iPhone 13 Pro remote jailbreak earns researchers $300,000 in hacking contest
A jailbreaking group has reportedly earned a $300,000 cash prize from the annual Tianfu Cup hacking contest in China, by performing a remote jailbreak on an iPhone 13 Pro running iOS 15.The Tianfu Cup hacking contest is China's counterpart to the Pwn2Own style competitions elsewhere in the world, offering big prizes to researchers who bypass protections on consumer devices and software. On the first day of the 2021 competition, it appears one team has already secured a major prize, by successfully attacking an iPhone 13 Pro.Pangu team, best known for jailbreaking Apple hardware, has reportedly successfully performed an attack against the iPhone 13 Pro and iOS 15 at the highest possible prize level. According to a tweet by Kunlun Lab CEO @mj0011sec spotted by iDownloadBlog, Team Pangu managed a remote jailbreak, earning the highest prize on offer for the device, and earning the top spot in the competition's rankings. Read more...

Read more »

Take home the 2021 iPad Pro and enjoy $100 off
This year’s iPad Pro lineup is a definite improvement every which way. If you’re waiting for a price drop on Apple’s top-of-the-line tablet, then ... Read more The post appeared first on iLounge.

Read more »

Apple hires new lead for HomePod and Apple TV
Bloomberg revealed in a new report that Apple has hired a new lead for its HomePod and Apple TV team. Audio engineer Afrooz Family ... Read more The post appeared first on iLounge.

Read more »

Fast charging on Apple Watch Series 7 requires 18w USB-C power adapter
Apple has released a new support document today revealing the adapter specifications needed to enable the Apple Watch Series 7’s fast charging feature. The ... Read more The post appeared first on iLounge.

Read more »

macOS Big Sur and Catalina Safari 15.1 beta released
Apple has released its Big Sur and Catalina Safari 15.1 beta version to developers for testing and troubleshooting purposes. The 15.1 version is also ... Read more The post appeared first on iLounge.

Read more »

MacBook Pro refresh could reuse the iPhone's notch in the display
The inbound 14-inch MacBook Pro and 16-inch MacBook Pro models could end up equipped with an iPhone-style notch, with images allegedly depicting a display panel for the line bearing the controversial design decision.The notch in the iPhone 13 and earlier models have been the source of many complaints and criticism but the infamous screen cut-out largely stuck to only Apple's mobile device lines. In a social media posting, it is rumored that something similar could be coming to the 14-inch and 16-inch MacBook Pro.Oh no. Why is the new MacBook Pro screen notched? pic.twitter.com/zO67bl81fX— DuanRui (@duanrui1205) October 16, 2021 Read more...

Read more »

Rumor: Alleged component photos suggest the new MacBook Pro screen will have a notch
On Monday, Apple will unveil the highly-anticipated redesign of the MacBook Pro line as part of its ‘Unleashed’ October media event. It is expected to feature a whole new chassis design, industry-leading Apple Silicon, the return of MagSafe power connector and HDMI/SD Card slot, and a mini-LED display. This laptop has been in development for several years, and rumored for almost as long. In the last few days, another idea has arisen. Some alleged leaks indicate that the new 16-inch and 14-inch MacBook Pro will also feature a notch in the top middle of the display, like an iPhone. This cutout would house the FaceTime camera and ambient light sensors, but Face ID biometrics is not expected. more… The post appeared first on 9to5Mac.

Read more »

Today in Apple history: Apple offers ice water to Windows users in hell
October 16, 2003: Six months after opening the iTunes Music Store for Mac owners, Apple expands the service to cover Windows PCs as well. Steve Jobs later quips that making iTunes available to Windows owners is akin to “giving a glass of ice water to somebody in hell.” iTunes on PCs: A tough call for […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Best Deals Oct. 16: up to 24% off Proscenic vacuums, SK Hynix Gold storage, TV show DVDs, and more!
Saturday's best deals include discounted SK Hynix Gold storage, Proscenic roboit vacuums, half-price Friends, and more!Shopping online for the best discounts and deals can be an annoying and challenging task. So rather than sifting through miles of advertisements, check out this list of sales we've hand-picked just for the AppleInsider audience.You'll find more than just Apple products here. Each section is organized by product type or brand and can contain anything from furniture to iPhone cases. Read more...

Read more »

Best Deals Oct. 16: up to 24% off Proscenic vacuums, SK Hynix Gold storage, TV show DVDs, and more!
Saturday's best deals include discounted SK Hynix Gold storage, Proscenic roboit vacuums, half-price Friends, and more!Shopping online for the best discounts and deals can be an annoying and challenging task. So rather than sifting through miles of advertisements, check out this list of sales we've hand-picked just for the AppleInsider audience.You'll find more than just Apple products here. Each section is organized by product type or brand and can contain anything from furniture to iPhone cases. Read more...

Read more »

Best Deals Oct. 16: up to 24% off Proscenic vacuums, SK Hynix Gold storage, TV show DVDs, and more!
Saturday's best deals include discounted SK Hynix Gold storage, Proscenic roboit vacuums, half-price Friends, and more!Shopping online for the best discounts and deals can be an annoying and challenging task. So rather than sifting through miles of advertisements, check out this list of sales we've hand-picked just for the AppleInsider audience.You'll find more than just Apple products here. Each section is organized by product type or brand and can contain anything from furniture to iPhone cases. Read more...

Read more »

JBL Charge 5: A Waterproof Speaker and Power Bank
The JBL Charge 5 has the capability to be a power bank and also an amazing waterproof speaker! Check it out in this mini-clip from Mac Geek Gab 893.

Read more »

This AI tool can write your emails, blogs and more for you
Writing is hard, but there are some great writing tools out there to make it easier. Rytr is an AI writing tool that can help you write quality copy using artificial intelligence that can be programmed for any tone or format — and right now it’s on sale for $75. An AI writing tool Professional […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

iPad mini 6 is the perfect tablet for casual use [Review]
The iPad mini is a fantastic device and can be great in the right situation. The important thing is making sure the majority of your needs from a tablet fall into those situations. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

PSA: ‘Nike Bounce’ watch face isn’t exclusive to Nike Apple Watch Series 7
Yesterday marked the official release date of the new Apple Watch Series 7, and tidbits continue to emerge. Unfortunately, some people thought the new “Nike Bounce” watch face was exclusive to the new Nike Apple Watches, which it’s not. more… The post appeared first on 9to5Mac.

Read more »

The next AirPods: Third-gen redesign finally arriving alongside new Macs
AirPods are popular because they exemplify what Apple is all about: high-quality products with great features that work without fuss. And while you may not think of earbuds and headphones as the types of products that would be updated with new features on a regular basis, Apple does a great job of integrating them into […]

Read more »

Apple @ Work: The top new features in macOS Monterey for enterprise users
Apple @ Work is brought to you by Kandji, a modern, cloud-based platform to manage and secure your Mac, iPhone, iPad, and Apple TV devices. Kandji saves IT teams hours of manual work with features like one-click compliance templates and 150+ pre-built automations, apps, and workflows. Request access. With macOS Monterey on the horizon soon, businesses will quickly begin looking at their rollout strategy. I know many IT professionals miss the old 18-month macOS upgrade window, but Apple has done a fantastic job of making a macOS upgrade break less over time. Sure there are bugs, but app developers and hardware manufacturers are doing a great job quickly updating their apps. For the past few years, we’ve all gotten into the fall upgrade cycle with all of our devices. Over the next two weeks, I will take a look at the features in Apple’s upcoming macOS upgrade that will be impactful at work. more… The post appeared first on 9to5Mac.

Read more »

WhatsApp for iOS continues work on new message reaction feature
WhatsApp has been working on new reaction features for at least a few months. Now, there’s more pieces of evidence regarding the development of this function. more… The post appeared first on 9to5Mac.

Read more »

Roundup: AirPods 3 could launch on Monday’s event; here’s what we know so far
After a year of potential release dates, it seems that AirPods 3 could finally be announced this Monday during the “Unleashed” Apple event. Here’s what we know so far. more… The post appeared first on 9to5Mac.

Read more »

Apple reportedly prepping Apple Music app for Sony PlayStation 5
Apple is reportedly prepping an Apple Music app for Sony's PlayStation 5, delivering America's number one streaming music service to PS5… The post appeared first on MacDailyNews.

Read more »

Foundation flourishes with battles big and small [Apple TV+ review]
Apple TV+’s big, shiny space show hits its first set-piece battle this week, but more exciting things are happening in solitude. Foundation hits its stride — and the direction its drama takes proves confident and exciting. Can the sci-fi show based on Isaac Asimov’s classic continue its upward trajectory toward greatness? Foundation review: ‘Upon Awakening’ […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple ‘Unleashed’ event — here come the M1X Macs! [The CultCast]
This week on Cult of Mac’s podcast: Finally! Here come the M1X Macs! We talk our predictions for Monday’s “Unleashed” Apple event! Also on The CultCast: A rumor says Apple is prepping a Nintendo Switch-like gaming console. We reveal our favorite new(ish) shows on an all-new What We’re Into! And in our weekly giveaway, we’ve got […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple may be working on an Apple Music app for PlayStation 5
While Apple is known for keeping its services exclusive to its devices, Apple TV+ and Apple Music are available on other platforms such as Android, Windows, and Smart TVs. Now it seems that Apple has been working on bringing the Apple Music app to PlayStation 5. more… The post appeared first on 9to5Mac.

Read more »

9to5Rewards: M1 iMac giveaway + WD’s My Passport SSD deal
We’ve teamed up with Western Digital® to give away Apple’s latest M1 iMac to one lucky reader this month. Head below to enter the giveaway and get a special deal on a selection of the company’s latest My Passport™ SSDs. more… The post appeared first on 9to5Mac.

Read more »

Hands on with the Nike Apple Watch Series 7 with the new Bounce face
The Nike Apple Watch Series 7 is very similar to the standard version, but it comes bundled with a Nike-branded band as well as an exclusive new watch face. Here's how they look in the real world.Apple Watch Series 7 Nike EditionExclusive Nike watch faces Read more...

Read more »

9to5Mac Daily: October 15, 2021 – Apple Watch Series 7 officially launches
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by Direct Mail: Create and send great looking email newsletters with Direct Mail, an easy to use email marketing app for the Mac. Get started for free and save 10% when you sign up for any pricing plan. more… The post appeared first on 9to5Mac.

Read more »

Parallels Desktop 17.1 adds full support for macOS Monterey and Windows 11
Popular virtualization software Parallels was updated to version 17 earlier this year with several enhancements such as improved performance, virtual TPM chip, drag and drop between macOS and Windows, and more. Now the company has released Parallels Desktop 17.1, which adds full support for macOS Monterey and Windows 11. more… The post appeared first on 9to5Mac.

Read more »

MagSafe Duo Charger doesn't support Apple Watch Series 7 fast charging
Apple's MagSafe Duo Charger, which was released in 2020, can't fast charge the new Apple Watch Series 7, the company has confirmed.Credit: Andrew O'Hara, AppleInsiderThe $129 MagSafe Duo Charger, released alongside the iPhone 12, can charge an Apple Watch and an iPhone simultaneously. However, it won't support the new fast charging feature introduced on the 2021 Apple Watch Series 7 models. Read more...

Read more »

Here’s everything you need to know about Apple Watch Series 7 fast charging
One of the headlining features of the new Apple Watch Series 7 is its new support for fast charging. Apple made a big deal about this improvement during its “California Streaming” event last month, but there are some important things to keep in mind… more… The post appeared first on 9to5Mac.

Read more »

Puppy Place is a big hug from a slobbery pooch [Apple TV+ review]
Puppy Place, the latest kids show to land on Apple TV+, is a parade of adorable dogs and teachable moments, designed to deliver lessons about personal responsibility and social issues. Will it become a hit with either kids or the parents looking over their shoulders? In case Instagram goes down again and you need dogs […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Missouri Governor Vows to Prosecute St. Louis Post-Dispatch for Reporting Security Vulnerability
On Wednesday, the St. Louis Post-Dispatch ran a story about how its staff discovered and reported a security vulnerability in a Missouri state education website that exposed the Social Security numbers of 100,000 elementary and secondary teachers. In a press conference this morning, Missouri Gov. Mike Parson (R) said fixing the flaw could cost the state $50 million, and vowed his administration would seek to prosecute and investigate the "hackers" and anyone who aided the publication in its "attempt to embarrass the state and sell headlines for their news outlet."

Read more »

What the heck is Apple doing?? – Intego Mac Podcast Episode 209
Apple has released a security update for an actively exploited vulnerability, but only for iOS 15, not iOS 14? What are they doing? We also discuss how Apple sometimes offers security updates for older versions of macOS, but not always. The post appeared first on The Mac Security Blog.

Read more »

How Coinbase Phishers Steal One-Time Passwords
A recent phishing campaign targeting Coinbase users shows thieves are getting cleverer about phishing one-time passwords (OTPs) needed to complete the login process. It also shows that phishers are attempting to sign up for new Coinbase accounts by the millions as part of an effort to identify email addresses that are already associated with active accounts.

Read more »

How to Delete Your Social Media Accounts: Facebook, Instagram, YouTube, Twitter, and More
If you want to delete social media accounts, here's how to do it on the 10 most popular social media services. The post appeared first on The Mac Security Blog.

Read more »

Patch Tuesday, October 2021 Edition
Microsoft today issued updates to plug more than 70 security holes in its Windows operating systems and other software, including one vulnerability that is already being exploited in active attacks. This month's Patch Tuesday also includes security fixes for the newly released Windows 11 operating system.

Read more »

Vulnerability Summary for the Week of October 4, 2021
Original release date: October 11, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info archibus -- web_central ** UNSUPPORTED WHEN ASSIGNED ** In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in /archibus/login.axvw assign a session token that could be already in use by another user. It was therefore possible to access the application through a user whose credentials were not known, without any attempt by the testers to modify the application logic. It is also possible to set the value of the session token, client-side, simply by making an unauthenticated GET Request to the Home Page and adding an arbitrary value to the JSESSIONID field. The application, following the login, does not assign a new token, continuing to keep the inserted one, as the identifier of the entire session. This is fixed in all recent versions, such as version 26. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Version 21.3 was officially de-supported by the end of 2020. 2021-10-05 7.5 CVE-2021-41553 MISC aviatorscript_project -- aviatorscript AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL). 2021-10-02 7.5 CVE-2021-41862 MISC commonwl -- cwlviewer cwlviewer is a web application to view and share Common Workflow Language workflows. Versions prior to 1.3.1 contain a Deserialization of Untrusted Data vulnerability. Commit number f6066f09edb70033a2ce80200e9fa9e70a5c29de (dated 2021-09-30) contains a patch. There are no available workarounds aside from installing the patch. The SnakeYaml constructor, by default, allows any data to be parsed. To fix the issue the object needs to be created with a `SafeConstructor` object, as seen in the patch. 2021-10-01 7.5 CVE-2021-41110 MISC MISC CONFIRM corel -- pdf_fusion Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file. 2021-10-01 9.3 CVE-2021-38096 MISC MISC corel -- pdf_fusion Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file. 2021-10-01 9.3 CVE-2021-38097 MISC MISC corel -- photopaint_2020 CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CPT file. This is different from CVE-2021-38101. 2021-10-01 9.3 CVE-2021-38099 MISC MISC corel -- presentations_2020 IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. 2021-10-01 9.3 CVE-2021-38103 MISC MISC dell -- isilon_insightiq_firmware Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; so Dell recommends customers to upgrade at the earliest opportunity. 2021-10-01 7.5 CVE-2021-36298 MISC galera -- galera_webtemplate Galera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal information from /etc/passwd and /etc/shadow. 2021-10-01 7.5 CVE-2021-40960 MISC MISC getcomposer -- composer Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are subject to command injection and should upgrade their composer version. Other OSs and WSL are not affected. The issue has been resolved in composer versions 1.10.23 and 2.1.9. There are no workarounds for this issue. 2021-10-05 7.5 CVE-2021-41116 MISC CONFIRM hotel_and_lodge_booking_management_system_project -- hotel_and_lodge_booking_management_system Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details. 2021-10-01 7.5 CVE-2020-21012 MISC lodging_reservation_management_system_project -- lodging_reservation_management_system The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication. 2021-10-04 7.5 CVE-2021-41511 MISC MISC MISC online-shopping-system-advanced_project -- online-shopping-system-advanced An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter. Using a post request does not sanitize the user input. 2021-10-01 7.5 CVE-2021-41649 MISC ptcl -- hg150-ub_firmware An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Response Path. 2021-10-04 7.5 CVE-2021-35296 MISC qnap -- qvr A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210902 and later 2021-10-01 7.5 CVE-2021-34352 MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 3xlogic -- infinias_access_control An issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting physical security. Users with login credentials assigned to a specific zone can send modified HTTP GET and POST requests, allowing them to view user data such as personal information and Prox card credentials. Also, an authorized user of one zone can send API requests to unlock electronic locks associated with zones they are unauthorized to have access to. They can also create new user logins for zones they were not authorized to access, including the root zone of the software. 2021-10-01 6.5 CVE-2021-41847 MISC MISC MISC 53kf -- 53kf Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML statement inserted into chat window. 2021-10-04 4.3 CVE-2020-28119 MISC afian -- filerun Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs. 2021-10-05 4.3 CVE-2021-35503 MISC MISC afian -- filerun Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during use of the HTML Editor for a preview or edit action. 2021-10-05 4.3 CVE-2021-35506 MISC MISC alfred-spotify-mini-player -- alfred_spotify_mini_player Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter. 2021-10-01 4.3 CVE-2021-40927 MISC MISC archibus -- web_central ** UNSUPPORTED WHEN ASSIGNED ** In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data received as input from clients is re-included within the HTTP response returned by the application without adequate validation. In this way, if HTML code or client-side executable code (e.g., Javascript) is entered as input, the expected execution flow could be altered. This is fixed in all recent versions, such as version 26. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Version 21.3 was officially de-supported by the end of 2020. 2021-10-05 4.3 CVE-2021-41555 MISC archibus -- web_central ** UNSUPPORTED WHEN ASSIGNED ** ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endpoints: /archibus/schema/ab-edit-users.axvw, /archibus/schema/ab-data-dictionary-table.axvw, /archibus/schema/ab-schema-add-field.axvw, /archibus/schema/ab-core/views/process-navigator/ab-my-user-profile.axvw. By not verifying the permissions for access to resources, it allows a potential attacker to view pages that are not allowed. Specifically, it was found that any authenticated user can reach the administrative console for user management by directly requesting access to the page via URL. This allows a malicious user to modify all users' profiles, to elevate any privileges to administrative ones, or to create or delete any type of user. It is also possible to modify the emails of other users, through a misconfiguration of the username parameter, on the user profile page. This is fixed in all recent versions, such as version 26. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Version 21.3 was officially de-supported by the end of 2020. 2021-10-05 6.5 CVE-2021-41554 MISC bosch -- rexroth_indramotion_mlc_l20_firmware The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL. 2021-10-04 4.3 CVE-2021-23856 CONFIRM canonical -- apport An information disclosure via path traversal was discovered in apport/hookutils.py function read_file(). This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3; 2021-10-01 4.7 CVE-2021-3710 MISC MISC MISC MISC canonical -- multipass The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation. 2021-10-01 4.6 CVE-2021-3626 MISC canonical -- multipass The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with incorrect owner. 2021-10-01 4.6 CVE-2021-3747 MISC codesolz -- better_find_and_replace The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue 2021-10-04 4.3 CVE-2021-24676 MISC coinmarketstats -- woo-altcoin-payment-gateway The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue 2021-10-04 4.3 CVE-2021-24679 MISC concrete5-legacy_project -- concrete5-legacy Cross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types/group_combination.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the cID parameter. 2021-10-01 4.3 CVE-2021-41463 MISC MISC concrete5-legacy_project -- concrete5-legacy Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter. 2021-10-01 4.3 CVE-2021-41465 MISC MISC concrete5-legacy_project -- concrete5-legacy Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter. 2021-10-01 4.3 CVE-2021-41464 MISC MISC concrete5-legacy_project -- concrete5-legacy Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter. 2021-10-01 4.3 CVE-2021-41462 MISC MISC concrete5-legacy_project -- concrete5-legacy Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the mode parameter. 2021-10-01 4.3 CVE-2021-41461 MISC MISC corel -- coreldraw_2020 CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CDR file. 2021-10-02 4.3 CVE-2021-38107 MISC MISC corel -- coreldraw_2020 Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CDR file. 2021-10-02 4.3 CVE-2021-38109 MISC MISC corel -- pdf_fusion Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file. 2021-10-01 6.8 CVE-2021-38098 MISC MISC corel -- photopaint_2020 Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CPT file. 2021-10-01 6.8 CVE-2021-38100 MISC MISC corel -- photopaint_2020 CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CPT file. This is different from CVE-2021-38099. 2021-10-01 6.8 CVE-2021-38101 MISC MISC corel -- presentations_2020 IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. This is different from CVE-2021-38102. 2021-10-01 4.3 CVE-2021-38105 MISC MISC corel -- presentations_2020 IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. 2021-10-01 4.3 CVE-2021-38104 MISC MISC corel -- presentations_2020 UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. 2021-10-01 4.3 CVE-2021-38106 MISC MISC corel -- presentations_2020 IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. This is different from CVE-2021-38105. 2021-10-01 4.3 CVE-2021-38102 MISC MISC corel -- wordperfect_2020 Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious DOC file. 2021-10-02 4.3 CVE-2021-38108 MISC MISC corel -- wordperfect_2020 Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious DOC file. 2021-10-01 6.8 CVE-2021-38110 MISC MISC dell -- enterprise_sonic_os Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACSRadius credentials stored to read sensitive information and use it in further attacks. 2021-10-01 4 CVE-2021-36309 MISC detector_project -- detector Cross-site scripting (XSS) vulnerability in _contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter. 2021-10-01 4.3 CVE-2021-40921 MISC docker -- command_line_interface Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH. 2021-10-04 5 CVE-2021-41092 MISC CONFIRM ecommerce-codeigniter-bootstrap_project -- ecommerce-codeigniter-bootstrap Cross-site scripting (XSS) vulnerability in application/modules/admin/views/ecommerce/products.php in Ecommerce-CodeIgniter-Bootstrap (Codeigniter 3.1.11, Bootstrap 3.3.7) allows remote attackers to inject arbitrary web script or HTML via the search_title parameter. 2021-10-01 4.3 CVE-2021-40975 MISC emlog -- emlog emlog v6.0.0 contains a SQL injection via /admin/comment.php. 2021-10-01 6.5 CVE-2020-21013 MISC emlog -- emlog emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php. 2021-10-01 5.5 CVE-2020-21014 MISC esri -- portal_for_arcgis There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker to impersonate another account. 2021-10-01 6.5 CVE-2021-29108 CONFIRM esri -- portal_for_arcgis A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser. 2021-10-01 4.3 CVE-2021-29109 CONFIRM faveohelpdesk -- faveo Cross-site scripting (XSS) vulnerability in dompdf/dompdf/www/demo.php infaveo-helpdesk v1.11.0 and below allow remote attackers to inject arbitrary web script or HTML via the $_SERVER["PHP_SELF"] parameter. 2021-10-01 4.3 CVE-2021-40925 MISC MISC getid3 -- getid3 Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter. 2021-10-01 4.3 CVE-2021-40926 MISC MISC gitlab -- gitlab The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses 2021-10-05 4 CVE-2021-22258 CONFIRM MISC MISC gitlab -- gitlab A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API. 2021-10-04 4 CVE-2021-22259 MISC CONFIRM gitlab -- gitlab In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure. 2021-10-05 4 CVE-2021-39891 MISC CONFIRM gitlab -- gitlab In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to a malicious user who makes a crafted API call with the ID of the protected branch. 2021-10-05 4 CVE-2021-39889 MISC MISC CONFIRM gitlab -- gitlab Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references. 2021-10-05 4 CVE-2021-39886 MISC CONFIRM gitlab -- gitlab A Denial Of Service vulnerability in the apollo_upload_server Ruby gem in GitLab CE/EE version 11.11 and above allows an attacker to deny access to all users via specially crafted requests to the apollo_upload_server middleware. 2021-10-05 4 CVE-2021-39880 CONFIRM MISC MISC gitlab -- gitlab In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a crafted API call. 2021-10-05 4 CVE-2021-39870 MISC MISC CONFIRM gitlab -- gitlab An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. The route for /user.keys is not restricted on instances with public visibility disabled. This allows user enumeration on such instances. 2021-10-05 5 CVE-2021-22257 MISC CONFIRM gitlab -- gitlab Missing access control in GitLab version 13.10 and above with Jira Cloud integration enabled allows Jira users without administrative privileges to add and remove Jira Connect Namespaces via the GitLab.com for Jira Cloud application configuration page 2021-10-05 5 CVE-2021-22262 CONFIRM MISC MISC gitlab -- gitlab A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation. 2021-10-05 5 CVE-2021-39893 MISC CONFIRM gitlab -- gitlab An issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. Under specialized conditions, an invited group member may continue to have access to a project even after the invited group, which the member was part of, is deleted. 2021-10-05 4.3 CVE-2021-22264 CONFIRM MISC glimmrtv -- flextv Cross-site scripting (XSS) vulnerability in index.php in FlexTV beta development version allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF parameter. 2021-10-01 4.3 CVE-2021-40928 MISC MISC google -- android In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-179289753 2021-10-06 4.6 CVE-2021-0692 MISC google -- android In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in other processes due to an overly-permissive SELinux policy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-188554048 2021-10-06 4.6 CVE-2021-0691 MISC google -- android When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion: Android-10Android ID: A-189392423 2021-10-06 6.8 CVE-2021-0636 MISC google -- android In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-191055353 2021-10-06 4.6 CVE-2021-0685 MISC google -- android In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-179839665 2021-10-06 4.6 CVE-2021-0684 MISC google -- android When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:Android-10Android ID: A-189402477 2021-10-06 6.8 CVE-2021-0635 MISC google -- android In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-185398942 2021-10-06 4.6 CVE-2021-0683 MISC google -- android In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-182152757 2021-10-06 4.3 CVE-2021-0690 MISC google -- android In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-177457096 2021-10-06 4.6 CVE-2021-0595 MISC google -- android In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-180422108 2021-10-06 4.4 CVE-2021-0598 MISC google -- android In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-161149543 2021-10-06 4.4 CVE-2021-0688 MISC gpac -- mp4box There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function szXmlFrom parameter which leads to a denial of service vulnerability. 2021-10-01 5 CVE-2021-41459 MISC gpac -- mp4box There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the nhmldmx_send_sample() function szXmlTo parameter which leads to a denial of service vulnerability. 2021-10-01 5 CVE-2021-41456 MISC gpac -- mp4box There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a denial of service vulnerability. 2021-10-01 5 CVE-2021-41457 MISC grafana -- grafana Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If the snapshot "public_mode" configuration setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with the lowest database key by accessing the literal path: /api/snapshots-delete/:deleteKey. Regardless of the snapshot "public_mode" setting, authenticated users are able to delete the snapshot with the lowest database key by accessing the literal paths: /api/snapshots/:key, or /api/snapshots-delete/:deleteKey. The combination of deletion and viewing enables a complete walk through all snapshot data while resulting in complete snapshot data loss. This issue has been resolved in versions 8.1.6 and 7.5.11. If for some reason you cannot upgrade you can use a reverse proxy or similar to block access to the literal paths: /api/snapshots/:key, /api/snapshots-delete/:deleteKey, /dashboard/snapshot/:key, and /api/snapshots/:key. They have no normal function and can be disabled without side effects. 2021-10-05 6.8 CVE-2021-39226 MISC MISC CONFIRM MISC MLIST hkurl -- i-panel_administration_system A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button. 2021-10-04 4.3 CVE-2021-41878 MISC MISC ibm -- sterling_b2b_integrator IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169. 2021-10-06 4 CVE-2021-29758 CONFIRM XF ibm -- sterling_b2b_integrator IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213. 2021-10-06 4 CVE-2021-29760 CONFIRM XF ibm -- sterling_b2b_integrator IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265. 2021-10-06 4 CVE-2021-29761 CONFIRM XF jizhicms -- jizhicms JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie. 2021-10-01 4.3 CVE-2020-21228 MISC MISC MISC justwriting_project -- justwriting Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter. 2021-10-01 4.3 CVE-2021-41467 MISC MISC linux -- linux_kernel prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel through 5.14.9 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write. 2021-10-02 4.6 CVE-2021-41864 MISC MISC FEDORA maccms -- maccms A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges. 2021-10-04 6.8 CVE-2020-21386 MISC maccms -- maccms A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload. 2021-10-04 4.3 CVE-2020-21387 MISC mcafee -- drive_encryption Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an unutilized memory buffer. 2021-10-01 4.6 CVE-2021-23893 CONFIRM meowapps -- media_file_renamer_-_auto_&_manual_rename Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media File Renamer – Auto & Manual Rename plugin (versions

Read more »

The Complete Guide to Apple MagSafe Chargers, Cases, and Accessories
Apple's MagSafe technology provides a great way to charge your iPhone, but also some interesting accessories. The post appeared first on The Mac Security Blog.

Read more »

iPad mini 6, Facebook’s Time-Out, and a Contactless iPhone Rip-Off – Intego Mac Podcast Episode 208
Facebook's downtime shows how risky it is to use social media services to log into other services. An interesting proof of concept can steal money from Visa cards on iPhones. And we discuss the new iPad mini 6, and the Apple Watch 7 that goes on sale Friday. The post appeared first on The Mac Security Blog.

Read more »

How to Use Multitasking on the iPad
Apple has improved multitasking on the iPad, in iPadOS 15, so you can view and work in two apps at a time. The post appeared first on The Mac Security Blog.

Read more »

What Happened to Facebook, Instagram, & WhatsApp?
Facebook and its sister properties Instagram and WhatsApp are suffering from ongoing, global outages. We don't yet know why this happened, but the how is clear: Earlier this morning, something inside Facebook caused the company to revoke key digital records that tell computers and other Internet-enabled devices how to find these destinations online.

Read more »

Vulnerability Summary for the Week of September 27, 2021
Original release date: October 4, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adobe -- digital_editions Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file. 2021-09-27 9.3 CVE-2021-39826 MISC adobe -- photoshop_2020 Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2021-09-27 9.3 CVE-2021-40709 MISC adobe -- premiere_elements Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. 2021-09-27 9.3 CVE-2021-39824 MISC atlassian -- floodlight Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling. 2021-09-30 7.5 CVE-2020-18683 MISC atlassian -- floodlight Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs. 2021-09-30 7.5 CVE-2020-18685 MISC concretecms -- concrete_cms An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression. 2021-09-27 7.5 CVE-2021-40098 MISC MISC github -- enterprise_server An improper access control vulnerability in GitHub Enterprise Server allowed a workflow job to execute in a self-hosted runner group it should not have had access to. This affects customers using self-hosted runner groups for access control. A repository with access to one enterprise runner group could access all of the enterprise runner groups within the organization because of improper authentication checks during the request. This could cause code to be run unintentionally by the incorrect runner group. This vulnerability affected GitHub Enterprise Server versions from 3.0.0 to 3.0.15 and 3.1.0 to 3.1.7 and was fixed in 3.0.16 and 3.1.8 releases. 2021-09-24 7.5 CVE-2021-22869 MISC MISC lodash -- lodash ** DISPUTED ** A command injection vulnerability in Lodash 4.17.21 allows attackers to achieve arbitrary code execution via the template function. This is a different parameter, method, and version than CVE-2021-23337. NOTE: the vendor's position is that it's the developer's responsibility to ensure that a template does not evaluate code that originates from untrusted input. 2021-09-30 7.5 CVE-2021-41720 MISC microfocus -- arcsight_enterprise_security_manager Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution. 2021-09-28 7.5 CVE-2021-38124 MISC nagios -- nagios_xi Nagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh. 2021-09-28 7.5 CVE-2021-36365 CONFIRM CONFIRM nagios -- nagios_xi Nagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php. 2021-09-28 7.5 CVE-2021-36363 CONFIRM CONFIRM openvpn-monitor_project -- openvpn-monitor furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM. 2021-09-27 7.8 CVE-2021-31605 MISC MISC oracle -- linux Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Linux executes to compromise Oracle Linux. Successful attacks of this vulnerability can result in takeover of Oracle Linux. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). 2021-09-24 7.2 CVE-2021-2464 MISC phoenixcontact -- plcnext_technology_starterkit_firmware Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests. 2021-09-27 7.8 CVE-2021-34570 CONFIRM set_user_project -- set_user The set_user extension module before 3.0.0 for PostgreSQL allows ProcessUtility_hook bypass via set_config. 2021-09-27 7.5 CVE-2021-41558 CONFIRM skale -- sgxwallet An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain multiple enclave calls to prepare a stack that contains a valid address. This address is then freed, resulting in compromised integrity of the enclave. This was resolved after v1.58.3 and not reproducible in sgxwallet v1.77.0. 2021-09-27 7.5 CVE-2021-36219 MISC MISC stylemixthemes -- ulisting Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions

Read more »

In stock today: Clearance 2020 13″ MacBook Airs starting at only $719 at Apple, Certified Refurbished
Apple has clearance, Certified Refurbished, 2020 13″ Intel-based MacBook Airs in stock today starting at only $719 and up to $370 off original MSRP. Each MacBook features a new outer case, comes with a standard Apple one-year warranty, and is shipped free. The following configurations are available: – 13″ 1.1GHz Dual-Core MacBook Air Space Gray: $719 $280 off MSRP – 13″ 1.1GHz Dual-Core MacBook Air […] The post first appeared on MacPrices.net.

Read more »

In stock: Clearance 2020 7.9″ iPad mini 5 models at Apple starting at $339, Certified Refurbished
Apple has Certified Refurbished 2020 7.9″ WiFi iPad mini 5 models in stock for up to $80 off original MSRP, starting at only $339. Each iPad comes with Apple’s standard one-year warranty and includes a new outer case. Shipping is free. Apple’s prices are the cheapest available for these models anywhere: – 7.9″ 64GB WiFi iPad mini: $339 $60 off MSRP – 7.9″ 256GB WiFi […] The post first appeared on MacPrices.net.

Read more »

Apple’s 11″ M1 iPad Pros are on sale for $100 off MSRP, prices start at $699
Amazon has all configurations of 11″ iPad Pros with Apple M1 processors on sale for $100 off MSRP shipped. Their prices are the lowest available for new M1 11″ iPad Pros and also represent the first substantial sale prices on thee models. Note that some sale prices may be restricted to either Space Gray or Silver colors, depending on configuration: – 11″ M1 128GB WiFi […] The post first appeared on MacPrices.net.

Read more »

Apple’s 11″ M1 iPad Pros are on sale for $100 off MSRP, prices start at $699
Amazon has all configurations of 11″ iPad Pros with Apple M1 processors on sale for $100 off MSRP shipped. Their prices are the lowest available for new M1 11″ iPad Pros and also represent the first substantial sale prices on thee models. Note that some sale prices may be restricted to either Space Gray or Silver colors, depending on configuration: – 11″ M1 128GB WiFi […] The post first appeared on MacPrices.net.

Read more »

Amazon offers $100 discount on many 12″ M1 iPad Pro configurations
Amazon has 12″ iPad Pros with Apple M1 processors on sale today for $100 off MSRP shipped. Their prices are the lowest available for new M1 12″ iPad Pros and also represent the first substantial sale prices on these models. Note that some sale prices may be restricted to either Space Gray or Silver colors, depending on configuration: – 12″ M1 128GB WiFi iPad Pro: […] The post first appeared on MacPrices.net.

Read more »

New at Verizon: Buy an Apple iPhone with service, get $250 off a cellular-capable iPad
Verizon is offering $250 discounts on cellular-based Apple iPads with the purchase of a new iPhone, including the new iPhone 13. Smartphone and tablet service plans with Verizon are required. Credit for the iPad is applied to your account monthly over a 24 or 30 month period, depending on the chosen service plan. The fine print: “$1399.99 purchase on device payment on smartphone required. Up […] The post first appeared on MacPrices.net.

Read more »

New at Verizon: Buy an Apple iPhone with service, get $250 off a cellular-capable iPad
Verizon is offering $250 discounts on cellular-based Apple iPads with the purchase of a new iPhone, including the new iPhone 13. Smartphone and tablet service plans with Verizon are required. Credit for the iPad is applied to your account monthly over a 24 or 30 month period, depending on the chosen service plan. The fine print: “$1399.99 purchase on device payment on smartphone required. Up […] The post first appeared on MacPrices.net.

Read more »

Apple drops prices on 6th generation iPads, Certified Refurbished, to only $209
Apple has dropped their price on Certified Refurbished 6th-generation 2018 32GB WiFi 9.7″ iPads to only $209. An Apple one-year warranty is included with each iPad, and shipping is free: – 2018 9.7″ 32GB WiFi iPad w/Apple Pencil Support: $209 $90 off original MSRP These are the cheapest iPads for sale today at Apple. Note that we expect these iPads to sell out quickly, so […] The post first appeared on MacPrices.net.

Read more »

Apple drops prices on 6th generation iPads, Certified Refurbished, to only $209
Apple has dropped their price on Certified Refurbished 6th-generation 2018 32GB WiFi 9.7″ iPads to only $209. An Apple one-year warranty is included with each iPad, and shipping is free: – 2018 9.7″ 32GB WiFi iPad w/Apple Pencil Support: $209 $90 off original MSRP These are the cheapest iPads for sale today at Apple. Note that we expect these iPads to sell out quickly, so […] The post first appeared on MacPrices.net.

Read more »

Record low prices on M1 Mac minis with models on sale for up to $150 off Apple’s MSRP
Amazon has new Apple M1 Mac minis in stock today and on sale for $100-$150 off Apple’s MSRP, with prices starting at only $599: – Mac mini M1 CPU/256GB SSD: $599.99 $100 off MSRP – Mac mini M1 CPU/512GB SSD: $749.99 $150 off MSRP Their prices are the lowest we’ve seen for new M1 Mac minis anywhere. Be sure to purchase from Amazon rather than […] The post first appeared on MacPrices.net.

Read more »

People Profiles: How A Creative Named Steve (No, Not That One) Got The Nickname… ‘Mac’
FEATURE: 10.13.21 – While most people will acquire a nickname (for whatever reason) at some point in their lifetime, not many can say that they were nicknamed after a certain brand of computers made by Apple, Inc. Meet Steve Matarazzo, 35, who by day is a product content manager at a business software company called WorkWave. A self-proclaimed “Mac nut” (a term he used) with […] The post first appeared on MacPrices.net.

Read more »

B&H has 13-inch M1 MacBook Airs on sale starting at only $899
B&H has Apple’s 13″ M1 MacBook Airs on sale today for up to $150 off MSRP, starting at $899. Expedited shipping is free to most addresses in the US: 8-Core M1 Silicon CPU, 7-Core GPU: – 13″ M1 MacBook Air/256GB Space Gray: $899 $100 off MSRP – 13″ M1 MacBook Air/256GB Silver: $899 $100 off MSRP – 13″ M1 MacBook Air/256GB Gold: $899 $100 off […] The post B&H has 13-inch M1 MacBook Airs on sale starting at only $899 first appeared on MacPrices.net.

Read more »