New 4.7″ iPhone case shows up at Best Buy
The release of the iPhone SE 2 is imminent. Today is the 31st of March, 2020 and according to PhoneArena, the phone could very well launch today as the original iPhone SE was launched on the same date as well. However, a Best Buy employee has shared the picture of an alleged case for the iPhone SE 2. MacRumours covered The post appeared first on iLounge.

Read more »

iPhone SE 2 to cost $349, suggests iGeeksBlog
The rumours about Apple releasing a second generation iPhone SE have been swirling on the internet for the past two years now. However, it looks like the release of the phone is not much far off now, as multiple blogs appear very certain about the release. iGeeksBlog on Twitter revealed that the price of the iPhone SE 2 will be The post appeared first on iLounge.

Read more »

End of an era: Samsung Display will stop making LCD panels t...
Samsung Display, which supplies screens for iPhones, has said that it will end all production of LCD panels in South Korea and China by the end of 2020. A spokesperson for the company made the announcement Tuesday. “We will supply LCD orders to our customers by end of this year without any issues”, the company […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

iPhone SE 2 could launch on 31 March
PhoneArena reports that it expects Apple to launch its new iPhone 9 also popularly known on the internet as the iPhone SE 2 on 31st of March 2020. The new blog suggests the date for release of the second generation of iPhone SE because the first generation iPhone SE launched on the same date as well. The upcoming iPhone 9 The post appeared first on iLounge.

Read more »

MacBooks still use 720p webcams
Apple makes two MacBook lines at the moment – MacBook Air and MacBook Pro. However, the company likes to show off the MacBook Pro 16” as a seperate line (previously, the 13 inch MacBook Pro and 15 inch MacBook Pro would be shown as one). The laptops are very well built and some are extraordinarily powerful but the webcams on The post appeared first on iLounge.

Read more »

Do not buy the 13″ MacBook Pro
Apple updated the MacBook Air with the latest 10th generation Intel chips and also replaced the troubled butterfly keyboard with a traditional scissor switch keyboard. However, Apple has still not updated the 13” MacBook Pro to bring some of the most important updates and it is not recommended to buy the 13” MacBook Pro right now. The new Magic Keyboard The post appeared first on iLounge.

Read more »

Should you buy the new MacBook Air?
Apple released the new MacBook on 18th of March 2020. It was a subtle release due to the ongoing coronavirus pandemic. The company was initially reportedly planning to hold an event to show a slew of devices.  The new MacBook Air starts at $999 – a $100 cheaper than the previous generation. However, the company now packs a lower powered The post appeared first on iLounge.

Read more »

Should you buy the new iPad Pro?
The new iPad Pro is not much different than the previous generation iPad Pro. It basically uses the same processor as the previous generation – A12Z instead of the A12X – bloggers have reported that it’s the same chip but with one GPU core software unlocked on the A12Z. Why did Apple disable a GPU core on the A12X? We The post appeared first on iLounge.

Read more »

iGeeksBlog leaks the iPhone 9/SE 2
iGeeksBlog has obtained some information of the upcoming iPhone SE 2 which is also being called the never released “iPhone 9”. Apple moved from iPhone 9 to iPhone X (roman number 10), and the internet now believes that as the upcoming iPhone SE 2 will be very similar to the iPhone 8, it will very likely be named iPhone 9. The post appeared first on iLounge.

Read more »

New low-cost iPhone SE successor could launch as soon as nex...
The iPhone SE 2, a.k.a the iPhone 9, could debut anytime after next week, a new report claims. According to the report, case makers for the new low-cost handset have started sending inventory to retailers like Best Buy. However, they have included instructions that the products must not be displayed until April 5. The report […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple supplier Samsung to end all LCD production by end of 2...
Samsung, a key Apple supplier that manufactures a number of vital components for iPhone, iPad and Mac, on Tuesday said it plans to cease traditional LCD panel production by the end of 2020.

Read more »

‘iPhone 9’ cases arrive at retailers with April 5th rele...
The 4.7-inch budget "iPhone 9" has long been rumored to be released at some date this spring. Now, third-party cases are arriving retailers… The post ‘iPhone 9’ cases arrive at retailers with April 5th release date appeared first on MacDailyNews.

Read more »

∞ Vancouver’s 7pm Coronavirus workers salute
This is happening around the world.

Read more »

Nike Run Club for iPhone and Apple Watch adds new post-run m...
Nike is rolling out a nice update to the Nike Run Club app for iPhone and Apple Watch today. The update brings new interface tweaks to the Apple Watch app, as well as additional metrics to the post-run experience. more… The post Nike Run Club for iPhone and Apple Watch adds new post-run metrics and more appeared first on 9to5Mac.

Read more »

Apple Music launches ‘Come Together’ collection ...
Apple on Monday added a new collection, "Come Together," to its Apple Music streaming service for users taking part in COVID-19 social distancing, quarantine and lockdown measures.

Read more »

Everything we know so far about the Apple Watch Series 6
The Apple Watch Series 5 was a major update, bringing an always-on display to the device for the first time. This year, early indications are that the Apple Watch Series 6 will continue to expand health capabilities. Read on as we round up everything we know so far about the 2020 Apple Watch. more… The post appeared first on 9to5Mac.

Read more »

Case for affordable 4.7-inch iPhone arrives at Best Buy, sug...
With rumors of a next-generation "iPhone SE 2" aswirl, Best Buy this week received a batch of cases designed for an unknown 4.7-inch iPhone model that could go on sale in the near future.

Read more »

Apple accused of ignoring ‘massive’ music piracy on iTun...
Lawyers representing a group of music composers from the 20th century accuse Apple of being “recklessly indifferent or willfully blind” to the actions of a company that operates a “massive music piracy operation” on iTunes. A legal complaint was brought today by the law firm of Schwartz, Ponterio & Levenson on behalf of the people […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

TMO UK Associate Editor Charlotte Henry (#5) – TMO BGM Int...
Charlotte Henry is a London-based technical journalist. A self-described media junkie, she writes about Apple — and now for the Mac Observer as well as our UK Associate Editor. She has also written for City A.M., Computer Business Review, the Independent on Sunday and CapX. Her new book is: Not Buying It. In this episode, Charlotte and I discuss the impact of COVID-19 on the TV entertainment and streaming industry. We look at the diversion of theatrical releases to streaming, whether indoor theaters will ever return to normal, possible changes to production methods, throttling of streaming speeds, a possible return to more feel-good movies, the impact on binge watching, series vs. movie watching during lock-down, and Charlotte’s reaction to Disney+. Plus, John reveals a very personal secret!

Read more »

iPhone 9 case inventory arriving at Best Buy, other retailer...
The long-rumored iPhone 9 is expected to be released at some point this spring. Now, accessories from case makers are making their way to retailers such as Best Buy, with specific instructions not to inventory the products until the end of this week. more… The post iPhone 9 case inventory arriving at Best Buy, other retailers with April 5 merchandising date appeared first on 9to5Mac.

Read more »

PSA: For COVID-19 Disaster Loan applications, use Chrome not...
Here’s a tip for small-business owners trying to fill out the Small Business Administration’s new online COVID-19 Economic Injury Disaster Loan Program application: Use Google’s Chrome browser, not Safari. Unfortunately, the online form for the SBA’s COVID-19 loans doesn’t function correctly using Apple’s browser. In Safari, the multipage application won’t advance to the next page […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple is added to BofA’s best ideas list; COVID-19 seen as...
BofA Global Research analyst Wamsi Mohan reiterated his "Buy" rating with a $300 price target and added AAPL stock to the firm’s best ideas list … The post Apple is added to BofA’s best ideas list; COVID-19 seen as transitory issue appeared first on MacDailyNews.

Read more »

iPad Pro teardown basically finds 2018’s iPad Pro with a l...
Plus a peak at what the 3D sensor's projected dots look like, thanks to infrared.

Read more »

∞ “Some Good News” with John Krasinski
We can all use some good news right now.

Read more »

Regarding Zoom
Zoom is popular, useful, and by their own admission not trustworthy.

Read more »

New lawsuit accuse Apple of ‘music piracy operation’
Another day, another lawsuit. As reported by AppleInsider— go here for details — a lawsuit against Apple and Adasam, a UK-based music distribution company, accuses them of a “massive music piracy operation" to profit from re-recorded compositions.

Read more »

iOS 14 remains on schedule despite developers working from h...
Apple employees required to work from home during the COVID-19 pandemic supposedly aren’t letting iOS 14 fall behind schedule. The next version of the iPhone and iPad operating system is reportedly on track for release. And company engineers are also creating new versions of an array of hardware products from their home offices. No iOS […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Lawsuit alleges Apple part of ‘massive music piracy op...
A new lawsuit claims that Apple and a music distribution company are involved in a "massive music piracy operation" to profit from re-recorded compositions.

Read more »

watchOS 7 may add kid-friendly activity rings to Apple Watch
Apple is planning to make some big changes to the Activity Rings on Apple Watch so that it’s more kid-friendly. Leaked code from iOS 14 reveals that Apple plans to tweak how the move ring works when Apple Watch is in Kid Mode, allowing parents to set goals from their own iPhones. Instead of tracking […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Annual Protest to ‘Fight Krebs’ Raises €150K+
In 2018, KrebsOnSecurity unmasked the creators of Coinhive -- a now-defunct cryptocurrency mining service that was being massively abused by cybercriminals -- as the administrators of a popular German language image-hosting forum. In protest of that story, forum members donated hundreds of thousands of euros to nonprofits that combat cancer (Krebs means "cancer" in German). This week, the forum is celebrating its third annual observance of that protest to "fight Krebs," albeit with a Coronavirus twist.

Read more »

Russians Shut Down Huge Card Fraud Ring
Federal investigators in Russia have charged at least 25 people accused of operating a sprawling international credit card theft ring. Cybersecurity experts say the raid included the charging of a major carding kingpin thought to be tied to dozens of carding shops and to some of the bigger data breaches targeting western retailers over the past decade. In a statement released this week, the Russian Federal Security Service (FSB) said 25 individuals were charged with circulating illegal means of payment in connection with some 90 websites that sold stolen credit card data.

Read more »

US Government Sites Give Bad Security Advice
Many U.S. government Web sites now carry a message prominently at the top of their home pages meant to help visitors better distinguish between official U.S. government properties and phishing pages. Unfortunately, part of that message is misleading and may help perpetuate a popular misunderstanding about Web site security and trust that phishers have been exploiting for years now.

Read more »

Cybercriminals are preying on coronavirus fears
Whenever there are global news headlines that generate a lot of public interest, especially stories that may cause panic, you can bet that cybercriminals will try to leverage the situation to their advantage. Such is the case with the coronavirus (COVID-19) pandemic. Coronavirus scams abound Last week, the SANS Internet Storm Center reported that fraudulent […]

Read more »

Who’s Behind the ‘Web Listings’ Mail Scam?
In December 2018, KrebsOnSecurity looked at how dozens of U.S. political campaigns, cities and towns had paid a shady company called Web Listings Inc. after receiving what looked like a bill for search engine optimization (SEO) services rendered on behalf of their domain names. The story concluded that this dubious service had been scamming people and companies for more than a decade, and promised a Part II to explore who was behind Web Listings. What follows are some clues that point to a very convincing answer to that question.

Read more »

Security Breach Disrupts Fintech Firm Finastra
Finastra, a company that provides a range of technology solutions to banks worldwide, said it was shutting down key systems in response to a security breach discovered Friday morning. The company's public statement and notice to customers does not mention the cause of the outage, but their response so far is straight out of the playbook for dealing with ransomware attacks.

Read more »

Zxyel Flaw Powers New Mirai IoT Botnet Strain
In February, hardware maker Zyxel fixed a zero-day vulnerability in its routers and VPN firewall products after KrebsOnSecurity told the company the flaw was being abused by attackers to break into devices. This week, security researchers said they spotted that same vulnerability being exploited by a new variant of Mirai, a malware strain that targets vulnerable Internet of Things (IoT) devices for use in large-scale attacks and as proxies for other cybercrime activity.

Read more »

5 Tips for Working at Home – Comfortably and Productively
Working remotely (i.e. working from home) has been gradually becoming more common. In recent weeks, global health concerns have rapidly accelerated this shift, and many people who have never worked from home before will be doing so for weeks or perhaps months to come. Some companies may even decide to continue to offer remote-work opportunities […]

Read more »

Coronavirus Widens the Money Mule Pool
With many people being laid off or working from home thanks to the Coronavirus pandemic, cybercrooks are almost certain to have more than their usual share of recruitable "money mules" -- people who get roped into money laundering schemes under the pretense of a work-at-home job offer. Here's the story of one upstart mule factory that spoofs a major nonprofit and tells new employees they'll be collecting and transmitting donations for an international "Coronavirus Relief Fund."

Read more »

The Web’s Bot Containment Unit Needs Your Help
Anyone who's seen the 1984 hit movie Ghostbusters likely recalls the pivotal scene where a government bureaucrat orders the shutdown of the ghost containment unit, effectively unleashing a pent-up phantom menace on New York City. Now, something similar is in danger of happening in cyberspace: Shadowserver.org, an all-volunteer nonprofit organization that works to help Internet service providers (ISPs) identify and quarantine malware infections and botnets, has lost its longtime primary source of funding.

Read more »

Vulnerability Summary for the Week of March 9, 2020
Original release date: March 16, 2020The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.   High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info apache -- shardingsphere   In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE. 2020-03-11 7.5 CVE-2020-1947CONFIRM bookstack -- bookstack   BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This most impacts scenarios where non-trusted users are given permission to upload images in any area of the application. The issue was addressed in a series of patches in versions 0.25.3, 0.25.4 and 0.25.5. Users should upgrade to at least v0.25.5 to avoid this vulnerability. 2020-03-09 9 CVE-2020-5256MISCMISCMISCCONFIRM bwa_technology -- direx-pro_devices BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3. 2020-03-09 10 CVE-2020-10250MISC d-link -- dcs-930l_devices   setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter. 2020-03-09 9 CVE-2016-11021MISC d-link -- dir-825_devices   An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. 2020-03-07 9 CVE-2020-10215MISCMISC d-link -- dir-825_devices   An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. 2020-03-07 9 CVE-2020-10216MISCMISC d-link -- dir-825_devices   An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. 2020-03-07 9 CVE-2020-10213MISCMISC d-link -- dir-825_devices   An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_sync.cgi with a sufficiently long parameter ntp_server. 2020-03-07 9 CVE-2020-10214MISC dell -- digital_delivery   Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system. 2020-03-09 7.2 CVE-2020-5342MISC dell -- emc_isilon_onefs   Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required. When this happens, loss of control of the cluster can occur. 2020-03-06 10 CVE-2020-5328MISC dell -- security_management_server   Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerability. When the server is exposed to the internet and Windows Firewall is disabled, a remote unauthenticated attacker may exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host./ 2020-03-06 9.3 CVE-2020-5327MISC fat-free_framework -- fat-free_framework    In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUEST, $_GET, or $_POST) to the framework's Clear method. 2020-03-11 7.5 CVE-2020-5203MISCCONFIRM gitlab -- gitlab_community_and_enterprise_editions   An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Server-Side Request Forgery (SSRF) vulnerabilities caused by an insufficient validation to prevent DNS rebinding attacks. 2020-03-10 7.5 CVE-2019-12443MISCCONFIRM gitlab-- gitlab   GitLab 10.7 and later through 12.7.2 has Incorrect Access Control. 2020-03-06 7.5 CVE-2020-8113CONFIRMMISCMISC gitlab -- gitlab_community_and_enterprise_editions   An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization. 2020-03-10 7.5 CVE-2019-12428MISCCONFIRM google -- android In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648045References: N/A 2020-03-10 7.2 CVE-2020-0011MISC google -- android   In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143155861 2020-03-10 7.8 CVE-2020-0039MISC google -- android   In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143106535 2020-03-10 7.8 CVE-2020-0037MISC google -- android   In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770 2020-03-10 7.8 CVE-2020-0034MISC google -- android   In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143109193 2020-03-10 7.8 CVE-2020-0038MISC google -- android   In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144351324 2020-03-10 7.2 CVE-2020-0033MISC google -- android   In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137014293References: N/A 2020-03-10 7.2 CVE-2020-0010MISC google -- android   In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648844 2020-03-10 7.2 CVE-2020-0012MISC google -- android   In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144679405 2020-03-10 7.2 CVE-2020-0036MISC google -- android   In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-145364230 2020-03-10 9.3 CVE-2020-0032MISC google -- android   In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel 2020-03-10 7.2 CVE-2020-0041MISC google -- android   In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754 2020-03-10 7.2 CVE-2020-0069MISC hp -- storage_essentials   In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461. 2020-03-10 10 CVE-2017-10992MISC jenkins -- jenkins Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins. 2020-03-09 9 CVE-2020-2159MLISTCONFIRM jenkis -- jenkins   An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system. 2020-03-09 8.5 CVE-2020-2139MLISTCONFIRM lexmark -- markvision_exterprise   Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. ( 2020-03-09 7.5 CVE-2016-6918MISC magento -- advanced_newsletter   SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO. 2020-03-09 10 CVE-2014-1634MISC palo_alto_networks -- pan-os   A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. 2020-03-11 7.2 CVE-2020-1981CONFIRM palo_alto_networks -- pan-os   A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. This issue is fixed in PAN-OS 8.1.13, and all later versions. 2020-03-11 7.2 CVE-2020-1980CONFIRM phpgurukul -- job_portal   An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution. 2020-03-08 7.5 CVE-2020-10225MISCMISC phpgurukul -- online_book_store   An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution. 2020-03-08 7.5 CVE-2020-10224MISCMISC quest -- kace_k1000_systems_management_appliance   service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter. 2020-03-09 7.5 CVE-2019-20504MISC rconfig -- rconfig   lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter. 2020-03-08 9 CVE-2020-10221MISCMISCMISC rconfig -- rconfig   An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. 2020-03-07 7.5 CVE-2020-10220MISCMISC responsive_filemanager -- responsive_filemanager   upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an internal IP address. For example, an SSRF attempt may succeed if a .ico filename is added to the PATH_INFO. Also, an attacker could create a DNS hostname that resolves to the 0.0.0.0 IP address for DNS pinning. NOTE: this issue exists because of an incomplete fix for CVE-2018-14728. 2020-03-07 7.5 CVE-2020-10212MISC ricoh -- multiple_devices   A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and prior; Kantech EntraPass Global Edition versions 8.0 and prior. 2020-03-10 10 CVE-2019-7589CONFIRMCERT sap -- solution_manager   SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check. 2020-03-10 7.5 CVE-2020-6198MISCMISC sap -- solution_manager   SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager. 2020-03-10 7.5 CVE-2020-6207MISCMISC siemens -- multiple_simatic_devices   A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability. 2020-03-10 7.8 CVE-2019-19281MISC siemens -- simatic_s7-300_cpu_family_and_sinumerik_840d_sl A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SINUMERIK 840D sl (All versions). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known. 2020-03-10 7.8 CVE-2019-18336MISC siemens -- siprotec_4_and_sprotec_devices   A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens. 2020-03-10 7.8 CVE-2019-19279MISC sleuth_kit -- sleuth_kit   In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c. 2020-03-09 7.5 CVE-2020-10232MISCMLIST substack -- minimist   minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload. 2020-03-11 7.5 CVE-2020-7598MISC sumavision -- enhanced_multimedia_router   goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_useradministrator123456 request. 2020-03-11 7.5 CVE-2020-10181MISCMISC tibco_software -- spotfire_analytics_platform_for_aws_marketplace   The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permissions to the Spotfire Library, but not "Script Author" group permission, to modify attributes of files and objects saved to the library such that the system treats them as trusted. This could allow an attacker to cause the Spotfire Web Player, Analyst clients, and TERR Service into executing arbitrary code with the privileges of the system account that started those processes. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 10.8.0 and below and TIBCO Spotfire Server: versions 7.11.9 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5, and 10.3.6, versions 10.4.0, 10.5.0, 10.6.0, 10.6.1, 10.7.0, and 10.8.0. 2020-03-11 9 CVE-2020-9408CONFIRMCONFIRM twisted_matrix -- twisted_web   In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request. 2020-03-12 7.5 CVE-2020-10108MISCMISC twisted_matrix -- twisted_web   In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request. 2020-03-12 7.5 CVE-2020-10109MISCMISC urllib3 -- urllib3   The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. The percent_encodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length N, the size of percent_encodings may be up to O(N). The next step (normalize existing percent-encoded bytes) also takes up to O(N) for each step, so the total time is O(N^2). If percent_encodings were deduplicated, the time to compute _encode_invalid_chars would be O(kN), where k is at most 484 ((10+6*2)^2). 2020-03-06 7.8 CVE-2020-7212MISCMISCMISC wago -- pfc200_devices An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted XML file will direct the Cloud Connectivity service to download and execute a shell script with root privileges. 2020-03-11 9 CVE-2019-5161MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the extracted dns value from the xml file is used as an argument to /etc/config-tools/edit_dns_server %s dns-server-nr=%d dns-server-name= using sprintf(). This command is later executed via a call to system(). This is done in a loop and there is no limit to how many dns entries will be parsed from the xml file. 2020-03-11 9.3 CVE-2019-5167MISC wftpserver -- wing_ftp_server   Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and world-writable permissions. If a sensitive system file were edited this way, a low-privilege user may escalate privileges to root. 2020-03-07 7.2 CVE-2020-8634MISC wftpserver -- wing_ftp_server   Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and escalate privileges within the operating system by modifying system files. 2020-03-07 7.2 CVE-2020-8635MISC wordpress -- wordpress   The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter. 2020-03-10 7.5 CVE-2020-10257MISC zoho -- manageengine_desktop_central   An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. 2020-03-11 7.5 CVE-2020-8540CONFIRM zoho -- manageengine_desktop_central   Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets. 2020-03-06 10 CVE-2020-10189MISCMISCMISCCONFIRMMISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info ansible -- ansible   A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10. 2020-03-09 4.6 CVE-2020-1737CONFIRMMISCFEDORAFEDORA ansible -- ansible   A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p "; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc//cmdline'. 2020-03-11 4.4 CVE-2020-1733CONFIRMMISC avast -- antitrack   Avast AntiTrack before 1.5.1.172 and AVG Antitrack before 2.0.0.178 proxies traffic to HTTPS sites but does not validate certificates, and thus a man-in-the-middle can host a malicious website using a self-signed certificate. No special action necessary by the victim using AntiTrack with "Allow filtering of HTTPS traffic for tracking detection" enabled. (This is the default configuration.) 2020-03-09 5.8 CVE-2020-8987CONFIRMMISC barracuda -- load_balancer_adc   Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = V3.0), SCALANCE S612 (All versions >= V3.0), SCALANCE S623 (All versions >= V3.0), SCALANCE S627-2M (All versions >= V3.0). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it. 2020-03-10 not yet calculated CVE-2019-6585MISC technicolor -- tc7337net_devices   Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header. 2020-03-11 not yet calculated CVE-2020-10376MISC torpeodquery -- torpeodquery   Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java. 2020-03-12 not yet calculated CVE-2019-11343MISCMISC trendmicro -- password_manager_for_windows   Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation. 2020-03-12 not yet calculated CVE-2020-8469N/A unicode -- international_components_for_unicode_for_c/c++ An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp. 2020-03-12 not yet calculated CVE-2020-10531REDHATMISCMISCMISCMISCMISCGENTOOMISC untis -- webuntis   Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules. 2020-03-13 not yet calculated CVE-2020-10540MISC vesta -- vesta_control_panel   Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the dangerous command exec. This function can be dangerous if arguments passed to it are not filtered. Every user input in VestaCP that is used as an argument is filtered with the escapeshellarg function. This function comes from the PHP library directly and its description is as follows: "escapeshellarg() adds single quotes around a string and quotes/escapes any existing single quotes allowing you to pass a string directly to a shell function and having it be treated as a single safe argument." It means that if you give Username, it will have 'Username' as a replacement. This works well and protects users from exploiting this potentially dangerous exec function. Unfortunately, VestaCP uses this escapeshellarg function incorrectly in several places. 2020-03-10 not yet calculated CVE-2019-9859MISC wago -- e!cockpit   A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text. 2020-03-11 not yet calculated CVE-2019-5106MISC wago -- e!cockpit   An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware version is being installed. An attacker can create a custom firmware update package with invalid metadata in order to trigger this vulnerability. 2020-03-11 not yet calculated CVE-2019-5158MISC wago -- e!cockpit   An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially crafted firmware update file can allow an attacker to write arbitrary files to arbitrary locations on WAGO controllers as a part of executing a firmware update, potentially resulting in code execution. An attacker can create a malicious firmware update package file using any zip utility. The user must initiate a firmware update through e!COCKPIT and choose the malicious wup file using the file browser to trigger the vulnerability. 2020-03-11 not yet calculated CVE-2019-5159MISC wago -- pfc100_and_pfc200_devices   An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt() function which can be exploited to disclose hashed user credentials. This affects WAGO PFC200 Firmware version 03.00.39(12) and version 03.01.07(13), and WAGO PFC100 Firmware version 03.00.39(12). 2020-03-11 not yet calculated CVE-2019-5135MISC wago -- pfc200_devices An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1e9fc the extracted subnetmask value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled subnet-mask= using sprintf(). This command is later executed via a call to system(). 2020-03-11 not yet calculated CVE-2019-5174MISC wago -- pfc200_devices An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e9fc the extracted state value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state= using sprintf(). This command is later executed via a call to system(). 2020-03-11 not yet calculated CVE-2019-5173MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1e87c the extracted hostname value from the xml file is used as an argument to /etc/config-tools/change_hostname hostname= using sprintf(). This command is later executed via a call to system(). 2020-03-12 not yet calculated CVE-2019-5170MISC wago -- pfc200_devices   An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO PFC100 version 03.00.39(12). A specially crafted authentication request can bypass regular expression filters, resulting in sensitive information disclosure. 2020-03-11 not yet calculated CVE-2019-5134MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1ea28 the extracted type value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled config-type= using sprintf(). This command is later executed via a call to system(). 2020-03-11 not yet calculated CVE-2019-5175MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command. 2020-03-11 not yet calculated CVE-2019-5156MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject OS commands into the TimeoutUnconfirmed parameter value contained in the Firmware Update command. 2020-03-11 not yet calculated CVE-2019-5157MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file. 2020-03-11 not yet calculated CVE-2019-5166MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e900 the extracted gateway value from the xml file is used as an argument to /etc/config-tools/config_default_gateway number=0 state=enabled value= using sprintf(). This command is later executed via a call to system(). 2020-03-12 not yet calculated CVE-2019-5169MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send specially crafted packet at 0x1ea48 to the extracted hostname value from the xml file that is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled ip-address= using sprintf(). 2020-03-12 not yet calculated CVE-2019-5171MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any subnetmask values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled subnet-mask=‘) in length. A subnetmask value of length 0x3d9 will cause the service to crash. 2020-03-12 not yet calculated CVE-2019-5181MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e840 the extracted ntp value from the xml file is used as an argument to /etc/config-tools/config_sntp time-server-%d= using sprintf(). This command is later executed via a call to system(). This is done in a loop and there is no limit to how many ntp entries will be parsed from the xml file. 2020-03-11 not yet calculated CVE-2019-5172MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x40 is overflowed with the call to sprintf() for any gateway values that are greater than 512-len(‘/etc/config-tools/config_default_gateway number=0 state=enabled value=‘) in length. A gateway value of length 0x7e2 will cause the service to crash. 2020-03-12 not yet calculated CVE-2019-5176MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. 2020-03-12 not yet calculated CVE-2019-5179MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any hostname values that are greater than 1024-len(‘/etc/config-tools/change_hostname hostname=‘) in length. A hostname value of length 0x3fd will cause the service to crash. 2020-03-12 not yet calculated CVE-2019-5178MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any ip values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled ip-address=‘) in length. A ip value of length 0x3da will cause the service to crash. 2020-03-12 not yet calculated CVE-2019-5180MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x440 is overflowed with the call to sprintf() for any type values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled config-type=‘) in length. A type value of length 0x3d9 will cause the service to crash. 2020-03-11 not yet calculated CVE-2019-5182MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12) 2020-03-11 not yet calculated CVE-2019-5155MISC watchguard -- fireware The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI. 2020-03-12 not yet calculated CVE-2020-10532MISCMISC wordpress -- wordpress controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters. 2020-03-10 not yet calculated CVE-2018-14502MISCMISC wordpress -- wordpress The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of requests that leverage unintended comparisons of integers to strings. 2020-03-14 not yet calculated CVE-2020-10568MISCMISC wordpress -- wordpress The popup-builder plugin before 3.64.1 for WordPress allows information disclosure and settings modification, leading to in-scope privilege escalation via admin-post actions to com/classes/Actions.php. By sending a POST request to wp-admin/admin-post.php, an authenticated attacker with minimal (subscriber-level) permissions can modify the plugin's settings to allow arbitrary roles (including subscribers) access to plugin functionality by setting the action parameter to sgpbSaveSettings, export a list of current newsletter subscribers by setting the action parameter to csv_file, or obtain system configuration information including webserver configuration and a list of installed plugins by setting the action parameter to sgpb_system_info. 2020-03-13 not yet calculated CVE-2020-10195MISCMISC wordpress -- wordpress   An XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote attackers to inject arbitrary JavaScript into existing popups via an unsecured ajax action in com/classes/Ajax.php. It is possible for an unauthenticated attacker to insert malicious JavaScript in several of the popup's fields by sending a request to wp-admin/admin-ajax.php with the POST action parameter of sgpb_autosave and including additional data in an allPopupData parameter, including the popup's ID (which is visible in the source of the page in which the popup is inserted) and arbitrary JavaScript which will then be executed in the browsers of visitors to that page. Because the plugin functionality automatically adds script tags to data entered into these fields, this injection will typically bypass most WAF applications. 2020-03-13 not yet calculated CVE-2020-10196MISCMISC wordpress -- wordpress   An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfu_include_lib call. 2020-03-13 not yet calculated CVE-2020-10564MISCMISCMISC xerox -- phaser_3320_printers Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks. 2020-03-13 not yet calculated CVE-2019-13166MISCMISC xerox -- phaser_3320_printers Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions. 2020-03-13 not yet calculated CVE-2019-13167MISCMISC xerox -- phaser_3320_printers Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would allow an attacker to execute arbitrary code on the device. 2020-03-13 not yet calculated CVE-2019-13169MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow an attacker to execute arbitrary code on the device. 2020-03-13 not yet calculated CVE-2019-13172MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unauthenticated attacker to execute arbitrary code on the device. This was caused by an insecure handling of the register parameters, because the size used within a memcpy() function, which copied the action value into a local variable, was not checked properly. 2020-03-13 not yet calculated CVE-2019-13171MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device. 2020-03-13 not yet calculated CVE-2019-13165MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Successful exploitation of this vulnerability can lead to the takeover of a local account on the device. 2020-03-13 not yet calculated CVE-2019-13170MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device. 2020-03-13 not yet calculated CVE-2019-13168MISCMISC yii2cmf -- yii2cmf yidashi yii2cmf 2.0 has XSS via the /search q parameter. 2020-03-12 not yet calculated CVE-2018-10704MISCMISC zoho -- managenegine_opmanager   Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108. 2020-03-13 not yet calculated CVE-2020-10541MISC zoho -- managengine_applications_manager   Zoho ManageEngine Applications Manager 14590 and before allows a remote unauthenticated attacker to disclose license related information via WieldFeedServlet servlet 2020-03-13 not yet calculated CVE-2019-19799MISCMISC Back to top This product is provided subject to this Notification and this Privacy & Use policy.

Read more »

Just in! Apple’s new 2020 4-Core Mac mini $100 off MSRP at...
B&H Photo has Apple’s new 2020 4-Core Mac mini in stock and on sale today for only $699 including free overnight delivery for many US addresses. Their price is $100 off MSRP, and it’s the lowest price available for this new model from any Apple reseller. For the latest Mac mini sales and deals, see our Mac mini Price Tracker, → Read More...

Read more »

New 2020 13″ Space Gray MacBook Airs on sale for $50 off A...
B&H Photo has Apple’s new 2020 13″ Space Gray MacBook Airs on sale today for $50 off Apple’s MSRP. While they don’t have stock today, preorders are accepted at this discount. Overnight shipping is free to many addresses in the US once they receive stock: – 13″ 4-Core Space Gray MacBook Air: $949 $50 off MSRP – 13″ 6-Core Space Gray MacBook Air: $1249 $50 off MSRP Keep an eye on our 13″ MacBook Air Price Tracker for the latest sales & deals from Apple and → Read More...

Read more »

Clearance 4-Core Mac mini on sale for $629 with free overnig...
B&H Photo has clearance previous-generation 3.6GHz 4-Core Mac minis available for $629 including free overnight delivery to many addresses in the US. Their price is $170 off original MSRP for this mini, and it’s the lowest price available for this model, new, from any → Read More...

Read more »

The best deals on iPad Pros remain these Certified Refurbish...
Apple recently dropped prices on clearance 2019, Certified Refurbished, 11″ & 12″ iPad Pros with models now available starting at only $549. Each iPad comes with a standard Apple one-year warranty, outer cases are new, and shipping is free. The following configurations are available: – 11″ 64GB WiFi iPad Pro: $549 was $679 – 11″ 256GB WiFi iPad Pro: $679 was $809 – 11″ 512GB WiFi iPad Pro: $849 was $979 – 11″ 1TB WiFi iPad Pro: $1019 was $1149 – 11″ 64GB WiFi + Cellular iPad Pro: $679 was $719 – 11″ 256GB WiFi + Cellular iPad Pro: $809 was $939 – 11″ 512GB WiFi + Cellular iPad Pro: $979 was $1109 – 11″ 1TB WiFi + Cellular iPad Pro: $1149 was $1279 – 12.9″ 64GB WiFi iPad Pro: $699 was $849 – 12.9″ 256GB WiFi iPad Pro: $829 was $979 – 12.9″ 512GB WiFi iPad Pro: $999 was $1149 – 12.9″ 1TB WiFi iPad Pro: $1169 was $1319 – 12.9″ 64GB WiFi + Cellular iPad Pro: $829 was $979 – 12.9″ 256GB WiFi + Cellular iPad Pro: $959 was $1109 – 12.9″ 512GB WiFi + Cellular iPad Pro: $1129 was $1279 – 12.9″ 1TB WiFi + Cellular iPad Pro: $1299 was $1449 Keep an eye on our 11″ iPad Pro Price Tracker and 12″ iPad Pro Price Tracker for the latest → Read More...

Read more »

$100 off any Apple iPhone 11 model, XR, XS, or X with no-con...
Boost Mobile is offering Apple iPhone 11, 11 Pro, and iPhone 11 Pro Max models for $100 off MSRP with service. Their discount reduces the cost of an iPhone 11/64GB to $599, iPhone 11 Pro to $899 for the 64GB model, and $999 for the 64GB iPhone 11 Pro Max. Boost is also offering previous-generation iPhone XS, XS Max, XR, and X iPhones for $100 off. Prices for these models start at $499. Order online, then pick a Boost plan when the phone arrives. Boost Mobile is part of the Sprint network, and they offer plans beginning at only $35 per month for one line. No annual contract → Read More...

Read more »

Sunday Sale! Use your Apple Education discount to save up to...
Stuck at home during the coronavirus lockdowns and need a new computer for school work? Purchase a new Mac using Apple’s Education discount, and take up to $400 off MSRP. Purchase an iPad, and take up to $50 off MSRP. All teachers, students, and staff of any educational institution with a .edu email address qualify for the discount: – 2019 16″ 2.3GHz 8-Core Touch Bar MacBook Pro: $2599 $200 off – 2019 16″ 2.6GHz 6-Core Touch Bar MacBook Pro: $2199 $200 off – 2019 13″ 2.4GHz/512GB 4-Core Touch Bar MacBook Pro: $1899 $100 off – 2019 13″ 2.4GHz/256GB 4-Core Touch Bar MacBook Pro: $1699 $100 off – 2019 13″ 1.4GHz/128GB 4-Core Touch Bar MacBook Pro: $1199 $100 off – 2019 13″ 1.4GHz/256GB 4-Core Touch Bar MacBook Pro: $1399 $100 off – 2020 13″ Dual-Core MacBook Air: $899 $100 off – 2020 13″ Quad-Core MacBook Air: $1199 $100 off – 8-Core Mac Pro: $5599 $400 off – Pro Display XDR (standard): $4599 $400 off – Pro Display XDR (nano glass): $5599 $400 off – Pro Stand: $5599 $100 off – 27″ 8-Core iMac Pro: $4599 $400 off – 27″ 3.7GHz 5K iMac: $2099 $200 off – 27″ 3.1GHz 5K iMac: $1899 $100 off – 27″ 3.0GHz 5K iMac: $1699 $100 off – 21″ 3.0GHz 4K iMac: $1399 $100 off – 21″ 3.6GHz 4K iMac: $1249 $50 off – 21″ 2.3GHz iMac: $1049 $50 off – 3.6GHz Mac mini: $779 $20 off – 3.0GHz Mac mini: $1049 $50 off – 12.9″ iPad Pros: $50 off – 11″ iPad Pros: $50 off – 10.5″ iPad Airs: $20 off – 10.2″ iPads: $20 off – 7.9″ iPad minis: $20 off Not in the US? Click for the Canada or the → Read More...

Read more »

Use our exclusive price trackers at MacPrices.net to find th...
Looking for a new 2020 13″ MacBook Air or one of the new 2020 iPad Pros? Our Apple award-winning price trackers are the best place to look for the lowest prices and latest sales on Apple gear. Scan our price trackers for the latest information on sales, bundles, and availability on systems from Apple’s authorized internet/catalog resellers. We update the trackers continuously: – 16″ MacBook Pros – 13″ MacBook Pros – 13″ MacBook Airs – iMacs – iMac Pros – Mac minis – Mac Pros – Pro Display XDR – 7.9″ iPad minis – 10.2″ iPads – 10.5″ iPad Airs – 12″ iPad Pros – 11″ iPad Pros – Apple Watch – Apple TVs – Apple AirPods – iPhones Other price trackers include HomePods, Keyboards & Pointers, iPod touch, Smart Keyboards, and Apple Pencils. A full list of the available Apple price trackers is in the menu at the top of → Read More...

Read more »

Apple resellers report stock of the new 2020 4-Core Mac mini...
Amazon and Adorama are both reporting stock of Apple’s new 2020 4-Core Mac mini, and at $779, you can save $20 on your purchase today. Shipping is free: – 2020 4-Core Mac mini: $779 at Adorama – 2020 4-Core Mac mini: $779 at Amazon Keep an eye on our Mac mini Price Tracker for the latest prices & sales from Apple and → Read More...

Read more »

Xfinity Mobile extends $200 off any new Apple iPhone offer, ...
Take $200 off the purchase of any new Apple iPhone model at Xfinity Mobile with a new line activation and transfer of phone number to Xfinity Mobile. Offer is valid until May 17, 2020: The fine print: “$200 Off: Offer ends 5/17/20. Requires purchase of new, eligible iPhone while supplies last, 24 month Xfinity Mobile Device Payment Plan Agreement (“Device Agreement”), activation of new Xfinity Mobile line and transfer of phone number from another carrier within 30 days of phone purchase date. Device credits applied monthly to your account over 24 months so long as Device Agreement is in effect. If line is canceled, voluntarily or involuntarily or device payments are accelerated, balance of credits associated with device payment are forfeited. May not be combined with other offers. Not valid with prior purchases, returns or exchanges.” This deal is live today at → Read More...

Read more »

Clearance 13″ 1.6GHz/128GB MacBook Air price drops to reco...
B&H Photo has dropped their price on clearance 13″ 128GB Space Gray MacBook Airs to only $879 — by $220 off Apple’s original MSRP. Their price is the lowest we’ve seen for a new 2019 13″ MacBook Air. Overnight shipping is free to many locations in the US: – 13″ 1.6GHz/128GB MacBook Air Space Gray: $879 $220 off original MSRP For the latest sales & prices, see our 13″ MacBook Air Price Tracker, → Read More...

Read more »

Closures Of Apple Retail Stores Worldwide Extended Indefinit...
NEWS: 03.27.20- Apple retail stores in the United States and countries outside of greater China that had been closed temporarily from March 14 through today, March 27, as a precautionary measure enacted by the Cupertino, California-based company in order to protect its employees and customers worldwide amid the global pandemic surrounding the novel coronavirus (also known as COVID-19) have been extended indefinitely according to an anonymous source familiar with the matter. On Monday, the website Cult of Mac broke the news that Apple probably wouldn’t be reopening its retail stores until mid-April at the earliest according to multiple sources it spoke with. It reported that many store employees were being told quietly that the situation remained a “wait-and-see” status while company executives would continue to assess which locations might reopen — and when — on a case-by-case and country-by-country (including state-by-state in the United States) basis. The website also reported that it had discovered a message posted online March 17 on apple.com that stated, “Our retail stores are closed until further notice” which it speculated was the first indication Apple would not be reopening its locations on March 28 as originally planned. All Apple retail stores worldwide in countries outside of greater China will remain closed indefinitely due to the coronavirus global pandemic which includes Apple Piazza Liberty in Milan, Italy where an employee is seen in this October 2019 photograph assisting a customer inside the store with their newly purchased AirPods Pro headphones. (Photo: Apple, Inc.) When Cult of Mac spoke with multiple sources connected to the Cupertino, California-based company who had knowledge of developments, they told the website that Apple was never totally confident it would be able to reopen all of its stores outside greater China on March 28 when it closed them on March 14. An Apple retail store manager in the southern United States — who asked not to be named (since, according to Cult of Mac, the discussions were meant to → Read More...

Read more »

Sale! Take $200 off a new 27″ 5K iMac at these Apple resel...
B&H Photo has new 27″ 5K iMacs in stock today and on sale for up to $200 off Apple’s MSRP. Overnight shipping is free to many locations in the US: – 27″ 3.0GHz 5K iMac: $1599 $200 off MSRP – 27″ 3.1GHz 5K iMac: $1849.99 $150 off MSRP – 27″ 3.7GHz 5K iMac: $2099 $200 off MSRP Amazon has new 27″ iMacs on sale for up to $200 off MSRP as well. Shipping is free: – 27″ 3.0GHz 5K iMac: $1599 $200 off MSRP – 27″ 3.1GHz 5K iMac: $1849.99 $150 off MSRP – 27″ 3.7GHz 5K iMac: $2099 $200 off MSRP See our iMac Price Tracker for the latest sales and prices from Apple and → Read More...

Read more »