Save $50 on Powerbeats Pro, $70 on Beats Solo Pro
Amazon is again offering some terrific discounts on the newest Beats headphones. You can save $70 on Beats Solo Pro, $50 on Powerbeats Pro, and $20 on brand-new Powerbeats for a limited time only. There’s also $40 off Beats Solo3, and more than $50 off the Pill+ wireless speaker. Enjoy the discounts today before they […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Ulysses 20.2
Brings a few helpful tweaks to the writing app. ($39.99 annual subscription, free update, 20.5 MB)

Read more »

1,000 fake iPhones from Hong Kong used in AppleCare fraud
More than a thousand ‘deceptively real-looking’ fake iPhones were used to carry out an AppleCare fraud operating between Hong Kong and Switzerland. Two Chinese citizens, a mother and son, have been charged with fraud. The son faces a four-year prison sentence, as well as being expelled from Switzerland, where he has lived for almost 20 years … more… The post appeared first on 9to5Mac.

Read more »

Chinese voice assistant company lawsuit could ban Siri in Ch...
A company based in Shanghai has filed a patent infringement lawsuit that could stop Apple from offering products with its Siri voice assistant in China, the Wall Street Journal says. The company Shanghai Zhizhen Network Technology is suing Apple for 10 billion yuan ($1.43 billion) due to Siri reportedly infringing on its intellectual property for […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

MarsEdit 4.4.2
Adds the Micro.blog platform as an officially supported publishing system and addresses a variety of bugs and crashes. ($49.95 new, free update, 15.9 MB)

Read more »

9to5Mac Daily: August 03, 2020 – AAPL earnings, iPhone 12...
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by Direct Mail: Create and send great looking email newsletters with Direct Mail, an easy to use email marketing app for the Mac. Get started for free and save 10% when you sign up for any pricing plan.  more… The post 9to5Mac Daily: August 03, 2020 – AAPL earnings, iPhone 12 delay confirmed appeared first on 9to5Mac.

Read more »

William English, who helped build the first computer mouse, ...
William English, the engineer and researcher who helped build the first computer mouse and, in 1968, orchestrated an elaborate demonstration of… The post William English, who helped build the first computer mouse, dead at 91 appeared first on MacDailyNews.

Read more »

∞ Rene Ritchie makes sense of the iPhone 12 5G mess
[VIDEO] This is a pretty solid walkthrough of how 5G will come to iPhone users (video embedded in main Loop post). Especially useful is the explainer on the differences between FR2 (the super high speed branch of 5G) and FR1 (the flavor that will roll out to the vast majority of users, those not in spitting distance of the 5G towers). Lots of lingo, but worth your time. 5G is coming.

Read more »

Warren Buffett’s $35B stake in AAPL tripled in value to $1...
Warren Buffett’s conglomerate Berkshire Hathaway has seen its $35B stake in AAPL triple in value to around $104B following the stock reaching a new all-time high on Friday … more… The post Warren Buffett’s $35B stake in AAPL tripled in value to $104B appeared first on 9to5Mac.

Read more »

Discussing Apple’s App Store with Rogue Amoeba’s...
Following months of drama about Apple's App Store policies and procedures, your AppleInsider Podcast hosts talked to Mac developer and founder of Rogue Amoeba software, Paul Kafasis, to get the developer's point of view.After the House antitrust hearing, developers have spoken out against statements made by Apple CEO Tim Cook. On this special episode on the AppleInsider podcast, longtime Mac developer and founder of software company Rogue Amoeba, Paul Kafasis joins us for a special interview.With over 20 years of experience in software development, Paul comments on several claims made by Tim Cook during the hearing, Apple's 30% revenue cut from App Store purchases, and on the opening of iOS and iPadOS to side-loading apps.Read more...

Read more »

Apple removes 30,000 apps from App Store in China
According to data from research firm Qimai, Apple on Saturday pulled 29,800 apps from the company's App Store in China, including more than… The post appeared first on MacDailyNews.

Read more »

New ‘unpatchable’ exploit allegedly found on Apple’s S...
Filipe Espósito, 9to5Mac: One of the major security enhancements Apple has brought to its devices over the years is the Secure Enclave chip, which encrypts and protects all sensitive data stored on the devices. Last month, however, hackers claimed they found a permanent vulnerability in the Secure Enclave, which could put data from iPhone, iPad, and even Mac users at risk. Good explainer. A few key points: This vulnerability is permanent. Because the Secure Enclave is embedded in the processor and not patchable, it cannot be fixed on a specific device. That said, Apple has fixed the design itself, starting with the A12. So if you've got a device with an A7 through A11, that issue exists on your device. The good news? To take advantage of the exploit, a hacker would need physical access to your device. Here's a list of devices that have the Arm A12. If you've got one of these, or newer, you've got the fix in place: iPhone XS and XS Max iPhone XR iPad Mini (5th generation) iPad Air (2019, 3rd generation) ∞ Read this on The Loop

Read more »

Apple iPhones top the list of best handsets for depreciation...
Ahead of the rumored iPhone 12 launch, a new study from online phone retailer, comparemymobile.com, has uncovered the best and worst handsets for depreciation - with Apple taking the top spot and Sony coming in last place.

Read more »

Instantly triple your MacBook’s screen real estate with th...
Few things improve productivity than having more screen space to play with. Plenty of us rely on two screens to keep our workflows straight. And if you’re a gamer, you might want even more screen so your experience is truly immersive. With this lightweight add-on, you can get all of the above straight from your […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

iPhone 12 could get two separate releases
The iPhone 12 release could be staggered with certain models going on sale before the others, a new report from Digitimes suggests. This year, Apple is expected to release four iPhone models. These are likely to include a regular iPhone 12 in 5.4-inch and 6.1-inch models, and an iPhone 12 Pro in 6.1-inch and 6.7-inch […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

American Airlines adds free inflight Apple TV+ streaming
Zach Griff, The Points Guy: Beginning Aug. 1, American now offers free inflight streaming of Apple TV+ shows, an airline spokesperson confirmed with TPG. This new streaming option is available to every flyer with a Wi-Fi capable device on flights that feature internet access. However, you don’t need to pay for internet in order to stream — you’ll just need the AA app on your phone or tablet or visit aainflight.com on your laptop. If and when you ever fly again, be sure to download the AA app (or whatever airline you're traveling on) to your device before you leave. That way you won't have to pay for internet just to download the app. If your flight is equipped with seat-back entertainment, you’ll find a selection of Apple Originals preloaded on the screen. The deal is exclusive to American, and builds on their existing Apple Music streaming deal. Smart for American, smart for Apple. On Apple's side, it builds the Apple TV+ brand, builds the exposure and audience for the various shows.∞ Read this on The Loop

Read more »

Panera now offers 3% Daily Cash Back with the Apple Card
Panera has announced that customers can now get unlimited 3% Daily Cash Back when they use an Apple Card with Apple Pay in the Panera app, on Panera.com or for at-register purchases in bakery-cafes nationwide.

Read more »

Today at Apple and Sentrock turn Chicago into a virtual clas...
Last week, artists from Chicago shared their inspiration with hundreds of students across the city through Sentrock’s Summer Studio. The collaboration with Today at Apple brought virtual sessions to Chicagoland youth to keep creativity flowing even during challenging times. more… The post Today at Apple and Sentrock turn Chicago into a virtual classroom for hundreds of students appeared first on 9to5Mac.

Read more »

Look for the non-5G iPhone 12 in October, the 5G version in ...
Apple may launch its 5G iPhones in two stages, with two 6.1-inch models in the first and another two 6.7- and 5.4-inch devices in the second, claims DigiTimes.

Read more »

‘The Oprah Conversation’ on Apple TV+ is a Hard But Wort...
Ever since Oprah Winfrey signed up to Apple TV+, its never been quite clear, save from being a big name, what her role on the platform is. The first thing she did was bring her famous Book Club to Apple's new service and then responded to the COVID-19 outbreak with a series discussing that, as part of Apple's general response to the pandemic. However, it was fair to assume that the queen of talk shows would eventually launch one at her new home, and so it is. The Oprah Conversation looks set to tackle some of the biggest issues of the day. An Uncomfortable Conversation With Oprah The Oprah Conversation starts with a two-part discussion about racism with NFL star Emmanuel Acho. Mr. Acho recently launched a series on YouTube called Uncomfortable Conversations With a Black Man, in which he aims to help educate white people in a bid to tackle racial inequality and racism. Those uncomfortable conversations continue with Oprah and a variety of members of the public on Apple TV+. It is, as it should be, a hard watch. Mr. Acho is a smart and eloquent speaker, cutting through to the core of any issue that arises. It's an endorsement of his skill and intelligence that Oprah, comparatively, says little, allowing him to take the lead. Perhaps because the participants are separated, all on different screens, the tone of the conversation, however difficult, is largely conciliatory, not confrontational. It is also true that no 'dissent' really exists. Participants may disagree with Mr. Acho on specific issues at certain moments, although that's rare, but those moments are navigated respectfully. There is no doubt that the participants came away from the conversation better informed - you can see 'lightbulb' moments throughout. The same is true for the viewer. Apple TV+ Provides Space to Tackle Big Topics These first two episodes of The Oprah Conversation are a hard watch, but a worthwhile one. You may or may not agree with everything that is said during the course of this conversation or those that follow, but Apple is undoubtedly right to use its foray into media to provide the space for people to have them.

Read more »

Apple hit with $1.4 billion lawsuit over China’s conti...
A dispute over Apple's alleged use of Chinese patents in Siri is continuing with a new lawsuit demanding $1.43 billion in damages, and could potentially see Apple banned from China.The Siri interface icon in iOS 13. Credit: AppleEight years after first suing Apple, Chinese company Shanghai Zhizhen Network Technology is again pursuing the company with a lawsuit. This one repeats the contention that Apple has infringed on its patents, and is calling for Apple to be prevented from selling its devices in China.Read more...

Read more »

Creative SXFI Air headphones are a great product despite som...
Overall, the US$139.99 Creative SXFI Air headphones are a great product, although initial setup was the most complicated of any headphones I've ever used. It involved downloading a special app and taking pictures of my face and each ear. The app then used the images to make a personalized profile for me to optimize the sound quality. While this seemed like an interesting concept, it still needs a bit of work for the optimization.

Read more »

Take 64% off: PIQO 1080p Mini Projector
Looking for something fun to do with family and friends? Why not have your own movie night under the stars, or watch your favorite flick (or shows) on a REALLY big screen? The PIQO 1080p Mini Projector is a tiny, cube-shaped projector that can blast a bright image up to 240 inches diagonally. Normally retailing for $799, AWT readers can get this pocket-sized wonder for just $279.99 for a limited time.

Read more »

NetMarketShare: iOS market share up slightly in July, macOS ...
According to the latest market share survey from NetMarketShare, the market share for Apple’s iOS was up last month, but macOS dipped.

Read more »

Shanghai claims Apple’s Siri infringes on its patents
Another day, another lawsuit. Shanghai Zhizhen Network Technology Company, Shanghai company that was recently awarded a Chinese patent for a voice assistant similar to Apple Inc.’s Siri, is suing Apple for patent infringement.

Read more »

Chinese AI Company Shanghai Zhizhen Sues Apple for $1.4 Bill...
Shanghai Zhizhen Network Technology Co. said today it’s suing Apple for US$1.43 billion, claiming Apple violated its patent with Siri (via WSJ). Shanghai Zhizhen Lawsuit In late June, China’s Supreme Court ruled that Shanghai Zhizhen owns a patent for a virtual assistant with technology similar to Siri. This was the result of a legal battle between the two companies that lasted eight years. Shanghai Zhizhen now alleges that Apple is infringing on that patent and wants Apple to stop sales, production, and the use of products using Siri. If Shanghai Zhizhen applies for a preliminary injunction, the court could decide to ban Apple from selling products loaded with Siri in China for the duration of the trial, said Fang Jianwei [...] However, Mr. Fang said such injunctions have to meet strict conditions and are rarely granted by Chinese courts. And the patent-infringement suit isn’t a surefire win for Shanghai Zhizhen, he added. This isn’t Apple’s only legal battle in China. In 2016 it lost a trademark battle with Xintong Tiandi Technology Co, which sells various leather goods under the label ‘IPHONE.”

Read more »

President Trump gives Microsoft 45 days to buy TikTok’s U....
Microsoft on Sunday confirmed that U.S. President Trump and Microsoft CEO Satya Nadella has discussed Microsoft exploring a purchase of TikTok… The post President Trump gives Microsoft 45 days to buy TikTok’s U.S. business appeared first on MacDailyNews.

Read more »

American Airlines now offering inflight streaming of Apple T...
American Airlines has expanded its partnership with Apple. The Fort Worth, Texas-based carrier now offers free inflight streaming of Apple TV+ shows, reports The Points Guy.

Read more »

Google to buy stake in ADT in $450M Google Nest security dea...
Announced on Monday morning, the deal, worth $450 million, will establish a long-term commitment to partnership with ADT and will give Google a 6.6% share of the company.The move will combine Google Nest's hardware with ADT's installation, service, and monitoring. Google Nest customers will be offered both DIY and professionally installed security services."We're excited to partner with ADT to further our mission of building helpful devices for the home," said Rishi Chandra, GM and Vice President of Nest.Read more...

Read more »

Warren Buffett’s stake in Apple now worth $100 billion
Apple's latest stock valuation means Warren Buffett's stock holdings are now worth three times what he originally paid for them, starting in 2016.Berkshire Hathaway's Warren BuffettTwo weeks after his Apple stake was valued at $91.3 billion, investor Warren Buffett has seen that rise to around $104 billion. It follows Apple's rising share value, which had a 10% increase after the company reported its record-breaking June quarterly figures.Read more...

Read more »

Three Charged in July 15 Twitter Compromise
Three individuals have been charged for their alleged roles in the July 15 hack on Twitter, an incident that resulted in Twitter profiles for some of the world's most recognizable celebrities, executives and public figures sending out tweets advertising a bitcoin scam. 

Read more »

How computer security is depicted in movies – Intego Mac P...
We talk about an update on the Great Twitter Hack of 2020, discuss a ransomware attack on Garmin that shut down the company’s services, and even its assembly lines, and warn listeners about some Netgear devices that have vulnerabilities and can’t be updated. We then discuss the often ridiculous way hacking is portrayed in movies […] The post How computer security is depicted in movies – Intego Mac Podcast Episode 146 appeared first on The Mac Security Blog.

Read more »

Is Your Chip Card Secure? Much Depends on Where You Bank
Chip-based credit and debit cards are designed to make it infeasible for skimming devices or malware to clone your card when you pay for something by dipping the chip instead of swiping the stripe. But a recent series of malware attacks on U.S.-based merchants suggest thieves are exploiting weaknesses in how certain financial institutions have implemented the technology to sidestep key chip card security features and effectively create usable, counterfeit cards.

Read more »

Here’s Why Credit Card Fraud is Still a Thing
Most of the civilized world years ago shifted to requiring computer chips in payment cards that make it far more expensive and difficult for thieves to clone and use them for fraud. One notable exception is the United States, which is still lurching toward this goal. Here's a look at the havoc that lag has wrought, as seen through the purchasing patterns at one of the underground's biggest stolen card shops that was hacked last year.

Read more »

Business ID Theft Soars Amid COVID Closures
Identity thieves who specialize in running up unauthorized lines of credit in the names of small businesses are having a field day with all of the closures and economic uncertainty wrought by the COVID-19 pandemic, KrebsOnSecurity has learned. This story is about the victims of a particularly aggressive business ID theft ring that's spent years targeting small businesses across the country and is now pivoting toward using that access for pandemic assistance loans and unemployment benefits.

Read more »

Vulnerability Summary for the Week of July 20, 2020
Original release date: July 27, 2020 The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.   High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adobe -- creative_cloud_desktop   Adobe Creative Cloud Desktop Application versions 5.1 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation. 2020-07-17 7.5 CVE-2020-9671CONFIRM adobe -- creative_cloud_desktop   Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to arbitrary file system write. 2020-07-17 10 CVE-2020-9682CONFIRM adobe -- creative_cloud_desktop   Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to privilege escalation. 2020-07-17 7.5 CVE-2020-9670CONFIRM adobe -- creative_cloud_desktop   Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Successful exploitation could lead to privilege escalation. 2020-07-17 7.5 CVE-2020-9669CONFIRM adobe -- download_manager Adobe Download Manager version 2.0.0.518 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution. 2020-07-17 9.3 CVE-2020-9688CONFIRM adobe -- magento Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution. 2020-07-22 7.5 CVE-2020-9664CONFIRM apache -- airflow An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker. 2020-07-17 7.5 CVE-2020-11982MISC apache -- airflow   An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands. 2020-07-17 7.5 CVE-2020-11981MISC blysoft --eyesurfer_bflyinstallerx.ocx   EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be download by setting the arguments to the vulnerable method. This can be leveraged for code execution. When the vulnerable method is called, they fail to properly check the parameters that are passed to it. 2020-07-17 7.5 CVE-2020-7826CONFIRM d-link -- dir-816l_devices   An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet. 2020-07-22 7.5 CVE-2020-15893MISCMISC google -- android There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid ID: A-156337262 2020-07-17 7.5 CVE-2020-0230CONFIRM google -- android In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142546668 2020-07-17 10 CVE-2020-0225CONFIRM google -- android There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid ID: A-156333727 2020-07-17 7.5 CVE-2020-0231CONFIRM google -- android   In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when processing a proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147664838 2020-07-17 10 CVE-2020-0224CONFIRM google -- android   In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege in the graphics server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150226994 2020-07-17 7.2 CVE-2020-0226CONFIRM google -- android   In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147247775 2020-07-17 7.2 CVE-2020-0122CONFIRM google -- android   In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-129476618 2020-07-17 7.2 CVE-2020-0227CONFIRM google -- chrome   Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. 2020-07-22 9.3 CVE-2020-6513SUSEMISCMISCGENTOO google -- chrome   Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2020-07-22 9.3 CVE-2020-6515SUSEMISCMISCGENTOO google -- chrome   Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potentially exploit heap corruption via a crafted HTML page. 2020-07-22 9.3 CVE-2020-6518SUSEMISCMISCGENTOO google -- chrome   Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2020-07-22 9.3 CVE-2020-6524SUSEMISCMISCGENTOO google -- chrome   Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2020-07-22 9.3 CVE-2020-6520SUSEMISCMISCGENTOO grandstream -- gwn7000_series_devices   Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API. An attacker can use this functionality to execute arbitrary OS commands on the router. 2020-07-17 9 CVE-2020-5756https://www.tenable.com/cve/CVE-2020-5756CONFIRM grandstream -- ucm6200_series_devices Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute commands as the root user by issuing a specially crafted "unset" command. 2020-07-17 10 CVE-2020-5759https://www.tenable.com/cve/CVE-2020-5759CONFIRM grandstream -- ucm6200_series_devices   Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM's "New" HTTPS API. 2020-07-17 10 CVE-2020-5757https://www.tenable.com/cve/CVE-2020-5757CONFIRM grandstream -- ucm6200_series_devices   Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a crafted HTTP GET to the UCM's "Old" HTTPS API. 2020-07-17 9 CVE-2020-5758https://www.tenable.com/cve/CVE-2020-5758CONFIRM hp -- nagios-plugins-hpilo HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability. 2020-07-17 7.5 CVE-2020-7206CONFIRM ibm -- verify_gateway IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 179266. 2020-07-22 7.5 CVE-2020-4385XFCONFIRM ibm -- websphere_application_server IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with a specially-crafted sequence of serialized objects over the SOAP connector. IBM X-Force ID: 181489. 2020-07-17 9 CVE-2020-4464XFCONFIRMMISC juniper_networks -- srx_series_devices   On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service (DoS) or Remote Code Execution (RCE) Continued processing of this malformed HTTP message may result in an extended Denial of Service (DoS) condition. The offending HTTP message that causes this issue may originate both from the HTTP server or the HTTP client. This issue affects Juniper Networks Junos OS on SRX Series: 18.1 versions prior to 18.1R3-S9 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S1; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3; 19.1 versions prior to 19.1R1-S5, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS prior to 18.1R1. 2020-07-17 7.5 CVE-2020-1654CONFIRM kramdown_gem_for_ruby_on_rails -- kramdown_gem_for_ruby_on_rails The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://Software module. An attacker can use XSS to send a malicious script to an unsuspecting user. This affects all versions prior to latest releases as specified in https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080855&sys_kb_id=971d99ed1b8ed01c086dcbfc0a4bcb6a. 2020-07-17 3.5 CVE-2020-4104CONFIRM hcl -- campaign   "HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field." 2020-07-17 3.5 CVE-2019-4090MISC hcl -- marketing_platform   "HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for users in Dashboard, potentially giving an attacker ability to inject malicious code into the system. " 2020-07-17 3.5 CVE-2019-4091MISC huawei -- mate_20_smartphones   HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Honor Magic2 smartphones versions earlier than 10.1.0.160(C00E160R2P11) have a path traversal vulnerability. The system does not sufficiently validate certain pathname from certain process, successful exploit could allow the attacker write files to a crafted path. 2020-07-17 2.1 CVE-2020-9252CONFIRM huawei -- multiple_cloudengine_products   There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800 2020-07-17 2.1 CVE-2020-9102CONFIRM huawei -- multiple_products   There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected product versions include: IPS Module versions V500R005C00, V500R005C10; NGFW Module versions V500R005C00, V500R005C10; Secospace USG6300 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; Secospace USG6500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; Secospace USG6600 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; USG9500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10 2020-07-18 3.3 CVE-2020-9101CONFIRM ibm -- verify_gateway   IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system. IBM X-Force ID: 179008. 2020-07-22 2.1 CVE-2020-4371XFCONFIRM ibm -- verify_gateway   IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 179009 2020-07-22 2.1 CVE-2020-4372XFCONFIRM ibm -- verify_gateway   IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a user. IBM X-Force ID: 179004. 2020-07-22 2.1 CVE-2020-4369XFCONFIRM juniper_networks -- junos_os   A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service (DoS). This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP crashes. An indicator of compromise is to evaluate log file details for lldp with RLIMIT. Intervention should occur before 85% threshold of used KB versus maximum available KB memory is reached. show log messages | match RLIMIT | match lldp | last 20 Matching statement is " /kernel: %KERNEL-[number]: Process ([pid #],lldpd) has exceeded 85% of RLIMIT_DATA: " with [] as variable data to evaluate for. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S15; 12.3X48 versions prior to 12.3X48-D95; 15.1 versions prior to 15.1R7-S6; 15.1X49 versions prior to 15.1X49-D200; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S7; 17.1 versions prior to 17.1R2-S11, 17.1R3-S2; 17.2 versions prior to 17.2R1-S9, 17.2R3-S3; 17.3 versions prior to 17.3R2-S5, 17.3R3-S6; 17.4 versions prior to 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R3-S5; 18.2 versions prior to 18.2R2-S7, 18.2R3; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D33, 18.2X75-D50, 18.2X75-D420; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S5, 18.4R2; 19.1 versions prior to 19.1R1-S4, 19.1R2. 2020-07-17 2.9 CVE-2020-1641MISC juniper_networks -- junos_os   Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routing protocols process (RPD) to crash and restart if OSPF interface authentication is configured, leading to a Denial of Service (DoS). By continuously executing the same CLI commands, a local attacker can repeatedly crash the RPD process causing a sustained Denial of Service. Note: Only systems utilizing ARM processors, found on the EX2300 and EX3400, are vulnerable to this issue. Systems shipped with other processor architectures are not vulnerable to this issue. The processor architecture can be displayed via the 'uname -a' command. For example: ARM (vulnerable): % uname -a | awk '{print $NF}' arm PowerPC (not vulnerable): % uname -a | awk '{print $NF}' powerpc AMD (not vulnerable): % uname -a | awk '{print $NF}' amd64 Intel (not vulnerable): % uname -a | awk '{print $NF}' i386 This issue affects Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D100; 14.1X53 versions prior to 14.1X53-D140, 14.1X53-D54; 15.1 versions prior to 15.1R7-S7; 15.1X49 versions prior to 15.1X49-D210; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.1 versions prior to 17.1R2-S12; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R3-S2; 18.2 versions prior to 18.2R2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S2, 18.3R2. 2020-07-17 1.9 CVE-2020-1643CONFIRM juniper_networks -- mx_series_devices   On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker connected to the same broadcast domain can repeatedly crash the PFE, causing a prolonged Denial of Service (DoS). This issue affects Juniper Networks Junos OS on MX Series: 17.2 versions prior to 17.2R3-S4; 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R1-S3, 17.4R2; 18.1 versions prior to 18.1R2. This issue does not affect Juniper Networks Junos OS releases prior to 17.2R1. 2020-07-17 3.3 CVE-2020-1651CONFIRM mida_solutions -- eframework Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0. 2020-07-24 3.5 CVE-2020-15918MISC qemu -- qemu   QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address. 2020-07-21 2.1 CVE-2020-15859MISCMISCMLIST teltonika -- trb2_r_devices   Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by injecting malicious client-side code into the 'URL/ Host / Connection' form in the 'DATA TO SERVER' configuration section. 2020-07-17 3.5 CVE-2020-5769CONFIRM Back to top   Severity Not Yet Assigned Primary Vendor -- Product Description Published CVSS Score Source & Patch Info asus -- screenxpertservicec_and_screenxpertupgradeservicemanager   AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool.msi V1.0.3 for ASUS PCs with ScreenPad 1.0 (UX450FDX, UX550GDX and UX550GEX) could lead to unsigned code execution with no additional restrictions when a user puts an application at a particular path with a particular file name. 2020-07-20 not yet calculated CVE-2020-15009MISCCONFIRMCONFIRM atlassian -- confluence_server_and_data_center   Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2. 2020-07-24 not yet calculated CVE-2020-14175N/A bsdiff4 -- bsdiff4   A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via a crafted patch file. 2020-07-22 not yet calculated CVE-2020-15904MISC c-more -- hmi_ea9_devices   This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due to insufficient authentication on post-authentication requests. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from unauthenticated users. Was ZDI-CAN-10182. 2020-07-23 not yet calculated CVE-2020-10918MISC c-more -- hmi_ea9_touch_screen_panels   This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the control service, which listens on TCP port 9999 by default. The issue results from the lack of authentication prior to allowing alterations to the system configuration. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-10493. 2020-07-23 not yet calculated CVE-2020-10920MISC c-more -- hmi_ea9_touch_screen_panels   This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. When transmitting passwords, the process encrypts them in a recoverable format using a hard-coded key. An attacker can leverage this vulnerability to disclose credentials, leading to further compromise. Was ZDI-CAN-10185. 2020-07-23 not yet calculated CVE-2020-10919MISC c-more -- hmi_ea9_touch_screen_panels   This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lack of proper input validation prior to further processing user requests. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-10527. 2020-07-23 not yet calculated CVE-2020-10922MISC c-more -- hmi_ea9_touch_screen_panels   This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lack of authentication prior to allowing alterations to the system configuration. An attacker can leverage this vulnerability to issue commands to the physical equipment controlled by the device. Was ZDI-CAN-10482. 2020-07-23 not yet calculated CVE-2020-10921MISC cauldron_cbang -- tar/tarfilereader   tar/TarFileReader.cpp in Cauldron cbang (aka C-Bang or C!) before 1.6.0 allows Directory Traversal during extraction from a TAR archive. 2020-07-23 not yet calculated CVE-2020-15908MISCMISC citrix -- workspace_app_for_windows   Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running. 2020-07-24 not yet calculated CVE-2020-8207MISC claws_mail -- claws_mail   common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled. 2020-07-23 not yet calculated CVE-2020-15917MISCMISC codecov -- codecov   In codecov (npm package) before version 3.7.1 the upload method has a command injection vulnerability. Clients of the codecov-node library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. A similar CVE (CVE-2020-7597 for GHSA-5q88-cjfq-g2mh) was issued but the fix was incomplete. It only blocked &, and command injection is still possible using backticks instead to bypass the sanitizer. The attack surface is low in this case. Particularly in the standard use of codecov, where the module is used directly in a build pipeline, not built against as a library in another application that may supply malicious input and perform command injection. 2020-07-20 not yet calculated CVE-2020-15123MISCMISCMISCCONFIRMMISC d-link -- dap-1520_devices   An issue was discovered in apply.cgi on D-Link DAP-1520 devices before 1.10b04Beta02. Whenever a user performs a login action from the web interface, the request values are being forwarded to the ssi binary. On the login page, the web interface restricts the password input field to a fixed length of 15 characters. The problem is that validation is being done on the client side, hence it can be bypassed. When an attacker manages to intercept the login request (POST based) and tampers with the vulnerable parameter (log_pass), to a larger length, the request will be forwarded to the webserver. This results in a stack-based buffer overflow. A few other POST variables, (transferred as part of the login request) are also vulnerable: html_response_page and log_user. 2020-07-22 not yet calculated CVE-2020-15892MISCMISC d-link -- dap-1522_devices   An authentication-bypass issue was discovered on D-Link DAP-1522 devices 1.4x before 1.10b04Beta02. There exist a few pages that are directly accessible by any unauthorized user, e.g., logout.php and login.php. This occurs because of checking the value of NO_NEED_AUTH. If the value of NO_NEED_AUTH is 1, the user has direct access to the webpage without any authentication. By appending a query string NO_NEED_AUTH with the value of 1 to any protected URL, any unauthorized user can access the application directly, as demonstrated by bsc_lan.php?NO_NEED_AUTH=1. 2020-07-22 not yet calculated CVE-2020-15896MISCMISC d-link -- dap-1860_devices   This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 1.04B03_HOTFIX WiFi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the SOAPAction header, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-10084. 2020-07-23 not yet calculated CVE-2020-15631MISCMISC d-link -- dir-842_devices   This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HNAP GetCAPTCHAsetting requests. The issue results from the lack of proper handling of sessions. An attacker can leverage this vulnerability to execute arbitrary code in the context of the device. Was ZDI-CAN-10083. 2020-07-23 not yet calculated CVE-2020-15632MISCMISC d-link -- dir-867_and_dir-878_and_dir-882_devices   This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.20B10_BETA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP requests. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the router. Was ZDI-CAN-10835. 2020-07-23 not yet calculated CVE-2020-15633MISCMISC devspace -- devspace   The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution. 2020-07-23 not yet calculated CVE-2020-15391CONFIRMMISC embedthis -- goahead   GoAhead before 5.1.2 mishandles the nonce value during Digest authentication. This may permit request replay attacks for local requests over HTTP. 2020-07-23 not yet calculated CVE-2020-15688MISC espressif -- esp-idf_devices   An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and ESP8266_RTOS_SDK devices through 3.3. Broadcasting forged beacon frames forces a device to change its authentication mode to OPEN, effectively disabling its 802.11 encryption. 2020-07-23 not yet calculated CVE-2020-12638MISCMISCMISCMISC fast-http -- fast-http   This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js. 2020-07-25 not yet calculated CVE-2020-7687MISC fiber -- fiber   In Fiber before version 1.12.6, the filename that is given in c.Attachment() (https://docs.gofiber.io/ctx#attachment) is not escaped, and therefore vulnerable for a CRLF injection attack. I.e. an attacker could upload a custom filename and then give the link to the victim. With this filename, the attacker can change the name of the downloaded file, redirect to another site, change the authorization header, etc. A possible workaround is to serialize the input before passing it to ctx.Attachment(). 2020-07-20 not yet calculated CVE-2020-15111MISCCONFIRM fortiguard -- fortios   An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username. 2020-07-24 not yet calculated CVE-2020-12812MISC google -- chrome   Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2020-07-22 not yet calculated CVE-2020-6512SUSEMISCMISCGENTOO google -- chrome   Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream. 2020-07-22 not yet calculated CVE-2020-6514SUSEMISCMISCGENTOO google -- chrome   Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page. 2020-07-22 not yet calculated CVE-2020-6506MISCMISCGENTOO google -- chrome   Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page. 2020-07-22 not yet calculated CVE-2020-6511SUSEMISCMISCGENTOO google -- chrome   Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2020-07-22 not yet calculated CVE-2020-6517SUSEMISCMISCGENTOO google -- chrome   Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2020-07-22 not yet calculated CVE-2020-6534SUSEMISCMISCGENTOO google -- chrome   Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. 2020-07-22 not yet calculated CVE-2020-6522SUSEMISCMISCGENTOO google -- chrome   Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2020-07-22 not yet calculated CVE-2020-6523SUSEMISCMISCGENTOO google -- chrome   Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. 2020-07-22 not yet calculated CVE-2020-6535SUSEMISCMISCGENTOO google -- chrome   Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. 2020-07-22 not yet calculated CVE-2020-6530SUSEMISCMISCGENTOO google -- chrome   Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2020-07-22 not yet calculated CVE-2020-6533SUSEMISCMISCGENTOO hp -- synaptics_vfs75xx_sensors   Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table. 2020-07-22 not yet calculated CVE-2019-18618MISCMISCMISCCONFIRM hp -- synaptics_wbf_drivers   Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers. 2020-07-22 not yet calculated CVE-2019-18619MISCMISCMISCCONFIRMMISC ibm -- filenet_content_manager   IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181227. 2020-07-23 not yet calculated CVE-2020-4447XFCONFIRM inneo -- startup_tools   An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe web application (served on TCP port 85) includes user input into a filesystem access without any further validation. This might allow an unauthenticated attacker to read files on the server via Directory Traversal, or possibly have unspecified other impact. 2020-07-23 not yet calculated CVE-2020-15492MISCCONFIRMMISCMISC jimp -- jimp   Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image. 2020-07-24 not yet calculated CVE-2020-8175MISC kubernetes -- kubelet   The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it could fill the storage space of the node and cause the node to fail. 2020-07-23 not yet calculated CVE-2020-8557CONFIRMMLIST kubernetes -- kubelet   The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise. 2020-07-22 not yet calculated CVE-2020-8559MISCMISC lenovo -- drivers_management   A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges. 2020-07-24 not yet calculated CVE-2020-8317CONFIRM lenovo -- drivers_management   An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges. 2020-07-24 not yet calculated CVE-2020-8326CONFIRM lua -- lua   Lua through 5.4.0 has a segmentation fault in changedline in ldebug.c (e.g., when called by luaG_traceexec) because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function. 2020-07-24 not yet calculated CVE-2020-15945MISCMISC marked-tree -- marked-tree   This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js. 2020-07-25 not yet calculated CVE-2020-7682MISC marscode -- marscode   This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js. 2020-07-25 not yet calculated CVE-2020-7681MISC mida_solutions -- eframework There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required. 2020-07-24 not yet calculated CVE-2020-15922MISC mida_solutions -- eframework Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal. 2020-07-24 not yet calculated CVE-2020-15923MISC mida_solutions -- eframework Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution. 2020-07-24 not yet calculated CVE-2020-15921MISC mida_solutions -- eframework There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required. 2020-07-24 not yet calculated CVE-2020-15920MISC mida_solutions -- eframework   There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters. 2020-07-24 not yet calculated CVE-2020-15924MISC mountsensitive -- azurefile_and_cephfs   The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes. 2020-07-23 not yet calculated CVE-2019-11252MISC munkireport -- munkireport   A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint. 2020-07-23 not yet calculated CVE-2020-15886MISCMISCMISCMISC munkireport -- munkireport   A Cross-Site Scripting (XSS) vulnerability in the munki_facts (aka Munki Conditions) module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name. 2020-07-23 not yet calculated CVE-2020-15881MISCMISCMISCMISC munkireport -- munkireport   A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/get_tab_data/ endpoint. 2020-07-23 not yet calculated CVE-2020-15887MISCMISCMISCMISC munkireport -- munkireport   A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment. 2020-07-23 not yet calculated CVE-2020-15885MISCMISCMISCMISC munkireport -- munkireport   A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order[0][dir] field on POST requests to /datatables/data. 2020-07-23 not yet calculated CVE-2020-15884MISCMISCMISC munkireport -- munkireport   A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters (through which installed packages names and versions are reported). 2020-07-23 not yet calculated CVE-2020-15883MISCMISCMISCMISC munkireport -- munkireport   A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport database. 2020-07-23 not yet calculated CVE-2020-15882MISCMISCMISC nagios -- nagios_xi Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option. 2020-07-22 not yet calculated CVE-2020-15902MISC nagios -- nagios_xi   ajaxhelper.php in Nagios XI before 5.7.2 allows remote attackers to execute arbitrary commands via cmdsubsys. 2020-07-22 not yet calculated CVE-2020-15901MISC napi_get_value_string -- napi_get_value_string   napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0. 2020-07-24 not yet calculated CVE-2020-8174MISC nec -- esmpro_manager   This vulnerability allows remote attackers to execute arbitrary code on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RMI service. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10007. 2020-07-22 not yet calculated CVE-2020-10917MISC open_microscopy_environment -- omero   OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query. 2020-07-22 not yet calculated CVE-2019-16244CONFIRM openbsd -- openssh   scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." 2020-07-24 not yet calculated CVE-2020-15778MISCMISC oracle -- mysql_server   Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2020-07-24 not yet calculated CVE-2020-14725MISC oslsoft -- pi_system   In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive. 2020-07-24 not yet calculated CVE-2020-10600MISC oslsoft -- pi_system   In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connections and queries to PI Data Archive. 2020-07-25 not yet calculated CVE-2020-10604MISC oslsoft -- pi_system   In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information disclosure, deletion, or modification if the local computer also processes PI System data from other users, such as from a shared workstation or terminal server deployment. 2020-07-24 not yet calculated CVE-2020-10606MISC oslsoft -- pi_system   In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized information disclosure, deletion, or modification. 2020-07-24 not yet calculated CVE-2020-10608MISC oslsoft -- pi_system   In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or modification. 2020-07-24 not yet calculated CVE-2020-10610MISC oslsoft -- pi_system   In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display. Unauthorized information disclosure, deletion, or modification is possible if a victim views the infected display. 2020-07-25 not yet calculated CVE-2020-10614MISC oslsoft -- pi_system   In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive. 2020-07-24 not yet calculated CVE-2020-10602MISC overwolf -- overwolf   Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges. 2020-07-24 not yet calculated CVE-2020-15932MISC palo_alto_networks -- avertx_hd838_and_hd438_ip_cameras   An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. An attacker with physical access to the UART interface could access additional diagnostic and configuration functionalities as well as the camera's bootloader. Successful exploitation could compromise confidentiality, integrity, and availability of the affected system. It could even render the device inoperable. 2020-07-23 not yet calculated CVE-2020-11623MISC palo_alto_networks -- avertx_hd838_and_hd438_ip_cameras   An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. They do not require users to change the default password for the admin account. They only show a pop-up window suggesting a change but there's no enforcement. An administrator can click Cancel and proceed to use the device without changing the password. Additionally, they disclose the default username within the login.js script. Since many attacks for IoT devices, including malware and exploits, are based on the usage of default credentials, it makes these cameras an easy target for malicious actors. 2020-07-23 not yet calculated CVE-2020-11624MISC palo_alto_networks -- avertx_hd838_and_hd438_ip_cameras   An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. Failed web UI login attempts elicit different responses depending on whether a user account exists. Because the responses indicate whether a submitted username is valid or not, they make it easier to identify legitimate usernames. If a login request is sent to ISAPI/Security/sessionLogin/capabilities using a username that exists, it will return the value of the salt given to that username, even if the password is incorrect. However, if a login request is sent using a username that is not present in the database, it will return an empty salt value. This allows attackers to enumerate legitimate usernames, facilitating brute-force attacks. NOTE: this is different from CVE-2020-7057. 2020-07-23 not yet calculated CVE-2020-11625MISC parallels -- remote_application_server   Parallels Remote Application Server (RAS) 17.1.1 has a Business Logic Error causing remote code execution. It allows an authenticated user to execute any application in the backend operating system through the web application, despite the affected application not being published. In addition, it was discovered that it is possible to access any host in the internal domain, even if it has no published applications or the mentioned host is no longer associated with that server farm. 2020-07-24 not yet calculated CVE-2020-15860MISCMISC parser-server -- parser-server   In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and can also by pass all objects linked via relation or Pointer on his User object. 2020-07-22 not yet calculated CVE-2020-15126MISCMISCCONFIRM phoenix_contact -- plcnext_engineer   In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files. 2020-07-21 not yet calculated CVE-2020-12499CONFIRM radare -- radare2   In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current directory. 2020-07-20 not yet calculated CVE-2020-15121MISCMISCMISCCONFIRM raspberry_tortoise -- raspberry_tortoise   The WebControl in RaspberryTortoise through 2012-10-28 is vulnerable to remote code execution via shell metacharacters in a URI. The file nodejs/raspberryTortoise.js has no validation on the parameter incomingString before passing it to the child_process.exec function. 2020-07-23 not yet calculated CVE-2020-15477MISCMISC rollup-plugin-server -- rollup-plugin-server   This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function. 2020-07-25 not yet calculated CVE-2020-7683MISC rollup-plugin-server -- rollup-plugin-server   This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function. 2020-07-25 not yet calculated CVE-2020-7686MISC schneider_electric -- easergy_builder   A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker access to the authorization credentials for a device and gain full access. 2020-07-23 not yet calculated CVE-2020-7514MISC schneider_electric -- easergy_builder   A CWE-321: Use of hard-coded cryptographic key stored in cleartext vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to decrypt a password. 2020-07-23 not yet calculated CVE-2020-7515MISC schneider_electric -- easergy_builder   A CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker access to login credentials. 2020-07-23 not yet calculated CVE-2020-7516MISC schneider_electric -- easergy_builder   A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to read user credentials. 2020-07-23 not yet calculated CVE-2020-7517MISC schneider_electric -- easergy_builder   A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to compromise a user account. 2020-07-23 not yet calculated CVE-2020-7519MISC schneider_electric -- easergy_builder   A CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to modify project configuration files. 2020-07-23 not yet calculated CVE-2020-7518MISC schneider_electric -- sesu   A CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider Electric Software Update (SESU), V2.4.0 and prior, which could cause execution of malicious code on the victim's machine. In order to exploit this vulnerability, an attacker requires privileged access on the engineering workstation to modify a Windows registry key which would divert all traffic updates to go through a server in the attacker's possession. A man-in-the-middle attack is then used to complete the exploit. 2020-07-23 not yet calculated CVE-2020-7520MISC schneider_electric -- triconex_safety_systems   **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4. 2020-07-23 not yet calculated CVE-2020-7491MISC tenda -- ac15_ac1900_devices   goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter. 2020-07-23 not yet calculated CVE-2020-15916MISC tesla -- model_3_vehicles   ** DISPUTED ** Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue. 2020-07-23 not yet calculated CVE-2020-15912MISCMISCMISCMISC torchbox -- wagtail   In Wagtail before versions 2.7.4 and 2.9.3, when a form page type is made available to Wagtail editors through the `wagtail.contrib.forms` app, and the page template is built using Django's standard form rendering helpers such as form.as_p, any HTML tags used within a form field's help text will be rendered unescaped in the page. Allowing HTML within help text is an intentional design decision by Django; however, as a matter of policy Wagtail does not allow editors to insert arbitrary HTML by default, as this could potentially be used to carry out cross-site scripting attacks, including privilege escalation. This functionality should therefore not have been made available to editor-level users. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. Patched versions have been released as Wagtail 2.7.4 (for the LTS 2.7 branch) and Wagtail 2.9.3 (for the current 2.9 branch). In these versions, help text will be escaped to prevent the inclusion of HTML tags. Site owners who wish to re-enable the use of HTML within help text (and are willing to accept the risk of this being exploited by editors) may set WAGTAILFORMS_HELP_TEXT_ALLOW_HTML = True in their configuration settings. Site owners who are unable to upgrade to the new versions can secure their form page templates by rendering forms field-by-field as per Django's documentation, but omitting the |safe filter when outputting the help text. 2020-07-20 not yet calculated CVE-2020-15118MISCMISCMISCMISCCONFIRM ubuntu -- ubuntu   In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by the Select struct in src/core/trust/impl/sqlite3/store.cpp. Fixed in trust-store (Ubuntu) version 1.1.0+15.04.20150123-0ubuntu1 and trust-store (Ubuntu RTM) version 1.1.0+15.04.20150123~rtm-0ubuntu1. 2020-07-22 not yet calculated CVE-2014-1422CONFIRMCONFIRM wildfly -- enterprise_java_beans   A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable. 2020-07-24 not yet calculated CVE-2020-14307CONFIRM wildfly -- enterprise_java_beans   A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable. 2020-07-24 not yet calculated CVE-2020-14297CONFIRM wind_river -- vxworks   httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. 2020-07-23 not yet calculated CVE-2020-11440MISCMISC Back to top This product is provided subject to this Notification and this Privacy & Use policy.

Read more »

Thinking of a Cybersecurity Career? Read This
Thousand of people graduate from colleges and universities each year with cybersecurity or computer science degrees only to find employers are less than thrilled about their hands-on, foundational skills. Here's a look at a recent survey that identified some of the bigger skills gaps, and some thoughts about how those seeking a career in these fields can better stand out from the crowd.

Read more »

Are smart locks really that smart? – Intego Mac Podcast Ep...
We follow up on the great Twitter hack of 2020, we discuss how a Cloudflare outage brought down many major websites, and Kirk tells a story of a suspicious email from his local government. We then examine whether smart locks are really safe. Cloudflare had a (non-security) outage IsItDownRightNow? Hackers Tell the Story of the […] The post Are smart locks really that smart? – Intego Mac Podcast Episode 145 appeared first on The Mac Security Blog.

Read more »

NY Charges First American Financial for Massive Data Leak
In May 2019, KrebsOnSecurity broke the news that the website of mortgage title insurance giant First American Financial Corp. had exposed approximately 885 million records related to mortgage deals going back to 2003. On Wednesday, regulators in New York announced that First American was the target of their first ever cybersecurity enforcement action in connection with the incident, charges that could bring steep financial penalties.

Read more »

Twitter Hacking for Profit and the LoLs
The New York Times last week ran an interview with several young men who claimed to have had direct contact with those involved in last week's epic hack against Twitter. These individuals said they were only customers of the person who had access to Twitter's internal employee tools, and were not responsible for the actual intrusion or bitcoin scams that took place that day. But new information suggests that at least two of them operated a service that resold access to Twitter employees for the purposes of modifying or seizing control of prized Twitter profiles.

Read more »

Vulnerability Summary for the Week of July 13, 2020
Original release date: July 20, 2020This product is provided subject to this Notification and this Privacy & Use policy.

Read more »

New 2020 11″ iPad Pros on sale for $50-$75 off Apple’s M...
Apple reseller Expercom has new 2020 11″ Apple iPad Pros on sale for $50-$75 off MSRP, with prices starting at $749. These are the same iPad Pros sold by Apple in their retail and online stores: – 11″ 128GB WiFi iPad Pro: $749 $50 off – 11″ 256GB WiFi iPad Pro: $844 $55 off – 11″ 512GB WiFi iPad Pro: $1034 $65 off – 11″ 1TB WiFi iPad Pro: $1229 $70 off – 11″ 128GB WiFi + Cell iPad Pro: $894 $55 off – 11″ 256GB WiFi + Cell iPad Pro: $989 $60 off – 11″ 512GB WiFi + Cell iPad Pro: $1179 $70 off – 11″ 1TB WiFi + Cell iPad Pro: $1374 $75 off Configurations not in stock today are still available for order at the discounted price. Some of their prices are the lowest currently available for these iPads from any Apple reseller. Keep an eye on our 11″ iPad Pro Price Tracker for the latest → Read More...

Read more »

Switch to US Cellular and get a new Apple iPhone SE for as l...
US Cellular has Apple’s 2020 iPhone SE on sale for $350 off for new lines of service and a US Cellular unlimited plan. Promotion comes via monthly bill credits over a 30 month period. Their deal lowers the price of the 64GB iPhone SE to only $1.63 per month (normally $13.30), the 128GB SE to $3.29 per month (normally $14.96), and the 256GB iPhone SE down to $6.63 (normally $18.30) per month. US Cellular’s deal is live on their → Read More...

Read more »

Apple AirPods with Wireless Charging Case on sale today for ...
Amazon has Apple’s AirPods with Wireless Charging Case on sale today for only $139.98 shipped. That’s $60 off Apple’s MSRP and the lowest price we’ve ever seen for these AirPods. Sale valid for a limited time only. For the latest prices and sales, see our Apple AirPods Price Tracker, → Read More...

Read more »

Apple’s 2020 Back to School promotion: Get a free set of A...
As part of their Back to School promotion for 2020, Apple will include one free pair Apple AirPods (with charging case) with the purchase of a MacBook Air, MacBook Pro, iMac, iMac Pro (Mac Pro and Mac mini excluded), iPad Pro, or iPad Air. You can optionally choose Apple AirPods with the Wireless Charging Case for only $40 (regularly $199) or Apple AirPods Pro for only $90 (regularly $249). Promotion runs through early September. In addition, when you purchase a new Mac using Apple’s Education discount, take up to $400 off MSRP. All teachers, students, and staff of any educational institution with a .edu email address qualify for the discount: – 2019 16″ 2.3GHz 8-Core Touch Bar MacBook Pro: $2599 $200 off – 2019 16″ 2.6GHz 6-Core Touch Bar MacBook Pro: $2199 $200 off – 2020 13″ 2.0GHz/1TB 4-Core Touch Bar MacBook Pro: $1899 $100 off – 2020 13″ 2.0GHz/512GB 4-Core Touch Bar MacBook Pro: $1699 $100 off – 2020 13″ 1.4GHz/512GB 4-Core Touch Bar MacBook Pro: $1399 $100 off – 2020 13″ 1.4GHz/256GB 4-Core Touch Bar MacBook Pro: $1199 $100 off – 2020 13″ Dual-Core MacBook Air: $899 $100 off – 2020 13″ Quad-Core MacBook Air: $1199 $100 off – 8-Core Mac Pro: $5599 $400 off – Pro Display XDR (standard): $4599 $400 off – Pro Display XDR (nano glass): $5599 $400 off – Pro Stand: $5599 $100 off – 27″ 8-Core iMac Pro: $4599 $400 off – 27″ 3.7GHz 5K iMac: $2099 $200 off – 27″ 3.1GHz 5K iMac: $1899 $100 off – 27″ 3.0GHz 5K iMac: $1699 $100 off – 21″ 3.0GHz 4K iMac: $1399 $100 off – 21″ 3.6GHz 4K iMac: $1249 $50 off – 21″ 2.3GHz iMac: $1049 $50 off – 3.6GHz Mac mini: $779 $20 → Read More...

Read more »

Sunday Sale: Apple AirPods Pro for $219, save $30
Amazon-owned Woot has new Apple AirPods Pro on sale today for $219.99 including free shipping for Prime members. Their price is $30 off Apple’s MSRP, and it’s the lowest price currently available for AirPods Pro. For the latest prices and sales, see our Apple AirPods Price Tracker, → Read More...

Read more »

Apple restocks 16″ MacBook Pros for up to $420 off MSRP, C...
Apple has Certified Refurbished 2019 16″ MacBook Pros available for up to $420 off the cost of new models, starting at $2039. Each model features a new outer case, shipping is free, and an Apple 1-year warranty is standard. These models are the cheapest 16″ MacBook Pros currently available for sale anywhere: – 16″ 2.6GHz 6-Core MacBook Pro (Space Gray): $2039 save $360 – 16″ 2.3GHz 8-Core MacBook Pro (Space Gray): $2379 save $420 – 16″ 2.6GHz 6-Core MacBook Pro (Silver): $2039 save $360 – 16″ 2.3GHz 8-Core MacBook Pro (Silver): $2379 save $420 See our 16″ & 15″ MacBook Pro Price Tracker for the latest prices & deals from Apple’s resellers, → Read More...

Read more »

People Profiles: Apple Accessibility Evangelist Reflects On ...
FEATURE: 07.31.20 – Apple last week, in honor of the 30th anniversary this month of the Americans with Disabilities Act (ADA), spoke with its own technical evangelist of accessibility who shared their thoughts on how the assistive technologies found in the Cupertino, California-based company’s products helps users of its hardware and software in their daily lives. About the Series People Profiles is a special series that periodically runs here in the “Mac Potpourri” column which are human interest stories that feature individuals and their contribution to the community of Apple product users, either how they use it to help others or how it has helped them in their own lives (or even just related to it in general) for more about the impetus and inspiration behind the series, see this introduction (story continues after the break) Apple technical evangelist of accessibility, Dean Hudson, pictured in the photograph above with his probing cane for the visually impaired, joined the Cupertino, California-based company in 2006 and is part of the team responsible for VoiceOver, a screen reader technology found on Apple’s hardware and devices. (Photo: Apple, Inc.) Meet Dean Hudson, technical evangelist of accessibility at Apple, a visually impaired individual who joined the company in 2006 and was part of the original team behind VoiceOver, a screen reader that enables people who are blind — legally, partially, or completely — or have low vision — to navigate Apple products such as the Mac, devices like the iPhone and iPad, and even wearables like the Apple Watch. “When the iPhone 3G S launched with VoiceOver in 2009, little by little, people really started getting into it, and now it’s amazing to see people who are blind and all sorts of people with disabilities using the device,” says Hudson. “When my team started working on VoiceOver for the iPhone, there was a lot of exploration around things like what happens when you touch items on your screen. A sighted user can see it → Read More...

Read more »

July 31st only: $100 off Apple iPhone 11, 11 Pro, and SE at ...
Boost Mobile is offering Apple iPhone 11, 11 Pro, and iPhone 11 Pro Max models for $100 off MSRP with service. Their discount reduces the cost of an iPhone 11/64GB to $599, iPhone 11 Pro to $899 for the 64GB model, and $999 for the 64GB iPhone 11 Pro Max. They have 2020 Apple iPhone SE models available for $100 off MSRP as well, with service. Their discount reduces the cost of an iPhone SE/64GB to $299, $349 for the 128GB model, and $449 for the 256GB iPhone SE. For July 31st only, use code FLASH31JULY2020 to take an additional 10% off these phones. Order online, then pick a Boost unlimited plan when the phone arrives. Boost Mobile is part of DISH’s Newly Expanded Data Network (formerly Sprint), and they offer plans beginning at $50 per month for one line. No annual contract is required. Note that availability at Boost can vary — check their site for the latest stock status. For the latest Apple iPhone prices, see our iPhone Price Tracker, → Read More...

Read more »

Apple’s 16″ MacBook Pros are on sale for $300 off MSRP, ...
B&H Photo has new 16″ MacBook Pros on sale today for $300 off Apple’s MSRP, starting at $2099. Expedited shipping is free to many addresses in the US: – 2019 16″ 2.6GHz 6-Core MacBook Pro Space Gray: $2099 $300 off MSRP – 2019 16″ 2.3GHz 8-Core MacBook Pro Space Gray: $2499 $300 off MSRP – 2019 16″ 2.6GHz 6-Core MacBook Pro Silver: $2099.99 $300 off MSRP – 2019 16″ 2.3GHz 8-Core MacBook Pro Silver: $2499 $300 off MSRP Amazon has 16″ MacBook Pros on sale for $300 off Apple’s MSRP as well, with prices starting at $2099. Shipping is free: – 2019 16″ 2.6GHz 6-Core MacBook Pro Space Gray: $2099 $300 off MSRP – 2019 16″ 2.3GHz 8-Core MacBook Pro Space Gray: $2499 $300 off MSRP – 2019 16″ 2.6GHz 6-Core MacBook Pro Silver: $2099.99 $300 off MSRP – 2019 16″ 2.3GHz 8-Core MacBook Pro Silver: $2499 $300 off MSRP Note that Amazon’s stock status may change at any time–see their site for the latest availability. Also, be sure to make your purchase from Amazon rather than a third-party seller. These are all the same MacBook Pros sold by Apple in their retail and online stores, and you won’t find cheaper new 16″ MacBook Pro prices at any other Apple resellers. See our 16″ and 15″ MacBook Pro Price Tracker for the latest prices & deals from Apple and → Read More...

Read more »

2020 4-Core and 6-Core Mac minis on sale for up to $100 off ...
Amazon has Apple’s 2020 Mac minis on sale today for $34-$100 off MSRP with prices starting at $765. Shipping is free: – 2020 4-Core Mac mini: $765 $34 off MSRP – 2020 6-Core Mac mini: $998.99 $100 off MSRP For the latest Mac mini sales and deals, see our Mac mini Price Tracker, → Read More...

Read more »

Apple CEO Tim Cook To Appear Before House Anti-Trust Subcomm...
NEWS: 07.29.20 – Apple CEO Tim Cook will be appearing before members of Congress today to defend the Cupertino, California-based company’s business practices in a hearing which will be held in the United States Capitol in Washington, D.C. In advance of today’s hearing, on Tuesday, the website TechCrunch previewed what to expect from the anti-trust showdown between Congress and the CEOs of the globe’s foremost powerful companies — Apple, Google, Facebook, and Amazon — which are widely regarded as having reshaped the consumer world both within the tech industry and beyond). Each respective company’s chief executive officer, through sworn testimonies, will be defending (according to the report) the vast empires they’ve built. Apple CEO, Tim Cook, stands onstage in the Steve Jobs Theater at Apple Park in Cupertino, California as seen in this June 2020 photograph during WWDC 20, the company’s annual Worldwide Developers Conference. (Photo: Apple, Inc.) At the hearing, which is being coordinated and held by the anti-trust subcommittee of the House Judiciary Committee, CEOs Tim Cook, Sundar Pichai, Mark Zuckerberg, and Jeff Bezos — the chief executive officers of four of the top six most valuable public companies in existence — will be facing questions about how Apple’s, Google’s, Facebook’s, and Amazon’s (respectively) business practices propelled them into the market-dominant giants they are today. In addition, as part of the year-long investigation into digital markets, TechCrunch reported that it expects the subcommittee to touch base on issues such as innovation, competition, data privacy, as well as the free press (as it pertains to each company). While there have been a number of Congressional hearings examining tech companies in recent years (Apple’s Cook previously testified before Congress in 2013), according to TechCrunch, however, usually the company’s lead counsel is sent as opposed to its CEO. Wired magazine reported that this “event” could be historic, with the theme of the day revolving around whether the four companies — each among the most valuable in history → Read More...

Read more »

Get a new 2020 13″ Dual-Core MacBook Air for only $899 tod...
B&H Photo has Apple’s new 2020 13″ Dual-Core MacBook Airs on sale today for $100 off Apple’s MSRP, only $899. Expedited shipping is free to many addresses in the US. These MacBook Airs are the same models sold by Apple in their retail and online stores: – 13″ 2-Core Space Gray MacBook Air: $899 $100 off MSRP – 13″ 2-Core Silver MacBook Air: $899 $100 off MSRP – 13″ 2-Core Gold MacBook Air: $899 $100 off MSRP B&H has the lowest prices available for new MacBook Airs from any Apple reseller. Keep an eye on our 13″ MacBook Air Price Tracker for the latest sales & deals from Apple and → Read More...

Read more »