ( WP as SAML IDP )  The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.15.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2024-11-16 7.2 CVE-2024-9887 Dang Ngoc Binh--Audio Record  Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through 1.0. 2024-11-11 10 CVE-2024-51792 Davor Zeljkovic--Convert Docx2post  Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post allows Upload a Web Shell to a Web Server.This issue affects Convert Docx2post: from n/a through 1.4. 2024-11-16 9.1 CVE-2024-52397 decidim--decidim  Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0. 2024-11-13 7.7 CVE-2024-45594 decidim-ice--decidim-module-decidim_awesome  An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module 0.9.0) allows an authenticated admin user to manipulate sql queries to disclose information, read and write files or execute commands. 2024-11-12 9 CVE-2024-43415 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. 2024-11-12 7.8 CVE-2024-49557 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 2024-11-12 7.8 CVE-2024-49558 dell -- smartfabric_os10  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. 2024-11-12 7.8 CVE-2024-49560 Dell--SmartFabric OS10 Software  Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution 2024-11-12 7.8 CVE-2024-48837 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39354 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-39605 Delta Electronics--DIAScreen  If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. 2024-11-11 7.8 CVE-2024-47131 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user's password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user's account. 2024-11-11 9.8 CVE-2024-11068 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11062 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11063 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11064 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. 2024-11-11 7.2 CVE-2024-11065 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page. 2024-11-11 7.2 CVE-2024-11066 dlink -- dsl6740c_firmware  The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password. 2024-11-11 7.5 CVE-2024-11067 DMC--Airin Blog  Deserialization of Untrusted Data vulnerability in DMC Airin Blog allows Object Injection.This issue affects Airin Blog: from n/a through 1.6.1. 2024-11-16 9.8 CVE-2024-52413 DonnellC--Global Gateway e4 | Payeezy Gateway  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0. 2024-11-14 8.6 CVE-2024-52371 DoThatTask--Do That Task  Unrestricted Upload of File with Dangerous Type vulnerability in DoThatTask Do That Task allows Upload a Web Shell to a Web Server.This issue affects Do That Task: from n/a through 1.5.5. 2024-11-14 10 CVE-2024-52374 dotnetzip.semverd_project -- dotnetzip.semverd  Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer. 2024-11-13 9.8 CVE-2024-48510 Elastic--Kibana  A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. A successful attack requires a malicious user to have a combination of both specific Elasticsearch indices privileges https://www.elastic.co/guide/en/elasticsearch/reference/current/defining-roles.html#roles-indices-priv  and Kibana privileges https://www.elastic.co/guide/en/fleet/current/fleet-roles-and-privileges.html  assigned to them. The following Elasticsearch indices permissions are required * write privilege on the system indices .kibana_ingest** The allow_restricted_indices flag is set to true Any of the following Kibana privileges are additionally required * Under Fleet the All privilege is granted* Under Integration the Read or All privilege is granted* Access to the fleet-setup privilege is gained through the Fleet Server's service account token 2024-11-14 9.1 CVE-2024-37285 Eugen Bobrowski--Debug Tool  Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through 2.2. 2024-11-16 10 CVE-2024-52416 Flowcraft UX Design Studio--Advanced Personalization  Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2. 2024-11-16 9.8 CVE-2024-52411 fortinet -- forticlient  A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts. 2024-11-12 8.8 CVE-2024-36513 fortinet -- forticlient  A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering. 2024-11-12 7.8 CVE-2024-36507 Fortinet--FortiClientWindows  A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. 2024-11-13 7.8 CVE-2024-47574 Fortinet--FortiManager  A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigDataat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. 2024-11-12 7.5 CVE-2024-23666 Fortinet--FortiOS  A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link. 2024-11-12 7.5 CVE-2023-50176 FraudLabs Pro--FraudLabs Pro SMS Verification  Cross-Site Request Forgery (CSRF) vulnerability in FraudLabs Pro FraudLabs Pro SMS Verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through 1.10.1. 2024-11-14 7.1 CVE-2024-51688 FreeBSD--FreeBSD  The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option. 2024-11-12 7.5 CVE-2024-45289 GeekRMX--Twitter @Anywhere Plus  Cross-Site Request Forgery (CSRF) vulnerability in GeekRMX Twitter @Anywhere Plus allows Stored XSS.This issue affects Twitter @Anywhere Plus: from n/a through 2.0. 2024-11-14 7.1 CVE-2024-51659 GentleSource--Appointmind  Cross-Site Request Forgery (CSRF) vulnerability in GentleSource Appointmind allows Stored XSS.This issue affects Appointmind: from n/a through 4.0.0. 2024-11-14 7.1 CVE-2024-51679 GeoVision--GV-VS12  Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports. 2024-11-15 9.8 CVE-2024-11120 GitLab--GitLab  An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations. 2024-11-14 8.5 CVE-2024-9693 glpi-project--glpi  GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. 2024-11-15 8.1 CVE-2024-40638 gogs--gogs/gogs  A remote command execution vulnerability exists in gogs/gogs versions

Read more »

An Interview With the Target & Home Depot Hacker
In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel, who confirmed using the Rescator identity in a recent interview, also admitted reaching out because he is broke and seeking publicity for several new money making schemes.

Read more »

Microsoft Patch Tuesday, November 2024 Edition
Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed prior to today.

Read more »

FBI: Spike in Hacked Police Emails, Fake Subpoenas
The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based technology companies.

Read more »

Canadian Man Arrested in Snowflake Data Extortions
A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka's alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.

Read more »

Vulnerability Summary for the Week of October 28, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info acnoo -- flutter_api  Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API: from n/a through 1.0.5. 2024-10-28 9.8 CVE-2024-50486 audit@patchstack.com  adirectory--aDirectory  Unrestricted Upload of File with Dangerous Type vulnerability in adirectory aDirectory allows Upload a Web Shell to a Web Server.This issue affects aDirectory: from n/a through 1.3. 2024-10-29 10 CVE-2024-50420 audit@patchstack.com  Ajar Productions--Ajar in5 Embed  Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through 3.1.3. 2024-10-29 10 CVE-2024-50473 audit@patchstack.com  Amin Omer--Sudan Payment Gateway for WooCommerce  Unrestricted Upload of File with Dangerous Type vulnerability in Amin Omer Sudan Payment Gateway for WooCommerce allows Upload a Web Shell to a Web Server.This issue affects Sudan Payment Gateway for WooCommerce: from n/a through 1.2.2. 2024-10-29 10 CVE-2024-50494 audit@patchstack.com  amu02aftab--Enable Shortcodes inside Widgets,Comments and Experts  The The Enable Shortcodes inside Widgets,Comments and Experts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2024-10-30 7.3 CVE-2024-9846 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Andy Moyle--Church Admin  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a before 5.0.0. 2024-10-28 7.1 CVE-2024-50438 audit@patchstack.com  Apache Software Foundation--Apache Lucene.Net.Replicator  Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replication node URL, can provide a specially-crafted JSON response that is deserialized as an attacker-provided exception type. This can result in remote code execution or other potential unauthorized access. Users are recommended to upgrade to version 4.8.0-beta00017, which fixes the issue. 2024-10-31 8 CVE-2024-43383 security@apache.org  apple -- ipados  A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox. 2024-10-28 9.6 CVE-2024-40867 product-security@apple.com  apple -- ipados  The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, iOS 17.7 and iPadOS 17.7, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. Processing a maliciously crafted file may lead to heap corruption. 2024-10-28 7.8 CVE-2024-44126 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. Processing a maliciously crafted file may lead to heap corruption. 2024-10-28 7.8 CVE-2024-44218 product-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup file may lead to modification of protected system files. 2024-10-28 7.1 CVE-2024-44252 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent. 2024-10-28 7.8 CVE-2024-44255 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup file may lead to modification of protected system files. 2024-10-28 7.1 CVE-2024-44258 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory. 2024-10-28 7.8 CVE-2024-44285 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- macos  A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1. An application may be able to break out of its sandbox. 2024-10-28 8.8 CVE-2024-44122 product-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- macos  A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A sandboxed process may be able to circumvent sandbox restrictions. 2024-10-28 8.6 CVE-2024-44270 product-security@apple.comproduct-security@apple.com  apple -- macos  A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to bypass Privacy preferences. 2024-10-28 7.1 CVE-2024-44156 product-security@apple.comproduct-security@apple.com  apple -- macos  A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to bypass Privacy preferences. 2024-10-28 7.1 CVE-2024-44159 product-security@apple.comproduct-security@apple.com  apple -- macos  A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library. 2024-10-28 7.5 CVE-2024-44203 product-security@apple.com  apple -- macos  This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences. 2024-10-28 7.5 CVE-2024-44208 product-security@apple.com  apple -- macos  A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to read sensitive location information. 2024-10-28 7.5 CVE-2024-44289 product-security@apple.comproduct-security@apple.com  apple -- xcode  This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data. 2024-10-28 7.5 CVE-2024-44228 product-security@apple.com  Apple--iOS and iPadOS  A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication. 2024-10-28 9.1 CVE-2024-44217 product-security@apple.com  Apple--macOS  The issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to break out of its sandbox. 2024-10-28 9.3 CVE-2024-44256 product-security@apple.comproduct-security@apple.com  Apple--macOS  A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.5 CVE-2024-44196 product-security@apple.comproduct-security@apple.com  Apple--macOS  A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.7 CVE-2024-44280 product-security@apple.comproduct-security@apple.com  Apple--macOS  This issue was addressed with additional entitlement checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.7 CVE-2024-44295 product-security@apple.comproduct-security@apple.com  Apple--visionOS  This issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. An attacker may be able to misuse a trust relationship to download malicious content. 2024-10-28 8.8 CVE-2024-44259 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  Apple--visionOS  The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory. 2024-10-28 7.7 CVE-2024-44277 product-security@apple.comproduct-security@apple.comproduct-security@apple.com  autodesk -- autocad  A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-7991 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-7992 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8588 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8589 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8590 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8591 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8592 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted CATPART file when parsed in ASMKERN230A.dll through Autodesk AutoCAD can force a Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8593 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8594 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8595 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force an Out-of-Bound Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8596 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8597 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8598 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8599 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8600 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8896 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9489 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9826 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9827 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9996 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9997 psirt@autodesk.com  Autodesk--AutoCAD  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8587 psirt@autodesk.com  Automattic--Newspack Blocks  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic Newspack Blocks allows Path Traversal.This issue affects Newspack Blocks: from n/a through 3.0.8. 2024-11-01 8.5 CVE-2024-37423 audit@patchstack.com  Azexo--Marketing Automation by AZEXO  Incorrect Privilege Assignment vulnerability in Azexo Marketing Automation by AZEXO allows Privilege Escalation.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. 2024-10-30 8.8 CVE-2024-50506 audit@patchstack.com  azexo--Marketing Automation by AZEXO  Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. 2024-10-29 9.9 CVE-2024-50480 audit@patchstack.com  buynowdepot -- advanced_online_ordering_and_delivery_platform  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BuyNowDepot Advanced Online Ordering and Delivery Platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through 2.0.0. 2024-10-28 9.8 CVE-2024-50497 audit@patchstack.com  Carl Alberto--Simple Custom Admin  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Carl Alberto Simple Custom Admin allows Reflected XSS.This issue affects Simple Custom Admin: from n/a through 1.2. 2024-10-29 7.1 CVE-2024-49647 audit@patchstack.com  CHANGING Information Technology--IDExpert  IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server. 2024-11-01 7.2 CVE-2024-10653 twcert@cert.org.twtwcert@cert.org.tw  Chetan Khandla--Woocommerce Product Design  Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-29 10 CVE-2024-50482 audit@patchstack.com  Chetan Khandla--Woocommerce Product Design  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-30 8.6 CVE-2024-50509 audit@patchstack.com  Chetan Khandla--Woocommerce Product Design  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-30 7.5 CVE-2024-50508 audit@patchstack.com  code-projects--Courier Management System  A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-01 7.3 CVE-2024-10607 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Courier Management System  A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-01 7.3 CVE-2024-10608 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--E-Health Care System  A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/admin_pswd as part of String leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "email" to be affected. But it must be assumed that parameter "admin_pswd" is affected as well. 2024-11-03 7.3 CVE-2024-10739 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--E-Health Care System  A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument f_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-03 7.3 CVE-2024-10741 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Restaurant Order System  A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10733 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Simple Car Rental System  A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-02 7.3 CVE-2024-10702 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Wazifa System  A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-02 7.3 CVE-2024-10699 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- hospital_appointment_system  A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-28 9.8 CVE-2024-10449 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- online_institute_management_system  A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-10-30 9.8 CVE-2024-10509 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- pet_shop_management_system  A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file birdsadd.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-31 9.8 CVE-2024-10556 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- pet_shop_management_system  A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file birdsupdate.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-31 9.8 CVE-2024-10561 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Free Exam Hall Seating Management System  A vulnerability classified as critical was found in Codezips Free Exam Hall Seating Management System 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-10-30 7.3 CVE-2024-10507 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Free Exam Hall Seating Management System  A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10736 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Free Exam Hall Seating Management System  A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10737 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  CozyThemes--Cozy Blocks  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.15. 2024-10-28 7.4 CVE-2024-50441 audit@patchstack.com  cure53--DOMPurify  DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2. 2024-10-31 9.1 CVE-2024-48910 security-advisories@github.comsecurity-advisories@github.com  D3TN--D3TN  Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block 2024-10-28 7.5 CVE-2024-10455 cve@gitlab.com  Daniel Schmitzer--DS.DownloadList  Deserialization of Untrusted Data vulnerability in Daniel Schmitzer DS.DownloadList allows Object Injection.This issue affects DS.DownloadList: from n/a through 1.3. 2024-10-30 9.8 CVE-2024-50507 audit@patchstack.com  David DONISA--WP donimedia carousel  Unrestricted Upload of File with Dangerous Type vulnerability in David DONISA WP donimedia carousel allows Upload a Web Shell to a Web Server.This issue affects WP donimedia carousel: from n/a through 1.0.1. 2024-10-30 9.9 CVE-2024-50511 audit@patchstack.com  Delta Electronics--InfraSuite Device Master  Delta Electronics InfraSuite Device Master versions prior to 1.0.12 are affected by a deserialization vulnerability that targets the Device-Gateway, which could allow deserialization of arbitrary .NET objects prior to authentication. 2024-10-30 9.8 CVE-2024-10456 ics-cert@hq.dhs.gov  Deryck Oate--User Toolkit  Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck Oñate User Toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through 1.2.3. 2024-10-30 9.8 CVE-2024-50503 audit@patchstack.com  Devsoft Baltic O--SurveyJS: Drag & Drop WordPress Form Builder  Unrestricted Upload of File with Dangerous Type vulnerability in Devsoft Baltic OÃœ SurveyJS: Drag & Drop WordPress Form Builder.This issue affects SurveyJS: Drag & Drop WordPress Form Builder: from n/a through 1.9.136. 2024-10-29 9.9 CVE-2024-50427 audit@patchstack.com  Eclipse Foundation--mosquitto  In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquitto_rr clients. 2024-10-30 9.1 CVE-2024-10525 emo@eclipse.orgemo@eclipse.orgemo@eclipse.org  Eclipse Foundation--mosquitto  In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker. 2024-10-30 7.5 CVE-2024-3935 emo@eclipse.orgemo@eclipse.orgemo@eclipse.org  esafenet -- cdg  A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2024-10-31 9.8 CVE-2024-10595 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  gaizhenbiao -- chuanhuchatgpt  A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions

Read more »

Holiday Sale at Verizon: HomePod minis for $84.99, save $14 (15% off)
Snag an Apple HomePod mini in your favorite color at Holiday sale prices, now $15 off at Verizon ($84.99). Compact yet powerful, the HomePod mini delivers rich, 360-degree sound and integrates seamlessly with your Apple devices and smart home setup. Their sale price applies to all mini colors and represents a rare HomePod sale price. Verizon service is not required for purchase. Buy online and choose free shipping or free local store pickup (if available). Sale price for online orders only, in-store price may vary. See our HomePod Price Tracker for the latest prices and deals from Apple and its retailers.

Read more »

Cyber Monday deals are live at Apple, final day to get a gift card worth up to $200 with these purchases
Apple's four day Black Friday/Cyber Monday 2024 Shopping Event is now live and will run from November 29, 2024 to December 2, 2024. That means today is the final day! Receive a free $150-$200 Apple Gift Card with the purchase of select Macs and $75-$100 with select iPads. Get a $25-$75 Apple Gift Card with select iPhone models as well as $50 with select Apple Watch models. AirPods qualify for $25 to $75 Gift Cards, depending on the model. Click through to see how much is included with each product...

Read more »

Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Apple retailers are offering $200 discounts on Apple 13-inch MacBook Airs for Cyber Monday
Apple retailers have 13" M3 and M2 MacBook Airs on Cyber Monday sale this year for $200 off MSRP. Prices start at only $799 for new Airs with 16GB of memory. Here are the retailers offering the lowest prices today: - (1): Amazon has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP, each including free shipping. Price start at only $899: - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. Shipping is free: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP - (2): Best Buy has new 13" 16GB M3 MacBook Airs on Cyber Monday sale for $200 off MSRP. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M3 MacBook Air (16GB/256GB): $899, $200 off MSRP - 13" M3 MacBook Air (16GB/512GB): $1099, $200 off MSRP - 13" M3 MacBook Air (24GB/512GB): $1299, $200 off MSRP Best Buy has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on Cyber Monday sale for $200 off MSRP as well, only $799. Sale price for online orders only, in-store price may vary. Order online, and choose free shipping or free local store pickup (if available): - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Cyber Monday Sale: 14-inch M4 Pro and M4 Max MacBook Pros for $250-$300 off MSRP
Amazon is offering a $250-$300 discount on Apple's 14-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) as part of their Cyber Monday sales. Shipping is free. These are the lowest prices currently available for these MacBook Pros. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 Pro MacBook Pro (24GB/512GB): $1749, $250 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB): $2149, $250 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB): $2899, $300 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Cyber Monday Sale: 14-inch M4 Pro and M4 Max MacBook Pros for $250-$300 off MSRP
Amazon is offering a $250-$300 discount on Apple's 14-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) as part of their Cyber Monday sales. Shipping is free. These are the lowest prices currently available for these MacBook Pros. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 Pro MacBook Pro (24GB/512GB): $1749, $250 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB): $2149, $250 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB): $2899, $300 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Cyber Monday Sale: 14-inch M4 MacBook Pros for $200 off Apple’s MSRP, prices start at $1399
Here are the lowest prices on 14-inch MacBook Pros with M4 CPUs for Cyber Monday this year. Save $200 at the following retailers, with prices starting at $1399 today: (1): Amazon is offering a $200 discount on Apple 14-inch M4 MacBook Pros as part of their Cyber Monday sales. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 MacBook Pro (16GB/512GB): $1399, $200 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1599, $200 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $200 off MSRP (2): Best Buy is offering a $100 discount on Apple 14-inch M4 MacBook Pros as part of their Cyber Monday sales. Shipping is free. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 14" M4 MacBook Pro (16GB/512GB): $1499, $100 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1699, $100 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $100 off MSRP (3): B&H Photo has 14-inch M4 MacBook Pros on Cyber Monday sale for $200 off MSRP. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 MacBook Pro (16GB/512GB): $1399, $200 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1599, $200 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $200 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Cyber Monday Sale: 14-inch M4 MacBook Pros for $200 off Apple’s MSRP, prices start at $1399
Here are the lowest prices on 14-inch MacBook Pros with M4 CPUs for Cyber Monday this year. Save $200 at the following retailers, with prices starting at $1399 today: (1): Amazon is offering a $200 discount on Apple 14-inch M4 MacBook Pros as part of their Cyber Monday sales. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 MacBook Pro (16GB/512GB): $1399, $200 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1599, $200 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $200 off MSRP (2): Best Buy is offering a $100 discount on Apple 14-inch M4 MacBook Pros as part of their Cyber Monday sales. Shipping is free. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 14" M4 MacBook Pro (16GB/512GB): $1499, $100 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1699, $100 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $100 off MSRP (3): B&H Photo has 14-inch M4 MacBook Pros on Cyber Monday sale for $200 off MSRP. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 MacBook Pro (16GB/512GB): $1399, $200 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1599, $200 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $200 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Cyber Monday Sale: Take $100-$200 off every new Apple M4 iPad Pro
Best Buy has Apple's iPad Pros with M4 CPUs on sale for $100-$200 off MSRP on their online store as part of their Cyber Monday deals. Price start at $899: - 13-inch M4 WiFi iPad Pros: $200 off MSRP - 13-inch M4 WiFi + 5G iPad Pros: $200 off MSRP - 11-inch M4 WiFi iPad Pros: $100 off MSRP - 11-inch M4 WiFi + 5G iPad Pros: $100 off MSRP Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). See our iPad Pro Price Tracker for a detailed breakdown of prices.

Read more »

Apple retailers have 16-inch M4 Max MacBook Pros on Cyber Monday sale for $300-$350 off MSRP
Amazon is now offering a $300-$350 discount on Apple's 16-inch M4 Max MacBook Pros (Silver and Black colors) as part of their Cyber Monday sales. Shipping is free. These are the lowest prices currently available for these MacBook Pros. Be sure to select Amazon as the seller, rather than a third-party seller: - 16" M4 Max MacBook Pro (36GB/1TB): $3149, $350 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB): $3699, $300 off MSRP Best Buy is now offering a $300 discount on Apple's 16-inch M4 Max MacBook Pros as part of their Cyber Monday sales. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 16" M4 Max MacBook Pro (36GB/1TB): $3199, $300 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB): $3699, $300 off MSRP For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Apple M2 iPad Airs on Cyber Monday sale for $100 off MSRP, prices start at $499
Best Buy has Apple's 11-inch and 13-inch iPad Airs with M2 CPUs on Cyber Monday sale today for $100 off MSRP with prices starting at $499. These are the cheapest new iPad Airs available from any Apple retailer: - 11" 128GB M2 WiFi iPad Air: $499, $100 off - 11" 256GB M2 WiFi iPad Air: $599, $100 off - 11" 512GB M2 WiFi iPad Air: $799, $100 off - 11" 1TB M2 WiFi iPad Air: $999, $100 off - 11" 128GB M2 WiFi + 5G iPad Air: $649, $100 off - 11" 256GB M2 WiFi + 5G iPad Air: $749, $100 off - 11" 512GB M2 WiFi + 5G iPad Air: $949, $100 off - 11" 1TB M2 WiFi + 5G iPad Air: $1149, $100 off - 13" 128GB M2 WiFi iPad Air: $699, $100 off - 13" 256GB M2 WiFi iPad Air: $799, $100 off - 13" 512GB M2 WiFi iPad Air: $999, $100 off - 13" 1TB M2 WiFi iPad Air: $1199, $100 off - 13" 128GB M2 WiFi + 5G iPad Air: $849, $100 off - 13" 256GB M2 WiFi + 5G iPad Air: $949, $100 off - 13" 512GB M2 WiFi + 5G iPad Air: $1149, $100 off - 13" 1TB M2 WiFi + 5G iPad Air: $1349, $100 off Sale prices valid for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). For the latest prices & sales, keep an eye on our iPad Air Price Tracker, updated daily.

Read more »