What you should know about Apple's switch from rsync to openrsync
Forced by licensing issues, Apple replaced the rsync command-line tool in macOS with an alternative: openrsync. Here's what you should know about the change.rsync allows you to copy and back up files between drives and computers.The rsync command-line tool has been around for decades. It provides users with the ability to copy files and folders to and from remote computers over the Internet and local networks.Rsync works by comparing files during a request to copy, and only transmitting files that have changed. This reduces the size and time required to make network copies. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple will soon launch its first foldable iPhone: Details, release date, and more
Rumors about foldable iPhones have circulated for many years, but recent reports have suggested that Apple is finally getting closer to announcing its new product. Apple is reportedly working on two foldable products, a foldable iPhone with an ~8-inch inner display, and a giant 20-inch foldable iPad. The foldable iPhone is on track to debut first. more…

Read more »

ExpressVPN review: Simple to use VPN, but powerful
ExpressVPN is a fast and reliable VPN service with a clean interface, but while convenient and feature-rich, it's also a bit pricey.ExpressVPN review: The app has a simple interface on macOS and iOSOne of the major names in virtual private network (VPN) services, ExpressVPN offers a lot to consumers at face value. Offering servers in 105 countries around the world, fast speeds, and privacy and security, theoretically covers all of the bases that you would want from a VPN.It also offers a very simple approach for end users to get quickly up and running with the service using apps. At the same time, it provides a more customizable experience if you dig a little deeper than the immediate options presented by the apps. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Is Chrome Even a Sellable Asset?
It’s hard to come up with a buyer who could afford to pay a high price for Chrome and who would pass regulatory muster as its new owner. And if Chrome is not worth a high price, or simply isn’t sellable at one, then why is the DOJ trying to force Google to sell it? They might as well try to force Google to sell the two o’s from its name.

Read more »

Apple reportedly scraps stronger anti-reflective display planned for iPhone 17
Plans for an anti-reflective, scratch-resistant display on the iPhone 17 have seemingly been abandoned, according to an anonymous source.Apple's plans for a more durable display on the iPhone 17 have reportedly been abandoned.Apple often promotes the durability and hardness of the iPhone screen. With the release of the iPhone 16e, for instance, Apple said that its Ceramic Shield front was "tougher than any smartphone glass," and the company's claims have often been backed up by independent testing.The iPhone 17 range was likely meant to continue this trend, as in March 2024, leaker "Instant Digital" claimed a new display coating was in the works. At the time, it was said the coating would allow for better scratch resistance and improved anti-reflective properties. Rumor Score: 🤔 Possible Continue Reading on AppleInsider | Discuss on our Forums

Read more »

IBM to invest $150 billion in America over next five years to aid quantum push
Joining the likes of Apple and Nvidia, IBM will invest $150 billion in the U.S., including on facilities for quantum computer production… The post appeared first on MacDailyNews.

Read more »

Satechi launches OnTheGo 3-in-1 charger with compact design & Qi2 support
I was lucky enough to get an early look and hands-on experience with Satechi’s new OntheGo line at CES this year, and I was immediately impressed. Satechi managed to bridge the gap between tech enthusiasts like myself, who appreciate cutting-edge features like Qi2 and MagSafe charging, and everyday users, thanks to their thoughtful material choices and versatile color palette. Here’s everything you need to know! more…

Read more »

Consumers get ahead of tariffs, Morgan Stanley hikes AAPL price target to $235
Morgan Stanley hiked its Apple stock price target to $235 because instability created by the Trump administration's tariffs may be a boon to Apple's bottom line — at least in the short term.iPhone 16 Pro Max could have seen a sale bump in early 2025Even after the failed attempt at increased tariffs during the first Trump term, it was a well-known promise that they'd be attempted again in the second term. After a few weeks of on-again, off-again general tariffs, President Trump went all-in on "Liberation Day" in early April with seemingly random global tariff increases.According to a report from Morgan Stanley seen by AppleInsider, these conditions led to uncertainty among consumers, which pushed key purchases forward, and will benefit Apple's first half of 2025. So, for those that may have waited until September 2025 or later to buy a new iPhone or Mac, they upgraded much earlier in 2025. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

AirPods Pro 3’s best upgrade could be the gift that keeps giving
AirPods Pro 3 are coming later this year, and out of all the rumored new features, the single best upgrade may prove itself a gift that keeps giving: Apple’s H3 chip. more…

Read more »

iPhone 17 Pro might not feature new anti-reflective display after all
Last year, a rumor suggested that the iPhone 17 Pro might have a more durable and anti-reflective display technology. As it turns out, that might not be the case after all… more…

Read more »

Morgan Stanley raises Apple target to $235
On April 28, 2025, Morgan Stanley raised its price target for Apple to $235 from $220, maintaining an Overweight rating, signaling strong… The post appeared first on MacDailyNews.

Read more »

Last call: Surfshark VPN deals from $1.99/mo end April 30
Surfshark's birthday VPN deal is about to expire, with plans as low as $1.99 per month for 24 months through the end of April.Surfshark VPN has fallen to $1.99 per month - Image credit: SurfsharkTime is ticking to take advantage of the Surfshark VPN birthday deal, which delivers up to 87% off and up to three months free added to select plans. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Four years after AirTag, Google’s ‘Find My’ answer still falls short
Apple is gearing up to launch AirTag 2 soon, but four years after the first AirTag debuted, a new test of competing options on Google’s ‘Find My Device’ network shows that Apple is still very much ahead in lost item tracking. more…

Read more »

Apple seeds fourth betas of watchOS 11.5, tvOS 18.5, and visionOS 2.5
Apple has released the fourth betas of visionOS 2.5, tvOS 18.5, and watchOS 11.5 to developers for testing, just one week after the third… The post appeared first on MacDailyNews.

Read more »

M4 MacBook Air has two new reasons for MacBook Pro owners to switch
On paper, the might look like a pretty standard iterative update. But diving into the details, it stands out as one of Apple’s easiest products to recommend, and two new changes specifically may offer the best reason yet for MacBook Pro users to switch to the Air. more…

Read more »

Another Periodic Suggestion to Try, Just Try, Switching to Kagi for Search
Paying for Kagi today feels a *lot* paying for HBO back in the cable TV heyday.

Read more »

macOS Beta: The Sequoia 15.5 beta 3 is now available. Here’s how to get it
Macworld macOS Sequoia arrived on Macs in September 2024, but the beta development continues and if you are a registered developer or registered as a public beta tester, you can continue to get the latest updates and try out new features still not available to the general public. In this article, we’ll explain what’s in the latest version of the Sequoia beta, what you need to do to get your hands on a copy, how to install it, and what you should bear in mind if you don’t want to end up in a pickle. If you would prefer to use the latest official release of macOS Sequoia, here’s how to update macOS on your Mac. In the past, the developer beta was only available to developers who had paid to join Apple’s Developer Program (which costs $99/£79). However, for a couple of years now, Apple has opened up the developer beta to registered developers with free developer accounts. We explain how to get a free developer account below. Not that we recommend that you should get the beta if you aren’t a developer. Beta software tends to be buggy and a more stable public beta version is also available. If you no longer want to run the beta version of macOS read this: How to remove the macOS beta. macOS developer beta: Latest version Apple released macOS Sequoia 15.5 beta 4 to developers on April 28, 2025. Below are the release notes for developers: Overview The macOS 15.5 SDK provides support to develop apps for Mac computers running Sequoia 15.5 beta. The SDK comes bundled with Xcode 16.4, available from the Mac App Store. For information on the compatibility requirements for Xcode 16.4, see Xcode 16.4 Release Notes. Pro Display Calibrator Resolved Issues Fixed: Customizing display calibration using the Pro Display Calibrator causes a system reboot on 14-inch and 16-inch M4 MacBook Pros. (148038484) StoreKit Resolved Issues Fixed: Calling isEligibleForIntroOffer(for:) will return false if there is no user account signed in. (146119524) macOS public beta: Latest version The public beta usually follows a few days after the developer beta is released. The Sequoia 15.5 beta 2 was released on April 14, 2025, so the public beta should be coming soon. Foundry macOS Sequoia beta timeline The first version of the Sequoia developer beta of macOS 15 arrived after the WWDC keynote on June 10, 2024. Beta 2 arrived on June 24. The first public beta of Sequoia arrived on July 15, 2024. Developer beta 4 was released on July 23. The second public beta also arrived on July 23, 2024. Developer beta 5 arrived on August 5 followed by the third public beta. Apple released the macOS Sequoia 15 developer beta 6 on August 12. The fourth public beta of Sequoia arrived on August 13, 2024. Developer beta 7 and the fifth public beta of Sequoia were released on August 20. On August 28, Apple released the macOS Sequoia 15 beta 8 and the sixth public beta of Sequoia. The release candidate of Sequoia arrived on September 9. The full version of Sequoia arrived on compatible Macs on September 16. macOS Sequoia 15.1 There were actually two versions of the developer beta. A second beta was running concurrently with the macOS 15.0 beta development. The macOS Sequoia 15.1 beta included Apple Intelligence features that are only available on M-series Macs (a iOS 18.1 beta was also in development separately with Apple Intelligence features for compatible iPhones). Apple started work on the macOS Sequoia 15.1 beta on July 29. Beta 2 arrived on August 12, beta 3 was released to developers on August 28. Initially, this beta was only for developers, but Apple released a macOS Sequoia 15.1 pubic beta on September 19, 2024, following the release of Sequoia to the general public. Eventually, the macOS Sequoia 15.1 release candidate was released on October 21, and a second release candidate 2 was released on October 24. The final version of macOS Sequoia 15.1 arrived on compatible Macs on October 28. macOS Sequoia 15.2 On October 23, Apple released the macOS Sequoia 15.2 beta 1 to developers. Version 15.2 introduced the second set of Apple Intelligence features. On November 20, Apple released the macOS Sequoia beta 4 to developers. On December 5, Apple released the macOS Sequoia 15.2 Release Candidate. On December 9, Apple released the Released Candidate 2. The official release of 15.2 was on December 11. macOS Sequoia 15.3 On December 16, Apple released the macOS Sequoia 15.3 beta 1 to developers. This beta includes the ability to create Gemoji. On January 7, Apple released the macOS Sequoia 15.3 beta 2 to developers. Beta 3 of 15.3 came on January 16. Apple released the macOS Sequoia 15.3 release candidate (RC) to developers on January 21. macOS Sequoia 15.4 On February 19, Apple released the macOS Sequoia 15.4 beta to developers. It included Mail updates and Proximity Pairing with the iPhone. On March 10, Apple released beta 3 to developers. On March 17, Apple released beta 4 to developers. On March 24, Apple released the Release Candidate 1 to developers. On March 27, Apple released a new RC that replaced the one released on March 24. On March 28, Apple released RC 2 to developers and RC 1 to the public. macOS Sequoia 15.5 On April 2, Apple released the Sequoia 15.5 beta 1 to developers. On April 14, Apple released the Sequoia 15.5 beta 2 to developers. On April 21, Apple released the Sequoia 15.5 beta 3 to developers. On April 28, Apple released the Sequoia 15.5 beta 4 to developers. macOS public beta vs developer beta Since 2023, the Developer Beta has been available to anyone who registers as a developer, even if they aren’t a paid-up member of Apple’s Developer Program. As a result, people with a basic free developer account can download the new macOS developer beta (we show you how to register below). Whether you should download the developer beta if you aren’t a developer is another question. We don’t recommend you install the developer beta if you aren’t a developer. Instead, our recommendation is to use the public beta (the first version of which usually arrives in July). There are a few differences between the public and developer betas. The public beta is not the same as the beta that is released through the developer program. Developers get updates to their beta first, and possibly more frequently. But you should keep in mind that betas are by nature not stable, and because the public beta comes after the developer beta it could be a little safer to install. The most significant difference is probably the motive of the testers: Developers usually have the aim of ensuring their apps work when the updated macOS is released to the general public, while public beta testers are essentially helping Apple detect bugs and offering feedback on the features. Because of this developers may get to test new features not available in the public beta.  If you want to get the public beta the first thing you need to do, if you haven’t already, is join Apple’s beta programs read this for more information: How to become an Apple beta tester. Apple How to get a free developer account If you just want a free Apple Developer account so you can access the beta you can get this via Xcode or the Apple Developer app in iOS. Here’s how to do it via the Apple Developer app on an iPhone: Get the Apple Developer App from the App Store.  Open the app on your iPhone.  Tap on Account.  Tap on Sign In.  Sign in using your usual Apple ID.  If you wish to actually publish applications to the App Store or receive support, you’ll need to pay $99/£79 per year for a paid account. You can compare the free and paid accounts here. How to get the macOS beta The Sequoia developer beta should show up on your Mac if you are running macOS Sonoma or macOS Sequoia, have paid $99/£79 to enroll in Apple’s Developer program (here) or if you have a free developer account (follow the instructions above). When the Public Beta becomes available it will also show up on your Mac, as long as you have signed up for the Public Beta program on Apple’s beta webpage, signed the NDA, and enrolled your Mac. Before you download a few warnings: We strongly advise that if you aren’t a developer you don’t download the developer beta. We also strongly recommend that you back up your Mac before you upgrade to the Sequoia beta. We recommend that you do not run Sequoia beta on your primary Mac; ideally, you run it in a separate volume. This should minimize any risks to you. How to download macOS beta Open Software Updates on your Mac. (System Settings > General > Software Updates.) You should see two options: Automatic Updates and Beta Updates. Click on the (i) beside Beta Updates. You can now turn on Beta Updates (if they weren’t already on). Choose the beta you want to download. If your developer account is tied to a different Apple ID to your usual one you can change that here. Click Done. Now your Mac will Check for updates and eventually show the Sequoia Developer Beta as an upgrade. Click on Upgrade Now. Foundry If you are running macOS Ventura 13.3 or earlier: Apple changed the way it delivers betas in Ventura 13.4. If you aren’t yet running that version of macOS you will need to download the macOS Developer Beta Access Utility or macOS Public Beta Access Utility. If you were already running an earlier macOS Public Beta you’ll find the new macOS beta as an upgrade via Software Update. Just click on Upgrade Now. You may have to update to the latest version of your current beta before you can do so, if not follow the steps below to get the beta access utility. If you are enrolled in the Developer Program, go to Apple’s beta download page. Click on Install Profile to download the new macOS Developer Beta Access Utility to your Mac. If you are enrolled as a public beta tester, download the macOS Public Beta Access Utility. Go to Downloads on your Mac and click on the macOS Beta Access Utility to open it. Double-click on the dmg file and the installer will run. Once the new macOS beta is installed Software Update will check to see if there are any updates. Click Update and the latest version will download. You’ll see a prompt to install the latest macOS beta, click on Continue. Agree to the Ts&Cs (more on them below). Click Install. How to update macOS beta versions Once you are running the beta the updates will come through to your Mac automatically, you just need to click to install. You will receive a notification when the next update to the beta is available. Updates will be available via Software Update (in System Settings/System Preferences) Everything else you need to know about beta testing That covers how to get the betas, but once you have them what can you do, and what should you do? We’ll cover that below. Is the macOS beta stable? By its nature, a beta has the potential to be unstable. Therefore it’s not advised that you install it on a Mac that you rely on. If you have a second Mac that isn’t mission-critical then install it there. We strongly recommend that you don’t risk all by putting the macOS beta on your primary macOS, especially not in the early days of the beta development.  If you don’t have a second Mac there are a couple of ways you could run macOS beta on your Mac without running the risk of losing data or finding your Mac stops working: We recommend installing it on a partition – which these days is really a volume (and is much easier to create than a partition was). Read about how to do that here: How to dual-boot Mac: Run two versions of macOS on a Mac. Alternatively, you could install the macOS beta on an external drive and run it on that. We discuss the safety of the macOS beta and the risks you might be taking in more detail in a separate article. If the stability of the beta worries you then you are probably better off waiting until the final version is out, or at least waiting until testing has been happening for a few months before getting the beta. How to prepare your Mac for the beta Update your software: We recommend you have the latest full version of macOS installed, although Apple says that the macOS Developer Beta Access Utility requires macOS 10.8 or later. Make space: We’d recommend at least 15GB of available space because the macOS betas tend to be very large. If you end up requiring more space read: How to free up space on Mac. Note that we always recommend that you have at least 10% space free on your Mac at any time, so if you don’t have that expect problems! Back up: Before you install a beta on your Mac you should make a backup of your data and files. You can find out how to use Time Machine to back up your Mac. We also have a round-up of suitable backup solutions. How to send feedback to Apple Should you come across an error or a bug you should use the Feedback Assistant app to provide feedback to Apple. Launch the app and follow the appropriate steps, selecting the area about which you’re providing feedback and then any specific sub-area. Then describe your issue in a single sentence, before providing a more detailed description, including any specific steps that reproduce the issue. You’ll also be able to attach other files. You’ll also have to give permission for the Feedback Assistant app to collect diagnostic information from your Mac. It won’t always be obvious whether something is a bug or just not as easy to use as you might have hoped. Either way, if your feedback is that something appears to work in an illogical way, Apple will want to know that. If you are having trouble with a third-party app you can let Apple know by reporting it through the 3rd-party Application Compatibility category in the Feedback Assistant. However, we’d suggest that you also provide feedback to the app’s developer who will no doubt be grateful. Will I be able to update from macOS beta to the final version? Beta users will be able to install the final build of the OS on release day without needing to reformat or reinstall. Can I talk about the beta publicly? According to Apple and the license agreement all beta testers must agree to, the beta is “Apple confidential information”. By accepting those terms, you agree not to discuss your use of the software with anyone who isn’t also in the Beta Software Program. That means you can’t “blog, post screenshots, tweet, or publicly post information about the public beta software.” However, you can discuss any information that Apple has publicly disclosed; the company says that information is no longer considered confidential. How to downgrade from the macOS beta You can always revert to an earlier version of macOS, though depending on how you back up, it’s not necessarily a painless process. Start by making sure the data on your drive is backed up, then erase the drive and install the latest public version of macOS. When you first startup your Mac you can use the Migration Assistant to import your data from the backup. Here’s a more detailed tutorial on downgrading from the macOS beta we also have a tutorial on downgrading to an older version of the Mac OS.

Read more »

The amazing AirPods Pro 2 just hit the lowest price of 2025
Macworld With summer rapidly approaching, it’s time to stop putting off upgrading your earbuds and just order the AirPods Pro 2 already! That’s because they just hit their 2025 low: Amazon is selling the AirPods Pro 2 for just $169, a massive savings of more than 30 percent off the $249 MSRP. These earbuds are easily one of our favorites, as the 4.5-star rating we gave them hasn’t changed since 2022. As we mentioned back then, the AirPods Pro 2 earbuds still deliver fantastic audio quality, are excellent at noise canceling, and have a “best-in-class” transparency mode. “On the outside, not much has changed with these second-generation AirPods Pro. But the sound quality has improved a lot, noise cancelling is much better, transparency mode is top-notch, and battery life is finally up to par. There’s not a lot here you can’t find on other models, but Apple makes it easy and has caught up to its fierce competition,” the review reads. And they’ve only gotten better since then. Through a steady stream of updates, Apple has made the AirPods Pro 2 even better since their release, with Conversation Boost and Hearing Protection, which lets you test your hearing with AirPods Pro and use them as an actual hearing aid. Plus, you’ll get all the great Apple ecosystem stuff you love: instant pairing, hands-free Siri support, notification announcements, and more. So, go get your own Apple AirPods Pro 2 for $169 while Amazon still has them on sale. Save big on the superb AirPods Pro 2Buy now at Amazon

Read more »

Apple moves to a fourth round of iOS 18.5, macOS 15.5 developer betas
The fourth round of developer betas has arrived, with Apple trialling another set of builds of iOS 18.5, iPadOS 18.5, macOS 15.5, tvOS 18.5, watchOS 11.5, and visionOS 2.5.Examples of Apple Intelligence at work. The fourth round of testing for iOS 18.5, iPadOS 18.5, macOS 15.5, tvOS 18.5, watchOS 11.5, and visionOS 2.5 arrived after the third, which landed on April 21. The second appeared on April 14, while the first round for this generation was handed out on March 17.The fourth iOS 18.5 and iPadOS 18.5 developer betas share build number 22F5068a, taking over from the previous build, 22F5053j. The fourth macOS Sequoia 15.5 build uses number 24F5068b, replacing from 24F5053j. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

How and why to plug an Ethernet cable into your iPhone
Adding a wired Ethernet adapter to your iPhone is very easy, and a wired connection brings speed, security and reliability. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple releases beta 4 for visionOS 2.5, watchOS 11.5, and tvOS 18.5
Apple just shipped new betas across its array of software platforms. Beta 4 for watchOS 11.5, visionOS 2.5, tvOS 18.5, and more is now available. more…

Read more »

macOS 15.5 beta 4 now available for download
Apple’s next Mac software update, macOS 15.5, is inching closer to wide distribution. Today Apple released macOS 15.5 beta 4 to developers, bringing the latest refinements and fixes. more…

Read more »

Apple releases iOS 18.5 beta 4
Apple has released iOS 18.5 beta 4 for developers. The pre-release iPhone and iPad software update has been light on features, although there are some small changes. more…

Read more »

MagSafe Monday: ESR’s 5-card wallet might be the best MagSafe wallet yet
I’ve tried many MagSafe wallets over the years, and I’ve yet to find the perfect one. I recently picked up ESR’s new five-card, and it’s become my daily carry thanks to its separate ID slots and ability to hold multiple cards. more…

Read more »

iPhone 17 takes a big step towards mass production
The iPhone 17 is getting closer to mass production, as it takes an important step ahead of its eventual release this fall.iPhone prototypes go through many stages before mass production starts. The annual cycle for the main iPhone releases in September means that mass production of the iPhone has to occur during the summer. To get to that point of manufacturing, the year's iPhone has to pass through a number of stages to ensure production goes smoothly.According to a Monday report from DigiTimes, as spotted by MacRumors, at least of one the models has completed one of the early stages of pre-production testing. The report doesn't specify which models of the 2025 roster have done so, but that it was Engineering Validation Testing, or EVT. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

14 years ago, Apple released the white iPhone 4 (after a brief 308-day delay)
The white iPhone 4 release day is always a fun Apple anniversary for me to think about. It comes a week before I bought my very first iPhone (the iPhone 4 in white, of course) and 308 days after the black iPhone 4 arrived in stores. more…

Read more »

Apple continues work on smart glasses
Apple is actively developing its own smart glasses, code-named N50, designed to integrate with Apple Intelligence… The post appeared first on MacDailyNews.

Read more »

Deals: Most affordable M4 MacBook Air best price ever $150 off, iPad A16 $299, AirPods 4/2 Pro $80 off, M3 iPad Air all-time low, more
Today’s Apple deals are now ready to go and there’s some seriously notable offers here. After what felt like a couple weeks of one-off deals and random price drops here and there, we are now tracking a series of new all-time lows across some of Apple’s latest releases starting off with all four colors of its most affordable new M4 MacBook Air with 16GB of RAM at the $849 Amazon all-time low ($150 off). On the iPad side of things, we are also now tracking the best prices to date on brand new condition 11-inch iPad (A16) models as well as solid $100 price drops across just about every model in the M3 iPad Air lineup. The AirPods 4 and AirPods Pro 2 are also on sale right now starting from $100 with as much as $80 in savings alongside the return of all-time lows on the Apple Watch Series 10 lineup from $299. Head below for a closer look.  more…

Read more »

Apple TV+ wins BAFTA Television Craft Awards for ‘Slow Horses,’ ‘Bad Sisters,’ and ‘The Velveteen Rabbit’
Apple TV+ on Sunday earned multiple wins at the BAFTA Television Craft Awards across acclaimed, hit programs including “Slow Horses… The post appeared first on MacDailyNews.

Read more »

9to5Mac Daily: April 28, 2025 – Apple robotics changes, more
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by CardPointers: The best way to maximize your credit card rewards. 9to5Mac Daily listeners can exclusively save 30% and get a $100 Savings Card. more…

Read more »

Vulnerability Summary for the Week of April 21, 2025
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info AdeptLanguage--Adept  Adept is a language for general purpose programming. Prior to commit a1a41b7, the remoteBuild.yml workflow file uses actions/upload-artifact@v4 to upload the mac-standalone artifact. This artifact is a zip of the current directory, which includes the automatically generated .git/config file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an attacker can extract the token from the artifact and use it with the Github API to push malicious code or rewrite release commits in the AdeptLanguage/Adept repository. This issue has been patched in commit a1a41b7. 2025-04-21 9.8 CVE-2025-32958 aeropage--Aeropage Sync for Airtable  The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2025-04-26 8.8 CVE-2025-3914 ALBEDO Telecom--Net.Time - PTP/NTP clock (Serial No. NBC0081P)  ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which could permit an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception. 2025-04-24 8 CVE-2025-2185 Amazon--Amazon Ion Dotnet  When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from the underlying stream while deserializing the binary format. If the Ion data is malformed or truncated, this triggers an infinite loop condition that could potentially result in a denial of service. Users should upgrade to Amazon.IonDotnet version 1.3.1 and ensure any forked or derivative code is patched to incorporate the new fixes. 2025-04-21 7.5 CVE-2025-3857 aonetheme--Service Finder Bookings  The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 5.1. This is due to a lack of restriction on user role in the 'nsl_registration_store_extra_input' function. This makes it possible for unauthenticated attackers to register an account on the site with an arbitrary role, including Administrator, when registering via a social login. The Nextend Social Login plugin must be installed and configured to exploit the vulnerability. 2025-04-25 9.8 CVE-2025-2470 arkenon--Frontend Login and Registration Blocks  The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.7. This is due to the plugin not properly validating a user's identity prior to updating a password. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. 2025-04-24 8.8 CVE-2025-3607 artbees--Jupiter X Core  The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file' parameter of the 'raven_download_file' function. This makes it possible for attackers to inject a PHP Object through a PHAR file. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability may be exploited by unauthenticated attackers when a form is present on the site with the file download action, and the ability to upload files is also present. Otherwise, this would be considered exploitable by Contributor-level users and above, because they could create the form needed to successfully exploit this. 2025-04-26 8.1 CVE-2025-2105 Ashraful Sarkar Naiem--License For Envato  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashraful Sarkar Naiem License For Envato allows PHP Local File Inclusion. This issue affects License For Envato: from n/a through 1.0.0. 2025-04-24 7.5 CVE-2025-39399 cajka--Verification SMS with TargetSMS  The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvr_ajax_handler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for unauthenticated attackers to execute any callable function on the site, such as phpinfo(). 2025-04-24 8.3 CVE-2025-3776 Capturly--Capturly  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Capturly Capturly allows PHP Local File Inclusion. This issue affects Capturly: from n/a through 2.0.1. 2025-04-24 7.5 CVE-2025-39379 cedcommerce--Product Lister for eBay  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce Product Lister for eBay allows PHP Local File Inclusion. This issue affects Product Lister for eBay: from n/a through 2.0.9. 2025-04-24 7.5 CVE-2025-39384 Centreon--Centreon BAM  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Boolean KPi Listing modules) allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1, from 24.04 before 24.04.5, from 23.10 before 23.10.10, from 23.04 before 23.04.10. 2025-04-22 7.2 CVE-2025-3767 Centreon--Centreon  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) allows SQL Injection. A user with high privileges is able to become administrator by intercepting the contact form request and altering its payload. This issue affects Centreon: from 22.10.0 before 22.10.28, from 23.04.0 before 23.04.25, from 23.10.0 before 23.10.20, from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4. 2025-04-24 7.2 CVE-2025-3872 Code Work Web--CWW Portfolio  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Work Web CWW Portfolio allows PHP Local File Inclusion. This issue affects CWW Portfolio: from n/a through 1.3.1. 2025-04-24 7.5 CVE-2025-39359 Code Work Web--Xews Lite  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Work Web Xews Lite allows PHP Local File Inclusion. This issue affects Xews Lite: from n/a through 1.0.9. 2025-04-24 7.5 CVE-2025-39383 Commvault--Command Center Innovation Release  A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution. This issue affects Command Center Innovation Release: 11.38. 2025-04-22 10 CVE-2025-34028 Commvault--Web Server  Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. 2025-04-25 8.8 CVE-2025-3928 ConnectWise--ScreenConnect  ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys.  It is important to note that to obtain these machine keys, privileged system level access must be obtained. If these machine keys are compromised, attackers could create and send a malicious ViewState to the website, potentially leading to remote code execution on the server.  The risk does not originate from a vulnerability introduced by ScreenConnect, but from platform level behavior.  This had no direct impact to ScreenConnect Client. ScreenConnect 2025.4 patch disables ViewState and removes any dependency on it. 2025-04-25 8.1 CVE-2025-3935 craftcms--cms  Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892. 2025-04-25 10 CVE-2025-32432 danielpataki--ACF: Google Font Selector  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in danielpataki ACF: Google Font Selector allows Reflected XSS. This issue affects ACF: Google Font Selector: from n/a through 3.0.1. 2025-04-24 7.1 CVE-2025-39382 dorinabc--Create custom forms for WordPress with a smart form plugin for smart businesses Form builder for WordPress  The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2025-04-26 7.3 CVE-2025-2801 everestthemes--Grace Mag  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in everestthemes Grace Mag allows PHP Local File Inclusion. This issue affects Grace Mag: from n/a through 1.1.5. 2025-04-24 7.5 CVE-2025-39360 EverPress--BruteGuard Brute Force Login Protection  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress BruteGuard - Brute Force Login Protection allows Reflected XSS. This issue affects BruteGuard - Brute Force Login Protection: from n/a through 0.1.4. 2025-04-24 7.1 CVE-2025-39408 eyecix--JobSearch WP Job Board  The JobSearch WP Job Board plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.8.8. This is due to improper configurations in the 'jobsearch_xing_response_data_callback', 'set_access_tokes', and 'google_callback' functions. This makes it possible for unauthenticated attackers to log in as the first connected Xing user, or any connected Xing user if the Xing id is known. It is also possible for unauthenticated attackers to log in as the first connected Google user if the user has logged in, without subsequently logging out, in thirty days. The vulnerability was partially patched in version 2.8.4. 2025-04-25 8.1 CVE-2024-11917 felipe152--Integrao entre Eduzz e Woocommerce  The Integração entre Eduzz e Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wep_opcoes' function in all versions up to, and including, 1.7.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit the default registration role within the plugin's registration flow to Administrator, which allows any user to create an Administrator account. 2025-04-26 8.8 CVE-2025-3906 Franka Robotics--Franka Emika Robot  Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access. 2025-04-24 8.1 CVE-2021-47663 Franka Robotics--Franka Emika Robot  Due to missing authorization an unauthenticated remote attacker can cause a DoS attack by connecting via HTTPS and triggering the shutdown button. 2025-04-24 7.5 CVE-2021-47662 GitLab--GitLab  An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. 2025-04-24 7.7 CVE-2025-1908 GL.iNet--GL-A1300 Slate Plus  A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. Affected is an unknown function of the file plugins.so of the component RPC Handler. The manipulation leads to buffer overflow. It is recommended to upgrade the affected component. 2025-04-26 8 CVE-2025-2851 gopiplus@hotmail.com--Anything Popup  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus@hotmail.com Anything Popup allows Reflected XSS. This issue affects Anything Popup: from n/a through 7.3. 2025-04-24 7.1 CVE-2025-39397 H3C--GR-3000AX  A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/Edit_List_SSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to buffer overflow. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Other functions might be affected as well. 2025-04-22 8 CVE-2025-3854 HCL Software--HCL Leap  Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters. 2025-04-24 7.1 CVE-2023-37534 Hitachi--Hitachi Ops Center Common Services  Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before 11.0.0-04. 2025-04-22 7.1 CVE-2024-46899 Holest Engineering--Spreadsheet Price Changer for WooCommerce and WP E-commerce Light  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light allows PHP Local File Inclusion. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light: from n/a through 2.4.37. 2025-04-24 7.5 CVE-2025-39378 IBM--Hardware Management Console - Power Systems  IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source. 2025-04-22 9.3 CVE-2025-1950 IBM--Hardware Management Console - Power Systems  IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges. 2025-04-22 8.4 CVE-2025-1951 jauharixelion--Xelion Webchat  The Xelion Webchat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the xwc_save_settings() function in all versions up to, and including, 9.1.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. 2025-04-24 8.8 CVE-2025-3058 joedolson--My Tickets Accessible Event Ticketing  The My Tickets - Accessible Event Ticketing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.16. This is due to the mt_save_profile() function not appropriately restricting access to unauthorized users to update roles. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their role to that of an administrator. 2025-04-24 8.8 CVE-2025-3761 Kiotviet--KiotViet Sync  Cross-Site Request Forgery (CSRF) vulnerability in Kiotviet KiotViet Sync allows Stored XSS. This issue affects KiotViet Sync: from n/a through 1.8.4. 2025-04-24 7.1 CVE-2025-39381 kiranpatil353--Add custom page template  The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'acpt_validate_setting' function. This is due to insufficient sanitization of the 'template_name' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server. 2025-04-26 7.2 CVE-2025-3491 ludwigyou--WPMasterToolKit (WPMTK) All in one plugin  The WPMasterToolKit (WPMTK) - All in one plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to read and modify the contents of arbitrary files on the server, which can contain sensitive information. 2025-04-24 7.2 CVE-2025-3300 markparticle--WebServer  A vulnerability was found in markparticle WebServer up to 1.0. It has been declared as critical. Affected by this vulnerability is the function Buffer::HasWritten of the file code/buffer/buffer.cpp. The manipulation of the argument writePos_ leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-21 7.3 CVE-2025-3845 markparticle--WebServer  A vulnerability was found in markparticle WebServer up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file code/http/httprequest.cpp of the component Registration. The manipulation of the argument username/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-21 7.3 CVE-2025-3846 markparticle--WebServer  A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part of the file code/http/httprequest.cpp of the component Login. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-21 7.3 CVE-2025-3847 miraheze--ManageWiki  ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a namespace in Special:ManageWiki/namespaces when using a page prefix (namespace name, which is the current namespace you are renaming) with an injection payload. This issue has been patched in commit f504ed8. A workaround for this vulnerability involves setting `$wgManageWiki['namespaces'] = false;`. 2025-04-21 8 CVE-2025-32956 mra13--WordPress Simple Shopping Cart  The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'file_url' parameter. This makes it possible for unauthenticated attackers to view potentially sensitive information and download a digital product without paying for it. 2025-04-23 8.2 CVE-2025-3529 mra13--WordPress Simple Shopping Cart  The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter 'product_tmp_two' for computing a security hash against price tampering while using 'wspsc_product' to display the product, allowing an unauthenticated attacker to substitute details from a cheaper product and bypass payment for a more expensive item. 2025-04-23 7.5 CVE-2025-3530 neoslab--Database Toolset  The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2025-04-24 9.1 CVE-2025-3065 NIH--BRICS  NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators. 2025-04-23 7.5 CVE-2025-27580 NVIDIA--NeMo Framework  NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. 2025-04-22 7.6 CVE-2025-23249 NVIDIA--NeMo Framework  NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering. 2025-04-22 7.6 CVE-2025-23250 NVIDIA--NeMo Framework  NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. 2025-04-22 7.6 CVE-2025-23251 Odin_Design--Vikinger  The Vikinger theme for WordPress is vulnerable to privilege in all versions up to, and including, 1.9.30. This is due to insufficient user_meta restrictions in the 'vikinger_user_meta_update_ajax' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to escalate their privileges to Administrator-level. 2025-04-25 8.8 CVE-2025-2238 PHPGurukul--COVID19 Testing Management System  A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 7.3 CVE-2025-3971 PHPGurukul--COVID19 Testing Management System  A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3972 PHPGurukul--COVID19 Testing Management System  A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument mobnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3973 PHPGurukul--COVID19 Testing Management System  A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-phlebotomist.php?pid=11. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3974 PHPGurukul--COVID19 Testing Management System  A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /new-user-testing.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3976 Red Hat--Red Hat  A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled. 2025-04-25 8.8 CVE-2025-3641 Red Hat--Red Hat  A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled. 2025-04-25 8.8 CVE-2025-3642 Red Hat--Red Hat  A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data-including names, contact information, and hashed passwords-via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability. 2025-04-25 7.5 CVE-2025-32044 Red Hat--Red Hat  A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA). 2025-04-25 7.1 CVE-2025-3625 redis--redis  Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from "NOAUTH" responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates. 2025-04-23 7.5 CVE-2025-21605 Samba--ppp  The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges. 2025-04-22 9.3 CVE-2024-58250 SAP_SE--SAP NetWeaver (Visual Composer development server)  SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system. 2025-04-24 10 CVE-2025-31324 SeaTheme--BM Content Builder  The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ux_cb_tools_import_item_ajax AJAX action in all versions up to, and including, 3.16.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. 2025-04-25 8.8 CVE-2025-1279 Synology--DiskStation Manager (DSM)  Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows remote attackers to read arbitrary files via unspecified vectors. 2025-04-23 7.5 CVE-2025-1021 Tecnick--TCExam  CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 2025-04-22 8.8 CVE-2025-23176 TeconceTheme--Mayosis Core  The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. 2025-04-25 7.5 CVE-2025-1565 ThemeMove--EduMall - Professional LMS Education Center WordPress Theme  The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_lazy_load_template' AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. 2025-04-26 8.1 CVE-2025-2101 TOTOLINK--N150RT  A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3988 TOTOLINK--N150RT  A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the argument Hostname leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3989 TOTOLINK--N150RT  A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3990 TOTOLINK--N150RT  A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3991 v1rustyle--Flynax Bridge  The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. 2025-04-24 9.8 CVE-2025-3603 v1rustyle--Flynax Bridge  The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. 2025-04-24 9.8 CVE-2025-3604 Vestel--AC Charger EVC04  Vestel AC Charger version 3.75.0 contains a vulnerability that could enable an attacker to access files containing sensitive information, such as credentials which could be used to further compromise the device. 2025-04-24 7.5 CVE-2025-3606 weDevs--Appsero Helper  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Appsero Helper allows SQL Injection. This issue affects Appsero Helper: from n/a through 1.3.4. 2025-04-24 8.5 CVE-2025-39377 withstars--Books-Management-System  A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. 2025-04-27 7.3 CVE-2025-3960 withstars--Books-Management-System  A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. 2025-04-27 7.3 CVE-2025-3963 wp-configurator--Configurator Theme Core  The Configurator Theme Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.7. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change escalate their privileges to Administrator. 2025-04-24 8.8 CVE-2025-3101 wpeverest--User Registration  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration allows Reflected XSS. This issue affects User Registration: from n/a through n/a. 2025-04-24 7.1 CVE-2025-39400 WPoperation--Arrival  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPoperation Arrival allows PHP Local File Inclusion. This issue affects Arrival: from n/a through 1.4.5. 2025-04-24 7.5 CVE-2025-32921 WPoperation--Opstore  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPoperation Opstore allows PHP Local File Inclusion. This issue affects Opstore: from n/a through 1.4.5. 2025-04-24 7.5 CVE-2025-39387 WPQuark--eForm - WordPress Form Builder  The eForm - WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.18.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2025-04-24 7.2 CVE-2025-1294 wpsoul--Greenshift animation and page builder blocks  The Greenshift - animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The arbitrary file upload was sufficiently patched in 11.4.5, but a capability check was added in 11.4.6 to properly prevent unauthorized limited file uploads. 2025-04-22 8.8 CVE-2025-3616 WPXpro--Xpro Elementor Addons - Pro  The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access the widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. 2025-04-26 8.8 CVE-2024-13808 Yoel Geva--Android App  CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 2025-04-21 7.5 CVE-2025-23174 zamartz--Checkout Field Visibility for WooCommerce  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zamartz Checkout Field Visibility for WooCommerce allows PHP Local File Inclusion. This issue affects Checkout Field Visibility for WooCommerce: from n/a through 1.2.3. 2025-04-24 7.5 CVE-2025-39391 Zyxel--USG FLEX H series uOS firmware  An incorrect permission assignment vulnerability in the PostgreSQL commands of the USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting malicious scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system configuration is only possible if the administrator has not logged out and the token remains valid. 2025-04-22 7.8 CVE-2025-1731 Back to top Medium Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 201206030--novel-cloud  A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the file novel-cloud-master/novel-book/novel-book-service/src/main/resources/mapper/BookInfoMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 6.3 CVE-2025-3956 aeropage--Aeropage Sync for Airtable  The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts. 2025-04-26 4.3 CVE-2025-3915 AMTT--Hotel Broadband Operation System  A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlog_down.php. The manipulation of the argument ProtocolType leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 4.7 CVE-2025-3983 Anps--Anps Theme plugin  The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2025-04-26 6.5 CVE-2024-13812 Apereo--CAS  A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6webapp-mgmtcas-management-webapp-supportsrcmainjavaorgapereocasmgmtserviceswebRegisteredServiceSimpleFormController.java of the component Groovy Code Handler. The manipulation leads to code injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 5 CVE-2025-3984 Apereo--CAS  A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown code of the file cas-5.2.6corecas-server-core-configuration-metadata-repositorysrcmainjavaorgapereocasmetadatarestCasConfigurationMetadataServerController.java. The manipulation of the argument Name leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 4.3 CVE-2025-3986 Axis Communications AB--AXIS Camera Station Pro  Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. 2025-04-23 6.1 CVE-2025-1056 Axis Communications AB--AXIS Camera Station Pro  Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when recording video. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. 2025-04-23 5.9 CVE-2025-0926 bdthemes--Element Pack Addons for Elementor Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder  The Element Pack Addons for Elementor - Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like Dual Button, Creative Button, Image Stack and more in all versions up to, and including, 5.10.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2025-04-26 6.4 CVE-2025-1458 bitpressadmin--Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder  The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. 2025-04-25 4.9 CVE-2025-2580 bplugins--Lottie Player- Great Lottie Player Solution  The Lottie Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the uploaded file. 2025-04-24 6.4 CVE-2025-2579 buildwps--Prevent Direct Access Protect WordPress Files  The Prevent Direct Access - Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due to a misconfigured capability check on the 'pda_lite_custom_permission_check' function in versions 2.8.6 to 2.8.8.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to access and change the protection status of media. 2025-04-25 5.4 CVE-2025-3861 buildwps--Prevent Direct Access Protect WordPress Files  The Prevent Direct Access - Protect WordPress Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'generate_unique_string' due to insufficient randomness of the generated file name. This makes it possible for unauthenticated attackers to extract sensitive data including files protected by the plugin if the attacker can determine the file name. 2025-04-25 5.3 CVE-2025-3923 checkpoint--Check Point Mobile Access  For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties. 2025-04-27 5.4 CVE-2024-52888 cilium--cilium  Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue. 2025-04-21 4 CVE-2025-32793 codeandreload--Custom Admin-Bar Favorites  The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. 2025-04-25 6.1 CVE-2025-3868 CodeCanyon--RISE Ultimate Project Manager  A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php/team_members/save_profile_image/ of the component Profile Picture Handler. The manipulation of the argument profile_image_file leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-22 4.3 CVE-2025-3855 codeprojects--News Publishing Site Dashboard  A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument cat_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 6.3 CVE-2025-3968 codeprojects--News Publishing Site Dashboard  A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument category_image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 6.3 CVE-2025-3969 codeprojects--Patient Record Management System  A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 6.3 CVE-2025-3955 CODESYS--CODESYS Visualization  An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing. 2025-04-23 5.3 CVE-2025-2595 cuba-platform--cuba  CUBA Platform is a high level framework for enterprise applications development. Prior to version 7.2.23, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in version 7.2.23. A workaround is provided on the Jmix documentation website. 2025-04-22 6.5 CVE-2025-32959 cuba-platform--jpawebapi  The Cuba JPA web API enables loading and saving any entities defined in the application data model by sending simple HTTP requests. Prior to version 1.1.1, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in version 1.1.1. A workaround is provided on the Jmix documentation website. 2025-04-22 6.4 CVE-2025-32961 cuba-platform--restapi  The CUBA REST API add-on performs operations on data and entities. Prior to version 7.2.7, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in version 7.2.7. A workaround is provided on the Jmix documentation website. 2025-04-22 6.4 CVE-2025-32960 dazhouda--lecms  A vulnerability was found in dazhouda lecms 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/view/default/user_set.htm. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 4.3 CVE-2025-3978 dazhouda--lecms  A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-password-ajax-1 of the component Password Change Handler. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 4.3 CVE-2025-3979 devitemsllc--ShopLentor WooCommerce Builder for Elementor & Gutenberg +20 Modules All in One Solution (formerly WooLentor)  The ShopLentor - WooCommerce Builder for Elementor & Gutenberg +20 Modules - All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.2 via the woolentor_template_proxy function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application, and can be used to query and modify information from internal services. 2025-04-25 6.5 CVE-2025-3775 elextensions--ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes  The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value_filter' parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2025-04-24 6.5 CVE-2025-3280 FileZ--Client  An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user. 2025-04-25 5 CVE-2025-2068 FileZ--Client  A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user. 2025-04-25 5 CVE-2025-2069 FileZ--Client  An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user. 2025-04-25 5 CVE-2025-2070 Franka Robotics--Franka Emika Robot  Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames. 2025-04-24 5.3 CVE-2021-47664 GitLab--GitLab  An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. 2025-04-24 6.5 CVE-2025-0639 GitLab--GitLab  An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1. 2025-04-24 4.3 CVE-2024-12244 GL.iNet--GL-A1300 Slate Plus  A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been declared as problematic. This vulnerability affects unknown code of the component API. The manipulation leads to inefficient regular expression complexity. It is recommended to upgrade the affected component. 2025-04-26 5.7 CVE-2025-2811 Grafana--Grafana  The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript. 2025-04-23 6.8 CVE-2025-2703 HCL Software--HCL Leap  Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. 2025-04-24 6.3 CVE-2024-30113 HCL Software--HCL Leap  Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications. 2025-04-24 6.5 CVE-2024-30147 HCL Software--HCL Leap  Insufficient default configuration in HCL Leap allows anonymous access to directory information. 2025-04-24 5.3 CVE-2023-45720 HCL Software--HCL Leap  Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications. 2025-04-24 4.6 CVE-2022-44759 HCL Software--HCL Leap  Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications. 2025-04-24 4.6 CVE-2022-44760 HCL Software--HCL Leap  Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem. 2025-04-24 4.1 CVE-2024-30148 HCL Software--HCL SX  HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts. 2025-04-25 6.5 CVE-2024-30152 Heateor Support--Sassy Social Share  URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Heateor Support Sassy Social Share allows Phishing. This issue affects Sassy Social Share: from n/a through 3.3.73. 2025-04-24 4.7 CVE-2025-39404 Hitachi--Hitachi Ops Center Common Services  Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00. 2025-04-22 5.5 CVE-2025-2300 IBM--InfoSphere Information Server  IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. 2025-04-23 6.3 CVE-2024-22351 IBM--InfoSphere Information Server  IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system. 2025-04-23 4.3 CVE-2025-25045 IBM--Maximo Asset Management  IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. 2025-04-25 5.5 CVE-2025-2986 IBM--WebSphere Application Server  IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. 2025-04-22 4.1 CVE-2025-27907 iteachyou--Dreamer CMS  A vulnerability was found in iteachyou Dreamer CMS up to 4.1.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/attachment/download of the component Attachment Handler. The manipulation of the argument ID leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 4.3 CVE-2025-3977 itwanger--paicoding  A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 5.4 CVE-2025-3967 itwanger--paicoding  A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1&homeSelectType=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 4.3 CVE-2025-3966 jeremyshapiro--FuseDesk  The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'successredirect' parameter in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2025-04-24 6.4 CVE-2025-3832 jmix-framework--jmix  Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers could manipulate the FileRef parameter to access files on the system where the Jmix application is deployed, provided the application server has the necessary permissions. This can be accomplished either by modifying the FileRef directly in the database or by supplying a harmful value in the fileRef parameter of the `/files` endpoint of the generic REST API. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. 2025-04-22 6.5 CVE-2025-32950 jmix-framework--jmix  Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. 2025-04-22 6.4 CVE-2025-32951 jmix-framework--jmix  Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. 2025-04-22 6.5 CVE-2025-32952 kitae-park--Mang Board WP  The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. 2025-04-24 4.4 CVE-2025-3435 lamarant--Buddypress Force Password Change  The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plugin not properly validating a user's identity prior to updating their password through the 'bp_force_password_ajax' function in all versions up to, and including, 0.1. This makes it possible for authenticated attackers, with subscriber-level access and above and under certain prerequisites, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their accounts. 2025-04-24 4.2 CVE-2025-3793 magepeopleteam--Booking and Rental Manager  Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Booking and Rental Manager: from n/a through 2.3.8. 2025-04-24 5.3 CVE-2025-39390 Mattermost--Mattermost  Mattermost versions 10.4.x

Read more »

DOGE Worker’s Code Supports NLRB Whistleblower
A whistleblower at the National Labor Relations Board (NLRB) alleged last week that denizens of Elon Musk's Department of Government Efficiency (DOGE) siphoned gigabytes of data from the agency's sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one of those code bundles shows it is remarkably similar to a program published in January 2025 by Marko Elez, a 25-year-old DOGE employee who has worked at a number of Musk's companies.

Read more »

Whistleblower: DOGE Siphoned NLRB Case Data
A security architect with the National Labor Relations Board (NLRB) alleges that employees from Elon Musk's Department of Government Efficiency (DOGE) transferred gigabytes of sensitive data from agency case files in early March, using short-lived accounts configured to leave few traces of network activity. The NLRB whistleblower said the unusual large data outflows coincided with multiple blocked login attempts from an Internet address in Russia that tried to use valid credentials for a newly-created DOGE user account.

Read more »

Funding Expires for Key Cyber Vulnerability Database
A critical resource that cybersecurity professionals worldwide rely on to identify, mitigate and fix security vulnerabilities in software and hardware is in danger of breaking down. The federally funded, non-profit research and development organization MITRE warned today that its contract to maintain the Common Vulnerabilities and Exposures (CVE) program -- which is traditionally funded each year by the Department of Homeland Security -- expires on April 16.

Read more »

Trump Revenge Tour Targets Cyber Leaders, Elections
President Trump last week revoked security clearances for Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA) who was fired by Trump after declaring the 2020 election the most secure in U.S. history. The White House memo, which also suspended clearances for other security professionals at Krebs's employer SentinelOne, comes as CISA is facing huge funding and staffing cuts.

Read more »

China-based SMS Phishing Triad Pivots to Banks
China-based purveyors of SMS phishing kits are enjoying remarkable success converting phished payment card data into mobile wallets from Apple and Google. Until recently, the so-called “Smishing Triad” mainly impersonated toll road operators and shipping companies. But experts say these groups are now directly targeting customers of international financial institutions, while dramatically expanding their cybercrime infrastructure and support staff.

Read more »

Patch Tuesday, April 2025 Edition
Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft's most-dire "critical" rating, meaning malware or malcontents could exploit them with little to no interaction from Windows users.

Read more »

Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe
A Minnesota cybersecurity and computer forensics expert whose testimony has featured in thousands of courtroom trials over the past 30 years is facing questions about his credentials and an inquiry from the Federal Bureau of Investigation (FBI). Legal experts say the inquiry could be grounds to reopen a number of adjudicated cases in which the expert's testimony may have been pivotal.

Read more »

How Each Pillar of the 1st Amendment is Under Attack
In an address to Congress this month, President Trump claimed he had "brought free speech back to America." But barely two months into his second term, the president has waged an unprecedented attack on the First Amendment rights of journalists, students, universities, government workers, lawyers and judges. This story explores a slew of recent actions by the Trump administration that threaten to undermine all five pillars of the First Amendment to the U.S. Constitution, which guarantees freedoms concerning speech, religion, the media, the right to assembly, and the right to petition the government and seek redress for wrongs.

Read more »

When Getting Phished Puts You in Mortal Danger
Many successful phishing attacks result in a financial loss or malware infection. But falling for some phishing scams, like those currently targeting Russians searching online for organizations that are fighting the Kremlin war machine, can cost you your freedom or your life.

Read more »

Arrests in Tap-to-Pay Scheme Powered by Phishing
Authorities in at least two U.S. states last week independently announced arrests of Chinese nationals accused of perpetrating a novel form of tap-to-pay fraud using mobile devices. Details released by authorities so far indicate the mobile wallets being used by the scammers were created through online phishing scams, and that the accused were relying on a custom Android app to relay tap-to-pay transactions from mobile devices located in China.

Read more »

Amazon is selling the Black Titanium Apple Watch Ultra 2 for 9% off MSRP right now
Amazon is offering a $70 (9%) discount on the Black Titanium Apple Watch Ultra 2 this week. With the discount, the Watch is now $729 shipped. That's the lowest price available for this Ultra 2 Watch: - Black Titanium Apple Watch Ultra 2: $729, $70 off MSRP The same discount is also available on many other Ultra 2 Watches at Amazon. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Sunday Sale: Apple AirPods for up to $80 off MSRP
Amazon has Apple AirPods in stock and on sale for up to $80 off MSRP including free shipping: - AirPods 4: $99.99, $30 off - AirPods 4 with ANC: $148.99, $30 off - AirPods Pro 2 with USB-C: $169.99, $80 off Best Buy has AirPods on sale for up to $80 off MSRP as well. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - AirPods 4: $99.99, $30 off - AirPods 4 with ANC: $149.99, $30 off - AirPods Pro 2 with USB-C: $169.99, $80 off Give the current tariff environment and possible supply chain issues, act on these prices now while they last. Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Apple’s M4 MacBook Airs on sale for $150 off MSRP on Best Buy’s online store
Best Buy has new 13" M4 and 15" M4 MacBook Airs in stock and on sale for $150 off Apple's MSRP on their online store. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 13" M4 MacBook Air (16GB/256GB): $849, $150 off - 13" M4 MacBook Air (16GB/512GB): $1049, $150 off - 13" M4 MacBook Air (24GB/512GB): $1249, $150 off - 15" M4 MacBook Air (16GB/256GB): $1049, $150 off - 15" M4 MacBook Air (16GB/512GB): $1249, $150 off - 15" M4 MacBook Air (24GB/512GB): $1449, $150 off For the latest sales & prices, see our 13" MacBook Air Price Tracker and 15" MacBook Air Price Tracker, both updated daily.

Read more »

B&H has 16-inch M4 Max MacBook Pros on sale for $320-$370 off MSRP
B&H Photo is offering a $320-$370 discount on new Space Black 16-inch MacBook Pros with M4 Max CPUs right now. B&H offers free 1-2 day shipping to most US addresses: - 16" M4 Max MacBook Pro (36GB/1TB/Black): $3179, $320 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB/Black): $3629, $370 off MSRP Their prices are the lowest available today for new 16" M4 Max MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Apple iPhone 14 Plus available for $199 at Visible with this coupon code
Purchase an iPhone 14 Plus (128 GB) on the Visible+ plan on Verizon's low-cost carrier Visible for only $199 using code SWEETDEAL. Offer is good for the next 21 days. Free overnight delivery is available on all new phones. Visible uses Verizon's 5G nationwide network and offers plans with unlimited data for $35 per month. For the latest prices and deals, see our iPhone Price Tracker, updated daily.

Read more »

Take $100 off any new iPhone at Unreal Mobile
Unreal Mobile, an MVNO using AT&T and T-Mobile's networks, is offering a $100 discount on any new iPhone with service. This includes new iPhone 16 models as well as iPhone 15, 13, and SE phones. New phones come with their Unlimited 20GB high-speed plan for $30 per month, billed at $90 every 3 months. Slower speeds apply after 20GB per month. Phones are locked to Unreal Mobile for 12 months of service. This deal is live today at Unreal Mobile. For the latest prices & sales, keep an eye on our iPhone Price Tracker, updated daily.

Read more »

Amazon has new 15-inch M4 MacBook Airs now on sale for up to $102 off Apple’s MSRP
Amazon is offering discounted prices ranging up to $102 off MSRP on new Apple 15" M4 MacBook Airs. Sale prices apply to most colors and configurations. Be sure to select Amazon as the seller, rather than a third-party: - 15" M4 MacBook Air (16GB/256GB): $1117, $82 off - 15" M4 MacBook Air (16GB/512GB): $1297, $102 off - 15" M4 MacBook Air (24GB/512GB): $1429, $100 off For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Amazon now has 13-inch M4 MacBook Airs on sale starting at $929, up to 9% off Apple’s MSRP
Amazon is offering discounted prices ranging up to $92 off MSRP on new Apple 13" M4 MacBook Airs. Sale prices apply to most colors and configurations. Be sure to select Amazon as the seller, rather than a third-party: - 13" M4 MacBook Air (16GB/256GB): $929, $70 off - 13" M4 MacBook Air (16GB/512GB): $1129, $70 off - 13" M4 MacBook Air (24GB/512GB): $1307, $92 off For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

14-inch M4 MacBook Pros on sale for up to $170 off Apple’s MSRP at B&H
B&H Photo has 14-inch M4 MacBook Pros on sale for up to $170 off MSRP right now. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 MacBook Pro (16GB/512GB): $1469, $130 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1649, $150 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1829, $170 off MSRP These are currently the lowest prices available for new M4-powered 14" MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

16-inch M4 Pro MacBook Pros on sale for up to $250 off Apple’s MSRP at B&H
B&H Photo is offering up to $250 off on Black 16-inch MacBook Pros with M4 Pro CPUs right now. B&H offers free 1-2 day shipping to most US addresses: - 16" M4 Pro MacBook Pro (24GB/512GB): $2289, $210 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2649, $250 off MSRP Their prices are the lowest available today for new 16" MacBook Pros among the Apple retailers we track. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Clearance 24-inch M3 iMac on sale for $999
Best Buy has clearance 24-inch M3 iMacs (8GB/256GB) on sale for $999 on their online store. Multiple colors are available. Order online and choose free shipping or free local store pickup (if available). Sale prices for online orders online: - 24-inch M3 iMac (8GB/256GB): $999, save $400 See our iMac Price Tracker for the latest sales from Apple's retailers.

Read more »

Clearance 14-inch M3 Pro and M3 Max MacBook Pros on sale starting at only $1499
Best Buy has clearance 14" MacBook Pros with M3 Pro and M3 Max CPUs in stock online and on sale starting at only $1499: - 14" M3 Pro MacBook Pro (18GB/512GB): $1499, $500 off original MSRP - 14" M3 Pro MacBook Pro (18GB/1TB): $1899, $500 off original MSRP - 14" M3 Max MacBook Pro (36GB/1TB): $2399, $800 off original MSRP Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »