U.S. users can now purchase audiobooks in Spotify’s iOS app
On the heels of Epic Games’ latest win over Apple in the Fortnite case, Spotify was quick to update the app with external payment links. At the time, the platform also confirmed it had broader plans to take advantage of the new court-mandated changes. Now, a new update is live, and it is an especially welcome one for audiobook lovers. more…

Read more »

Indian Apple distributor Redington posts higher quarterly profit
Redington, an Apple distributor in India, reported a rise in adjusted quarterly profit. The company saw growth in both cloud services and… The post appeared first on MacDailyNews.

Read more »

Upcoming NMUG Presentation on Building a Modern Backup Strategy
Join Adam Engst for a free online presentation about creating an effective modern backup strategy at the Naples MacFriends User Group meeting on 21 May 2025.

Read more »

Google launches NotebookLM app for Android and iOS
As previewed earlier this month, Google today released the NotebookLM app for Android and iOS ahead of I/O 2025. more…

Read more »

Athlete Zheng Qinwen stars in new Powerbeats Pro 2 campaign
Earlier in the year, Beats launched the Powerbeats Pro 2, the first Apple earbuds to feature in-ear heart rate monitoring. The debut was accompanied by the “Listen to Your Heart” campaign, voiced by RZA and starring LeBron James, Lionel Messi, and Shohei Ohtani. Now, Beats is back with a new ad featuring Chinese tennis star and Olympic gold medalist Zheng Qinwen, affectionately known as “Queen Wen.” The ad marks her first major appearance since becoming a global ambassador for the brand earlier this year. more…

Read more »

Apple plans to offer AI alternatives as it works to overhaul Siri
Macworld Mark Gurman and Dave Bennett have an interesting feature at Bloomberg about Apple’s AI struggles. It is primarily a summary of the last several months’ reporting on how Apple fell behind in AI, why it failed to deliver on its iOS 18 promises, and how it’s shaking up the organization to get back on track. But there are a few new or updated bits of information in there, even for those who have been paying attention to this drama. The report paints the picture of a company that is dramatically overhauling Siri, which will take time. In the meantime, the company plans to offer users a variety of options in AI tools. We previously reported, Apple is working on a huge Siri overhaul. The current version of Siri is a “hybrid” model of sorts, with different models to handle simple iPhone commands and more sophisticated AI queries. Apple now has AI-centered offices in Zurich that are working on a new “all LLM” (large language model) version of Siri that will handle everything with one sophisticated engine. This Siri is said to be conversational and much better at understanding information and taking actions. The company has in the past been reluctant to even pursue Siri as an alternative to today’s chatbots like ChatGPT or Gemini, but that thinking has changed and it is racing ahead. Work appears to be going well, with Gurman and Bennett reporting that, “the chatbot the company has been testing internally has made significant strides over the past six months, to the point that some executives see it as on par with recent versions of ChatGPT.” It’s still a long way from release, however. It won’t be ready to show off at WWDC next month, and won’t be a part of iOS 19. In fact, the report says, Siri is going to take a back seat at WWDC, in favor of other AI enhancements like battery management and a health coach. That will be disappointing for Apple fans who have taken to making Siri failures a meme, and are at least looking for Apple to patch up the current version into something less embarrassing. While we wait for “LLM Siri,” Apple plans to offer alternatives. In most of the world, requests that Siri can’t handle can be sent to ChatGPT for an answer, and it is used in the Visual Intelligence feature as well. Bloomberg once again states that Apple will add Google’s Gemini as an option in addition to ChatGPT in iOS 19, and what’s more, the company is in “early talks” with Perplexity to add it as another ChatGPT alternative for Siri, and as a search provider in Safari. Apple seems to know how bad Siri’s reputation has gotten, at least. According to the report, the company is going to work to separate Siri from the overall Apple Intelligence brand in its marketing, because the Siri brand isn’t helping. Apple will also close the gap between when it announces new features and when they are available, to avoid the embarrassing slip-up of this past year, where it promised Siri features last June that still haven’t materialized. Apple will kick off WWDC with a keynote on June 9 to showcase the Apple Intelligence features coming in the next year.

Read more »

Apple isn’t as far behind in AI as some might fear
Apple reportedly made significant progress in an internally developed AI chatbot to the point that it’s comparable with ChatGPT. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

More Insight and Not-Negativity
I never linked to the viral blog post where Jobs was quoted recommending my article, I never mentioned it in a post, but I *did* acknowledge it, in what is clearly the most Daring-Fireball-ish way possible: I made it the slogan under the logo banner.

Read more »

SmartWings HomeKit Shades: Affordable Automation Done Right
Adam Engst reviews the SmartWings Hazel shade and finds it a worthy addition to his HomeKit setup, despite minor issues with motor noise.

Read more »

China’s Huawei unveils in-house PC operating system to replace Microsoft’s Windows
Chinese Communist Party-controlled Huawei Technologies Co. debuted its first in-house operating system for personal computers, offering… The post appeared first on MacDailyNews.

Read more »

Epic Games is trying to scheme its way back into the App Store, and it might just work
If there’s one constant in the lustrum-long Epic Games v. Apple lawsuit, it’s that Tim Sweeney, Epic’s CEO, tends to… get creative when it comes to publicly interpreting and promoting the company’s legal wins. Late last Friday, Epic once again tried to spin a limited courtroom victory into a public-relations campaign. Now, it has been granted a chance to make the antics fly in court. more…

Read more »

This small iOS 18 feature is a huge privacy upgrade for everyone
9to5Mac is brought to you by Incogni: Protect your personal info from prying eyes. With Incogni, you can scrub your deeply sensitive information from data brokers across the web, including people search sites. Incogni limits your phone number, address, email, SSN, and more from circulating. Fight back against unwanted data brokers with a 30-day money back guarantee. At last year’s WWDC, Apple Intelligence certainly stole the show. I personally believe iOS 18 still would’ve been a very substantial software upgrade, even without a single AI upgrade. One of the large non-AI upgrades in iOS 18, besides the fully redesigned Photos app, is actually a subtle yet massive win for user privacy. Here’s why. more…

Read more »

Apple Filling Protocol will soon disappear completely from macOS
Apple Filing Protocol is one of Apple's original file-sharing technologies. Its client software will soon be gone from macOS forever.Apple has deprecated support for Apple Filing Protocol in macOS Sequoia 15.5.The year after Apple released the Macintosh in 1984, it introduced a proprietary networking standard called Apple Filing Protocol. Part of a suite of software which included AppleTalk, AppleShare, and Apple cabling hardware called LocalTalk, AFP allowed users to share files across Macs on local area networks.This was a decade before the Internet and its open protocols became popular in the mid-1990s. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Russian court fines Apple for violating ‘LGBT propaganda’ law
A Russian court imposed fines totaling 10.5 million roubles ($130,483) on Apple across four administrative cases, with three related to… The post appeared first on MacDailyNews.

Read more »

Judge orders Apple to comply with 2021 anti-steering injunction or return to court
Epic Games' "Fortnite" is still not approved on the US App Store, and a federal judge has ordered Apple to explain in very short order why it's defying the antisteering court order in the ongoing dispute.Epic Games viral '1984' ad campaign against AppleIn a new filing, Judge Yvonne Gonzalez Rogers called out Apple for not following an injunction issued earlier in the case. Epic claims Apple is dragging its feet in approving Fortnite on the US app store, and the judge seems to agree.Epic's SEO, Tim Sweeney, posted a screenshot of the order on his personal X account on Monday. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple Sports app updated with daily newsletter and more
Apple’s Sports app has evolved into a powerful way to track your favorite teams and leagues. In a new update this week, the app has added easier access to league standings, a new Sports Newsletter, and more. more…

Read more »

Apple is definitely gearing up for an iPhone Ultra
The Ultra suffix is a relatively new addition to Apple’s lexicon but is becoming increasingly common. For years, there have been rumors and reports about Apple preparing to launch an iPhone Ultra, possibly replacing the Pro Max at the top of the lineup. As of last week, that feels more likely than ever. more…

Read more »

iPadOS 17.7.8 quickly ships to fix iPadOS 17.7.7 glitch
Apple has released an update for iPadOS 17.7.8, updating some older iPads to correct an issue from the previous patch.An iPad Pro with an Apple PencilApple issued updates for older versions of iPadOS on May 12, bringing models that can't run iPadOS 18 up to iPadOS 17.7.7. One week later, and Apple's replaced the update.The release of iPadOS 17.7.8 on Monday build number 21H440. It is intended to be installed on the second-generation 12.9-inch iPad Pro, the 10.5-inch iPad Pro, and the sixth-generation iPad. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple releases new version of iPadOS for older models, including important security updates
Apple has just released iPadOS 17.7.8, a critical security bug fix release targeted at iPad models that are too old to be able to update to iOS 18. The new release is a follow-up to iPadOS 17.7.7, which was pulled after users reported consistent issues where various App Store apps kept getting logged out. more…

Read more »

Save on a lifetime of Babbel language learning
Gain lifetime access to all 14 of the languages offered in the Babbel app with this great limited-time deal. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

iPhone 17: Everything we know so far about the 2025 iPhones
Macworld It doesn’t take long for iPhone rumors to circulate. It’s one of the most iconic and influential tech gadgets of all time, and everyone wants to know what’s coming next. That Apple is so secretive only heightens the appeal of iPhone rumors and leaks. So it should come as little surprise that iPhone 17 rumors, leaks, and info started to circulate months before the iPhone 16 was even formally announced. Here’s everything we know so far, but don’t take any of it as solid info: even when early rumors are accurate, plans can change, and nothing is ever certain until Apple announces it. Updated May 19, 2025: The rumored iPhone 17 Air is said to have a battery of just 2,800mAh, more than 20% smaller than any iPhone 16 battery. iPhone 17 release date: When is the next iPhone coming out? Here’s something we do know: The new iPhone lineup is almost always announced in September—usually on a Tuesday in the second week of September, to be specific. So we would expect the iPhone 17 line to be announced on or around September 9, 2025. Here’s when the most recent models were released: iPhone 15: September 12, 2023 iPhone 14: Sepember 7, 2022 iPhone 13: Sepember 14, 2021 iPhone 12: October 13, 2020 (delayed due to Covid) Historically, preorders for the iPhone begin on the Friday after the announcement, and the phones ship a week later. On occasion, some specific models may ship a couple of weeks later than others due to production issues. iPhone 17: Price We haven’t yet heard if the iPhone 17 line will cost the same as the iPhone 16 line. Most rumors suggest the “Plus” model will be replaced by the new super-slim “Air” model, which will take over its price in the lineup as well: iPhone 17: 6.27-inch LTPO display, A19/8GB ($799) iPhone 17 Pro: 6.27-inch LTPO display, A19 Pro/12GB ($1,099) iPhone 17 Pro Max: 6.86-inch LTPO display, A19 Pro/12GB ($1,199) iPhone 17 Air: 6.65-inch LTPO display, A19/8GB ($899) This would mean a significant upward shift in overall iPhone pricing, with the Pro model jumping up $100 and a new model replacing the Plus with a price of $100 more than the Pro Max. Now that Apple has introduced the iPhone 16e there may also be an iPhone 17e joining the lineup in September 2025, although we don’t know if it will be updated in September 2025, or if that model won’t arrive until spring 2026. The price is likely to be $599 for the iPhone 17e, unless Apple introduces an iPhone 17e in place of the iPhone 15, with a price of $699, in which case the iPhone 16e could remain in the lineup with its $599 price tag. iPhone 17: Colors In April, Majin Bu reported that the iPhone 17 Pro models will come in a new and “irresistible” sky blue color. That would be the second product with that color, following the M4 MacBook Air. The iPhone 16 comes in five colors including Ultramarine, Teal, Pink, White, and Black. The iPhone 16 Pro comes in Desert Titanium, Natural Titanium, White Titanium, and Black Titanium, which are reminiscent of the classic gold and space gray options. There were rumors that the iPhone 16 would also come in purple, so perhaps that’s in the pipeline for 2025. iPhone 17: New slimmer ‘iPhone 17 Air’ model Several analysts have reported that the existing Plus model will be replaced by a new “Slim” model with a larger screen size and a much thinner body. Analyst Jeff Pu was the first to report this change (in May 2024), and in the same month, The Information reported on the Slim model, stating that it would be a new even-higher-end model that sits above “Pro Max” in the lineup and would have a centered rear camera and a smaller Dynamic Island. The much slimmer size will come at the expense of battery capacity, as there just isn’t room for a battery as thick as you find in other iPhones. Leaker yeux1122 has said the battery capacity is to be around 2,800mAh, which is more than 20% less than the battery in any iPhone 16 model. A report by Mark Gurman of Bloomberg in August 2024 claimed the new model will fit between the standard iPhone and the Pro: ” If you want something snazzier than a standard iPhone–but don’t really need the performance, screen size, or cameras of a Pro model–you can get something that looks much cooler while still having the specifications of a regular iPhone.” A report from Jeff Pu in November 2024 claims that the iPhone 17 Air/Slim will be around 6mm thick. That’s thinner than any iPhone so far. The iPhone 16, for context, is 7.8mm thick. The thinnest new iPad Pro is 5.1mm thick. In May, yuex1122 said the phone will be only 5.5mm thick (aside from the camera bump) and weigh just 145 grams, which is According to Korea’s Sisa Journal in January 2025, the so-called iPhone 17 Air will be 6.25mm thick and cost in the same price range as the iPhone 16 Plus (starting at $899 U.S.). A medium post from analyst Ming-Chi Kuo stated that the “thinnest part” of the new ultra-slim iPhone is just 5.5mm thick, but it’s difficult to know what that means without more context. The camera bump, according to Weibo leaker Ice Universe, will be 4.0mm thick, bringing the total phone thickness to 9.5mm at the camera. In October 2024 Pu said he expects the phone to have an A19 chip (not A19 Pro), 8GB of RAM, around a 6.6-inch display, an aluminum body, and a single 48MP rear camera. A leaked image in January reportedly showed the case of the new iPhone 17 Air, with a prominent “camera bar” design. Majin Bu/X Most recently, an episode of the YouTube channel Unboxed Therapy featured a “dummy model” version of the phone from a third-party supplier. It’s our best look yet at the overall size and thin design. iPhone 17: Cameras All iPhone 17 models have been rumored to feature a 24MP front-facing camera. An October 2024 research note from analyst Jeff Pu added that the iPhone 17 Pro would feature a 48MP telephoto camera along with a new 24MP front camera. According to a later report from Majin Bu, the 48MP telephoto camera will have a zoom of 3.5x (85mm), with an optical “crop zoom” mode similar to today’s 48MP wide camera, so you can shoot 12MP 7x (160mm) shots before the digital zoom kicks in. Some iPhone 17 models (maybe even all of them) will have a new camera bump, a wide rectangular raised area that stretches across the phone similar in style to Google’s Pixel line. According to a leaked image of one iPhone 17 aluminum frame (we don’t know from which model), it will be substantial in size. The Pro models are expected to have a “camera bar” design like the iPhone 17 Air, only larger and with three cameras in the familiar array. According to leaker Jon Prosser, it should look something like this: Front Page Tech / @Zellozi Months later, Mark Gurman clarified in his newsletter that the camera bump won’t have a dark interior, but rather the entire area will match the color of the phone. In February 2025, veteran leaker Majin Bu leaked iPhone 17 CAD images that seemed to reveal three different camera designs. The images suggest that there will be not one or two but three different camera module designs on show. The two Pro models will have triple rear lenses embedded in a thick band that runs across the back of the phone, as predicted by Jon Prosser (above). The standard iPhone 17 will stick feature two lenses stacked vertically. And the rumored iPhone 17 Air will offer an iPhone 16e-like single camera lens on the rear in order to reduce costs and keep the chassis slim and light. Sonny Dickson A report from The Information in July 2024 claims that “at least one” model will feature a mechanical aperture, which would be new for iPhones but has been seen in a handful of Android phones so far. iPhone 17: Rumored specs and features Various rumors suggest that the new iPhones could benefit from the following updates: Design and display The always-on display is supposed to finally be available on the non-Pro models. In addition, some believe that ProMotion will come to the non-Pro models, since the same LPTO technology that enables the always-on display is what makes ProMotion possible, in Apple’s iPhone implementation. If true, it would be the first time Apple has offered ProMotion on a non-Pro device. Apple is also said to be working with Corning on a new anti-glare and scratch-resistant glass for the iPhone 17 lineup. However, a report in May claimed that Apple had scrapped the new glass due to production issues. Dynamic Island The iPhone 17 Pro Max may have a smaller dynamic island. Rumors have changed back and forth—Jeff Pu said the dynamic island (or rather, the hardware “pill” that the island surrounds) will be smaller in the iPhone 17 Pro Max. Then Analyst Ming-Chi Kuo said it will be the same size as current models. Then leaker Digital Chat Station on Weibo said it will indeed be smaller. Processor We don’t know much about what chips will power the iPhone 17 line, but we expect the high-end models will get an A19 Pro, while the non-Pro models may get a standard or cut-back version of the A19, or perhaps a more souped up variant of the A18. RAM Since Apple bumped every iPhone 16 model to 8GB of RAM due to the demands of Apple Intelligence, rumors have suggested Apple will increase the memory in the iPhone 17 Pro models to 12GB. In a report concerning RAM suppliers, Ming-Chi Kuo says that Apple wants the regular iPhone 17 to feature 12GB as well, but supply shortages may be an issue. Wi-Fi When it comes to wireless, the cellular modem is likely to still be supplied by Qualcomm; Apple’s own efforts to produce a top-tier 5G modem seem to be stalled and likely won’t be ready in time for next year’s iPhone 17 line. Wi-Fi 7 support seems likely, too. iPhone history The iPhone 16 range and the iPhone 16e are the current-generation models available from Apple. Below you can find links to our reviews of all iPhone models, including the latest generation. Learn more about all the new Apple products coming this year and when is the next Apple event. You might also want to check out our advice on when is the best time to buy a new iPhone, our iPhone buying guide, and our comparison of every iPhone that is available to buy today. Original iPhone (2007) review iPhone 3G (2008) review iPhone 3GS (2009) review iPhone 4 (2010) review iPhone 4s (2011) review iPhone 5 (2012) review iPhone 5c (2013) review iPhone 5s (2013) review iPhone 6 (2014) review iPhone 6 Plus (2014) review iPhone 6s (2015) review iPhone 6s Plus (2015) review iPhone SE (1st generation; 2016) review iPhone 7 (2016) review iPhone 7 Plus (2016) review iPhone 8 (2017) review iPhone 8 Plus (2017) review iPhone X (2017) review iPhone XR (2018) review iPhone XS (2018) review iPhone XS Max (2018) review iPhone 11 (2019) review iPhone 11 Pro (2019) review iPhone 11 Pro Max (2019) review iPhone SE (2nd generation; 2020) review iPhone 12 (2020) review iPhone 12 Mini (2020) review iPhone 12 Pro (2020) review iPhone 12 Pro Max (2020) review iPhone 13 (2021) review iPhone 13 mini (2021) review iPhone 13 Pro (2021) review iPhone 13 Pro Max (2021) review iPhone SE (3rd generation; 2022) review iPhone 14 (2022) review iPhone 14 Plus (2022) review iPhone 14 Pro (2022) review iPhone 14 Pro Max (2022) review iPhone 15 (2023) review iPhone 15 Plus (2023) review iPhone 15 Pro (2023) review iPhone 15 Pro Max (2023) review iPhone 16 & 16 Plus review iPhone 16 Pro & Pro Max review iPhone 16e review

Read more »

Save $1,100 on this 4TB MacBook Pro, bringing the price down to $2,499
Save $1,100 instantly on a loaded 14-inch MacBook Pro thanks to an inventory clearance sale at OWC.Save $1,100 on a 4TB MacBook Pro.A discount of $1,100 is in effect on this blowout M3 Pro MacBook Pro 14-inch at OWC, an Apple reseller and well-known manufacturer of docking stations and storage solutions for Apple users. With the substantial savings, readers can pick up the upgraded system in Space Black for just $2,499, delivering the lowest price we've seen on this configuration.Save $1,100 at OWC Continue Reading on AppleInsider | Discuss on our Forums

Read more »

How Apple missed and still hasn’t cracked AI
Apple's foray into generative artificial intelligence (GenAI) with its Apple Intelligence vaporware and a promised-but-not-delivered Siri… The post appeared first on MacDailyNews.

Read more »

Apple executives think its internal AI chatbot is ‘on par’ with ChatGPT
Here’s a little bit of positivity on Apple’s race to catch up to the competition in artificial intelligence. According to a new report from Bloomberg, Apple is testing its own chatbot internally and has made significant progress in catching up with ChatGPT in the last six months. more…

Read more »

India iPhone production will be boosted by $1.5B Foxconn investment
Foxconn has made a $1.5 billion investment into its India arm, a move that will almost certainly fund its expansion of iPhone production in the country.A Foxconn factory signIndia is growing as a production base for iPhones, as Apple diversifies its supply chain away from a China-centric model. Expanding in India requires resources, and one supply chain member is contributing more.Hon Hai, also known as Foxconn, is investing $1.5 billion in its India business. In a stock exchange filing seen by Bloomberg on Monday, the investment is being made via the company's subsidiary in Singapore. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

iPadOS 19 will reportedly unlock calligraphy support for Apple Pencil
Macworld In his recent Power On newsletter, Bloomberg’s Mark Gurman reports that Apple is looking to offer a new capability with the Apple Pencil: support for a “virtual reed calligraphy pen” that would make the device a tool for Arabic calligraphy. A reed pen is also known as a Kamish pen. The “analog” version, if you will, is usually made from river reeds and has been used for centuries by Middle Eastern calligraphers. Apple offers only one type of Pencil tip, and Gurman calls it a “virtual” pen, so it seems that the Arabic calligraphy support will be implemented through software. Gurman doesn’t offer more specifics, so it’s not clear if reed pen support would be for all four Apple Pencil models or if it would be limited to the Apple Pencil Pro and/or Apple Pencil (USB-C). As part of a larger push to expand its presence in India, Saudi Arabia, and the United Arab Emirates, Apple also has plans to offer a “highly advanced bi-directional keyboard” that can switch between Arabic and English for iOS and iPadOS. Gurman doesn’t state when the pen and the keyboard will be available, though they will likely be part of the new iPadOS 19 announcements at WWDC25 on June 9. Apple Pencil Pro Price When Reviewed: $129 Best Prices Today: $99 at Amazon$99 at Best Buy$99 at Walmart Electronics Apple Pencil (USB-C) Price When Reviewed: $79 Best Prices Today: $69 at Amazon$69 at Walmart Electronics$79 at Adorama

Read more »

iPad mini 7 sale saves you $100
Save on Apple’s most portable tablet. A new iPad mini deal on the 7th-gen tablet knocks as much as 20% off the cost. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Deals: Best Buy Memorial Day sale, iPad mini 7 $100 off, AirPods Max up to $130 off, Magic Mouse, more
The Amazon and Best Buy Memorial Day sales are now live well ahead of the holiday weekend and with them, a host of notable price drops on Apple gear and accessories. Firstly, Amazon has brought back the all-time low pricing on all three iPad mini 7 storage configurations starting from $399 shipped, and we also now have the most affordable 13-inch M4 iPad Pro at up to $280 off. Apple’s latest AirPods Max colors have now dropped to $480 while open-box units with full warranties are now up to $130 off, and we also spotted the USB-C Apple Magic Mouse on sale down at $68. All pf that and more await down below.  more…

Read more »

Epic goes to court to force Fortnite back on US iOS
Game has been pulled offline in Europe amid legal tussling.

Read more »

Mac mini drives dual Studio Displays and LG DualUp sidekick [Setups]
The LG DualUp monitor is an odd bird, nearly square in shape. But today's Mac mini setup adds it to dual Studio Displays. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Breachforums Boss to Pay $700k in Healthcare Breach
In what experts are calling a novel legal outcome, the 22-year-old former administrator of the cybercrime community Breachforums will forfeit nearly $700,000 to settle a civil lawsuit from a health insurance company whose customer data was posted for sale on the forum in 2023. Conor Brian Fitzpatrick, a.k.a. "Pompompurin," is slated for resentencing next month after pleading guilty to access device fraud and possession of child sexual abuse material (CSAM).

Read more »

Patch Tuesday, May 2025 Edition
Microsoft on Tuesday released software updates to fix at least 70 vulnerabilities in Windows and related products, including five zero-day flaws that are already seeing active exploitation. Adding to the sense of urgency with this month's patch batch from Redmond are fixes for two other weaknesses that now have public proof-of-concept exploits available.

Read more »

Pakistani Firm Shipped Fentanyl Analogs, Scams to US
A Texas firm recently charged with conspiring to distribute synthetic opioids in the United States is at the center of a vast network of companies in the U.S. and Pakistan whose employees are accused of using online ads to scam westerners seeking help with trademarks, book writing, mobile app development and logo designs, a new investigation reveals.

Read more »

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
A employee at Elon Musk's artificial intelligence company xAI leaked a private key on GitHub that for the past two months could have allowed anyone to query private xAI large language models (LLMs) which appear to have been custom made for working with internal data from Musk's companies, including SpaceX, Tesla and Twitter/X, KrebsOnSecurity has learned.

Read more »

Alleged ‘Scattered Spider’ Member Extradited to U.S.
A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. U.S. prosecutors allege Tyler Robert Buchanan and co-conspirators hacked into dozens of companies in the United States and abroad, and that he personally controlled more than $26 million stolen from victims.

Read more »

Vulnerability Summary for the Week of April 21, 2025
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info AdeptLanguage--Adept  Adept is a language for general purpose programming. Prior to commit a1a41b7, the remoteBuild.yml workflow file uses actions/upload-artifact@v4 to upload the mac-standalone artifact. This artifact is a zip of the current directory, which includes the automatically generated .git/config file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an attacker can extract the token from the artifact and use it with the Github API to push malicious code or rewrite release commits in the AdeptLanguage/Adept repository. This issue has been patched in commit a1a41b7. 2025-04-21 9.8 CVE-2025-32958 aeropage--Aeropage Sync for Airtable  The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. 2025-04-26 8.8 CVE-2025-3914 ALBEDO Telecom--Net.Time - PTP/NTP clock (Serial No. NBC0081P)  ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which could permit an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception. 2025-04-24 8 CVE-2025-2185 Amazon--Amazon Ion Dotnet  When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from the underlying stream while deserializing the binary format. If the Ion data is malformed or truncated, this triggers an infinite loop condition that could potentially result in a denial of service. Users should upgrade to Amazon.IonDotnet version 1.3.1 and ensure any forked or derivative code is patched to incorporate the new fixes. 2025-04-21 7.5 CVE-2025-3857 aonetheme--Service Finder Bookings  The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 5.1. This is due to a lack of restriction on user role in the 'nsl_registration_store_extra_input' function. This makes it possible for unauthenticated attackers to register an account on the site with an arbitrary role, including Administrator, when registering via a social login. The Nextend Social Login plugin must be installed and configured to exploit the vulnerability. 2025-04-25 9.8 CVE-2025-2470 arkenon--Frontend Login and Registration Blocks  The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.7. This is due to the plugin not properly validating a user's identity prior to updating a password. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. 2025-04-24 8.8 CVE-2025-3607 artbees--Jupiter X Core  The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file' parameter of the 'raven_download_file' function. This makes it possible for attackers to inject a PHP Object through a PHAR file. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability may be exploited by unauthenticated attackers when a form is present on the site with the file download action, and the ability to upload files is also present. Otherwise, this would be considered exploitable by Contributor-level users and above, because they could create the form needed to successfully exploit this. 2025-04-26 8.1 CVE-2025-2105 Ashraful Sarkar Naiem--License For Envato  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashraful Sarkar Naiem License For Envato allows PHP Local File Inclusion. This issue affects License For Envato: from n/a through 1.0.0. 2025-04-24 7.5 CVE-2025-39399 cajka--Verification SMS with TargetSMS  The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvr_ajax_handler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for unauthenticated attackers to execute any callable function on the site, such as phpinfo(). 2025-04-24 8.3 CVE-2025-3776 Capturly--Capturly  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Capturly Capturly allows PHP Local File Inclusion. This issue affects Capturly: from n/a through 2.0.1. 2025-04-24 7.5 CVE-2025-39379 cedcommerce--Product Lister for eBay  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce Product Lister for eBay allows PHP Local File Inclusion. This issue affects Product Lister for eBay: from n/a through 2.0.9. 2025-04-24 7.5 CVE-2025-39384 Centreon--Centreon BAM  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Boolean KPi Listing modules) allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1, from 24.04 before 24.04.5, from 23.10 before 23.10.10, from 23.04 before 23.04.10. 2025-04-22 7.2 CVE-2025-3767 Centreon--Centreon  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) allows SQL Injection. A user with high privileges is able to become administrator by intercepting the contact form request and altering its payload. This issue affects Centreon: from 22.10.0 before 22.10.28, from 23.04.0 before 23.04.25, from 23.10.0 before 23.10.20, from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4. 2025-04-24 7.2 CVE-2025-3872 Code Work Web--CWW Portfolio  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Work Web CWW Portfolio allows PHP Local File Inclusion. This issue affects CWW Portfolio: from n/a through 1.3.1. 2025-04-24 7.5 CVE-2025-39359 Code Work Web--Xews Lite  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Work Web Xews Lite allows PHP Local File Inclusion. This issue affects Xews Lite: from n/a through 1.0.9. 2025-04-24 7.5 CVE-2025-39383 Commvault--Command Center Innovation Release  A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution. This issue affects Command Center Innovation Release: 11.38. 2025-04-22 10 CVE-2025-34028 Commvault--Web Server  Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. 2025-04-25 8.8 CVE-2025-3928 ConnectWise--ScreenConnect  ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys.  It is important to note that to obtain these machine keys, privileged system level access must be obtained. If these machine keys are compromised, attackers could create and send a malicious ViewState to the website, potentially leading to remote code execution on the server.  The risk does not originate from a vulnerability introduced by ScreenConnect, but from platform level behavior.  This had no direct impact to ScreenConnect Client. ScreenConnect 2025.4 patch disables ViewState and removes any dependency on it. 2025-04-25 8.1 CVE-2025-3935 craftcms--cms  Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892. 2025-04-25 10 CVE-2025-32432 danielpataki--ACF: Google Font Selector  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in danielpataki ACF: Google Font Selector allows Reflected XSS. This issue affects ACF: Google Font Selector: from n/a through 3.0.1. 2025-04-24 7.1 CVE-2025-39382 dorinabc--Create custom forms for WordPress with a smart form plugin for smart businesses Form builder for WordPress  The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2025-04-26 7.3 CVE-2025-2801 everestthemes--Grace Mag  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in everestthemes Grace Mag allows PHP Local File Inclusion. This issue affects Grace Mag: from n/a through 1.1.5. 2025-04-24 7.5 CVE-2025-39360 EverPress--BruteGuard Brute Force Login Protection  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress BruteGuard - Brute Force Login Protection allows Reflected XSS. This issue affects BruteGuard - Brute Force Login Protection: from n/a through 0.1.4. 2025-04-24 7.1 CVE-2025-39408 eyecix--JobSearch WP Job Board  The JobSearch WP Job Board plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.8.8. This is due to improper configurations in the 'jobsearch_xing_response_data_callback', 'set_access_tokes', and 'google_callback' functions. This makes it possible for unauthenticated attackers to log in as the first connected Xing user, or any connected Xing user if the Xing id is known. It is also possible for unauthenticated attackers to log in as the first connected Google user if the user has logged in, without subsequently logging out, in thirty days. The vulnerability was partially patched in version 2.8.4. 2025-04-25 8.1 CVE-2024-11917 felipe152--Integrao entre Eduzz e Woocommerce  The Integração entre Eduzz e Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wep_opcoes' function in all versions up to, and including, 1.7.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit the default registration role within the plugin's registration flow to Administrator, which allows any user to create an Administrator account. 2025-04-26 8.8 CVE-2025-3906 Franka Robotics--Franka Emika Robot  Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access. 2025-04-24 8.1 CVE-2021-47663 Franka Robotics--Franka Emika Robot  Due to missing authorization an unauthenticated remote attacker can cause a DoS attack by connecting via HTTPS and triggering the shutdown button. 2025-04-24 7.5 CVE-2021-47662 GitLab--GitLab  An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. 2025-04-24 7.7 CVE-2025-1908 GL.iNet--GL-A1300 Slate Plus  A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. Affected is an unknown function of the file plugins.so of the component RPC Handler. The manipulation leads to buffer overflow. It is recommended to upgrade the affected component. 2025-04-26 8 CVE-2025-2851 gopiplus@hotmail.com--Anything Popup  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus@hotmail.com Anything Popup allows Reflected XSS. This issue affects Anything Popup: from n/a through 7.3. 2025-04-24 7.1 CVE-2025-39397 H3C--GR-3000AX  A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/Edit_List_SSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to buffer overflow. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Other functions might be affected as well. 2025-04-22 8 CVE-2025-3854 HCL Software--HCL Leap  Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters. 2025-04-24 7.1 CVE-2023-37534 Hitachi--Hitachi Ops Center Common Services  Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before 11.0.0-04. 2025-04-22 7.1 CVE-2024-46899 Holest Engineering--Spreadsheet Price Changer for WooCommerce and WP E-commerce Light  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light allows PHP Local File Inclusion. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce - Light: from n/a through 2.4.37. 2025-04-24 7.5 CVE-2025-39378 IBM--Hardware Management Console - Power Systems  IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source. 2025-04-22 9.3 CVE-2025-1950 IBM--Hardware Management Console - Power Systems  IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges. 2025-04-22 8.4 CVE-2025-1951 jauharixelion--Xelion Webchat  The Xelion Webchat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the xwc_save_settings() function in all versions up to, and including, 9.1.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. 2025-04-24 8.8 CVE-2025-3058 joedolson--My Tickets Accessible Event Ticketing  The My Tickets - Accessible Event Ticketing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.16. This is due to the mt_save_profile() function not appropriately restricting access to unauthorized users to update roles. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their role to that of an administrator. 2025-04-24 8.8 CVE-2025-3761 Kiotviet--KiotViet Sync  Cross-Site Request Forgery (CSRF) vulnerability in Kiotviet KiotViet Sync allows Stored XSS. This issue affects KiotViet Sync: from n/a through 1.8.4. 2025-04-24 7.1 CVE-2025-39381 kiranpatil353--Add custom page template  The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'acpt_validate_setting' function. This is due to insufficient sanitization of the 'template_name' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server. 2025-04-26 7.2 CVE-2025-3491 ludwigyou--WPMasterToolKit (WPMTK) All in one plugin  The WPMasterToolKit (WPMTK) - All in one plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to read and modify the contents of arbitrary files on the server, which can contain sensitive information. 2025-04-24 7.2 CVE-2025-3300 markparticle--WebServer  A vulnerability was found in markparticle WebServer up to 1.0. It has been declared as critical. Affected by this vulnerability is the function Buffer::HasWritten of the file code/buffer/buffer.cpp. The manipulation of the argument writePos_ leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-21 7.3 CVE-2025-3845 markparticle--WebServer  A vulnerability was found in markparticle WebServer up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file code/http/httprequest.cpp of the component Registration. The manipulation of the argument username/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-21 7.3 CVE-2025-3846 markparticle--WebServer  A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part of the file code/http/httprequest.cpp of the component Login. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-21 7.3 CVE-2025-3847 miraheze--ManageWiki  ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a namespace in Special:ManageWiki/namespaces when using a page prefix (namespace name, which is the current namespace you are renaming) with an injection payload. This issue has been patched in commit f504ed8. A workaround for this vulnerability involves setting `$wgManageWiki['namespaces'] = false;`. 2025-04-21 8 CVE-2025-32956 mra13--WordPress Simple Shopping Cart  The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'file_url' parameter. This makes it possible for unauthenticated attackers to view potentially sensitive information and download a digital product without paying for it. 2025-04-23 8.2 CVE-2025-3529 mra13--WordPress Simple Shopping Cart  The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter 'product_tmp_two' for computing a security hash against price tampering while using 'wspsc_product' to display the product, allowing an unauthenticated attacker to substitute details from a cheaper product and bypass payment for a more expensive item. 2025-04-23 7.5 CVE-2025-3530 neoslab--Database Toolset  The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). 2025-04-24 9.1 CVE-2025-3065 NIH--BRICS  NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators. 2025-04-23 7.5 CVE-2025-27580 NVIDIA--NeMo Framework  NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. 2025-04-22 7.6 CVE-2025-23249 NVIDIA--NeMo Framework  NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering. 2025-04-22 7.6 CVE-2025-23250 NVIDIA--NeMo Framework  NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. 2025-04-22 7.6 CVE-2025-23251 Odin_Design--Vikinger  The Vikinger theme for WordPress is vulnerable to privilege in all versions up to, and including, 1.9.30. This is due to insufficient user_meta restrictions in the 'vikinger_user_meta_update_ajax' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to escalate their privileges to Administrator-level. 2025-04-25 8.8 CVE-2025-2238 PHPGurukul--COVID19 Testing Management System  A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 7.3 CVE-2025-3971 PHPGurukul--COVID19 Testing Management System  A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3972 PHPGurukul--COVID19 Testing Management System  A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument mobnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3973 PHPGurukul--COVID19 Testing Management System  A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-phlebotomist.php?pid=11. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3974 PHPGurukul--COVID19 Testing Management System  A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /new-user-testing.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2025-04-27 7.3 CVE-2025-3976 Red Hat--Red Hat  A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled. 2025-04-25 8.8 CVE-2025-3641 Red Hat--Red Hat  A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled. 2025-04-25 8.8 CVE-2025-3642 Red Hat--Red Hat  A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data-including names, contact information, and hashed passwords-via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability. 2025-04-25 7.5 CVE-2025-32044 Red Hat--Red Hat  A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA). 2025-04-25 7.1 CVE-2025-3625 redis--redis  Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from "NOAUTH" responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates. 2025-04-23 7.5 CVE-2025-21605 Samba--ppp  The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges. 2025-04-22 9.3 CVE-2024-58250 SAP_SE--SAP NetWeaver (Visual Composer development server)  SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system. 2025-04-24 10 CVE-2025-31324 SeaTheme--BM Content Builder  The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ux_cb_tools_import_item_ajax AJAX action in all versions up to, and including, 3.16.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. 2025-04-25 8.8 CVE-2025-1279 Synology--DiskStation Manager (DSM)  Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows remote attackers to read arbitrary files via unspecified vectors. 2025-04-23 7.5 CVE-2025-1021 Tecnick--TCExam  CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 2025-04-22 8.8 CVE-2025-23176 TeconceTheme--Mayosis Core  The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. 2025-04-25 7.5 CVE-2025-1565 ThemeMove--EduMall - Professional LMS Education Center WordPress Theme  The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_lazy_load_template' AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. 2025-04-26 8.1 CVE-2025-2101 TOTOLINK--N150RT  A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3988 TOTOLINK--N150RT  A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the argument Hostname leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3989 TOTOLINK--N150RT  A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3990 TOTOLINK--N150RT  A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 8.8 CVE-2025-3991 v1rustyle--Flynax Bridge  The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. 2025-04-24 9.8 CVE-2025-3603 v1rustyle--Flynax Bridge  The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. 2025-04-24 9.8 CVE-2025-3604 Vestel--AC Charger EVC04  Vestel AC Charger version 3.75.0 contains a vulnerability that could enable an attacker to access files containing sensitive information, such as credentials which could be used to further compromise the device. 2025-04-24 7.5 CVE-2025-3606 weDevs--Appsero Helper  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Appsero Helper allows SQL Injection. This issue affects Appsero Helper: from n/a through 1.3.4. 2025-04-24 8.5 CVE-2025-39377 withstars--Books-Management-System  A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. 2025-04-27 7.3 CVE-2025-3960 withstars--Books-Management-System  A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. 2025-04-27 7.3 CVE-2025-3963 wp-configurator--Configurator Theme Core  The Configurator Theme Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.7. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change escalate their privileges to Administrator. 2025-04-24 8.8 CVE-2025-3101 wpeverest--User Registration  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration allows Reflected XSS. This issue affects User Registration: from n/a through n/a. 2025-04-24 7.1 CVE-2025-39400 WPoperation--Arrival  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPoperation Arrival allows PHP Local File Inclusion. This issue affects Arrival: from n/a through 1.4.5. 2025-04-24 7.5 CVE-2025-32921 WPoperation--Opstore  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPoperation Opstore allows PHP Local File Inclusion. This issue affects Opstore: from n/a through 1.4.5. 2025-04-24 7.5 CVE-2025-39387 WPQuark--eForm - WordPress Form Builder  The eForm - WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.18.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2025-04-24 7.2 CVE-2025-1294 wpsoul--Greenshift animation and page builder blocks  The Greenshift - animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The arbitrary file upload was sufficiently patched in 11.4.5, but a capability check was added in 11.4.6 to properly prevent unauthorized limited file uploads. 2025-04-22 8.8 CVE-2025-3616 WPXpro--Xpro Elementor Addons - Pro  The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access the widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. 2025-04-26 8.8 CVE-2024-13808 Yoel Geva--Android App  CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 2025-04-21 7.5 CVE-2025-23174 zamartz--Checkout Field Visibility for WooCommerce  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zamartz Checkout Field Visibility for WooCommerce allows PHP Local File Inclusion. This issue affects Checkout Field Visibility for WooCommerce: from n/a through 1.2.3. 2025-04-24 7.5 CVE-2025-39391 Zyxel--USG FLEX H series uOS firmware  An incorrect permission assignment vulnerability in the PostgreSQL commands of the USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting malicious scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system configuration is only possible if the administrator has not logged out and the token remains valid. 2025-04-22 7.8 CVE-2025-1731 Back to top Medium Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info 201206030--novel-cloud  A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the file novel-cloud-master/novel-book/novel-book-service/src/main/resources/mapper/BookInfoMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 6.3 CVE-2025-3956 aeropage--Aeropage Sync for Airtable  The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts. 2025-04-26 4.3 CVE-2025-3915 AMTT--Hotel Broadband Operation System  A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlog_down.php. The manipulation of the argument ProtocolType leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 4.7 CVE-2025-3983 Anps--Anps Theme plugin  The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2025-04-26 6.5 CVE-2024-13812 Apereo--CAS  A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6webapp-mgmtcas-management-webapp-supportsrcmainjavaorgapereocasmgmtserviceswebRegisteredServiceSimpleFormController.java of the component Groovy Code Handler. The manipulation leads to code injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 5 CVE-2025-3984 Apereo--CAS  A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown code of the file cas-5.2.6corecas-server-core-configuration-metadata-repositorysrcmainjavaorgapereocasmetadatarestCasConfigurationMetadataServerController.java. The manipulation of the argument Name leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 4.3 CVE-2025-3986 Axis Communications AB--AXIS Camera Station Pro  Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. 2025-04-23 6.1 CVE-2025-1056 Axis Communications AB--AXIS Camera Station Pro  Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when recording video. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. 2025-04-23 5.9 CVE-2025-0926 bdthemes--Element Pack Addons for Elementor Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder  The Element Pack Addons for Elementor - Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like Dual Button, Creative Button, Image Stack and more in all versions up to, and including, 5.10.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2025-04-26 6.4 CVE-2025-1458 bitpressadmin--Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder  The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. 2025-04-25 4.9 CVE-2025-2580 bplugins--Lottie Player- Great Lottie Player Solution  The Lottie Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the uploaded file. 2025-04-24 6.4 CVE-2025-2579 buildwps--Prevent Direct Access Protect WordPress Files  The Prevent Direct Access - Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due to a misconfigured capability check on the 'pda_lite_custom_permission_check' function in versions 2.8.6 to 2.8.8.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to access and change the protection status of media. 2025-04-25 5.4 CVE-2025-3861 buildwps--Prevent Direct Access Protect WordPress Files  The Prevent Direct Access - Protect WordPress Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'generate_unique_string' due to insufficient randomness of the generated file name. This makes it possible for unauthenticated attackers to extract sensitive data including files protected by the plugin if the attacker can determine the file name. 2025-04-25 5.3 CVE-2025-3923 checkpoint--Check Point Mobile Access  For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties. 2025-04-27 5.4 CVE-2024-52888 cilium--cilium  Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue. 2025-04-21 4 CVE-2025-32793 codeandreload--Custom Admin-Bar Favorites  The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. 2025-04-25 6.1 CVE-2025-3868 CodeCanyon--RISE Ultimate Project Manager  A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php/team_members/save_profile_image/ of the component Profile Picture Handler. The manipulation of the argument profile_image_file leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-22 4.3 CVE-2025-3855 codeprojects--News Publishing Site Dashboard  A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument cat_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 6.3 CVE-2025-3968 codeprojects--News Publishing Site Dashboard  A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument category_image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 6.3 CVE-2025-3969 codeprojects--Patient Record Management System  A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 6.3 CVE-2025-3955 CODESYS--CODESYS Visualization  An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing. 2025-04-23 5.3 CVE-2025-2595 cuba-platform--cuba  CUBA Platform is a high level framework for enterprise applications development. Prior to version 7.2.23, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in version 7.2.23. A workaround is provided on the Jmix documentation website. 2025-04-22 6.5 CVE-2025-32959 cuba-platform--jpawebapi  The Cuba JPA web API enables loading and saving any entities defined in the application data model by sending simple HTTP requests. Prior to version 1.1.1, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in version 1.1.1. A workaround is provided on the Jmix documentation website. 2025-04-22 6.4 CVE-2025-32961 cuba-platform--restapi  The CUBA REST API add-on performs operations on data and entities. Prior to version 7.2.7, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in version 7.2.7. A workaround is provided on the Jmix documentation website. 2025-04-22 6.4 CVE-2025-32960 dazhouda--lecms  A vulnerability was found in dazhouda lecms 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/view/default/user_set.htm. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 4.3 CVE-2025-3978 dazhouda--lecms  A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-password-ajax-1 of the component Password Change Handler. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 4.3 CVE-2025-3979 devitemsllc--ShopLentor WooCommerce Builder for Elementor & Gutenberg +20 Modules All in One Solution (formerly WooLentor)  The ShopLentor - WooCommerce Builder for Elementor & Gutenberg +20 Modules - All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.2 via the woolentor_template_proxy function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application, and can be used to query and modify information from internal services. 2025-04-25 6.5 CVE-2025-3775 elextensions--ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes  The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value_filter' parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2025-04-24 6.5 CVE-2025-3280 FileZ--Client  An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user. 2025-04-25 5 CVE-2025-2068 FileZ--Client  A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user. 2025-04-25 5 CVE-2025-2069 FileZ--Client  An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user. 2025-04-25 5 CVE-2025-2070 Franka Robotics--Franka Emika Robot  Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames. 2025-04-24 5.3 CVE-2021-47664 GitLab--GitLab  An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. 2025-04-24 6.5 CVE-2025-0639 GitLab--GitLab  An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1. 2025-04-24 4.3 CVE-2024-12244 GL.iNet--GL-A1300 Slate Plus  A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been declared as problematic. This vulnerability affects unknown code of the component API. The manipulation leads to inefficient regular expression complexity. It is recommended to upgrade the affected component. 2025-04-26 5.7 CVE-2025-2811 Grafana--Grafana  The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript. 2025-04-23 6.8 CVE-2025-2703 HCL Software--HCL Leap  Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. 2025-04-24 6.3 CVE-2024-30113 HCL Software--HCL Leap  Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications. 2025-04-24 6.5 CVE-2024-30147 HCL Software--HCL Leap  Insufficient default configuration in HCL Leap allows anonymous access to directory information. 2025-04-24 5.3 CVE-2023-45720 HCL Software--HCL Leap  Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications. 2025-04-24 4.6 CVE-2022-44759 HCL Software--HCL Leap  Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications. 2025-04-24 4.6 CVE-2022-44760 HCL Software--HCL Leap  Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem. 2025-04-24 4.1 CVE-2024-30148 HCL Software--HCL SX  HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts. 2025-04-25 6.5 CVE-2024-30152 Heateor Support--Sassy Social Share  URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Heateor Support Sassy Social Share allows Phishing. This issue affects Sassy Social Share: from n/a through 3.3.73. 2025-04-24 4.7 CVE-2025-39404 Hitachi--Hitachi Ops Center Common Services  Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00. 2025-04-22 5.5 CVE-2025-2300 IBM--InfoSphere Information Server  IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. 2025-04-23 6.3 CVE-2024-22351 IBM--InfoSphere Information Server  IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system. 2025-04-23 4.3 CVE-2025-25045 IBM--Maximo Asset Management  IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. 2025-04-25 5.5 CVE-2025-2986 IBM--WebSphere Application Server  IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. 2025-04-22 4.1 CVE-2025-27907 iteachyou--Dreamer CMS  A vulnerability was found in iteachyou Dreamer CMS up to 4.1.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/attachment/download of the component Attachment Handler. The manipulation of the argument ID leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2025-04-27 4.3 CVE-2025-3977 itwanger--paicoding  A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 5.4 CVE-2025-3967 itwanger--paicoding  A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1&homeSelectType=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2025-04-27 4.3 CVE-2025-3966 jeremyshapiro--FuseDesk  The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'successredirect' parameter in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 2025-04-24 6.4 CVE-2025-3832 jmix-framework--jmix  Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers could manipulate the FileRef parameter to access files on the system where the Jmix application is deployed, provided the application server has the necessary permissions. This can be accomplished either by modifying the FileRef directly in the database or by supplying a harmful value in the fileRef parameter of the `/files` endpoint of the generic REST API. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. 2025-04-22 6.5 CVE-2025-32950 jmix-framework--jmix  Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be uploaded beforehand. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. 2025-04-22 6.4 CVE-2025-32951 jmix-framework--jmix  Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively large files, potentially causing the server to run out of space and return HTTP 500 error, resulting in a denial of service. This issue has been patched in versions 1.6.2 and 2.4.0. A workaround is provided on the Jmix documentation website. 2025-04-22 6.5 CVE-2025-32952 kitae-park--Mang Board WP  The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. 2025-04-24 4.4 CVE-2025-3435 lamarant--Buddypress Force Password Change  The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plugin not properly validating a user's identity prior to updating their password through the 'bp_force_password_ajax' function in all versions up to, and including, 0.1. This makes it possible for authenticated attackers, with subscriber-level access and above and under certain prerequisites, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their accounts. 2025-04-24 4.2 CVE-2025-3793 magepeopleteam--Booking and Rental Manager  Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Booking and Rental Manager: from n/a through 2.3.8. 2025-04-24 5.3 CVE-2025-39390 Mattermost--Mattermost  Mattermost versions 10.4.x

Read more »

DOGE Worker’s Code Supports NLRB Whistleblower
A whistleblower at the National Labor Relations Board (NLRB) alleged last week that denizens of Elon Musk's Department of Government Efficiency (DOGE) siphoned gigabytes of data from the agency's sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one of those code bundles shows it is remarkably similar to a program published in January 2025 by Marko Elez, a 25-year-old DOGE employee who has worked at a number of Musk's companies.

Read more »

Whistleblower: DOGE Siphoned NLRB Case Data
A security architect with the National Labor Relations Board (NLRB) alleges that employees from Elon Musk's Department of Government Efficiency (DOGE) transferred gigabytes of sensitive data from agency case files in early March, using short-lived accounts configured to leave few traces of network activity. The NLRB whistleblower said the unusual large data outflows coincided with multiple blocked login attempts from an Internet address in Russia that tried to use valid credentials for a newly-created DOGE user account.

Read more »

Buy an A16 11th-generation iPad this weekend at Amazon for $50-$70 off Apple’s MSRP
Amazon has Apple's 11th-generation A16 iPads in stock on sale for $50-$70 off MSRP this weekend. Shipping is free: - 11" 11th-generation 128GB WiFi iPads: $299 $50 off MSRP - 11" 11th-generation 256GB WiFi iPads: $399 $50 off MSRP - 11" 11th-generation 512GB WiFi iPads: $599 $50 off MSRP - 11" 11th-generation 128GB WiFi + Cellular iPads: $449 $50 off MSRP - 11" 11th-generation 256GB WiFi + Cellular iPads: $549 $50 off MSRP - 11" 11th-generation 512GB WiFi + Cellular iPads: $729 $70 off MSRP Amazon's prices are the lowest iPads prices currently available for 11th-generation models. Note that there can be some slight variation in prices depending on your chosen color. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Week’s Best Deals: 14-inch M4 Pro/M4 Max MacBook Pros on sale for up to $320 off Apple’s MSRP
Don't pay full price! Get a new 14" MacBook Pro with an M4 Pro or M4 Max CPU for up to $320 off Apple's MSRP this week at these retailers...they are the lowest prices available for these MacBook Pros anywhere: (1): Amazon has Apple's 14-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) on sale this weekend for up to $329 off MSRP. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 Pro MacBook Pro (24GB/512GB/Black): $1779, $220 off MSRP - 14" M4 Pro MacBook Pro (24GB/512GB/Silver): $1769, $230 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB/Black): $2149, $250 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB/Silver): $2169, $230 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB/Black): $2879, $320 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB/Silver): $2892, $208 off MSRP (2): B&H Photo is offering 14-inch MacBook Pros with M4 Pro or M4 Max CPUs for up to $320 off Apple's MSRP as well. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 Pro MacBook Pro (24GB/512GB/Black): $1779, $220 off MSRP - 14" M4 Pro MacBook Pro (24GB/512GB/Silver): $1769, $230 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB/Black): $2149, $250 off MSRP - 14" M4 Pro MacBook Pro (24GB/1TB/Silver): $2169, $230 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB/Black): $2879, $320 off MSRP - 14" M4 Max MacBook Pro (36GB/1TB/Silver): $2999, $200 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Week’s Best Deals: 16-inch MacBook Pros on sale for up to $400 off Apple’s MSRP
Don't pay full price! Get a new 16" MacBook Pro with an M4 Pro or M4 Max CPU for up to $400 off Apple's standard MSRP this week at these retailers: (1): Amazon has 16-inch M4 Pro and M4 Max MacBook Pros (Silver and Black colors) on sale this week for up to $400 off Apple's MSRP. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 16" M4 Pro MacBook Pro (24GB/512GB): $2229, $270 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2569, $340 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB): $3149, $350 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB): $3599, $400 off MSRP (2): B&H Photo is offering up to $450 off on 16-inch MacBook Pros with M4 Pro or M4 Max MacBook Pros right now. B&H offers free 1-2 day shipping to most US addresses: - 16" M4 Pro MacBook Pro (24GB/512GB): $2229, $270 off MSRP - 16" M4 Pro MacBook Pro (48GB/512GB): $2569, $340 off MSRP - 16" M4 Max MacBook Pro (36GB/1TB): $3149, $350 off MSRP - 16" M4 Max MacBook Pro (48GB/1TB): $3599, $400 off MSRP For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Week’s Best 14-inch M4 MacBook Pro Deals: Take $200 off all models at these Apple retailers
Don't pay full price! These retailers are offering $200 discounts on new 14-inch M4 MacBook Pros this week...they are the lowest sale prices available for new MacBook Pros: (1): Amazon is offering a $200 discount on Apple's 14-inch M4 MacBook Pros (Silver and Black colors) this week. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party seller: - 14" M4 MacBook Pro (16GB/512GB): $1399, $200 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1599, $200 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $200 off MSRP (2): B&H Photo has 14-inch M4 MacBook Pros on sale for $200 off Apple's standard MSRP this week. B&H offers free 1-2 day shipping to most US addresses: - 14" M4 MacBook Pro (16GB/512GB): $1399, $200 off MSRP - 14" M4 MacBook Pro (16GB/1TB): $1599, $200 off MSRP - 14" M4 MacBook Pro (24GB/1TB): $1799, $200 off MSRP For the latest sales and prices, keep an eye on our 14-inch MacBook Pro Price Tracker, updated daily.

Read more »

Apple’s iPhone 15 is on sale for $300 off MSRP at Red Pocket Mobile
Red Pocket Mobile has the Apple iPhone 15 Pro Max, 15 Pro, and 15 Plus, all unlocked, on sale for $300 off MSRP when you switch and open up a new line of service. Red Pocket Mobile is a nationwide MVNO using all the major wireless carrier networks and offers plans starting at $20 per month. Offer is good through May 27th. They're currently offering $100 off any of these iPhones when purchased with a service plan. After three months of service, Red Pocket Mobile will give you an additional $200 rebate in the form of a Virtual Visa Gift Card. The fine print: "$200 additional rebate after 3 consecutive recurring payments on any monthly GSMA unlimited plan, starting at $20/mo. $200 rebate currently applies on any carrier locked iPhone model. Valid new and existing customers. Existing customers must have a qualifying plan. Only one rebate is valid per line, per year." Keep an eye on our iPhone Price Tracker for the latest prices & deals on iPhones and plans from Apple and its carriers, updated daily. We currently track deals from 18+ wireless carriers.

Read more »

Apple Watch Series 10 models on sale for $100-$110 off MSRP, prices start at $299
Apple Watch Series 10 models (Aluminum cases) are available on Walmart's online store this week for $100 (GPS models) to $110 (GPS + 5G models) off MSRP. Sale prices available for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 42mm Apple Watch Series 10 GPS: $299, save $100 - 46mm Apple Watch Series 10 GPS: $399, save $100 - 42mm Apple Watch Series 10 GPS + 5G: $389, save $110 - 46mm Apple Watch Series 10 GPS + 5G: $419, save $110 Sales prices apply to certain colors only, see their site for details. For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily.

Read more »

Week’s Best 15-inch MacBook Air Deals: Take $150 off Apple’s MSRP today, prices start at $1049
A couple of Apple retailers are offering $150 discounts on new 15" M4 MacBook Airs. Prices at these retailers start at $1049 this week: (1): Amazon has new 15" M4 MacBook Airs on sale for $150 off MSRP, starting at $1049. Sale prices apply to most colors and configurations. Be sure to select Amazon as the seller, rather than a third-party: - 15" M4 MacBook Air (16GB/256GB): $1049, $150 off - 15" M4 MacBook Air (16GB/512GB): $1249, $150 off - 15" M4 MacBook Air (24GB/512GB): $1449, $150 off (2): B&H Photo has new 15" MacBook Airs with M4 CPUs on sale this week for $150 off Apple's MSRP. Prices start at $1049. Free 1-2 day delivery is available to most US addresses. Sale prices apply to most, but not all, colors--see their site for details: - 15" M4 MacBook Air (16GB/256GB): $1049, $150 off - 15" M4 MacBook Air (16GB/512GB): $1249, $150 off - 15" M4 MacBook Air (24GB/512GB): $1449, $150 off For the latest sales & prices, see our 15" MacBook Air Price Tracker, updated daily.

Read more »

Week’s Best 13-inch MacBook Air Deals: Take $150 off Apple’s MSRP today, prices start at $849
A couple of Apple retailers are offering $150 discounts on new 13" M4 MacBook Airs. Don't pay full price at Apple! Prices at these retailers start at only $849 this week: (1): Amazon has new 13" M4 MacBook Airs on sale for $150 off MSRP, starting at $849. Sale prices apply to most colors and configurations. Be sure to select Amazon as the seller, rather than a third-party: - 13" M4 MacBook Air (16GB/256GB): $849, $150 off - 13" M4 MacBook Air (16GB/512GB): $1049, $150 off - 13" M4 MacBook Air (24GB/512GB): $1249, $150 off (2): B&H Photo has new 13" MacBook Airs with M4 CPUs on sale this week for $150 off Apple's MSRP. Prices start at only $849. Free 1-2 day delivery is available to most US addresses. Sale prices apply to most, but not all, colors--see their site for details: - 13" M4 MacBook Air (16GB/256GB): $849, $150 off - 13" M4 MacBook Air (16GB/512GB): $1049, $150 off - 13" M4 MacBook Air (24GB/512GB): $1249, $150 off For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

Mac minis on sale for up to $170 off Apple’s MSRP with free 1-2 day shipping
B&H Photo has M4 and M4 Pro Mac minis in stock and on sale right now for $55-$170 off Apple's MSRP, each including free 1-2 day shipping to most US addresses: - M4 Mac mini (16GB/256GB): $529, $70 off MSRP - M4 Mac mini (16GB/512GB): $744, $55 off MSRP - M4 Mac mini (24GB/512GB): $899, $100 off MSRP - M4 Pro Mac mini (24GB/512GB): $1229, $170 off MSRP Their prices are among the lowest available for new Mac minis. For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »

Weekend Deal: Apple AirPods for up to $80 off MSRP
Amazon has Apple AirPods in stock and on sale for up to $80 off MSRP including free shipping. These are the cheapest prices available for new AirPods: - AirPods 4: $99, $30 off - AirPods 4 with ANC: $148.99, $30 off - AirPods Pro 2 with USB-C: $169, $80 off Give the current tariff environment and possible supply chain issues, act on these prices now while they last. Keep an eye on our AirPods Price Tracker for the latest prices and deals, updated daily.

Read more »

Get a 16-inch M4 Max MacBook Pro for $400 off Apple’s MSRP
B&H Photo is offering a $400 discount on new 16-inch MacBook Pros with an M4 Max CPU. Free 1-2 day shipping is available to most US addresses: - 16" M4 Max MacBook Pro (48GB/1TB/Black or Silver): $3599, $400 off MSRP This is among the steepest discounts we've seen on a new 16" M4 Max MacBook Pro this year. For the latest sales and prices, keep an eye on our 16-inch MacBook Pro Price Tracker, updated daily.

Read more »

Amazon is offering a $50 discount on Apple’s new 11th-generation A16 iPads
Amazon has Apple's 11th-generation A16 iPads in stock on sale for $50 (or a little more) off MSRP this week. Shipping is free: - 11" 11th-generation 128GB WiFi iPads: $299 $50 off MSRP - 11" 11th-generation 256GB WiFi iPads: $399 $50 off MSRP - 11" 11th-generation 512GB WiFi iPads: $599 $50 off MSRP - 11" 11th-generation 128GB WiFi + Cellular iPads: $449 $50 off MSRP - 11" 11th-generation 256GB WiFi + Cellular iPads: $549 $50 off MSRP - 11" 11th-generation 512GB WiFi + Cellular iPads: $749 $50 off MSRP Amazon's prices are the lowest iPads prices currently available for 11th-generation models. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »