Apple highlights ‘purpose-driven missions’ with 2023 App Store Award winners
Macworld With the end of the year approaching, Apple has been highlighting the best of 2023. First was Apple Music, then Podcasts and Books, all leading up to the biggest award of all: the App Store. Apple has announced the winners of its 2023 App Store Award for iPhone, iPad, Apple Watch, and Mac, and many of them are familiar faces. The winner this year is AllTrails, which launched in 2010. Widely regarded as the premier hiking app, AllTrails offers access to comprehensive trail guides and maps for outdoor enthusiasts and fosters a robust community of hikers. The iPad app of the year is Prêt-à-Makeup, which offers a unique “digital face chart” for testing new looks and color combinations. And over on the Mac, photo editor Photomator got the nod for its advanced AI and machine-learning tools. (We reviewed Photomator and it’s in our round-up of the best photo editing apps for Mac.) Speaking of AI, Apple spotlighted the generative AI movement as the Trend of the Year, showcasing ChatGPT, Canva, and Picsart as apps that “gave users a chance to see, firsthand, the technology in action and come to their own conclusions about the benefits and risks.” The rest of the winners are: Apple TV App of the Year: MUBI, from MUBI, Inc Apple Watch App of the Year: SmartGym, from Mateus Abras iPhone Game of the Year: Honkai: Star Rail, from COGNOSPHERE PTE. LTD iPad Game of the Year: Lost in Play, from Snapbreak Games Mac Game of the Year: Lies of P, from NEOWIZ Apple Arcade Game of the Year: Hello Kitty Island Adventure, from Sunblink Apple also highlighted several Cultural Impact winners, which were “recognized for their ability to drive positive change through apps and games.” The five winners are Pok Pok from Pok Pok, Proloquo from AssistiveWare, Too Good To Go from Too Good To Go, Unpacking from Humble Bundle, and Finding Hannah from Fein Games GmbH. Apple Inc

Read more »

How to use AirPods to authenticate Siri commands without unlocking your iPhone
A new AirPods accessibility feature for iPhone has created a secure way to use advanced Siri commands without unlocking your iPhone. Here's how to use it.Siri now remembers that it's you speaking when iPhone is locked. [Photo by Jess Bailey Designs.]In iOS 17, Apple has introduced a Siri authentication feature for AirPods which tackles a long-standing issue faced particularly by those with mobility or visual impairments. AirPods now enables these users to control Siri and access various iPhone functions without the need to physically interact with their device. Read more...

Read more »

OpenAI mess resolved: Microsoft joins board, Ilya Sutskever will remain, lawyer writes Sam Altman tweet
The OpenAI mess appears now to have been essentially resolved, with CEO Sam Altman’s return to the company now finalized. Microsoft is also joining the independent OpenAI board, though as “a non-voting observer,” and Quora CEO Adam D’Angelo will retain his seat despite a potential conflict of interest … more…

Read more »

This adorable retro Mac would be perfect if it didn’t run Windows
Macworld We here at Macworld don’t usually write about Windows PCs, but we’re making an exception today—a company called Ayaneo is shipping a mini PC that looks exactly like a retro Mac from 1984—disc drive, rainbow logo, and all. Ayaneo describes the Mini PC as having an “exquisite retro design” but it’s clear what the inspiration is. The computer is a petite 5-inch beige square with elements of the original Macintosh, including a black rectangle to mimic a screen (with an embossed logo that looks suspiciously like the Finder), a magnetic rainbow logo, and a disk drive cutout that has a small light to indicate power. There are vents on the back and sides, and more ports than the original Mac. In its intro video, Ayaneo leans heavily into the Mac inspiration, with a Hello screen like the original Mac and a spec slide similar to the ones Apple uses in its keynotes.  It’s designed to sit with the Mac side facing up, but there’s no reason why it shouldn’t work standing upright and has the following specs: Up to AMD Ryzen 3 3200U or 7 5700U  Up to 32GB DDR4 dual-channel memory Up to 1TB M.2 2280 PCIe 3.0 SSD Wi-Fi 6 and Bluetooth 5.2 USB-C (1), USB-A (3), HDMI, DisplayPort Unfortunately, the Ayaneo Mini PC runs Windows 11 Home Edition, but we’re sure some intrepid developer can get it to boot into macOS. While technically an Indiegogo campaign, the Retro Mini PC is ready to ship this month. It starts at $149. Mac

Read more »

PSA: Update Chrome on Mac, as security flaw is being actively exploited
If you use Chrome on Mac, it’s strongly recommended to update it immediately, as a security flaw discovered by Google is being actively exploited by attackers. It could potentially allow personal data to be extracted from your Mac (the same issue also affects Chrome on Windows and Linux). Google says it is aware of at least one real-life case of the exploit being used by a bad actor … more…

Read more »

The Renewed 2021 11-inch iPad Pro is Only $799
The iPad Pro is the most robust of the iPad lineup in terms of power and technology. Today, you can snap up a renewed model for a fraction of the price- the 256GB wi-fi and cellular model is down to just $799 on Amazon. The renewed iPad Pro may not be brand new, but it’s […] The post appeared first on iLounge.

Read more »

Apple TV+ ‘John Lennon: Murder without a Trial’ to stream December 6
A new Apple TV+ program about a John Lennon documentary will be streaming on the platform starting December 6. ‘John Lennon: Murder without a Trial’ is a three-part series that explores the infamous personality’s murder and Mark David Chapman, his killer. Apple put out a description as a ‘researched examination of Lennon’s 1980 murder’, featuring […] The post appeared first on iLounge.

Read more »

Apple Pay holiday promo goes live
The newest Apple Pay promotion has gone live just in time for the holidays. With the caption ‘Tap into holiday savings’, Apple outlines several deals with stores for Apple Pay purchases. The discounts will be available for customers from now until December 13- one of the requirements will be using Apple Pay to make the […] The post appeared first on iLounge.

Read more »

Apple terminates Goldman Sachs partnership
Apple is terminating its partnership with financial institution Goldman Sachs for the Apple Card platform. The Wall Street Journal recently reported that Apple intends to stop working with the company in around 12-15 months. More importantly, it’s not specified whether Apple has secured another company to take Goldman Sach’s place. In a statement, Apple said […] The post appeared first on iLounge.

Read more »

How Apple can take on Amazon—and win
Macworld Upon seeing this week’s announcement from Apple promoting the top titles of the year from Apple Books, along with a new Year in Review feature, I had likely the same thought as many: “Apple still cares about selling ebooks?” To be fair, you can’t blame the company for being gun-shy. Ten years ago, Apple found itself in the crosshairs of a Department of Justice investigation over price-fixing ebooks, and the fallout of that case not only impacted Apple’s existing foray into ebooks, but also likely cooled any fervor it had for competing in the market in the future. Unfortunately, that case also ended up only solidifying the dominance of the market’s biggest player, Amazon. So, a decade on, could Apple still mount an effective challenge to that behemoth? Maybe. But not only would they have to be present, but the company would have to take some pretty bold steps. Check it out It’s somewhat of a surprise even to myself that I do most of my reading on ebook these days. As much as I love paper books, it’s increasingly hard to justify the space they occupy in my home—plus, the convenience factor of instant gratification is hard to beat. Apple Books seems to be caught between being a retailer and providing an optimal reading experience.Foundry But the thing that’s tipped me over the edge more than anything else is access to a wide swath of free ebooks—legal free ebooks available from my local library. The Libby app allows me to easily check out ebooks and read them on my Kindle or Kobo e-readers, as well as maintaining holds on a queue of books that I want to read when they’re available. (Yes, holds can take a long time, and library licensing from publishers is overly restrictive, but that’s a story for another time.) However, Apple Books is nowhere to be found in this arena. Yes, you can read a book directly in the Libby app on your iPhone or iPad or have it delivered to your Kindle reader. You can even download an ePub file in Adobe’s awful Digital Editions copy protection format to read elsewhere, though it requires jumping through so many hoops that you’ll think you’re on an obstacle course. But the best-in-class experience remains Kobo’s: once you’ve linked your Kobo reader to your library account, books that you check out just show up on your e-reader. I can’t help but think that Apple is missing a huge opportunity here, and I wonder if part of the struggle is the split mentality between Apple Books as a reading app and Apple Books as a revenue-generating service. The thing is, improving the former ultimately helps the latter, and not having any way to link into library loans means that lots of people—people who like to read books—will never even open the Apple Books app, much less become customers. Take a DRM-amine Let’s flip the page to the Apple Books store experience. Sixteen years ago, when I’d only recently started my tenure at Macworld, one of the hottest topics around was the application of Digital Rights Management (DRM) in the burgeoning online music market. Songs and albums were overwhelmingly sold with embedded encryption, which meant you could only play them on approved hardware, frustrating those who wanted to listen to the music they’d legally purchased wherever they wanted. It seemed unlikely that music publishers would loosen their grip, especially with rampant fears of piracy, even though, as I argued at the time, it was in their best interests. Ebooks purchsed through Apple are copy protected, so they can’t be read on non-Apple devices.Foundry Except that unlikely scenario is, amazingly, exactly what happened. Big vendors like Apple and Amazon actually did start selling DRM-free music—and, in fact, if you purchase music à la carte today from Apple, it still is. But that news became irrelevant in relatively short order with the rise of music streaming services. Ebooks, however, have largely remained DRM-protected, meaning that customers still can’t move them between devices. So if you buy a book from Apple Books and want to read it on your Kindle, you’re generally out of luck. The use of DRM is a choice by both vendor and publisher: most stores allow a publisher to request that its titles be sold without DRM. That includes Apple Books, but even in that case, the company doesn’t make it easy to move your books around. (Where are your purchased ebooks stored on your Mac? Why, obviously, in ~/Library/Containers/com.apple.BKAgentService/Data/Documents/iBooks/Books/ with a file name that’s just a random string of numbers.) Nor does Apple make it easy to figure out if the title you’re purchasing has DRM or not. Even once you buy a DRM-free ebook and find the file on your Mac, you still generally have to go through an extra step (unzipping the ePub using a special utility) before you can get it into a format other apps and devices can read. This is all incredibly user-hostile and, bottom line, isn’t doing Apple any favors. A Finder window showing epub files named with random sets of numbers.Dan Moren Moreover, Apple is missing an opportunity to both differentiate itself from the competition and provide a worthy competitor to Amazon by pushing publishers to adopt DRM-free and easily portable ebooks, for the exact same reasons it did so with music. (Would it make piracy easier? Probably, but ebook piracy isn’t exactly scarce now and I maintain that most people—especially book customers—will buy legally if given the option. The sheer existence of illegal alternatives doesn’t turn people into criminals.) If you download a Kindle book, you can read it on your phone or iPad in the Kindle app, as well as on a Kindle reader and even via the web. But Apple’s books are forever locked to its own devices, which is a reason that many customers don’t even consider them. A hardware problem to solve This leads us to the last issue: the reading experience. Apple Books is a nice enough app, but for those who don’t want to read on an iPad, iPhone, or Mac, it’s a non-starter. Ebook readers are one of the few single-category devices that have continued to be popular in an era of smartphones and tablets, by virtue of the fact that they provide a nicer experience. I love my iPad, but I rarely want to read books on it: for one thing, it’s much heavier than my Kindle or Kobo readers—try holding an 11-inch iPad Pro over your head in bed without dropping it on your face. (You should probably wear safety goggles.) Most ebook readers are far more power efficient; they can be left for days if not weeks between charges. They’re also significantly cheaper than iPads. And as nice as the iPad’s displays are, e-ink screens are far more pleasant to read in sunlight or at night in bed without disturbing anyone else (not to mention easier on the eyes). Apple touts the iPad as an ebook reader but the experience lags behind dedicated e-readers.Apple Apple has generally taken to heart the old Alan Kay maxim that “people who are really serious about software should make their own hardware.” But when it comes to books, the company seems to think the iPad is good enough and frankly, it’s not. Do I expect Apple to come out with its own e-reader? Not really. But if the company is starting to get serious about ebooks again, then figuring out how its hardware can be a better reading device is at the top of the list. Book ’em The long and short of it is that Apple remains a bit player in the ebook market—a fact to which I can attest firsthand. I’ve had the dubious honor of seeing the Apple Books experience from multiple angles: as an author of traditionally published books, as a producer of a few self-published stories, and as a consumer. My experiences are by no means universal, but for works that I’ve published myself on most popular ebook marketplaces, Apple Books accounts for only 10 to 20 percent of sales—and I expect those numbers are inflated because, well, I’m a person with a disproportionately large number of customers in the Apple ecosystem. A few of my titles have appeared in the Apple Books bestseller lists, which just reinforces the idea that you don’t need to sell that many copies to show up there. But Apple is one of the few companies big enough to challenge Amazon’s dominance. And though it might be reticent given the legal challenges it’s faced in the past, there remains an enormous amount of opportunity here. Plus, let’s face it: with its small market footprint, what does it really have to lose? E-readers

Read more »

Boy petitions Apple to change 'nerd face' emoji
A UK schoolboy is asking Apple to fix and rename what he says is its offensive and insulting "nerd face" emoji, and has created a petition about it.Petitioner Teddy with the "Apple" icon he so dislikes (source: BBC)Perhaps a 10-year-old schoolboy couldn't be expected to know that it's actually the Unicode consortium that rules on emoji — but you'd hope that the teachers encouraging his petition would have looked into it. Read more...

Read more »

Researchers discover two Bluetooth security flaws that can affect any device from 2014 on
This is one of those things that make you cringe and hope there’s a firmware update to resolve it in the works. Two recently-discovered Bluetooth security flaws allow attackers to hijack the connections of all devices using Bluetooth 4.2 to 5.4, a range that encompasses all devices between late 2014 and now. AirDrop is also […] Source

Read more »

Apple and Goldman Sachs to dissolve Apple Card financial relationship in 12 to 15 months
Sometimes incredibly complex premium credit card banking and finance deals don’t work out in the long run. Per the Wall Street Journal, Apple will be ending its Apple Card credit card partnership with Goldman Sachs within the next 12 to 15 months. It’s unknown as to whether Apple has established a new partnership for the […] Source

Read more »

10 Free Reverse Phone Number Lookup Sites (No Charge)
Macworld Nowadays, receiving calls from unknown numbers can often make us hesitant to answer, and for good reason. These days, it is not uncommon to be pestered by telemarketers, scammers, catfishers, or even spammers. However, phone numbers are now utilized for various purposes online. Therefore, we can use reliable reverse phone lookup sites to uncover the identity of the caller. These platforms make it easy to conduct quick phone number checks, as they can scan multiple online public databases to offer information on any phone number’s owner, such as their name, contact details, and more.  If you’re looking to identify unknown callers quickly, check out this article where we gather 10 free reverse phone lookup sites. Let’s take a look at the first 5 on our list and get started! Spokeo – Most reputable platform for gathering comprehensive background reports CocoFinder – Offers accurate and up-to-date reverse phone lookup information USPhoneLookup – Has an easy-to-navigate reverse phone search user interface NumLooker – Provides access to multiple background search parameters and features US Phone Search – Strong choice for fast free phone lookup results Spokeo HIX.AI Spokeo is the most popular free reverse phone lookup site that has built a solid reputation among online users for easily retrieving background information on any phone number. It can be relied on to provide comprehensive reports on any target including information such as their name, email, home address, social accounts, and more. It can even uncover in-depth details on their criminal history, financial records, educational background, etc. On top of that, it even provides automatic updates on searches and allows users to conveniently download the reports via PDF. Plus, its search engine even offers special filtering options that allow users to better pinpoint the information that they need. Uncover the mystery of an unknown number! Start your search here. CocoFinder HIX.AI If you need accurate and up-to-date reverse phone lookup results, then CocoFinder is a good bet to get the job done. It is continuously updated for greater data accuracy and even guarantees that any reverse phone searches conducted remain confidential. The platform is renowned for having a highly advanced search engine that scours multiple public databases, social platforms, and more to provide highly relevant results on an individual’s past and current status. This includes information such as their name, address, contact details, possible relatives and acquaintances, etc.  It comes with a smooth and user-friendly interface that ensures you can conduct as many background checks as you need. In addition, the platform offers other useful services, such as name searches, background checks, and email lookups.  Use CocoFinder’s reverse phone lookup to reveal unknown numbers now. USPhoneLookup  HIX.AI USPhoneLookup is a great way to look up phone numbers for free, with a standout feature being its user-friendly interface. With this platform, first-time users can quickly identify any unknown caller with minimal difficulty, even if they have no technical knowledge or experience. The platform utilizes a powerful reverse search engine that extracts information from various online listings, public directories, and government databases. This comprehensive search offers reports that include useful details such as names, email addresses, social media accounts, and more. With USPhoneLookup, you can conveniently conduct searches even while on the move, as the platform is mobile-friendly. Plus, their servers don’t store any history of past reverse phone lookups, so you can remain anonymous. Unlock the secret behind any call with USPhoneLookup! NumLooker  HIX.AI NumLooker is a free reverse lookup tool for those looking to gather more in-depth information on an unknown caller, be it from a cellphone, landline, or VoIP. It goes beyond basic lookup services and provides users with additional features such as people searches and address lookups. This makes it easier for users to uncover even more details on the target. With NumLooker, users can gather relevant details that may not be available from other reverse search tools, including the caller’s location, business records, property records, and even credit history.  To stay informed, users can choose to receive notifications about any updates regarding a specific target. Aside from that, the platform even comes with a reliable customer support team that can assist 24/7. US Phone Search HIX.AI US Phone Search is a reliable and free phone lookup platform that accesses a wide range of public data sources. As a result, it does well to consistently provide a fair amount of insight into an unknown caller’s background, such as their name, address, business records, court records, and more. The tool allows users to narrow down their search by area code, and it even offers mobile phone location tracking. Furthermore, the platform is secured using high encryption protocols, which guarantees complete user privacy and confidentiality.  The platform is easy enough to navigate, so even first-time users should have no trouble accessing the information they need.  PeopleFinderFree HIX.AI When it comes to speed and efficiency, PeopleFinderFree is a great option. It can produce detailed reverse phone number search results on a large dataset within a matter of seconds.  This typically includes details like the caller’s name, business information, social accounts, employment history, address details, criminal background, etc. In essence, it pulls any publicly available data that it can find related to your given target, which ensures that you don’t miss anything relevant. In addition to reverse phone lookup, this platform enables you to access individual information through people search, address lookup, and reverse email lookup. You can also conduct background checks using this service. FindPeopleFast HIX.AI FindPeopleFast efficiently delivers pertinent information about unknown callers, sparing users from sifting through unnecessary data. By scanning various online sources, this free reverse phone search tool quickly retrieves important details. This allows you to get important information such as their name, close acquaintances, business information, etc. The platform produces results relatively quickly and maintains a strict user privacy policy, which means that your search history will remain completely private.  Furthermore, the user interface is extremely easy to operate, as FindPeopleFast will provide a short list of the basics of the target. However, do remember that if the caller has a limited digital footprint, then it may not be able to provide a full background report. TruePeopleSearch HIX.AI TruePeopleSearch scans multiple online public records and data collection sites to extract available information connected to the unknown number. Furthermore, the platform provides a range of additional valuable services, including name searches, background checks, and email lookups. As a result, it is a good option for those who simply want basic information on a target without having to go through a paywall. Besides, it even ensures complete user confidentiality on all background checks.  However, do keep in mind that not all searches on this site are always guaranteed to be 100% accurate. Real People Search HIX.AI Real People Search compiles detailed reports on unknown callers by connecting to a wide range of online phone directories, government websites, and public data archives. It only takes a few minutes to provide you with a list of information associated with the number, such as name, contact details, addresses, etc. The platform updates its database regularly, which ensures that the data provided is as accurate and up-to-date as possible. Moreover, all reports generated are easily downloadable for convenience’s sake.  Its search bar is also simple enough that anyone can use it, no matter what their technical skill level may be. They even offer a dependable customer support team that remains ready to address any concerns or issues you may have. FastPeopleSearch HIX.AI FastPeopleSearch provides users with a safe and efficient way to gather quick background information on a caller with no strings attached. With this platform, you can typically access useful details like their name, email, age, location, social profile, and other related information. All it takes is pasting the number into the search engine, and it will return available information about the caller instantly. The site utilizes advanced encryption technology and does not keep track of your searches. As such, you can conduct as many free phone number searches as you want without the target ever finding out they are being reviewed.  Furthermore, FastPeopleSearch is designed to be quick and reliable, which makes it ideal for collecting data on any type of caller, be it for personal or even business purposes. Conclusion  With help from the right reverse phone lookup site, you can effectively put an end to incessant calls from telemarketers and pranksters by tracking down information on the person behind the number with just a few clicks.  Each platform that we’ve listed above is an industry leader, and they won’t even require you to pay a dime to access their services. However, do keep in mind that the amount of information provided can vary depending on the platform, so make sure to choose wisely. Smartphones

Read more »

Save more than $200 on Rosetta Stone for Cyber Monday
Macworld If you want to learn a new language next year, now’s the time to get your studying squared away. As part of our Cyber Monday deals, we’re offering one of the best discounts you’ll find on the award-winning language learning software, Rosetta Stone. Through December 3, you can get it for more than half off. Rosetta Stone is one of the most highly accoladed language learning programs in the world, nicknamed the “Gold Standard” of language learning by CNN and called “the next best thing to living in a country” by The Wall Street Journal. With this deal, you’ll have lifetime access to all languages in the Rosetta Stone learning library, as well as proprietary tools like the speech recognition program TruAccent and the world’s leading curriculum. Ready to learn a new language? Now through December 3, you can get a lifetime subscription to Rosetta Stone for more than half off $399 at just $149.97.   Rosetta Stone: Lifetime Subscription (All Languages) – $149.97 See Deal Prices subject to change. Accessories

Read more »

Macworld Podcast: When is it time to upgrade an Apple Watch?
Macworld The new Apple Watch Series 9 is available, but is it worth buying? In this episode of the Macworld Podcast, we talk about what makes the Apple Watch compelling and when is the right time to upgrade an Apple Watch if you already have one. This is episode 865 with Karen Haslam, David Price, and Roman Loyola.  Listen to episode 865 on Apple Podcasts Listen to episode 865 on Spotify Get info  Click on the links below to get more information on what was discussed on the show.  Apple Watch Series 9 review: Same old Apple, always winning  Subscribe to the Macworld Podcast You can subscribe to the Macworld Podcast—or leave us a review!—right here in the Podcasts app. The Macworld Podcast is also available on Spotify. Or you can point your favorite podcast-savvy RSS reader at: https://feeds.megaphone.fm/macworld To find previous episodes, visit Macworld’s podcast page or our home on MegaPhone. Apple Watch Series 9 Price When Reviewed: From $399 Best Prices Today: $329 at Walmart$399 at Adorama$399 at Apple Read our full Apple Watch Series 9 review Apple Watch Ultra 2 Price When Reviewed: $799 (base) Best Prices Today: $774 at Walmart$774.00 at Amazon$799 at Adorama Read our full Apple Watch Ultra 2 review Apple Watch

Read more »

These apps and games won the 2023 App Store Awards
Apple has announced the 2023 App Store Award Winners, highlighting 14 apps and games across several categories and genres. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple Pulls Plug On Goldman Credit-Card Partnership
schwit1 shares a report from the Wall Street Journal: Apple is pulling the plug on its credit-card partnership with Goldman Sachs (source paywalled; alternative source), the final nail in the coffin of the Wall Street bank's bid to expand into consumer lending. The tech giant recently sent a proposal to Goldman to exit from the contract in the next roughly 12 to 15 months, according to people briefed on the matter. The exit would cover their entire consumer partnership, including the credit card the companies launched in 2019 and the savings account rolled out this year. It couldn't be learned whether Apple has already lined up a new issuer for the card. The move would mark a swift about-face for a program that just over a year ago was extended through 2029 and was intended to serve as a pillar of Goldman's main-street ambitions. The retreat began around the end of last year after Goldman lost billions of dollars trying to build out a full-service consumer operation. By early this year, Goldman had told Apple that it would be looking to offload the partnership. Typically the merchant -- in this case Apple -- plays a controlling role in such partnerships. schwit1 adds: "The customer satisfaction rate is high but Goldman's acquisition costs were reportedly astronomical -- something like $350 per cardholder." Read more of this story at Slashdot.

Read more »

Elon Musk has a message for Apple and others who paused advertising on X: ‘Go F yourself’
Elon Musk has a message for Apple and others who paused advertising on X over a fake controversy ginned-up by Media Matters: "Go F yourself." The post appeared first on MacDailyNews.

Read more »

OWC miniStack STX is 10% off with purchase of refurbished Apple product
OWC's miniStack STX is a Mac's best friend thanks to its Thunderbolt 4 and SSD expansion capabilities that supercharge your setup, and now you can take 10% off with our exclusive coupon code when you buy a refurbished Apple product.Take 10% off the miniStack STX.Shop popular refurbished products, like the Mac mini, with configurations starting as low as $79. Or find the perfect MacBook Pro, with options starting out at $399, and take home the miniStack STX with a 10% discount with coupon code APPLEINSIDER. Read more...

Read more »

Apple reveals 2023 App Store Award winners; names generative AI the ‘trend of the year’
After teasing the finalists earlier this month, Apple has now unveiled the full list of App Store Award winners for 2023. AllTrails has taken home the iPhone App of the Year crown, while Photomator was crowned the Mac App of the Year. Head below for a full breakdown of the winners across all of Apple’s platforms and categories. more…

Read more »

Apple reveals 2023 App Store Award winners, highlights AI as the year's biggest trend
App Store Award winners include AllTrails, Photomator, and "Hello Kitty Island Adventure," plus, Apple says generative AI is 2023's biggest trend amongst innovative apps.App Store AwardsApple says this year's winners showcase the scope of creativity, technical innovation, and design possible across the App Store and Apple's ecosystem. The App Store Awards have been an annual tradition for over a decade. Read more...

Read more »

Apple published a new Press Release
Apple just published a new Press Release:Apple unveils App Store Award winners, the best apps and games of 2023

Read more »

Foxconn's expansion into India isn't going as well as hoped
Apple supplier Foxconn is struggling to get its factories in India to operate efficiently, with employees citing language barriers, culture clashes, and difficulty adapting to strenuous schedules.FoxconnFoxconn began production of iPhone in India starting in 2019 with iPhone XR. That expanded into iPhone 11 in 2020, then each flagship iPhone has had some model built in India since. Read more...

Read more »

Steam ending support for Macs running macOS Mojave and earlier
Steam has kept support for macOS Mojave and macOS High Sierra alive so far to keep 32-bit games running on older Macs, but that support is ending on February 15.SteamSteam is a multi-platform game storefront and distributor available on Mac and PC. It hosts thousands of games and is the most popular place to get video games on computers. Read more...

Read more »

Job opening hints at Brazilian fintech replacing Goldman Sachs as Apple Card issuer
A recent report from The Wall Street Journal revealed that Apple and Goldman Sachs are ending the partnership they made in 2019 to introduce the Apple Card. Although the news didn’t come as a surprise, it’s still unclear what will happen to the Apple Card – but a job opening on Apple’s website suggests that the company may be working with a Brazilian fintech to sort it out. more…

Read more »

Elon Musk tells advertisers like Apple, Disney to 'Go f— yourself' after boycott
After companies like Apple and Disney pulled advertising, Elon Musk says it will be the advertisers fault if X goes under, suggesting users will boycott them in turn.X in trouble after advertising boycottAfter Elon Musk promoted antisemitic content via his personal account and reports of advertisements appearing next to other antisemitic content, Apple and other advertisers boycotted X. Since this inciting incident, more and more official accounts and advertisers have removed their presence from X, at least temporarily. Read more...

Read more »

Elon Musk responds to Apple and others who paused advertising on X: ‘Go fu*k yourself’
Earlier this month, Apple and a number of other companies made the decision to pause advertising on X (formerly known as Twitter). Elon Musk has now directly responded to those companies with a vulgar message: “Go fu*k yourself.” more…

Read more »

3 Reasons to Watch: Slow Horses, the acerbic Apple TV+ spy thriller
Gary Oldman's brilliant portrayal of greasy-haired, insult-slinging, fart-prone spy Jackson Lamb is just the start for "Slow Horses." (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Manage your whole family’s passwords with Enpass
Who hasn’t forgotten or misplaced a password and been stuck wasting time looking for it, only to ultimately have to choose a new one? It may not be the end of the world, but it’s definitely a major frustration that could put a dent in your packed day. You can save time and boost your […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Okta: Breach Affected All Customer Support Users
When KrebsOnSecurity broke the news on Oct. 20, 2023 that identity and authentication giant Okta had suffered a breach in its customer support department, Okta said the intrusion allowed hackers to steal sensitive data from fewer than one percent of its 18,000+ customers. But today, Okta revised that impact statement, saying the attackers also stole the name and email address for nearly all of its customer support users.

Read more »

ID Theft Service Resold Access to USInfoSearch Data
One of the cybercrime underground's more active sellers of Social Security numbers, background and credit reports has been pulling data from hacked accounts at the U.S. consumer data broker USinfoSearch, KrebsOnSecurity has learned.

Read more »

Vulnerability Summary for the Week of November 20, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47066 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47067 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47068 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47069 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47070 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47073 code-projects -- simple_crud_functionality SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter. 2023-11-17 9.8 CVE-2023-48078 concrete_cms -- concrete_cms Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows unauthorized access because directories can be created with insecure permissions. File creation functions (such as the Mkdir() function) gives universal access (0777) to created folders by default. Excessive permissions can be granted when creating a directory with permissions greater than 0755 or when the permissions argument is not specified. 2023-11-17 9.8 CVE-2023-48648   corebos -- corebos Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator's computer. 2023-11-17 8 CVE-2023-48029   cubecart -- cubecart Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system. 2023-11-17 8.1 CVE-2023-38130   cubecart -- cubecart CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command. 2023-11-17 7.2 CVE-2023-47675   dreamer_cms -- dreamer_cms Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management. 2023-11-18 8.8 CVE-2023-48017 getsimplecms -- getsimplecms A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-245735. 2023-11-17 9.8 CVE-2023-6188   git-urls -- git-urls git-urls version 1.0.1 is vulnerable to ReDOS (Regular Expression Denial of Service) in Go package. 2023-11-18 7.5 CVE-2023-46402 honeywell -- prowatch Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) attacker could potentially exploit this vulnerability, leading to a standard user to have arbitrary system code execution. Honeywell recommends updating to the most recent version of this product, service or offering (Pro-watch 6.0.2, 6.0, 5.5.2,5.0.5). 2023-11-17 7.8 CVE-2023-6179   kodcloud -- kodbox kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack. 2023-11-18 9.8 CVE-2023-48028   liblisp -- liblisp Liblisp through commit 4c65969 was discovered to contain a out-of-bounds-read vulnerability in unsigned get_length(lisp_cell_t * x) at eval.c 2023-11-17 8.1 CVE-2023-48025 librenms -- librenms LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions the login method has no rate limit. An attacker may be able to leverage this vulnerability to gain access to user accounts. This issue has been addressed in version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-11-17 7.5 CVE-2023-46745 luxsoft -- luxcal_web_calendar SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary SQL command by sending a crafted request and obtain or alter information stored in the database. 2023-11-20 9.8 CVE-2023-46700   medart_health_services -- medart_notification_panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Medart Health Services Medart Notification Panel allows SQL Injection. This issue affects Medart Notification Panel: through 20231123.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-11-23 9.8 CVE-2023-3631 misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters. 2023-11-17 9.8 CVE-2023-48655   misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses. 2023-11-17 9.8 CVE-2023-48656   misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters. 2023-11-17 9.8 CVE-2023-48657   misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space. 2023-11-17 9.8 CVE-2023-48658   misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing. 2023-11-17 9.8 CVE-2023-48659   nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39544 nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39545 nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39546 nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39547 nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39548 neutron -- ip_camera Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1. 2023-11-23 7.5 CVE-2023-6118 openharmony -- openharmony in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions. 2023-11-20 7.8 CVE-2023-43612 openharmony -- openharmony in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion. 2023-11-20 7.8 CVE-2023-6045 openharmony -- openharmony in OpenHarmony v3.2.2 and prior versions allow a local attacker to get confidential information or rewrite sensitive file through incorrect default permissions. 2023-11-20 7.1 CVE-2023-3116 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. 2023-11-17 9.8 CVE-2023-38316 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before 10.1.2. it has a do_binauth NULL pointer dereference that can be triggered with a crafted GET HTTP request with a missing client redirect query string parameter. Triggering this issue results in crashing openNDS (a Denial-of-Service condition). The issue occurs when the client is about to be authenticated and can be triggered only when the BinAuth option is set. 2023-11-17 7.5 CVE-2023-38313 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a try_to_authenticate NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing client token query string parameter. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). 2023-11-17 7.5 CVE-2023-38315 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing User-Agent header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). 2023-11-17 7.5 CVE-2023-38320 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference that be triggered with a crafted GET HTTP request with a missing User-Agent HTTP header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). The issue occurs when the client is about to be authenticated and can be triggered only when the BinAuth option is set. 2023-11-17 7.5 CVE-2023-38322 opennds -- opennds An issue was discovered in the captive portal in OpenNDS before version 10.1.3. get_query in http_microhttpd.c does not validate the length of the query string of GET requests. This leads to a stack-based buffer overflow in versions 9.x and earlier, and to a heap-based buffer overflow in versions 10.x and later. Attackers may exploit the issue to crash OpenNDS (Denial-of-Service condition) or to inject and execute arbitrary bytecode (Remote Code Execution). 2023-11-17 9.8 CVE-2023-41101   opennds -- opennds An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Service condition due to the consumption of all available memory. 2023-11-17 7.5 CVE-2023-41102   opensupports -- opensupports OpenSupports v4.11.0 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the comment function, an attacker can bypass security restrictions and upload a .bat file by manipulating the file's magic bytes to masquerade as an allowed type. This can enable the attacker to execute arbitrary code or establish a reverse shell, leading to unauthorized file writes or control over the victim's station via a crafted file upload operation. 2023-11-17 9.8 CVE-2023-48031   prestashop -- prestashop In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via `exportProduct::_addDataToDb().` 2023-11-17 9.8 CVE-2023-45387   prestashop -- prestashop In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a guest can perform a path traversal to view all files on the information system. 2023-11-17 7.5 CVE-2023-45382   tenda -- ax1803_firmware Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) attack 2023-11-20 7.5 CVE-2023-48109 tenda -- ax1803_firmware Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) attack 2023-11-20 7.5 CVE-2023-48110 tenda -- ax1803_firmware Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) attack 2023-11-20 7.5 CVE-2023-48111 veribilim_software_computer -- veribase Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veribilim Software Computer Veribase allows SQL Injection. This issue affects Veribase: through 20231123.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-11-23 9.8 CVE-2023-3377 wordpress -- wordpress The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. 2023-11-18 9.8 CVE-2023-4214   wordpress -- wordpress Cross-Site Request Forgery (CSRF) vulnerability in WPPOOL Sheets To WP Table Live Sync plugin

Read more »

Vulnerability Summary for the Week of November 13, 2023
 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info checkpoint -- endpoint_security Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. 2023-11-12 7.8 CVE-2023-28134 discourse -- discourse Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, the embedding feature is susceptible to server-side request forgery. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. As a workaround, disable the Embedding feature. 2023-11-10 9.8 CVE-2023-47121   discourse -- discourse Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,beta6 through 3.2.0.beta2 of the `beta` and `tests-passed` branches, Redis memory can be depleted by crafting a site with an abnormally long favicon URL and drafting multiple posts which Onebox it. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds. 2023-11-10 7.5 CVE-2023-47120   dreamer_cms -- dreamer_cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus. 2023-11-14 8.8 CVE-2023-48020 dreamer_cms -- dreamer_cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update. 2023-11-14 8.8 CVE-2023-48021 dreamer_cms -- dreamer_cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run 2023-11-13 8.8 CVE-2023-48058 dreamer_cms -- dreamer_cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add 2023-11-13 8.8 CVE-2023-48060 emsigner -- emsigner Incorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token. 2023-11-14 9.8 CVE-2023-43902 fortinet -- fortimail An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 through 7.2.4, 7.0.0 through 7.0.6 and before 6.4.8 may allow an unauthenticated attacker to perform a brute force attack on the affected endpoints via repeated login attempts. 2023-11-14 7.3 CVE-2023-45582 fortinet -- fortiwlm A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests. 2023-11-14 7.5 CVE-2023-42783 froxlor -- froxlor Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0. 2023-11-10 8.8 CVE-2023-6069   gibbonedu -- gibbon GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set, the defined path is used as the destination folder, concatenated with the absolute path of the installation directory. The content of the img parameter is base64 decoded and written to the defined file path. This allows creation of PHP files that permit Remote Code Execution (unauthenticated). 2023-11-14 9.8 CVE-2023-45878 gibbonedu -- gibbon GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension). This allows creation of PHP files outside of the uploads directory, directly in the webroot. 2023-11-14 7.2 CVE-2023-45880 golden -- golden An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. 2023-11-14 7.5 CVE-2023-45558 hanwhavision -- wave_server_software Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has released patched firmware for the highlighted flaw. Please refer to the hanwhavision security report for more information and solution." 2023-11-13 8.8 CVE-2023-5747 headscale -- headscale Headscale through 0.22.3 writes bearer tokens to info-level logs. 2023-11-11 7.5 CVE-2023-47390 icssolution -- ics_business_manager A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remote user to send a specially crafted SQL query and retrieve all the information stored in the database. The data could also be modified or deleted, causing the application to malfunction. 2023-11-13 8.8 CVE-2023-6097 intel(r) -- unison_software Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. 2023-11-14 8.8 CVE-2023-22663 intel(r) -- unison_software Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. 2023-11-14 8.8 CVE-2023-36860 intel(r) -- unison_software Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. 2023-11-14 8.8 CVE-2023-39221 intel(r) -- unison_software Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. 2023-11-14 8.8 CVE-2023-39412 intel(r) -- unison_software Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-11-14 7.8 CVE-2022-45469 intel(r) -- unison_software Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-11-14 7.8 CVE-2023-22292 intel(r) -- unison_software Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-11-14 7.8 CVE-2023-38570 intel(r) -- unison_software Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. 2023-11-14 7.5 CVE-2023-22285 intel(r) -- unison_software Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. 2023-11-14 7.5 CVE-2023-22337 intel(r) -- unison_software Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. 2023-11-14 7.5 CVE-2023-39228 intel(r) -- unison_software Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via network access. 2023-11-14 7.2 CVE-2023-22448 johnson_controls -- quantum_hd_unity_compressor_firmware An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed. 2023-11-10 9.8 CVE-2023-4804   linux -- kernel A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_trans_gc_catchall did not remove the catchall set element from the catchall_list when the argument sync is true, making it possible to free a catchall set element many times. We recommend upgrading past commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630. 2023-11-14 7.8 CVE-2023-6111   memberscard -- memberscard An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. 2023-11-14 7.5 CVE-2023-45560 microsoft -- edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 2023-11-10 7.3 CVE-2023-36014 microsoft -- edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-11-10 7.1 CVE-2023-36024 netgate -- pfsense An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components. 2023-11-14 8.8 CVE-2023-42326 phonepe -- phonepe Server-Side Request Forgery (SSRF) vulnerability in PhonePe PhonePe Payment Solutions. This issue affects PhonePe Payment Solutions: from n/a through 1.0.15. 2023-11-13 7.5 CVE-2022-45835 phpgurukul -- restaurant_table_booking_system A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file check-status.php of the component Booking Reservation Handler. The manipulation leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-244943. 2023-11-10 9.8 CVE-2023-6074   phpgurukul -- restaurant_table_booking_system A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information disclosure. The attack can be launched remotely. The identifier VDB-244945 was assigned to this vulnerability. 2023-11-10 7.5 CVE-2023-6076   phpgurukul -- teacher_subject_allocation_management_system SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter. 2023-11-14 7.5 CVE-2023-46024 qnap -- qumagie An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later 2023-11-10 8.8 CVE-2023-39295 qnap -- qumagie A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later 2023-11-10 8.8 CVE-2023-41284 qnap -- qumagie A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later 2023-11-10 8.8 CVE-2023-41285 remarshal -- remarshal Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition. 2023-11-13 7.5 CVE-2023-47163   salesagility -- suitecrm Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. 2023-11-14 9.8 CVE-2023-6126   salesagility -- suitecrm Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. 2023-11-14 8.8 CVE-2023-6125   salesagility -- suitecrm Path Traversal: '..filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. 2023-11-14 8.8 CVE-2023-6130   salesagility -- suitecrm Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. 2023-11-14 8.8 CVE-2023-6131   shenzhen_youkate_industrial -- facial_love_cloud_platform A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-245061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-11-13 9.8 CVE-2023-6099   siemens -- comos A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition. 2023-11-14 9.8 CVE-2023-43504 siemens -- comos A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks sensitive information such as user and project information in cleartext via UDP. 2023-11-14 7.5 CVE-2023-43503 statamic_cms -- statamic_cms Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded. This only affects forms using the "Forms" feature and not just _any_ arbitrary form. This does not affect the control panel. This issue has been patched in 3.4.13 and 4.33.0. 2023-11-10 9.8 CVE-2023-47129   sysaid -- sysaid_on-premises In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023. 2023-11-10 9.8 CVE-2023-47246   telit -- bgs5_firmware A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system. 2023-11-10 7.8 CVE-2023-47611 thinkingreed_inc. -- oss_calendar SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request. 2023-11-14 8.8 CVE-2023-47609   tongda -- tongda_oa A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VU_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. VDB-244994 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-11-12 9.8 CVE-2023-6084   wbce -- wbce_cms SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter. 2023-11-10 9.8 CVE-2023-39796   weston-embedded -- cesium_net An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-24585 weston-embedded -- cesium_net A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-25181 weston-embedded -- cesium_net A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-27882 weston-embedded -- cesium_net A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-28379 weston-embedded -- cesium_net A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-28391 weston-embedded -- cesium_net A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-31247 wordpress -- wordpress Server-Side Request Forgery (SSRF) vulnerability in StylemixThemes Motors - Car Dealer, Classifieds & Listing. This issue affects Motors - Car Dealer, Classifieds & Listing: from n/a through 1.4.6. 2023-11-13 7.5 CVE-2023-46207 wordpress -- wordpress Cross-Site Request Forgery (CSRF) vulnerability leading to Local File Inclusion (LF) in Webpushr Web Push Notifications Web Push Notifications - Webpushr plugin

Read more »

Alleged Extortioner of Psychotherapy Patients Faces Trial
Prosecutors in Finland this week commenced their criminal trial against Julius Kivimäki, a 26-year-old Finnish man charged with extorting a once popular and now-bankrupt online psychotherapy practice and thousands of its patients. In a 2,200-page report, Finnish authorities laid out how they connected the extortion spree to Kivimäki, a notorious hacker who was convicted in 2015 of perpetrating tens of thousands of cybercrimes, including data breaches, payment fraud, operating a botnet and calling in bomb threats.

Read more »

Vulnerability Summary for the Week of November 6, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 1e -- platform The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. To remediate this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-URLResponseTime instruction to v20.1 by uploading it through the 1E Platform instruction upload UI 2023-11-06 7.2 CVE-2023-45161MISCMISC 1e -- platform The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. To remediate this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-CommandLinePing instruction to v18.1 by uploading it through the 1E Platform instruction upload UI 2023-11-06 7.2 CVE-2023-45163MISCMISC 1e -- platform The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. To remediate this issue DELETE the instruction "Show dialogue with caption %Caption% and message %Message%" from the list of instructions in the Settings UI, and replace it with the new instruction 1E-Exchange-ShowNotification instruction available in the updated End-User Interaction product pack. The new instruction should show as "Show %Type% type notification with header %Header% and message %Message%" with a version of 7.1 or above. 2023-11-06 7.2 CVE-2023-5964MISCMISC 7-zip -- 7-zip 7-Zip through 22.01 on Linux allows an integer underflow and code execution via a crafted 7Z archive. 2023-11-03 7.8 CVE-2023-31102MISCMISCMISC advanced_export_products_orders_cron_csv_excel_project -- advanced_export_products_orders_cron_csv_excel Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the ps_customer table. 2023-11-07 7.5 CVE-2023-43984 arm -- valhall_gpu_kernel_driver A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory. 2023-11-07 7.8 CVE-2023-3889 arm -- valhall_gpu_kernel_driver A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. 2023-11-07 7.8 CVE-2023-4295 asus -- rt-ax55_firmware ASUS RT-AX55's authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services. 2023-11-03 8.8 CVE-2023-41345MISC asus -- rt-ax55_firmware ASUS RT-AX55's authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. 2023-11-03 8.8 CVE-2023-41346MISC asus -- rt-ax55_firmware ASUS RT-AX55's authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. 2023-11-03 8.8 CVE-2023-41347MISC asus -- rt-ax55_firmware ASUS RT-AX55's authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. 2023-11-03 8.8 CVE-2023-41348MISC asus -- rt-ax57_firmware An issue in ASUS RT-AX57 v.3.0.0.4_386_52041 allows a remote attacker to execute arbitrary code via a crafted request to the lan_ifname field in the sub_ln 2C318 function. 2023-11-09 9.8 CVE-2023-47005 asus -- rt-ax57_firmware An issue in ASUS RT-AX57 v.3.0.0.4_386_52041 allows a remote attacker to execute arbitrary code via a crafted request to the lan_ipaddr field in the sub_6FC74 function. 2023-11-09 9.8 CVE-2023-47006 asus -- rt-ax57_firmware An issue in ASUS RT-AX57 v.3.0.0.4_386_52041 allows a remote attacker to execute arbitrary code via a crafted request to the lan_ifname field in the sub_391B8 function. 2023-11-09 9.8 CVE-2023-47007 asus -- rt-ax57_firmware An issue in ASUS RT-AX57 v.3.0.0.4_386_52041 allows a remote attacker to execute arbitrary code via a crafted request to the ifname field in the sub_4CCE4 function. 2023-11-09 9.8 CVE-2023-47008 best_courier_management_system -- best_courier_management_system An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter. 2023-11-03 9.8 CVE-2023-46980MISCMISC bestpractical -- request_tracker Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call. 2023-11-03 7.5 CVE-2023-41259MISCCONFIRMCONFIRM bestpractical -- request_tracker Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls. 2023-11-03 7.5 CVE-2023-41260MISCCONFIRMCONFIRM bestpractical -- request_tracker Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder. 2023-11-03 7.5 CVE-2023-45024MISCCONFIRM bleachbit -- bleachbit BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been patched in version 4.5.0. 2023-11-08 7.3 CVE-2023-47113 boltwire -- boltwire An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function. 2023-11-07 9.1 CVE-2023-46501   botan_project -- botan bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password. 2023-11-03 7.5 CVE-2017-7252CONFIRMMISC clickbar -- dot-diver Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the `setByPath` function which can leads to remote code execution (RCE). This issue has been addressed in commit `98daf567` which has been included in release 1.0.2. Users are advised to upgrade. There are no known workarounds to this vulnerability. 2023-11-06 9.8 CVE-2023-45827MISCMISC couchbase -- couchbase_server Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal. 2023-11-08 7.5 CVE-2023-36667   djangoproject -- django In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters. 2023-11-03 7.5 CVE-2023-41164CONFIRMMISC   djangoproject -- django In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232. 2023-11-03 7.5 CVE-2023-43665CONFIRMMISC   ec-cube -- ec-cube EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vulnerability due to improper settings of the template engine Twig included in the product. As a result, arbitrary code may be executed on the server where the product is running by a user with an administrative privilege. 2023-11-07 7.2 CVE-2023-46845   eclipse -- glassfish In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners. 2023-11-03 9.8 CVE-2023-5763MISCMISC eclipse -- parsson In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of edge cases where the input text of a number can lead to much larger processing time than one would expect. To mitigate the risk, parsson put in place a size limit for the numbers as well as their scale. 2023-11-03 7.5 CVE-2023-4043MISCMISC espressif -- esptool An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm. 2023-11-09 7.5 CVE-2023-46894 wordpress -- wordpress Cross-Site Request Forgery (CSRF) vulnerability in Alex Raven WP Report Post plugin

Read more »

Microsoft Patch Tuesday, November 2023 Edition
Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three "zero day" vulnerabilities that Microsoft warns are already being exploited in active attacks.

Read more »

It’s Still Easy for Anyone to Become You at Experian
In the summer of 2022, KrebsOnSecurity documented the plight of several readers who had their accounts at big-three consumer credit reporting bureau Experian hijacked after identity thieves simply re-registered the accounts using a different email address. Sixteen months later, Experian clearly has not addressed this gaping lack of security. I know that because my account at Experian was recently hijacked, and the only way I could recover access was by recreating the account.

Read more »

Who’s Behind the SWAT USA Reshipping Service?
Last week, KrebsOnSecurity broke the news that one of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. In today's Part II, we'll examine clues about the real-life identity left behind by "Fearless," the nickname chosen by the proprietor of the SWAT USA Drops service.

Read more »

Vulnerability Summary for the Week of October 30, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info contec -- solarview_compact_firmware An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component. 2023-10-27 9.8 CVE-2023-46509MISC dreamsecurity -- magicline_4.0 A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code. 2023-10-30 9.8 CVE-2023-45797MISC google -- android In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 8.8 CVE-2023-21356MISC google -- android In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalation of privilege in the privileged Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 8.8 CVE-2023-21361MISC google -- android In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 8.8 CVE-2023-40129MISCMISC google -- android In NFC, there is a possible way to setup a default contactless payment app without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2021-39810MISC google -- android In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21351MISC google -- android In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21355MISC google -- android In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21358MISC google -- android In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21372MISC google -- android In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21373MISC google -- android In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21374MISC google -- android In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21375MISC google -- android In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21378MISC google -- android In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21381MISC google -- android In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40116MISCMISC google -- android In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40117MISCMISCMISC google -- android In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40120MISCMISC google -- android In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40125MISCMISC google -- android In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40128MISCMISC google -- android In onBindingDied of CallRedirectionProcessor.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40130MISCMISC google -- android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.5 CVE-2023-21347MISC google -- android In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.5 CVE-2023-21353MISC google -- android In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7 CVE-2023-40131MISCMISC juzaweb -- cms An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function. 2023-10-28 7.8 CVE-2023-46468MISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-43738MISCMISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'contact' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44162MISCMISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add1' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44375MISCMISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add2' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44376MISCMISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add3' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44377MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45012MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_query' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45013MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bus_id' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45014MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45015MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'source' parameter of the search.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45016MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'destination' parameter of the search.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45017MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45018MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45019MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45111MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'feedback' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45112MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45113MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'subject' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45114MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45323MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45324MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45325MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45326MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45327MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45328MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'role' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45329MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45330MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'contact' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45331MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45332MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'verified' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45333MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45334MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45335MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45336MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45337MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45338MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'type' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45339MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/details-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45340MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45341MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45342MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticket_id' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45343MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45344MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45345MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45346MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45347MISCMISC radare -- radare2 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. 2023-10-28 9.8 CVE-2023-46569MISCMISC radare -- radare2 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. 2023-10-28 9.8 CVE-2023-46570MISCMISC solarwinds -- network_configuration_manager   The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. 2023-11-01 8 CVE-2023-33226MISCMISC solarwinds -- network_configuration_manager   The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges. 2023-11-01 8 CVE-2023-33227MISCMISC solarwinds -- solarwinds_platform   SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges. 2023-11-01 8 CVE-2023-40062MISCMISC solarwinds -- solarwinds_platform    Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result. 2023-11-01 7.1 CVE-2023-40061MISC trteksolutions -- education_portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Education Portal allows SQL Injection.This issue affects Education Portal: before 3.2023.29. 2023-10-27 9.8 CVE-2023-5807MISC zentao -- biz ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF). 2023-10-27 8.8 CVE-2023-46375MISC zentao -- biz Zentao Biz version 8.7 and before is vulnerable to Information Disclosure. 2023-10-27 7.5 CVE-2023-46376MISC zpesystems -- nodegrid_os ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/. 2023-10-28 8.8 CVE-2023-43322CONFIRM Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adobe -- acrobat_for_edge   Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-10-30 5.5 CVE-2023-44323MISC color -- demoiccmax In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access array elements at out-of-bounds indexes. 2023-10-30 6.5 CVE-2023-46866MISCMISC color -- demoiccmax In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer dereference. 2023-10-30 6.5 CVE-2023-46867MISCMISC flusity -- flusity A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument edit_post_id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The identifier of the patch is 6943991c62ed87c7a57989a0cb7077316127def8. It is recommended to apply a patch to fix this issue. The identifier VDB-243641 was assigned to this vulnerability. 2023-10-27 4.8 CVE-2023-5810MISCMISCMISCMISC google -- android In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.7 CVE-2023-21360MISC google -- android In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.7 CVE-2023-21370MISC google -- android In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.7 CVE-2023-21371MISC google -- android In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.7 CVE-2023-21380MISC google -- android In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.5 CVE-2023-21395MISC google -- android In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21294MISC google -- android In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21350MISC google -- android In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21352MISC google -- android In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21354MISC google -- android In Usage, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21362MISC google -- android In ContactsProvider, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21364MISC google -- android In Contacts, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21365MISC google -- android In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/design. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21366MISC google -- android In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21367MISC google -- android In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21368MISC google -- android In Usage Access, there is a possible way to display a Settings usage access restriction toggle screen due to a permissions bypass. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. 2023-10-30 5.5 CVE-2023-21369MISC google -- android In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21376MISC google -- android In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21377MISC google -- android In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21382MISC google -- android In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. 2023-10-30 5.5 CVE-2023-21383MISC google -- android In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21384MISC google -- android In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21385MISC google -- android In Telecomm, there is a possible bypass of a multiuser security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21394MISC google -- android In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 5.5 CVE-2023-40121MISCMISC google -- android In updateActionViews of PipMenuView.java, there is a possible bypass of a multiuser security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 5.5 CVE-2023-40123MISCMISC google -- android In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 5.5 CVE-2023-40133MISCMISC google -- android In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 4.4 CVE-2023-21357MISC google -- android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 4.4 CVE-2023-21359MISC google -- android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 4.4 CVE-2023-21379MISC gougucms -- gougucms A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter. 2023-10-27 5.4 CVE-2023-46394MISC lenovo -- thinkpad_e14_firmware An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code. 2023-10-30 6.7 CVE-2022-48189MISC lenovo -- thinkpad_x1_fold_gen_1_firmware An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code. 2023-10-30 6.7 CVE-2022-4573MISC macwk -- icecms IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF). 2023-10-27 6.5 CVE-2023-42188MISCMISC projectworlds -- online_blood_donation_management_system   Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'firstName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. 2023-10-31 6.1 CVE-2023-44484MISCMISC projectworlds -- online_blood_donation_management_system   Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'lastName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. 2023-10-31 6.1 CVE-2023-44485MISCMISC projectworlds -- online_blood_donation_management_system   Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'address' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. 2023-10-31 6.1 CVE-2023-44486MISCMISC projectworlds -- online_blood_donation_management_system   Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'city' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. 2023-10-31 6.1 CVE-2023-5306MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. 2023-11-01 6.1 CVE-2023-45201MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. 2023-11-01 6.1 CVE-2023-45202MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. 2023-11-01 6.1 CVE-2023-45203MISCMISC pwncyn -- fancms Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file. 2023-10-27 6.1 CVE-2023-46505MISC pwncyn -- yxbookcms Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules. 2023-10-27 6.1 CVE-2023-46503MISC pwncyn -- yxbookcms Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component. 2023-10-27 5.4 CVE-2023-46504MISC solarwinds -- network_configuration_manager   The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information. 2023-11-01 4.5 CVE-2023-33228MISCMISC wordpress -- wordpress The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete sliders in bulk via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-10-27 6.5 CVE-2023-5821MISCMISCMISC wordpress -- wordpress Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin

Read more »

Russian Reshipping Service ‘SWAT USA Drop’ Exposed
One of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. Here’s a closer look at the Russia-based SWAT USA Drop Service, which currently employs more than 1,200 people across the United States who are knowingly or unwittingly involved in reshipping expensive consumer goods purchased with stolen credit cards.

Read more »

27-inch Apple Studio Displays on Cyber Week sale for $100-$150 off MSRP with free 1-2 day shipping
B&H Photo has 27" Apple Studio Displays on sale for $100-$150 off MSRP as part of their Cyber Week sale. Free 1-2 day shipping is available to most US addresses: - Studio Display (Standard glass, Tilt stand): $1449 $150 off MSRP - Studio Display (Nano glass, Tilt stand): $1799 $100 off MSRP Their prices are among the lowest available for Studio Displays. For the latest prices and sales, see our Studio Display Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

27-inch Apple Studio Displays on Cyber Week sale for $100-$150 off MSRP with free 1-2 day shipping
B&H Photo has 27" Apple Studio Displays on sale for $100-$150 off MSRP as part of their Cyber Week sale. Free 1-2 day shipping is available to most US addresses: - Studio Display (Standard glass, Tilt stand): $1449 $150 off MSRP - Studio Display (Nano glass, Tilt stand): $1799 $100 off MSRP Their prices are among the lowest available for Studio Displays. For the latest prices and sales, see our Studio Display Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

27-inch Apple Studio Displays on Cyber Week sale for $100-$150 off MSRP with free 1-2 day shipping
B&H Photo has 27" Apple Studio Displays on sale for $100-$150 off MSRP as part of their Cyber Week sale. Free 1-2 day shipping is available to most US addresses: - Studio Display (Standard glass, Tilt stand): $1449 $150 off MSRP - Studio Display (Nano glass, Tilt stand): $1799 $100 off MSRP Their prices are among the lowest available for Studio Displays. For the latest prices and sales, see our Studio Display Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

27-inch Apple Studio Displays on Cyber Week sale for $100-$150 off MSRP with free 1-2 day shipping
B&H Photo has 27" Apple Studio Displays on sale for $100-$150 off MSRP as part of their Cyber Week sale. Free 1-2 day shipping is available to most US addresses: - Studio Display (Standard glass, Tilt stand): $1449 $150 off MSRP - Studio Display (Nano glass, Tilt stand): $1799 $100 off MSRP Their prices are among the lowest available for Studio Displays. For the latest prices and sales, see our Studio Display Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Cyber Week deals continue on Walmart’s online store, Apple Watch SE for $179, iPads for $249
Walmart has Apple's 9th generation 10.2" iPads on sale for $80 off MSRP on their online store as part of their Cyber Week sale. Their prices are the lowest new prices available for iPads anywhere: - 9th-gen 10.2" 64GB WiFi iPad (Space Gray or Silver): $249 save $80 Walmart has Apple Watch SE GPS-only models on sale for $70 off MSRP this week, each including free shipping. Their prices are the lowest currently available for SE Watches: - 40mm Apple Watch SE GPS: $179 save $70 - 44mm Apple Watch SE GPS: $209 save $70 Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). For the latest prices & sales, keep an eye on our iPad Price Tracker and Apple Watch Price Tracker, both updated daily. The post first appeared on MacPrices.net.

Read more »

Cyber Week Sale: Take $210-$240 off 16-inch M3 Max MacBook Pros
Apple retailer Expercom has 16-inch M3 Max MacBook Pros on Cyber Week sale for up to $240 off MSRP. Shipping is free. These are currently the best prices available anywhere for these M3 Max beasts: - 16" M3 Max MacBook Pro (36GB/1TB): $3289.06, $210 off MSRP - 16" M3 Max MacBook Pro (48GB/1TB): $3759.06, $240 off MSRP Discounts are also available on various custom options such as extra RAM and storage space. For the latest prices and sales, see our 16" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

14-inch M3 MacBook Pro on Cyber Week sale for $1499, $100 off Apple’s MSRP
Amazon has the Silver 14" M3 MacBook Pro on sale for $100 off MSRP today, only $1499. Shipping is free. Their price is currently the lowest available for a new M3-powered 14" MacBook Pro among Apple's retailers: - 14" M3 MacBook Pro (8GB/512GB/Silver): $1499, $100 off MSRP For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

13-inch M2 MacBook Airs are on Cyber Week Sale for under $1000 at these Apple retailers
Apple retailers have the 13-inch M2 MacBook Air on Cyber Week sale for $150 off MSRP. Prices start at $949. These are the lowest 13-inch M2 MacBook Air prices available this week anywhere: (1): B&H Photo has 13" MacBook Airs with M2 CPUs in stock today and on sale for $150 off Apple's MSRP. Free 1-2 day delivery is available to most US addresses: - 13" MacBook Air 8-core M2/8-core GPU (8GB RAM/256GB SSD): $949 $150 off MSRP - 13" MacBook Air 8-core M2/10-core GPU (8GB RAM/512GB SSD): $1249 $150 off MSRP (2): Apple 13-inch MacBook Airs with M2 CPUs are in stock and on '20 Days of Great Sales' on Best Buy's online store for $150 MSRP in Space Gray, Silver, Starlight, and Midnight colors: - 13" M2 MacBook Air 8-core M2/8-core GPU (8GB RAM/256GB SSD): $949 $150 off MSRP - 13" M2 MacBook Air 8-core M2/10-core GPU (8GB RAM/512GB SSD): $1249 $150 off MSRP Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

13-inch M2 MacBook Airs are on Cyber Week Sale for under $1000 at these Apple retailers
Apple retailers have the 13-inch M2 MacBook Air on Cyber Week sale for $150 off MSRP. Prices start at $949. These are the lowest 13-inch M2 MacBook Air prices available this week anywhere: (1): B&H Photo has 13" MacBook Airs with M2 CPUs in stock today and on sale for $150 off Apple's MSRP. Free 1-2 day delivery is available to most US addresses: - 13" MacBook Air 8-core M2/8-core GPU (8GB RAM/256GB SSD): $949 $150 off MSRP - 13" MacBook Air 8-core M2/10-core GPU (8GB RAM/512GB SSD): $1249 $150 off MSRP (2): Apple 13-inch MacBook Airs with M2 CPUs are in stock and on '20 Days of Great Sales' on Best Buy's online store for $150 MSRP in Space Gray, Silver, Starlight, and Midnight colors: - 13" M2 MacBook Air 8-core M2/8-core GPU (8GB RAM/256GB SSD): $949 $150 off MSRP - 13" M2 MacBook Air 8-core M2/10-core GPU (8GB RAM/512GB SSD): $1249 $150 off MSRP Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

13-inch M2 MacBook Airs are on Cyber Week Sale for under $1000 at these Apple retailers
Apple retailers have the 13-inch M2 MacBook Air on Cyber Week sale for $150 off MSRP. Prices start at $949. These are the lowest 13-inch M2 MacBook Air prices available this week anywhere: (1): B&H Photo has 13" MacBook Airs with M2 CPUs in stock today and on sale for $150 off Apple's MSRP. Free 1-2 day delivery is available to most US addresses: - 13" MacBook Air 8-core M2/8-core GPU (8GB RAM/256GB SSD): $949 $150 off MSRP - 13" MacBook Air 8-core M2/10-core GPU (8GB RAM/512GB SSD): $1249 $150 off MSRP (2): Apple 13-inch MacBook Airs with M2 CPUs are in stock and on '20 Days of Great Sales' on Best Buy's online store for $150 MSRP in Space Gray, Silver, Starlight, and Midnight colors: - 13" M2 MacBook Air 8-core M2/8-core GPU (8GB RAM/256GB SSD): $949 $150 off MSRP - 13" M2 MacBook Air 8-core M2/10-core GPU (8GB RAM/512GB SSD): $1249 $150 off MSRP Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Cyber Week Sale: 15-inch M2 MacBook Airs for $100 off MSRP at B&H
B&H Photo has Apple's new 15" MacBook Airs with M2 CPUs (8GB RAM/256GB SSD) in stock today and on sale for $1199 in all four colors. They have 15" MacBook Airs (8GB RAM/512GB SSD) on sale for $1399, in all four colors as well. Free 1-2 delivery is available to most US addresses. Their prices are $100 off Apple's MSRP and are among the lowest price available for 15" Airs in this post-Cyber Monday week. For the latest sales & prices, see our 15" MacBook Air Price Tracker. The post Cyber Week Sale: 15-inch M2 MacBook Airs for $100 off MSRP at B&H first appeared on MacPrices.net.

Read more »

Apple Studio Display with Standard Glass now on sale for $140 off MSRP, only $1459
Amazon has the standard-glass Apple Studio Display on sale for $140 off MSRP for a limited time. Shipping is free: - Studio Display (Standard glass): $1459 $140 off MSRP Their price is the lowest available for a new Studio Display among Apple's retailers. For the latest prices and sales, see our Studio Display Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »