Peruse Apple Books’ top titles of 2023 and learn more about your own favorites
Need a good book? Apple Books unveiled its top titles of 2023, plus a personalized Year in Review feature for readers. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple Vision Pro followup expected to be a more affordable, cut-down model
A rumored cheaper variant of the Apple Vision Pro could be considerably cheaper than the initial release, with Apple aiming to reduce the cost of components by half.Apple Vision Pro at Apple ParkThe Apple Vision Pro is a very specialized piece of hardware, and with an expensive $3,499 price tag to match. While the first release will be a premium product, Apple is allegedly coming up with cheaper versions. Read more...

Read more »

Apple TV+ examines John Lennon's murder in new December series
Three-part Apple TV+ documentary series "John Lennon: Murder without a Trial" will stream from December 6, 2023, and Apple has released a teaser trailer."John Lennon: Murder without a Trial" (Source: Apple)First announced in October 2023, the Apple TV+ series details Lennon's murder, and the fate of his killer, Mark David Chapman. Read more...

Read more »

Pick new podcasts from Apple’s list of most popular ones
One of the best ways to discover new podcasts is by finding out what other people are listening to. Apple made that easy on Tuesday by tabulating the most popular podcasts of 2023. And these are available in localized versions for listeners in nearly 100 countries and regions. Most popular podcasts of 2023 Apple played […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Inexpensive stand makes your Apple Watch into a desk accessory [Review]
Your Apple Watch can still be useful, even when you’re not wearing it. The HEDock holds the Watch up at a convenient angle while it’s charging. This simple, very affordable accessory could be just what your desk or bedside table needs. And it’s on sale until the end of this year in the Cult of Mac […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple TV+ debuts trailer for ‘John Lennon: Murder Without A Trial,’ premiering December 6th
Apple TV+ on Tuesday released the official trailer for the new three-part documentary series, “John Lennon: Murder Without A Trial,” with… The post appeared first on MacDailyNews.

Read more »

Supply-chain reports supports half-price 2nd-gen Vision Pro headset in 2025
Bloomberg last month reported that Apple is working on a 2nd-gen Vision Pro headset which could reduce the price by around half, and that is today backed by a new supply-chain report. The report says that the company is currently working on no fewer than four variants of a future headset, and that Apple is aiming to halve the manufacturing cost with one of these … more…

Read more »

Get 100GB of cloud storage, just $30 for life
Don't miss this Cyber Week deal that can enhance your storage for life with 100GB of Amaryllo Cloud storage, now just $29.99. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Best iPad VPN 2023
Macworld A VPN is an essential tool for iPad users wanting to watch streaming services in other countries, such as Disney+,  Netflix, HBO Max, or BBC iPlayer, with some content not being available at every location. This is handy if you’re traveling abroad and missing out on your favorite shows, as you can connect to a server in your own country and carry on watching as if you were at home. Plus, when you’re browsing the web using your iPad, your online activity is visible to your internet service provider (ISP), your government, and potentially others. But because a VPN changes your real IP address for a different one and encrypts the data going to and from your iPad, it makes it practically impossible to spy on you. The new IP address can make it appear that you’re located somewhere else in the world. That could be in the same country, or it could be halfway across the globe. We’ve tested many VPN services, and these are our recommendations for iPad owners. If you’ve still got some questions and want to find out more, read what is a VPN and are VPNs legal? You can also find some of the best special offers available right now in our round-up of the best VPN deals. You can also learn how to use a VPN on iPad once you’ve chosen a service. Do iPads need a VPN? Before we reveal our recommendations, we’ll examine whether iPad users even need a VPN? Since Apple introduced iOS 15, iPadOS 15 and macOS Monterey in 2021 the company has offered iCloud Private Relay to iCloud subscribers, which is a little like a VPN. iCloud Private Relay encrypts your Safari-based browsing and sends it through a relay to hide your location, IP, and any information about what you were browsing. iCloud Private Relay means that companies cannot build a clear picture of you on the web, thereby protecting your privacy. You do need to be a subscriber to iCloud, and only use Safari, but iCloud Private Relay will provide you with some anonymity when you are surfing the web. However, iCloud Private Relay only works when you are using Safari, requires a subscription to iCloud, and it won’t allow you to surf via a server in another country in order to access content that is locked to a particular region. iCloud Private Relay does not allow you to choose an IP address or a region, and you won’t be able to make it look like you’re coming from another location. So you can’t watch geographically locked Netflix content, for example. Best iPad VPN reviews NordVPN Pros Lots of servers around the world Impressive speeds Independently audited Cons Not the cheapest option Connections aren't unlimited Price When Reviewed: From $4.19 per month Best Prices Today: $3.29 at NordVPN NordVPN is easy to use and one of the fastest VPNs around and shouldn’t slow down your internet connection. It’s an excellent choice for iPad owners. The map view is fun to use on a screen larger than your phone’s, and it connects you swiftly to one of Nord’s thousands of servers (there are 5,300 in total across 60 countries, which means you can always find a server in the location you need that isn’t overloaded). It unblocks many services, including Netflix, HBO Max, Disney+ and BBC iPlayer. It also ticks the privacy box, having carried out three audits, the most recent of which was in December 2022. It features a kill switch, which is important to keep your data and location hidden if the VPN connection stops unexpectedly. Based in Panama, it’s outside of the jurisdiction of the ’14-eyes’ (a group of countries that have agreed to collect, analyze and share information).  You can connect up to six devices to NordVPN at once, and there are also apps for iPhone, Android, Mac, Windows and Amazon Fire TV. You can get great discounts by signing up for a couple of years. See the deals on NordVPN’s webiste. Read our full NordVPN review Surfshark Pros Unlimited devices and connections Multi-Hop servers Security features and audited no-logs policy Cons Kill switch can’t be customised Price doubles on renewal Price When Reviewed: From $2.30 per month (charged at $59.76 upfront for 26 months) Best Prices Today: $2.30 at Surfshark Surfshark is an easy-to-use and intuitive VPN with a slick iPad app that has more features than you might expect given the low price. The service now has more than 3,200 servers across 60+ countries but, importantly, lets you watch Netflix shows, BBC iPlayer and other streaming services that aren’t normally available in your region. You’ll find security features including a kill switch and Multi-Hop, which routes your connection through two countries instead of just one. It’s run from the Netherlands which is privacy-friendly, has a strict no-logs policy, uses two-factor authentication (2FA), and is one of the members of the VPN Trust Initiative. Despite the low monthly cost, just beware that the price increases substantially on renewal–a gotcha with quite a few VPN services and one that’s easily missed when signing up. Our advice is to cancel before it renews and sign up for a new deal. It really is one of the best VPNs around, and also one of the fastest thanks to the use of the WireGuard protocol. See the current deals on Surfshark’s website and read our Surfshark review for more details. Read our full Surfshark review CyberGhost Pros Impressive WireGuard speeds Dedicated downloading and streaming servers Independent audit Cons No split tunneling Price doubles on renewal Price When Reviewed: From $2.25 per month Best Prices Today: $2.25 at CyberGhost CyberGhost is really easy to use and one of the least-expensive services when you sign up for a couple of years.  CyberGhost has more than 7,000 servers across 90 countries, so you’re bound to find a connection that suits your needs. CyberGhost allows seven simultaneous connections. Of potentially more interest to most people is the fact it’s pretty reliable for unblocking streaming services. It unblocks Netflix, Disney+, HBOMax, Amazon Prime and others. CyberGhost even provides a streaming list so you can choose the best server to unblock specific streaming services on specific devices. CyberGhost is based in Romania, which is good for privacy. Deloitte has audited CyberGhost’s privacy claims and found no issues. With support for WireGuard, CyberGhost offers speedy connections and one subscription allows you to use the service on up to seven devices at once. You can sign up for CyberGhost here. Read our full CyberGhost for Mac review ExpressVPN Pros Easy to use Excellent speeds Cons Anonymous team is a concern Limited to five devices Price When Reviewed: From $6.67 per month Best Prices Today: $6.67 at ExpressVPN Also among our favourite VPNs for the iPad is ExpressVPN, which has 105 country options and a network of more than three thousand servers. ExpressVPN unblocks more video services than rivals. It claims to reliably unblock over 200 streaming service and also gives you a backup option – the MediaStreamer proxy service – if you find that the VPN isn’t unblocking at the exact moment you want to watch. It bills itself as the premium option, and justifies this partly with the long list of video services it works with. There is also 24/7 live chat support and Threat Manager blocks traffic from websites known to be malicious. There’s also an ad blocker and an adult site blocker. You can expect fast speeds thanks to its proprietary Lightway protocol and privacy is good thanks to the TrustedServer setup (where the software runs entirely in RAM and doesn’t save any data to the hard drive). The company is registered in the British Virgin Islands, a self-governing territory that isn’t subject to British laws. It operates a no-logs policy. As well as using it on your iPad, there are also apps for iPhone, Android, Mac, Windows, Fire TV and more. There’s a limit of eight devices at once (up from 5 previously). While not the cheapest, ExpressVPN does run discounts, with the best deal being the one-year subscription, which is almost half-price. Read our full ExpressVPN review Private Internet Access Pros Good at unblocking streaming services Split tunneling works well Up to 10 devices Cons Price doubles on renewal Browser extensions are not VPNs Price When Reviewed: From $2.91 per month Best Prices Today: $2.91 at Private Internet Access Private Internet Access (PIA) is a well-established VPN service that now operates a 33,665 servers in 84 counties. It’s one of the big boys of the VPN world. All its servers are set up well for privacy, run in RAM only, are rebooted often–even the error logs are disabled. The company also runs its own DNS servers to ensure there are no DNS leaks that could give away the websites you’re visiting. The company is keen to point out that its software is open source, so anyone can inspect the code and check there are no problems. That’s one reason why it bills itself as the World’s Most Trusted VPN service. PIA, as it’s known to most of its users, used to allow 10 simultaneous connections but it removed this limit early in 2023 so there is no limit to the number oof devices you can connect. PIA is geared towards offering protection while using the internet. It hasn’t always been partially good for unblocking streaming services, but unblocking has improved and the introduction of a Smart DNS service means you can unblock Netflix (and more) on TVs, media streamers and consoles which don’t support VPNs. Speeds are great thanks to the use of WireGuard, and the iPad app is easy to use. See the latest deals for Private Internet Access. Read our full Private Internet Access review PureVPN Pros Lots of servers Impressive security credentials Up to 10 connections Cons Kill switch can’t be customised Price When Reviewed: From $1.99 per month Best Prices Today: $1.99 at PureVPN PureVPN offers more than 6,500 servers in 78 countries across all six main continents, which is pretty impressive. PureVPN used to have a lot of virtual servers, but now it just has 68. If you want to access a specific streaming service, you can click on the Shortcuts tab and search for or browse through the list to find the one you want. The iPad app looks bright and smart and makes it quick and easy to connect to locations outside your country and unblock the stuff you want to watch. And that includes iPlayer, ITV Hub and other UK services that others VPNs struggle with. The WireGuard protocol is available. Dedicated IP and split-tunneling aren’t available when you use WireGuard though. PureVPN is registered in the British Virgin Islands (which is more privacy-friendly than Hong Kong, where it used to operate). The company has allowed its no-logs policy to be snap-audited by KPMG. Install the app on your iPad and get a seven day trial just by entering your email address. Read our full PureVPN review VyprVPN Pros Fast WireGuard speeds Very easy to use Unblocks Netflix and BBC iPlayer Cons Few servers and not clear which are virtual Support is patchy Only 5 connections Price When Reviewed: From $2.50 per month Best Prices Today: $2.50 at VyprVPN Most VPNs rent their servers, but VyprVPN is unusual in that it owns and operates all of its servers and network hardware. This makes VyprVPN a great choice for privacy. Speeds are good thanks to the recent introduction of WireGuard. There are fewer servers than on some solutions, but they’re distributed among a decent number of countries. VyprVPN doesn’t disclose how many of its servers are physical (rather than virtual) though. The iPad version of the app includes an interactive map that makes it easy to browse servers and view ping times. You’ll find discounts on the regular monthly price if you’re willing to subscribe for a couple of years. Read our full VyprVPN review Antivirus, iPad, Personal Software, Security Software and Services, VPN

Read more »

Apple Watch Cyber Week deals: get a Series 8 for $279, Apple Watch Ultra $659, SE 2 for $179
Smartwatches were a hot item this past Black Friday, but the deals are really heating up for Cyber Week. Save up to $140 on current and closeout Apple Watch models.Apple Watch Series 8 for $279First up is the closeout Apple Watch Series 8 for $279. This particular model features a 41mm Silver Aluminum Case with a White Sport Band. It has GPS functionality and originally retailed for $399, making this $120 discount a great deal heading into December. DataVision has units in stock and ready to ship for holiday gift giving at the blowout price. Read more...

Read more »

Apple Music Replay 2023 debuts with top songs, artists, milestones, and more
Alongside end-of-year recaps for Apple Books and Apple Podcasts, the full Apple Music Replay 2023 recap is also now available. This shows Apple Music users a breakdown of their listening data for 2023, including top songs, albums, artists, and more. more…

Read more »

Sign in to your Google accounts before December or they’ll be deleted
Google is purging old accounts. Here’s how you can keep your Google account active and prevent it from being deleted. You have until the first day of December to save your account. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple unveils the top books of 2023 and a new ‘Year in Review’ experience
Apple Books is the single destination for all the books and audiobooks readers love, featuring the ability to set Reading Goals, organize… The post appeared first on MacDailyNews.

Read more »

Apple releases 2023 top charts for Podcasts, Apple Books
Apple has revealed the top books and podcasts users of Apple Books and the Apple Podcasts apps have consumed, as part of its introduction of charts covering all of 2023.Published on Tuesday, Apple has updated listings in the Apple Books and Apple Podcasts apps to display year-end charts for 2023. The charts cover the thousands of books and podcasts read or listened to by users on iPhone, iPad, Mac, and for podcasts, Apple Watch.For Podcasts, the year-end charts include localized results for almost 100 countries and regions. Shown in the Browse tab in the Podcasts app, users can see the top podcasts overall, the top new shows that started during the year, the most-followed shows, most-shared shows and episodes, and the top free and subscriber channels. Read more...

Read more »

How to watch 'A Charlie Brown Christmas' for free
Although the famous Charlie Brown Christmas special will exclusively be on Apple TV+ this year, it will be free for all to watch for a limited period. Here's how to watch it, and when it goes free.Image Credit: Apple"A Charlie Brown Christmas" is no longer airing on ABC and will not be on PBS in 2023. However, Apple TV+ subscribers can watch it anytime and from December 16 to December 17, 2023, Apple will be streaming the movie for free. Read more...

Read more »

iPhone NameDrop feature is not a security risk
Parents are mistakenly being warned that they need to quickly deactivate iOS 17's NameDrop feature on their children's iPhones. (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

De Niro accuses Apple of censoring his speech honoring Martin Scorsese
Robert De Niro says that Apple or the Gotham Awards cut a political segment including criticisms of Donald Trump out of his teleprompter copy of a speech — so he read the rest from his phone.Actor Robert De Niro presented Martin Scorsese with the Gotham Historical Icon and Creator Tribute as the Gotham Awards 2023 honored the director's Apple TV+ film "Killers of the Flower Moon." However, as he concluded his speech, De Niro had much more to say — and so he said it all."I just wanna say one thing," he began. "The beginning of my speech was edited, cut out, I didn't know about it. And I wanna read it." Read more...

Read more »

Three new Ikea sensors for under $10 each; Matter support promised for hub
Three new Ikea sensors are being added to the company’s smart home product line-up, each set to cost less than $10. None of them natively support HomeKit, but the company says that all support the $69 Dirigera hub, and has promised that will be upgraded to Matter at some point … more…

Read more »

Best security cameras 2023-2024: Monitor your home from your iPhone
Macworld Sales of security cameras have continued to rise in recent years, as we all turned our homes into lockdown fortresses, and more and more people continue to work from home. Security cameras are among the most popular smart home devices – alongside smart speakers and lights – but the smart home market is about to go through a big change. In this round-up we are looking at the best security cameras that you can use with your iPhone, iPad and Mac to keep your house secure. HomeKit and Matter The first question you may have is whether you need a camera with HomeKit in order to integrate it into your Apple Home setup. Luckily that isn’t the case – and for a good reason: Apple’s HomeKit technology hasn’t made much of an impact in the smart home market, trailing far behind Google Home and Amazon’s Alexa, and there’s only a handful of security cameras that still support HomeKit. The good news is that security cameras that don’t support HomeKit do provide their own apps for iOS devices, so they can still be used with your iPhone or iPad. Below you will find some of the best non-HomeKit security cameras here as well as our favorite HomeKit equipped options. HomeKit is still around though and there are a number of benefits to HomeKit along with some very useful features specific to Apple devices. For example, security cameras that support HomeKit don’t need a special app, as they can be controlled with Apple’s own Home app alongside all your other HomeKit-compatible smart devices. And, importantly, the Home app runs on most Apple devices, including the iPhone and iPad, but also the Mac and the Apple TV box too, giving you a wide range of options for viewing and controlling all your HomeKit cameras and smart devices. There are other advantages to having a security camera that supports HomeKit, too. As you’d expect, most security cameras will send you a notification when they detect an intruder, and will allow you to stream live video from the camera so that you can see what’s going on at home. However, many security cameras require an additional subscription if you want to store your video recordings online (where criminals can’t get at the video, and it can be used as evidence if necessary). Read: How to export video from a HomeKit Secure Video camera for more advice. Cameras that support HomeKit can also store video recordings online as part of an iCloud+ account. This is a really affordable option for owners of security cameras, as iCloud+ subscription prices start at just $0.99/£0.79 per month with 50GB of online storage for your personal iCloud Drive. That 50GB subscription allows you to store security footage from a single camera – but, crucially, your camera recordings aren’t counted as part of that 50GB of storage, so you still have the full 50GB available for all your files and documents. The next step up is the iCloud+ 200GB plan, which costs $2.99/£2.49 per month and stores footage from up to five cameras, while the iCloud+ 2TB subscription lets you use an unlimited number of cameras for $9.99/£6.99 per month. And, again, the footage from your cameras doesn’t affect your iCloud+ storage. Those prices are cheaper than many of the online storage subscriptions offered by the manufacturers of security cameras, so getting a security camera that supports HomeKit could actually save you money in the long run. Mind you, in the long run, the future of HomeKit is a little uncertain. As we mentioned, HomeKit hasn’t had the success that Apple had hoped for, so in 2019 Apple got together with Amazon, Google, and a number of other tech giants to create a new technology for smart devices called Matter. Matter 1.0 was released in October 2022 and it’s taking some time for Matter to be adopted by the manufacturers of security cameras and other smart home devices. However, a security camera or other smart device that supports Matter should be able to work with Siri and the Home app on Apple devices, but also with Amazon Alexa, Google Home, and Android smartphones and tablets too. That cross-platform compatibility will make it much easier to buy security cameras and other smart home devices in the future. Here’s our roundup of the best security cameras – both with and without HomeKit – for use with your Apple devices. Best HomeKit security cameras 1. Aqara Camera E1 Pros Great price  2K camera with good image quality  Supports HomeKit Cons Only supports 2.4GHz Wi-Fi No power adaptor included Price When Reviewed: $59.99 Best Prices Today: $59.99 at Amazon$59.99 at Home Depot HomeKit: Yes Outdoors: No Storage: microSD, Aqara Cloud, Apple iCloud Aqara has only been around for a few years, but it’s developed an attractive range of smart home devices that provide impressive features at a competitive price. We liked the G3 security camera that it launched a couple of years ago, and it has now followed up with a new model called the Camera E1 that provides similar features – including support for Apple’s HomeKit – for just $59.99/£59.99. Watch out, though, as Aqara also sells a device called the Hub E1, which isn’t a security camera at all, but acts as a control hub for other smart devices in the Aqara range. Despite its low price, the Camera E1 provides 2K resolution (2304×1296), which produces a clear, sharp image, along with an infra-red backlight for low-light conditions. The base of the camera includes a pan-and-tilt motor that allows you to rotate the camera through a full 360-degrees using the touch controls in the Aqara app. The app also allows you to create presets that quickly point the camera in a particular direction – such as a door or window that you want to monitor – and you can also create a ‘privacy’ preset that just points straight at a blank wall. Getting started is very straightforward, as you can just scan a QR code on the camera to connect it to your iPhone or iPad via Bluetooth, and the Aqara Home app then guides you through the set-up process automatically. It even asks if you want to connect the camera to the Apple Home app using HomeKit as well. Aqara provides just 24 hours of online storage for low-res videos for free, or you can sign up for its Aqara Cloud subscription plan, which stores your high-res 2K videos online for 30 days and costs $4.99 per month. However, the camera also has a microSD slot so that you can use a memory card for storing videos, and if you have an iCloud subscription then you can use Apple’s HomeKit Secure Video to store your security videos online at no extra cost. There are a couple of cost-cutting compromises, though. The Camera E1 only supports 2.4GHz wi-fi, which meant that we had to fiddle with the wi-fi settings on our iPhone and iPad during the initial set-up process. There’s no USB power adaptor included either – just a basic USB cable – so you’ll need to provide your own power adaptor. And, of course, using a USB cable for the power supply may limit your freedom to move the camera around. Even so, the Camera E1 is still good value for money, and provides one of the cheapest HomeKit security cameras currently available. 2. Logitech Circle View Pros Wide viewing angle Well suited to outdoors Cons Battery isn't rechargeable, powered via USB to the mains Price When Reviewed: $159.99 Best Prices Today: $149.99 at Amazon$159.95 at Apple$159.99 at Logitech HomeKit: Yes Outdoors: Yes Storage: iCloud Logitech’s Circle View doesn’t just support HomeKit – it’s designed exclusively for use with HomeKit, and can only be controlled via the Home app on Apple devices. And, in fact, it doesn’t even offer an app for Android devices at all. There’s also a Circle View Doorbell available as well, costing $200, although that doesn’t seem to be available outside the U.S. The Circle View is a little pricey for a security camera with 1080p resolution (1,920×1,080), at $159.99/£159.99, but its high-quality glass lens provides a clear, sharp image with close to 180-degree viewing angle. There’s a little fish-eye distortion on the outer edges of the image, but that wide viewing angle will be really useful for many people, especially if you need to monitor an outdoor spot such as a garden or parking space. Getting started is really easy, as you can simply scan the QR code provided with the camera to add it to the Home app on your Apple devices. There’s an On/Off button on the back of the camera, but the adjustable stand allows you to quickly tilt the camera straight down if you want a bit of privacy without turning it off completely. The camera’s sturdy metal stand and casing are well suited to outdoor use as well, with an IP64 rating for water-resistance, and an infra-red night vision mode with a range of up to 15ft. Logitech also includes a wall-mount kit in the box as well. The only possible problem with outdoor use is that the Circle View doesn’t have its own rechargeable battery. It’s powered via a USB cable, and there’s a mains adaptor included in the box, or you can run it off a Mac or other device that can provide power via USB. The USB cable is 10ft long, so you shouldn’t have too much trouble plugging it in, but that could be a potential limitation if you need to place the camera outdoors, so some people might prefer a completely wire-free camera with its own internal battery. Logitech doesn’t provide any subscription plans for online storage for your video recordings but, like any HomeKit-compatible camera, the Circle View can work with a low-cost iCloud+ subscription if you want to store your video online. 3. Arlo Essential XL Pros Night-vision mode Affordable way to own multiple cameras Cons 130-degree viewing angle Price When Reviewed: $149.99 Best Prices Today: $83.28 at Amazon$89.99 at Best Buy$114 at Walmart HomeKit: YesOutdoors: YesStorage: microSD, iCloud or Arlo Secure ($2.99/£2.79 per month, per camera, 30-day trial, soon to be 90-days) Arlo has a really extensive range of cameras, with an almost confusing range of different features and prices, as well as different versions of some cameras that are available in different regions. Arlo’s entry-level Essential camera, for instance, costs $129.99/£129.99 and provides six months of battery life. However, we reviewed the Arlo Essential XL, which uses a much larger battery that can last for a full 12 months, for the only slightly higher price of $149.99/£149.99. That’s the only significant difference, though, and both versions of the Arlo Essential include the same 1080p camera with 1,290×1,080 resolution. This produces good image quality, although its 130-degree viewing angle isn’t as wide as some of its rivals. The camera provides other useful features, though, including a sturdy, weather-resistant casing and a wall-mount kit that will allow you to use it outdoors in areas such as gardens or a parking space. It also has a night-vision mode and even built-in spotlight and siren for extra security. The Arlo Essential XL includes a microSD slot for storing your video recordings directly on the camera. Our review unit included a 30-day free trial for the Arlo Secure subscription service that allows you to store your recordings online – and Arlo has now informed us that this trial has been increased to 90 days. After the trial period the Arlo Secure subscription costs $2.99/£2.79 per month for a single camera or $9.99/£8.99 for multiple cameras. You can use the Arlo Essential and XL cameras on their own, and simply control them with the Arlo app for iOS or Android. However, it’s also possible to use the cameras with one of Arlo’s SmartHubs, which plug into your wi-fi router and provide additional support for HomeKit and Apple’s Home app. This will allow you to use an iCloud+ subscription for online storage instead. The SmartHub can be bought on its own if you don’t already have one, or you can use the Arlo Essential or XL as an affordable way of expanding an existing Arlo security camera system that already has its own SmartHub. 4. Netatmo Smart Indoor Camera Pros Facial-recognition No subscription fees Cons No battery, mains power only Price When Reviewed: $199.99 Best Prices Today: $189.99 at Amazon$199.99 at Netatmo HomeKit: YesOutdoors: NoStorage: SD card, Dropbox, or FTP This is slightly confusing, as Netatmo originally launched this as the ‘Welcome’ security camera a couple of years ago. However, the Netatmo website now refers to it as the Smart Indoor Camera – although the camera they sent us to test did still say Welcome on the box, and online retailers such as Amazon and Apple often refer to it as Welcome too. It’s a little pricey, costing $189.99/£179.99, but Netatmo occasionally runs special offers with twin packs at discounted prices (right now in the U.S. two cameras are $329.98, $50 off, while in the U.K. two cameras are £319.99, £39.99 off) The Smart Indoor Camera is part of a wider range of security products, including a weather-resistant Smart Outdoor Camera for $269.99/£239.99 (which also supports HomeKit). The Outdoor camera is a good option for monitoring locations such as gardens and car-parks, and it has a built-in floodlight that can help to scare away intruders. Netatmo also sells additional accessories that can work in conjunction with the Smart Indoor Camera, such as an alarm siren, and sensors to protect doors and windows, allowing you to build a more wide-ranging security system. The hardware design of the Smart Indoor Camera is fairly straightforward, with 1,920×1,080 resolution and an infra-red night-vision mode. It runs off mains power, or you can use the included USB cable to provide power from a computer, but there’s no internal battery, which slightly limits your freedom when placing the camera around your home. However, there are other features that do add to the camera’s versatility. As you’d expect, the Netatmo Security app provides notifications on your iPhone if it detects movement when you’re away from home, but it can also use facial-recognition technology to recognise friends and family and avoid false alarms if the kids come home early from school. And while the camera is relatively expensive, you don’t have to worry about subscription fees for online storage, as the Smart Indoor Camera includes an 8GB memory card for storing your video recordings on the camera itself. The risk there is that any damage to the camera could also destroy your video recordings, but the Security app also provides an option for uploading video clips to a Dropbox account or an FTP server for online storage. This was one of the first security cameras to support HomeKit. 5. Aqara Doorbell G4 Pros 1080p doorbell camera Competitive price Good HomeKit support IPX3 weather-resistant Cons Installation can be complex Wireless power needs lots of batteries Wired power needs some DIY skills Price When Reviewed: $119.99 Best Prices Today: $119.99 at Aqara$119.99 ($119.99 / Count) at Amazon HomeKit: YesOutdoors: YesStorage: micro-SD, Aqara Cloud, Apple iCloud There aren’t many doorbells that support HomeKit, but Aqara’s Doorbell G4 is an affordable and versatile option that includes HomeKit and other useful features for a very competitive $119.99/£119.99. Just remember that doors, locks and electrical fittings can vary in different countries, so check to make sure that the G4 will be suitable for your own home before buying. There’s a lot packed into the box along with the G4, including both the main doorbell and a separate chime module, which can be moved around indoors so that you can always hear the doorbell when it rings. There’s also a rather intimidating collection of screws and mounting plates, and even a special little screwdriver as well, so you need to be fairly confident about your DIY skills when it comes to the physical installation of the doorbell and attaching it to your outside door frame. The main doorbell section can be powered by six AA batteries (included in the box), which should last for about four months. It’s also possible to use the G4 with a wired power supply – although it’s not a simple matter of just plugging it into a mains socket so, again, you’ll need to be handy with a set of pliers to sort out the wiring side of things. You actually start by setting up the chime module first, as that acts as the main control module that connects the G4 to your home network connection and also provides the ability to work with HomeKit. The chime has a USB-C port for its power supply, but there’s no power adaptor included, so you’ll need to supply that yourself – which is a little irritating, but an acceptable compromise given the G4’s low price. And, thankfully, we had no trouble connecting the G4 to our home network as the Aqara app automatically detected the chime module and connected it to HomeKit with no problems at all. The app also provides some useful additional features, such as a ‘Privacy Zone’ option that prevents the camera from monitoring specific areas – such as a neighbor’s front door, so that you don’t annoy your neighbors too much. Aqara includes seven days of free storage with the Doorbell G4, but also offers a subscription service that provides 30 days of online storage for $4.99/£4.99 per month. There’s also a micro-SD slot on the chime module so that you can store your videos on a memory card, and the HomeKit support means that people who have an iCloud subscription can use Apple’s HomeKit Secure Video feature to store their videos online at no extra cost. Our one minor complaint is that the Doorbell G4 only supports 2.4GHz Wi-Fi, which might not suit everyone. So while the G4 works well and represents good value for money you should make sure that you’re confident rolling up your sleeves and tackling both the physical installation and the network connection as well. 6. Arlo Pro 5S 2K Pros High-quality 2K camera with HDR 8-month battery Night vision and siren IP65 weather-resistance Cons Expensive Needs subscription for cloud storage No support for HomeKit (currently) Price When Reviewed: $249.99 Best Prices Today: $159.99 at Amazon$159.99 at Best Buy$249.99 at Arlo HomeKit: No (currently)Outdoors: YesStorage: Arlo Secure (subscription) There are so many cameras available in the Arlo range that it can get a bit confusing at times – especially as some models support HomeKit when used with one of Arlo’s SmartHubs, while others are simple standalone cameras that just rely on the Arlo Secure app. And, just to confuse things further, this latest version of the Arlo Pro actually has different names in different countries. In the U.S., it’s called the Arlo Pro 5S 2K, and starts at $250 for a single camera, going right up to $1,250 for a kit that contains six cameras for larger homes and businesses. In other regions, including the U.K. and E.U., the camera is just called the Arlo Pro 5, costing £220 for one camera, while the largest bundle that’s available includes four cameras for £700.00. Whatever it’s called, the camera is available in both black and white, and includes 2K resolution (2048×1080), with support for HDR that provides a detailed, colorful image. The camera provides 160-degree viewing angles, and there’s a powerful 12x zoom that provides a close-up view as well. Additional security features include an infra-red sensor for low-light conditions, a spotlight, and a seriously loud built-in siren for scaring intruders away. It’s battery-powered, with the internal battery pack lasting for around eight months on a full charge. There’s a wall-mount kit included in the box, and the camera is also rated IP65 for weather resistance, so it’s sturdy enough to be used outdoors in locations such as a garden or parking space. It’s disappointing, though, that the camera doesn’t have a slot for a memory card for storing videos (although there is an SD card slot on the optional SmartHub). You can stream live video using the Arlo app, but if you want additional online storage for your video recordings then you’ll need to pay for an Arlo Secure subscription, starting at £3.49/$4.99 per month (or £34.90/$50 annually) for a single camera. Previous Arlo Pro models did provide support for HomeKit, which would allow you to use the free storage that’s available with an iCloud subscription. Unfortunately, the Arlo Pro 5 doesn’t currently support HomeKit – although the company did tell us that this is ‘in the pipeline’, so keep an eye out for updates on the Arlo website if you want to use the camera with HomeKit and iCloud. 7. Ezviz E6 Pros 3K resolution 4x zoom Ethernet port Cons Poor documentation Only supports 2.4GHz Wi-Fi Price When Reviewed: $110 Best Prices Today: $110 at Ezviz HomeKit: YesOutdoors: NoStorage: micro-SD, Ezviz CloudPlay, Apple iCloud Ezviz makes a wide range of security cameras, but the new E6 is its first HomeKit-compatible model. It’s something of a mixed bag, though – the camera itself is good value for money, but the confusing information provided by Ezviz may stretch your patience while first setting the camera up. The E6 provides 3K resolution (2880×1820) and produces a clear, sharp image. The base of the camera houses a pan-and-tilt motor that allows you to rotate it through a full 360-degrees so that you can look around and see what’s going on when you’re not at home. There’s a 4x zoom option if you need to take a closer look, and the camera includes two infra-red lights to improve visibility at night-time. But while the E6 itself provides many useful features, the information provided by Ezviz proves unhelpful and contradictory. The Ezviz website and the packaging for the camera both state that the E6 supports dual-band Wi-Fi on the 2.4GHz and 5.0GHz frequency bands. However, we wasted a considerable amount of time failing to connect it to our 5.0GHz office network – only to find a small sticker at the bottom of the box that declared ‘2.4GHz only’. That’s infuriating – not to mention downright misleading – although Ezviz does slightly redeem itself by also giving the E6 an Ethernet port for a wired network connection as well. That may allow you to place the camera in a spot that doesn’t normally get a good wi-fi signal, and Ezviz includes both a wall-mount kit for the camera, and a 10ft long USB power cable (with mains adaptor also included), so you’ve got plenty of options when it comes to finding a suitable spot for the camera. There’s a one-week free trial for the Ezviz Cloudplay online storage service, with the CloudPlay service offering a variety of subscriptions, starting from $3.99 per month (or $39.99 annually). The camera also has a micro-SD slot for storing video on memory card, and the HomeKit support means that iCloud subscribers can use it with Apple’s HomeKit Secure Video at no extra cost. The E6 has only just been released in Europe, but should be available in other regions in the coming weeks. 8. EZVIZ C3W Pro Pros 360-degree swivel Ethernet a well as Wi-Fi Night vision modes Cons Mains power only Very sensitive Price When Reviewed: $89.99 Best Prices Today: $89.99 at EZVIZ HomeKit: NoOutdoors: YesStorage: microSD, EZVIZ’s CloudPlay service (subscriptions start at $5.99/$4.99 per month) It’s not easy to pick your way through EZVIZ’s extensive range of security cameras, which are adorned with obscure model numbers and often hard to tell apart. The C3W Pro is typical, as it’s available in two versions, with the 2 megapixel (2MP) version that we review here providing 1,920×1,080 resolution for $89.99/£69.99. That resolution provides a good, clear image but there’s also a 4MP version available that increases the resolution to 2,650×1,440 for $129.99 – although that model doesn’t seem to be available outside the U.S. at the moment. The C3W Pro is very much designed for outdoor use, with a sturdy casing that is rated IP67 for water resistance, and which can handle temperatures right down to -300C. There’s a wall-mount plate provided with the camera for outdoor use, and the adjustable stand can swivel through 360-degrees so that you can point the camera exactly where you need it. Unlike many security cameras, the C3W Pro includes an Ethernet interface along with its Wi-Fi support, which will allow you to position it in outdoor locations where the Wi-Fi may be a bit weak. It only supports 2.4GHz Wi-Fi, but that has greater range than the 5.0GHz band, so it’s probably the best option for outdoor use, and there are two large antennae on the camera to provide the maximum range and reliability for a Wi-Fi connection. The only limitation here is the need to connect the camera to mains power, which may cause problems for some homes. The C3W Pro has a microSD slot for storing video directly on the camera, but it doesn’t support HomeKit or iCloud+ storage plans, so if you want to pay for additional online storage then you’ll need to sign up for EZVIZ’s CloudPlay service. There’s a 7-day trial for CloudPlay provided with the camera, and subscriptions start at $5.99/$4.99 per month to store video from a single camera online for seven days, or $8.99/£7.49 for up to four cameras. And, if you do sign up for a subscription then that 7-day trial is extended to 30 days, so you get the first month free. 9. Arlo Ultra 2 (two camera kit) Pros Wide viewing angle 12x zoom Night-vision mode Two-way audio Cons Very expensive Price When Reviewed: $599 Best Prices Today: $479.99 at Amazon$599 at Arlo$599.99 at Dell Home HomeKit: Yes Outdoors: Yes Storage: microSD, iCloud or Arlo Secure ($2.99/£2.79 per month, per camera, 30-day trial, soon to be 90-days) The Arlo Ultra 2 has been around for a while now and used to be one of our top choices. If you find one on sale we still recommend it. It includes two or more security cameras with full 4K resolution and support for HDR, along with an additional SmartHub that links the cameras together – and also provides HomeKit support too. (In the U.S. it is possible to buy a single camera for $299). Battery life is around six months but, like the Arlo Essential, the Arlo Ultra 2 also offers an XL version with 12-month battery life (although the XL version may not be available in all regions). Both versions of the Arlo Ultra 2 have the same 4K camera with 3,840×2,160 resolution and support for HDR. This provides a very clear, sharp image, with close to 180-degree viewing angles, and a useful 12x zoom. The Ultra 2 has a night-vision mode, and the weather-resistant camera is also suitable for outdoor use and includes both a spotlight and siren, along with two-way audio so that you can talk to people through the camera before you set off the siren to scare them away. Those features don’t come cheap though, and the Arlo Ultra 2 costs $599.99/£629.99 for a kit that includes two cameras and a SmartHub. And, for larger homes, there are kits with three or four cameras, costing $899.99/£799.99 and $1,109.99/£979.99 respectively. The Arlo Ultra 2 includes a microSD card slot, which allows you to store your video recordings on a memory card (not included), without having to pay for the Arlo Secure online storage service. You do get a 30-day trial for the Arlo Secure service – which is about to be increased to 90 days – but after that you’ll need to sign up for a subscription, starting at $2.99/£2.79 per month for a single camera or $9.99/£8.99 for multiple cameras. Those prices aren’t too bad, but support for HomeKit also means that you can also use a less expensive iCloud+ subscription to provide online storage for your recordings. 10. Aqara Camera Hub G3 Price When Reviewed: $109.99 Best Prices Today: $109.99 at Adorama$109.99 at Amazon$109.99 at Aqara HomeKit: YesOutdoors: NoStorage: microSD and iCloud Aqara’s Camera Hub G3 is another camera that’s been on our list for a while. We still recommend it as one of the most affordable security cameras we’ve come across that supports HomeKit, along with many other useful features for just $109.99/£129.99. You might expect a camera in this price range to only provide 1080p resolution, but the G3 is actually a ‘2K’ camera, with resolution of 2,304×1,296 that provides a clear, sharp image, with a night-vision mode also available. And, as the name suggests, the G3 can also act as a ‘hub’ that controls additional Aqara devices, such as motion sensors or sensors that detect water-leaks. Getting started is very straightforward when using the Aqara app for iOS or Android. The app displays a QR code that you scan with the G3’s camera, and then quickly guides you through the process of setting up the camera and connecting it to your home Wi-Fi. It’s quite a chunky little device, standing 123mm high, 90m wide and 70mm deep, but that’s because the lower half of the camera houses a motor that allows the camera to pan and tilt. The camera lens itself has a relatively modest 110-degree viewing angle, but the controls in the Aqara app allow you to rotate the camera through a full 360-degrees horizontally so that you can get a good view all around. You can also set the camera to cruise, so that it automatically rotates and has a look around every now and then, or create and save specific positions, such as look left or look right and then just tap to turn the camera to that position. To be honest, the Aqara app is a bit confusing at times, but it’s worth sticking with it to make the most of the camera’s many useful features. There’s a microSD slot built into the G3, which will allow you to store your video recordings on the camera itself, but HomeKit support means that you can also use it with an iCloud+ subscription to store your recordings online. The only real limitations are that the G3 requires mains power, and it’s not weather resistant, so it’s best suited for indoor use only. Apple Inc

Read more »

Apple published a new Press Release
Apple just published a new Press Release:Apple unveils the top books of 2023 and a new Year in Review experience

Read more »

Apple published a new Press Release
Apple just published a new Press Release:Apple shares the most popular podcasts of 2023

Read more »

North Korean hackers combine malware to attack macOS
North Korea is becoming more of an online threat, with its hackers conducting multiple campaigns and frequently targeting macOS.North Korea is among a number of countries best known for having hackers working on its behalf, and occasionally they cause major incidents. One example being the 2014 data breach of Sony Pictures, which was squarely blamed on North Korean-aligned hackers.In a report released by SentinelOne on Monday, hackers associated with North Korea are still active, and in 2023, spent a lot of time and effort attacking users of macOS. Read more...

Read more »

Apple announces top podcasts of 2023 alongside new Apple Books Year in Review feature
As we approach the end of 2023, Apple is taking a retrospective look at the last year in media. After recently naming Taylor Swift artist of the year for being the “most-streamed female artist in Apple Music history,” it’s time to check in with Apple Books and Podcasts. more…

Read more »

More than 100 brands have followed Apple’s example in ceasing ads on X
More than 100 brands have now ceased ads on X over antisemitic content allowed to propagate on the social network. They are following the example of companies like Apple and Disney, which made the decision early last week. X itself had estimated that the financial hit could be around $11M, but the company’s own internal documents reveal that the total loss could be as high as $75M … more…

Read more »

Apple's smart ring technology may not be limited to fingers
Smart rings on fingers, smart bracelets on ankles, and smart lanyards around necks — far beyond the Apple Watch and AirPods, Apple has wide-ranging plans for a new wearable.Detail from the patent showing ring-shaped and ring-sized smart devices, but the technology can be used for much moreThere have been so many Apple patents and patent applications regarding smart rings that there's no question the company is taking this wearable seriously. But for the first time, a newly-granted patent has made it undeniably clear that there is much more to this device idea than putting a ring on a finger. Read more...

Read more »

Flash deal: save up to $175 on Hyper docking stations & hubs today only
If you picked up a new MacBook over Black Friday or are simply looking for a more robust peripheral solution for your existing setup, B&H Photo is having a Hyper Deal Zone offering steep savings on docking stations and USB-C hubs.Now through 11:59pm ET (or while supplies last), shoppers can pick up a Hyper dock or hub for as low as $49.99 at B&H Photo.Shop the Deal Zone Read more...

Read more »

Evernote free users could be limited to just 50 notes, as company tests plan
Evernote free users could see their accounts limited to a single notebook containing just 50 notes, under a potential plan being tested by the company. The change would effectively render the free option completely useless to most people, forcing them to either upgrade to a paid account or switch to a competing product – and could drive many to switch to Apple’s Notes … more…

Read more »

When it comes to the iPhone, there’s a sucker born every minute
Macworld Good news, iPhone mini-istas! We finally have definitive proof small phones are still a great market and Apple should bring back the best iPhone evah. Nikkei reports that “Used iPhone 12 and 13 minis are hot in Japan as Apple screens go big” According to Nikkei, Japanese consumers, who have a preference for smaller phones, are scooping up the iPhone mini at online resellers because Apple has rudely stopped selling the diminutive device (other than refurbs). So popular are minis in Japan that: Sales of both models doubled by volume from the previous week [after the iPhone 15’s launch]. That is a fairly prodigious increase and as the founding member of the small iPhone fan club (and president… and treasurer… and groundskeeper… and…), no one would like to believe this is 100 percent true than the Macalope. It is hard to have a death grip on an iPhone 13 mini when you have hooves, but believe the Macalope when he says he’s found a way to make it work. Still, let’s dig into this a little. The horny one first saw this reported in a piece by 9to5Mac, which was a write-up of a piece by The Korea Herald, which was a write-up of the piece by Nikkei. Now you’re here reading the Macalope’s thoughts on it. And thus the internet goes ‘round and ‘round until we all get queasy and throw up into a trash can after getting off the ride. Just kidding. This ride never stops. IDG First, let us remember that Nikkei was the outfit that back in 2017 pushed the idea that the iPhone X was a flop. That was quite the ride on the ol’ internet tilt-a-whirl and seemed to be baseless. Of course, Nikkei is a big news organization. It reports lots of things. Almost all of them are probably true! So, keep that in mind and maybe glare a little suspiciously at Nikkei as we read on, just to let them know we remember. When you read the piece, you will find that the “doubled” data point that launched, well, not a thousand articles but several, comes from one place. In the week after the iPhone 15’s Sept. 22 launch, consumers snapped up 5.4-inch (13.7 centimeters) iPhone 12 mini and 13 mini phones on an online marketplace run by Belong, part of the Itochu group. Ah, the ol’ press release from an online reseller of used smartphones. If the Macalope had a bale of alfalfa for every time he saw that, he’d be stuffed. Which is not a joking matter. The Macalope’s cousin was stuffed. It was tragic. “Used smartphones are now the main option for people who want the iPhone mini series,” said Masatoshi Ohno, head of Belong’s consumer division. “All the smart people are shopping with us. These numbers don’t lie.” We see you, Masa, honey. We see you. The Macalope doesn’t believe these retailers make up these data points, but they definitely write them up in press releases to get their names in the news and, boy, does it work. Ultimately, however, this is one result from one reseller. This is not, unfortunately for iPhone mini fans like this mythical beast, definitive proof of an overall trend. Do Japanese consumers prefer smaller phones? Probably? Japan has long had a fascination with miniaturization, but neighboring markets such as Korea and China have both tended to prefer larger phones. Is it likely that after looking at the iPhone 15 lineup, a sizable number of Japanese consumers sighed heavily at the lack of a sub-gigantic phone and logged on to the thirsty online retailer to get iPhone minis? Yeah, that tracks. Despite the lower-than-expected statistical impact of this, if the Macalope had Tim Cook’s fax number, he’d still print this Nikkei piece out and send it to him. Anything to get Apple to make small phones again. iOS

Read more »

Take a first look at Vision Pro's 3D virtual 'Yosemite Environment'
Apple Vision Pros 3D wallpaper has now been shown off by a developer, revealing how the headset can present apps and controls as if floating in a 3D environment like a wintry Yosemite.Vision Pro controls floating in a wintry Yosemite environmentApple Vision Pro is now expected to launch in March, according to the latest rumors, and users will initially see apps as if they are floating in your own room, or whatever space they are in. But just as Mac and iPad can have different wallpapers and desktops, Vision Pro can present your apps immersed in a totally different environment. Read more...

Read more »

Australia to enact additional legislation and protection laws around Apple Pay and other digital payment platforms
Come Wednesday, Apple Pay and other forms of digital payment will be getting some legislation placed around them in the land down under. According to Reuters, digital payment platforms will begin to receive the same level of regulatory oversight as credit cards in Australia. Australia has attempted to try and regulate digital wallet apps and […] Source

Read more »

Vulnerability Summary for the Week of November 20, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47066 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47067 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47068 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47069 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47070 adobe -- after_effects Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-11-17 7.8 CVE-2023-47073 code-projects -- simple_crud_functionality SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter. 2023-11-17 9.8 CVE-2023-48078 concrete_cms -- concrete_cms Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows unauthorized access because directories can be created with insecure permissions. File creation functions (such as the Mkdir() function) gives universal access (0777) to created folders by default. Excessive permissions can be granted when creating a directory with permissions greater than 0755 or when the permissions argument is not specified. 2023-11-17 9.8 CVE-2023-48648   corebos -- corebos Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator's computer. 2023-11-17 8 CVE-2023-48029   cubecart -- cubecart Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system. 2023-11-17 8.1 CVE-2023-38130   cubecart -- cubecart CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command. 2023-11-17 7.2 CVE-2023-47675   dreamer_cms -- dreamer_cms Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management. 2023-11-18 8.8 CVE-2023-48017 getsimplecms -- getsimplecms A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-245735. 2023-11-17 9.8 CVE-2023-6188   git-urls -- git-urls git-urls version 1.0.1 is vulnerable to ReDOS (Regular Expression Denial of Service) in Go package. 2023-11-18 7.5 CVE-2023-46402 honeywell -- prowatch Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) attacker could potentially exploit this vulnerability, leading to a standard user to have arbitrary system code execution. Honeywell recommends updating to the most recent version of this product, service or offering (Pro-watch 6.0.2, 6.0, 5.5.2,5.0.5). 2023-11-17 7.8 CVE-2023-6179   kodcloud -- kodbox kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack. 2023-11-18 9.8 CVE-2023-48028   liblisp -- liblisp Liblisp through commit 4c65969 was discovered to contain a out-of-bounds-read vulnerability in unsigned get_length(lisp_cell_t * x) at eval.c 2023-11-17 8.1 CVE-2023-48025 librenms -- librenms LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions the login method has no rate limit. An attacker may be able to leverage this vulnerability to gain access to user accounts. This issue has been addressed in version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-11-17 7.5 CVE-2023-46745 luxsoft -- luxcal_web_calendar SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary SQL command by sending a crafted request and obtain or alter information stored in the database. 2023-11-20 9.8 CVE-2023-46700   medart_health_services -- medart_notification_panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Medart Health Services Medart Notification Panel allows SQL Injection. This issue affects Medart Notification Panel: through 20231123.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-11-23 9.8 CVE-2023-3631 misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters. 2023-11-17 9.8 CVE-2023-48655   misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses. 2023-11-17 9.8 CVE-2023-48656   misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters. 2023-11-17 9.8 CVE-2023-48657   misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space. 2023-11-17 9.8 CVE-2023-48658   misp -- malware_information_sharing_platform An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing. 2023-11-17 9.8 CVE-2023-48659   nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39544 nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39545 nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39546 nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39547 nec -- clusterpro_x/expresscluster_x CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows an attacker to log in to the product may execute an arbitrary command. 2023-11-17 8.8 CVE-2023-39548 neutron -- ip_camera Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1. 2023-11-23 7.5 CVE-2023-6118 openharmony -- openharmony in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions. 2023-11-20 7.8 CVE-2023-43612 openharmony -- openharmony in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion. 2023-11-20 7.8 CVE-2023-6045 openharmony -- openharmony in OpenHarmony v3.2.2 and prior versions allow a local attacker to get confidential information or rewrite sensitive file through incorrect default permissions. 2023-11-20 7.1 CVE-2023-3116 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. 2023-11-17 9.8 CVE-2023-38316 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before 10.1.2. it has a do_binauth NULL pointer dereference that can be triggered with a crafted GET HTTP request with a missing client redirect query string parameter. Triggering this issue results in crashing openNDS (a Denial-of-Service condition). The issue occurs when the client is about to be authenticated and can be triggered only when the BinAuth option is set. 2023-11-17 7.5 CVE-2023-38313 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a try_to_authenticate NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing client token query string parameter. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). 2023-11-17 7.5 CVE-2023-38315 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing User-Agent header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). 2023-11-17 7.5 CVE-2023-38320 opennds -- captive_portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference that be triggered with a crafted GET HTTP request with a missing User-Agent HTTP header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). The issue occurs when the client is about to be authenticated and can be triggered only when the BinAuth option is set. 2023-11-17 7.5 CVE-2023-38322 opennds -- opennds An issue was discovered in the captive portal in OpenNDS before version 10.1.3. get_query in http_microhttpd.c does not validate the length of the query string of GET requests. This leads to a stack-based buffer overflow in versions 9.x and earlier, and to a heap-based buffer overflow in versions 10.x and later. Attackers may exploit the issue to crash OpenNDS (Denial-of-Service condition) or to inject and execute arbitrary bytecode (Remote Code Execution). 2023-11-17 9.8 CVE-2023-41101   opennds -- opennds An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Service condition due to the consumption of all available memory. 2023-11-17 7.5 CVE-2023-41102   opensupports -- opensupports OpenSupports v4.11.0 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the comment function, an attacker can bypass security restrictions and upload a .bat file by manipulating the file's magic bytes to masquerade as an allowed type. This can enable the attacker to execute arbitrary code or establish a reverse shell, leading to unauthorized file writes or control over the victim's station via a crafted file upload operation. 2023-11-17 9.8 CVE-2023-48031   prestashop -- prestashop In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via `exportProduct::_addDataToDb().` 2023-11-17 9.8 CVE-2023-45387   prestashop -- prestashop In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a guest can perform a path traversal to view all files on the information system. 2023-11-17 7.5 CVE-2023-45382   tenda -- ax1803_firmware Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) attack 2023-11-20 7.5 CVE-2023-48109 tenda -- ax1803_firmware Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) attack 2023-11-20 7.5 CVE-2023-48110 tenda -- ax1803_firmware Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) attack 2023-11-20 7.5 CVE-2023-48111 veribilim_software_computer -- veribase Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veribilim Software Computer Veribase allows SQL Injection. This issue affects Veribase: through 20231123.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-11-23 9.8 CVE-2023-3377 wordpress -- wordpress The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. 2023-11-18 9.8 CVE-2023-4214   wordpress -- wordpress Cross-Site Request Forgery (CSRF) vulnerability in WPPOOL Sheets To WP Table Live Sync plugin

Read more »

Vulnerability Summary for the Week of November 13, 2023
 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info checkpoint -- endpoint_security Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. 2023-11-12 7.8 CVE-2023-28134 discourse -- discourse Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, the embedding feature is susceptible to server-side request forgery. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. As a workaround, disable the Embedding feature. 2023-11-10 9.8 CVE-2023-47121   discourse -- discourse Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,beta6 through 3.2.0.beta2 of the `beta` and `tests-passed` branches, Redis memory can be depleted by crafting a site with an abnormally long favicon URL and drafting multiple posts which Onebox it. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds. 2023-11-10 7.5 CVE-2023-47120   dreamer_cms -- dreamer_cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus. 2023-11-14 8.8 CVE-2023-48020 dreamer_cms -- dreamer_cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update. 2023-11-14 8.8 CVE-2023-48021 dreamer_cms -- dreamer_cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run 2023-11-13 8.8 CVE-2023-48058 dreamer_cms -- dreamer_cms Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add 2023-11-13 8.8 CVE-2023-48060 emsigner -- emsigner Incorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token. 2023-11-14 9.8 CVE-2023-43902 fortinet -- fortimail An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 through 7.2.4, 7.0.0 through 7.0.6 and before 6.4.8 may allow an unauthenticated attacker to perform a brute force attack on the affected endpoints via repeated login attempts. 2023-11-14 7.3 CVE-2023-45582 fortinet -- fortiwlm A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests. 2023-11-14 7.5 CVE-2023-42783 froxlor -- froxlor Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0. 2023-11-10 8.8 CVE-2023-6069   gibbonedu -- gibbon GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set, the defined path is used as the destination folder, concatenated with the absolute path of the installation directory. The content of the img parameter is base64 decoded and written to the defined file path. This allows creation of PHP files that permit Remote Code Execution (unauthenticated). 2023-11-14 9.8 CVE-2023-45878 gibbonedu -- gibbon GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension). This allows creation of PHP files outside of the uploads directory, directly in the webroot. 2023-11-14 7.2 CVE-2023-45880 golden -- golden An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. 2023-11-14 7.5 CVE-2023-45558 hanwhavision -- wave_server_software Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has released patched firmware for the highlighted flaw. Please refer to the hanwhavision security report for more information and solution." 2023-11-13 8.8 CVE-2023-5747 headscale -- headscale Headscale through 0.22.3 writes bearer tokens to info-level logs. 2023-11-11 7.5 CVE-2023-47390 icssolution -- ics_business_manager A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remote user to send a specially crafted SQL query and retrieve all the information stored in the database. The data could also be modified or deleted, causing the application to malfunction. 2023-11-13 8.8 CVE-2023-6097 intel(r) -- unison_software Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. 2023-11-14 8.8 CVE-2023-22663 intel(r) -- unison_software Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. 2023-11-14 8.8 CVE-2023-36860 intel(r) -- unison_software Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. 2023-11-14 8.8 CVE-2023-39221 intel(r) -- unison_software Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. 2023-11-14 8.8 CVE-2023-39412 intel(r) -- unison_software Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-11-14 7.8 CVE-2022-45469 intel(r) -- unison_software Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-11-14 7.8 CVE-2023-22292 intel(r) -- unison_software Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. 2023-11-14 7.8 CVE-2023-38570 intel(r) -- unison_software Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. 2023-11-14 7.5 CVE-2023-22285 intel(r) -- unison_software Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. 2023-11-14 7.5 CVE-2023-22337 intel(r) -- unison_software Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. 2023-11-14 7.5 CVE-2023-39228 intel(r) -- unison_software Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via network access. 2023-11-14 7.2 CVE-2023-22448 johnson_controls -- quantum_hd_unity_compressor_firmware An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed. 2023-11-10 9.8 CVE-2023-4804   linux -- kernel A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_trans_gc_catchall did not remove the catchall set element from the catchall_list when the argument sync is true, making it possible to free a catchall set element many times. We recommend upgrading past commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630. 2023-11-14 7.8 CVE-2023-6111   memberscard -- memberscard An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. 2023-11-14 7.5 CVE-2023-45560 microsoft -- edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 2023-11-10 7.3 CVE-2023-36014 microsoft -- edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2023-11-10 7.1 CVE-2023-36024 netgate -- pfsense An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components. 2023-11-14 8.8 CVE-2023-42326 phonepe -- phonepe Server-Side Request Forgery (SSRF) vulnerability in PhonePe PhonePe Payment Solutions. This issue affects PhonePe Payment Solutions: from n/a through 1.0.15. 2023-11-13 7.5 CVE-2022-45835 phpgurukul -- restaurant_table_booking_system A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file check-status.php of the component Booking Reservation Handler. The manipulation leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-244943. 2023-11-10 9.8 CVE-2023-6074   phpgurukul -- restaurant_table_booking_system A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information disclosure. The attack can be launched remotely. The identifier VDB-244945 was assigned to this vulnerability. 2023-11-10 7.5 CVE-2023-6076   phpgurukul -- teacher_subject_allocation_management_system SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter. 2023-11-14 7.5 CVE-2023-46024 qnap -- qumagie An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later 2023-11-10 8.8 CVE-2023-39295 qnap -- qumagie A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later 2023-11-10 8.8 CVE-2023-41284 qnap -- qumagie A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later 2023-11-10 8.8 CVE-2023-41285 remarshal -- remarshal Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition. 2023-11-13 7.5 CVE-2023-47163   salesagility -- suitecrm Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. 2023-11-14 9.8 CVE-2023-6126   salesagility -- suitecrm Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. 2023-11-14 8.8 CVE-2023-6125   salesagility -- suitecrm Path Traversal: '..filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. 2023-11-14 8.8 CVE-2023-6130   salesagility -- suitecrm Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. 2023-11-14 8.8 CVE-2023-6131   shenzhen_youkate_industrial -- facial_love_cloud_platform A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-245061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-11-13 9.8 CVE-2023-6099   siemens -- comos A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition. 2023-11-14 9.8 CVE-2023-43504 siemens -- comos A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks sensitive information such as user and project information in cleartext via UDP. 2023-11-14 7.5 CVE-2023-43503 statamic_cms -- statamic_cms Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded. This only affects forms using the "Forms" feature and not just _any_ arbitrary form. This does not affect the control panel. This issue has been patched in 3.4.13 and 4.33.0. 2023-11-10 9.8 CVE-2023-47129   sysaid -- sysaid_on-premises In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023. 2023-11-10 9.8 CVE-2023-47246   telit -- bgs5_firmware A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system. 2023-11-10 7.8 CVE-2023-47611 thinkingreed_inc. -- oss_calendar SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request. 2023-11-14 8.8 CVE-2023-47609   tongda -- tongda_oa A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VU_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. VDB-244994 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-11-12 9.8 CVE-2023-6084   wbce -- wbce_cms SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter. 2023-11-10 9.8 CVE-2023-39796   weston-embedded -- cesium_net An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-24585 weston-embedded -- cesium_net A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-25181 weston-embedded -- cesium_net A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-27882 weston-embedded -- cesium_net A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-28379 weston-embedded -- cesium_net A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-28391 weston-embedded -- cesium_net A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. 2023-11-14 9.8 CVE-2023-31247 wordpress -- wordpress Server-Side Request Forgery (SSRF) vulnerability in StylemixThemes Motors - Car Dealer, Classifieds & Listing. This issue affects Motors - Car Dealer, Classifieds & Listing: from n/a through 1.4.6. 2023-11-13 7.5 CVE-2023-46207 wordpress -- wordpress Cross-Site Request Forgery (CSRF) vulnerability leading to Local File Inclusion (LF) in Webpushr Web Push Notifications Web Push Notifications - Webpushr plugin

Read more »

Alleged Extortioner of Psychotherapy Patients Faces Trial
Prosecutors in Finland this week commenced their criminal trial against Julius Kivimäki, a 26-year-old Finnish man charged with extorting a once popular and now-bankrupt online psychotherapy practice and thousands of its patients. In a 2,200-page report, Finnish authorities laid out how they connected the extortion spree to Kivimäki, a notorious hacker who was convicted in 2015 of perpetrating tens of thousands of cybercrimes, including data breaches, payment fraud, operating a botnet and calling in bomb threats.

Read more »

Vulnerability Summary for the Week of November 6, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info 1e -- platform The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. To remediate this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-URLResponseTime instruction to v20.1 by uploading it through the 1E Platform instruction upload UI 2023-11-06 7.2 CVE-2023-45161MISCMISC 1e -- platform The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. To remediate this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-CommandLinePing instruction to v18.1 by uploading it through the 1E Platform instruction upload UI 2023-11-06 7.2 CVE-2023-45163MISCMISC 1e -- platform The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. To remediate this issue DELETE the instruction "Show dialogue with caption %Caption% and message %Message%" from the list of instructions in the Settings UI, and replace it with the new instruction 1E-Exchange-ShowNotification instruction available in the updated End-User Interaction product pack. The new instruction should show as "Show %Type% type notification with header %Header% and message %Message%" with a version of 7.1 or above. 2023-11-06 7.2 CVE-2023-5964MISCMISC 7-zip -- 7-zip 7-Zip through 22.01 on Linux allows an integer underflow and code execution via a crafted 7Z archive. 2023-11-03 7.8 CVE-2023-31102MISCMISCMISC advanced_export_products_orders_cron_csv_excel_project -- advanced_export_products_orders_cron_csv_excel Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the ps_customer table. 2023-11-07 7.5 CVE-2023-43984 arm -- valhall_gpu_kernel_driver A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory. 2023-11-07 7.8 CVE-2023-3889 arm -- valhall_gpu_kernel_driver A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. 2023-11-07 7.8 CVE-2023-4295 asus -- rt-ax55_firmware ASUS RT-AX55's authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services. 2023-11-03 8.8 CVE-2023-41345MISC asus -- rt-ax55_firmware ASUS RT-AX55's authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. 2023-11-03 8.8 CVE-2023-41346MISC asus -- rt-ax55_firmware ASUS RT-AX55's authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. 2023-11-03 8.8 CVE-2023-41347MISC asus -- rt-ax55_firmware ASUS RT-AX55's authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. 2023-11-03 8.8 CVE-2023-41348MISC asus -- rt-ax57_firmware An issue in ASUS RT-AX57 v.3.0.0.4_386_52041 allows a remote attacker to execute arbitrary code via a crafted request to the lan_ifname field in the sub_ln 2C318 function. 2023-11-09 9.8 CVE-2023-47005 asus -- rt-ax57_firmware An issue in ASUS RT-AX57 v.3.0.0.4_386_52041 allows a remote attacker to execute arbitrary code via a crafted request to the lan_ipaddr field in the sub_6FC74 function. 2023-11-09 9.8 CVE-2023-47006 asus -- rt-ax57_firmware An issue in ASUS RT-AX57 v.3.0.0.4_386_52041 allows a remote attacker to execute arbitrary code via a crafted request to the lan_ifname field in the sub_391B8 function. 2023-11-09 9.8 CVE-2023-47007 asus -- rt-ax57_firmware An issue in ASUS RT-AX57 v.3.0.0.4_386_52041 allows a remote attacker to execute arbitrary code via a crafted request to the ifname field in the sub_4CCE4 function. 2023-11-09 9.8 CVE-2023-47008 best_courier_management_system -- best_courier_management_system An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter. 2023-11-03 9.8 CVE-2023-46980MISCMISC bestpractical -- request_tracker Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call. 2023-11-03 7.5 CVE-2023-41259MISCCONFIRMCONFIRM bestpractical -- request_tracker Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls. 2023-11-03 7.5 CVE-2023-41260MISCCONFIRMCONFIRM bestpractical -- request_tracker Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder. 2023-11-03 7.5 CVE-2023-45024MISCCONFIRM bleachbit -- bleachbit BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been patched in version 4.5.0. 2023-11-08 7.3 CVE-2023-47113 boltwire -- boltwire An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function. 2023-11-07 9.1 CVE-2023-46501   botan_project -- botan bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password. 2023-11-03 7.5 CVE-2017-7252CONFIRMMISC clickbar -- dot-diver Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the `setByPath` function which can leads to remote code execution (RCE). This issue has been addressed in commit `98daf567` which has been included in release 1.0.2. Users are advised to upgrade. There are no known workarounds to this vulnerability. 2023-11-06 9.8 CVE-2023-45827MISCMISC couchbase -- couchbase_server Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal. 2023-11-08 7.5 CVE-2023-36667   djangoproject -- django In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters. 2023-11-03 7.5 CVE-2023-41164CONFIRMMISC   djangoproject -- django In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232. 2023-11-03 7.5 CVE-2023-43665CONFIRMMISC   ec-cube -- ec-cube EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vulnerability due to improper settings of the template engine Twig included in the product. As a result, arbitrary code may be executed on the server where the product is running by a user with an administrative privilege. 2023-11-07 7.2 CVE-2023-46845   eclipse -- glassfish In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners. 2023-11-03 9.8 CVE-2023-5763MISCMISC eclipse -- parsson In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of edge cases where the input text of a number can lead to much larger processing time than one would expect. To mitigate the risk, parsson put in place a size limit for the numbers as well as their scale. 2023-11-03 7.5 CVE-2023-4043MISCMISC espressif -- esptool An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm. 2023-11-09 7.5 CVE-2023-46894 wordpress -- wordpress Cross-Site Request Forgery (CSRF) vulnerability in Alex Raven WP Report Post plugin

Read more »

Microsoft Patch Tuesday, November 2023 Edition
Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three "zero day" vulnerabilities that Microsoft warns are already being exploited in active attacks.

Read more »

It’s Still Easy for Anyone to Become You at Experian
In the summer of 2022, KrebsOnSecurity documented the plight of several readers who had their accounts at big-three consumer credit reporting bureau Experian hijacked after identity thieves simply re-registered the accounts using a different email address. Sixteen months later, Experian clearly has not addressed this gaping lack of security. I know that because my account at Experian was recently hijacked, and the only way I could recover access was by recreating the account.

Read more »

Who’s Behind the SWAT USA Reshipping Service?
Last week, KrebsOnSecurity broke the news that one of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. In today's Part II, we'll examine clues about the real-life identity left behind by "Fearless," the nickname chosen by the proprietor of the SWAT USA Drops service.

Read more »

Vulnerability Summary for the Week of October 30, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info contec -- solarview_compact_firmware An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component. 2023-10-27 9.8 CVE-2023-46509MISC dreamsecurity -- magicline_4.0 A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code. 2023-10-30 9.8 CVE-2023-45797MISC google -- android In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 8.8 CVE-2023-21356MISC google -- android In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalation of privilege in the privileged Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 8.8 CVE-2023-21361MISC google -- android In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 8.8 CVE-2023-40129MISCMISC google -- android In NFC, there is a possible way to setup a default contactless payment app without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2021-39810MISC google -- android In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21351MISC google -- android In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21355MISC google -- android In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21358MISC google -- android In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21372MISC google -- android In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21373MISC google -- android In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21374MISC google -- android In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21375MISC google -- android In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21378MISC google -- android In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.8 CVE-2023-21381MISC google -- android In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40116MISCMISC google -- android In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40117MISCMISCMISC google -- android In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40120MISCMISC google -- android In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40125MISCMISC google -- android In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40128MISCMISC google -- android In onBindingDied of CallRedirectionProcessor.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7.8 CVE-2023-40130MISCMISC google -- android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.5 CVE-2023-21347MISC google -- android In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 7.5 CVE-2023-21353MISC google -- android In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 7 CVE-2023-40131MISCMISC juzaweb -- cms An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function. 2023-10-28 7.8 CVE-2023-46468MISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-43738MISCMISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'contact' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44162MISCMISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add1' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44375MISCMISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add2' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44376MISCMISC projectworlds -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add3' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44377MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45012MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_query' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45013MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bus_id' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45014MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45015MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'source' parameter of the search.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45016MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'destination' parameter of the search.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45017MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45018MISCMISC projectworlds -- online_bus_booking_system   Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45019MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45111MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'feedback' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45112MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45113MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'subject' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45114MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45323MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45324MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45325MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45326MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45327MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45328MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'role' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45329MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45330MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'contact' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45331MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45332MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'verified' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45333MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45334MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45335MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45336MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45337MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45338MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'type' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45339MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/details-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45340MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45341MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45342MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticket_id' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45343MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45344MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45345MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45346MISCMISC projectworlds -- online_food_ordering_system   Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-11-02 9.8 CVE-2023-45347MISCMISC radare -- radare2 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. 2023-10-28 9.8 CVE-2023-46569MISCMISC radare -- radare2 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. 2023-10-28 9.8 CVE-2023-46570MISCMISC solarwinds -- network_configuration_manager   The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. 2023-11-01 8 CVE-2023-33226MISCMISC solarwinds -- network_configuration_manager   The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges. 2023-11-01 8 CVE-2023-33227MISCMISC solarwinds -- solarwinds_platform   SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges. 2023-11-01 8 CVE-2023-40062MISCMISC solarwinds -- solarwinds_platform    Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result. 2023-11-01 7.1 CVE-2023-40061MISC trteksolutions -- education_portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Education Portal allows SQL Injection.This issue affects Education Portal: before 3.2023.29. 2023-10-27 9.8 CVE-2023-5807MISC zentao -- biz ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF). 2023-10-27 8.8 CVE-2023-46375MISC zentao -- biz Zentao Biz version 8.7 and before is vulnerable to Information Disclosure. 2023-10-27 7.5 CVE-2023-46376MISC zpesystems -- nodegrid_os ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/. 2023-10-28 8.8 CVE-2023-43322CONFIRM Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adobe -- acrobat_for_edge   Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 2023-10-30 5.5 CVE-2023-44323MISC color -- demoiccmax In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access array elements at out-of-bounds indexes. 2023-10-30 6.5 CVE-2023-46866MISCMISC color -- demoiccmax In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer dereference. 2023-10-30 6.5 CVE-2023-46867MISCMISC flusity -- flusity A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument edit_post_id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The identifier of the patch is 6943991c62ed87c7a57989a0cb7077316127def8. It is recommended to apply a patch to fix this issue. The identifier VDB-243641 was assigned to this vulnerability. 2023-10-27 4.8 CVE-2023-5810MISCMISCMISCMISC google -- android In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.7 CVE-2023-21360MISC google -- android In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.7 CVE-2023-21370MISC google -- android In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.7 CVE-2023-21371MISC google -- android In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.7 CVE-2023-21380MISC google -- android In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 6.5 CVE-2023-21395MISC google -- android In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21294MISC google -- android In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21350MISC google -- android In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21352MISC google -- android In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21354MISC google -- android In Usage, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21362MISC google -- android In ContactsProvider, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21364MISC google -- android In Contacts, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21365MISC google -- android In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/design. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21366MISC google -- android In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21367MISC google -- android In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21368MISC google -- android In Usage Access, there is a possible way to display a Settings usage access restriction toggle screen due to a permissions bypass. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. 2023-10-30 5.5 CVE-2023-21369MISC google -- android In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21376MISC google -- android In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21377MISC google -- android In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21382MISC google -- android In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. 2023-10-30 5.5 CVE-2023-21383MISC google -- android In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21384MISC google -- android In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21385MISC google -- android In Telecomm, there is a possible bypass of a multiuser security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 5.5 CVE-2023-21394MISC google -- android In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 5.5 CVE-2023-40121MISCMISC google -- android In updateActionViews of PipMenuView.java, there is a possible bypass of a multiuser security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 5.5 CVE-2023-40123MISCMISC google -- android In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. 2023-10-27 5.5 CVE-2023-40133MISCMISC google -- android In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 4.4 CVE-2023-21357MISC google -- android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 4.4 CVE-2023-21359MISC google -- android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation. 2023-10-30 4.4 CVE-2023-21379MISC gougucms -- gougucms A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter. 2023-10-27 5.4 CVE-2023-46394MISC lenovo -- thinkpad_e14_firmware An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code. 2023-10-30 6.7 CVE-2022-48189MISC lenovo -- thinkpad_x1_fold_gen_1_firmware An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code. 2023-10-30 6.7 CVE-2022-4573MISC macwk -- icecms IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF). 2023-10-27 6.5 CVE-2023-42188MISCMISC projectworlds -- online_blood_donation_management_system   Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'firstName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. 2023-10-31 6.1 CVE-2023-44484MISCMISC projectworlds -- online_blood_donation_management_system   Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'lastName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. 2023-10-31 6.1 CVE-2023-44485MISCMISC projectworlds -- online_blood_donation_management_system   Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'address' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. 2023-10-31 6.1 CVE-2023-44486MISCMISC projectworlds -- online_blood_donation_management_system   Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'city' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. 2023-10-31 6.1 CVE-2023-5306MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. 2023-11-01 6.1 CVE-2023-45201MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. 2023-11-01 6.1 CVE-2023-45202MISCMISC projectworlds -- online_examination_system   Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. 2023-11-01 6.1 CVE-2023-45203MISCMISC pwncyn -- fancms Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file. 2023-10-27 6.1 CVE-2023-46505MISC pwncyn -- yxbookcms Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules. 2023-10-27 6.1 CVE-2023-46503MISC pwncyn -- yxbookcms Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component. 2023-10-27 5.4 CVE-2023-46504MISC solarwinds -- network_configuration_manager   The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information. 2023-11-01 4.5 CVE-2023-33228MISCMISC wordpress -- wordpress The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete sliders in bulk via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2023-10-27 6.5 CVE-2023-5821MISCMISCMISC wordpress -- wordpress Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin

Read more »

Russian Reshipping Service ‘SWAT USA Drop’ Exposed
One of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. Here’s a closer look at the Russia-based SWAT USA Drop Service, which currently employs more than 1,200 people across the United States who are knowingly or unwittingly involved in reshipping expensive consumer goods purchased with stolen credit cards.

Read more »

.US Harbors Prolific Malicious Link Shortening Service
The top-level domain for the United States -- .US -- is home to thousands of newly-registered domains tied to a malicious link shortening service that facilitates malware and phishing scams, new research suggests. The findings come close on the heels of a report that identified .US domains as among the most prevalent in phishing attacks over the past year.

Read more »

Vulnerability Summary for the Week of October 23, 2023
  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info projectworlds_pvt._limited -- online_art_gallery   Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'fnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-26 9.8 CVE-2023-43737MISCMISC projectworlds_pvt._limited -- online_art_gallery   Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-43738MISCMISC projectworlds_pvt._limited -- online_art_gallery   Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'contact' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44162MISCMISC projectworlds_pvt._limited -- online_art_gallery   Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-26 9.8 CVE-2023-44267MISCMISC projectworlds_pvt._limited -- online_art_gallery   Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'gender' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-26 9.8 CVE-2023-44268MISCMISC projectworlds_pvt._limited -- online_art_gallery   Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add1' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44375MISCMISC projectworlds_pvt._limited -- online_art_gallery   Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add2' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44376MISCMISC projectworlds_pvt._limited -- online_art_gallery   Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'add3' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44377MISCMISC apache -- http_server Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.57. 2023-10-23 9.1 CVE-2023-31122MISCMISCMISC byzoro -- smart_s85f_firmware A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20231010 and classified as critical. This issue affects some unknown processing of the file /sysmanage/importconf.php. The manipulation of the argument btn_file_renew leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243059. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-10-21 9.8 CVE-2023-5683MISCMISCMISC byzoro -- smart_s85f_firmware A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-10-21 9.8 CVE-2023-5684MISCMISCMISC calibre-ebook -- calibre link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root. 2023-10-22 7.5 CVE-2023-46303MISCMISC codeastro -- internet_banking_system A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pages_reset_pwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243131. 2023-10-22 9.8 CVE-2023-5693MISCMISCMISC color -- demoiccmax In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a. 2023-10-23 8.8 CVE-2023-46602MISC color -- demoiccmax In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a. 2023-10-23 7.8 CVE-2023-46603MISC dell -- unity_operating_environment Dell Unity prior to 5.3 contains a Restricted Shell Bypass vulnerability. This could allow an authenticated, local attacker to exploit this vulnerability by authenticating to the device CLI and issuing certain commands. 2023-10-23 7.8 CVE-2023-43066MISC dell -- unity_operating_environment Dell Unity 5.3 contain(s) an Arbitrary File Creation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by crafting arbitrary files through a request to the server. 2023-10-23 7.5 CVE-2023-43074MISC edm_informatics -- e-invoice   Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting. This issue affects E-invoice: before 2.1. 2023-10-27 7.5 CVE-2023-5443MISC f5 -- big-ip Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated 2023-10-26 9.8 CVE-2023-46747MISC f5 -- big-ip An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated 2023-10-26 8.8 CVE-2023-46748MISC frostming -- pdm pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious `pdm.lock` file that could allow e.g., an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. A project `foo` can be targeted by creating the project `foo-2` and uploading the file `foo-2-2.tar.gz` to pypi.org. PyPI will see this as project `foo-2` version `2`, while PDM will see this as project `foo` version `2-2`. The version must only be `parseable as a version` and the filename must be a prefix of the project name, but it's not verified to match the version being installed. Version `2-2` is also not a valid normalized version per PEP 440. Matching the project name exactly (not just prefix) would fix the issue. When installing dependencies with PDM, what's actually installed could differ from what's listed in `pyproject.toml` (including arbitrary code execution on install). It could also be used for downgrade attacks by only changing the version. This issue has been addressed in commit `6853e2642df` which is included in release version `2.9.4`. Users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-10-20 7.8 CVE-2023-45805MISCMISCMISCMISCMISC ibm -- cognos_dashboards_on_cloud_pak_for_data IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in container images which could lead to further attacks against the system. IBM X-Force ID: 260730. 2023-10-22 7.5 CVE-2023-38275MISCMISC ibm -- cognos_dashboards_on_cloud_pak_for_data IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in environment variables which could aid in further attacks against the system. IBM X-Force ID: 260736. 2023-10-22 7.5 CVE-2023-38276MISCMISC ibm -- security_verify_governance IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 225222. 2023-10-23 9.8 CVE-2022-22466MISCMISC ibm -- security_verify_governance IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 256036. 2023-10-23 8.8 CVE-2023-33839MISCMISC ibm -- security_verify_governance IBM Security Verify Governance 10.0 does not encrypt sensitive or critical information before storage or transmission. IBM X-Force ID: 256020. 2023-10-23 7.5 CVE-2023-33837MISCMISC ibm -- sterling_partner_engagement_manager IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized actions due to improper authentication. IBM X-Force ID: 266896. 2023-10-23 7.5 CVE-2023-43045MISCMISC idattend -- idweb Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-26568MISC idattend -- idweb Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-26569MISC idattend -- idweb Unauthenticated SQL injection in the GetExcursionList method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-26572MISC idattend -- idweb Missing authentication in the SetDB method in IDAttend's IDWeb application 3.1.052 and earlier allows denial of service or theft of database login credentials. 2023-10-25 9.1 CVE-2023-26573MISC idattend -- idweb Unauthenticated SQL injection in the GetVisitors method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-26581MISC idattend -- idweb Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-26582MISC idattend -- idweb Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-26583MISC idattend -- idweb Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-26584MISC idattend -- idweb Unauthenticated SQL injection in the GetRoomChanges method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-27254MISC idattend -- idweb Unauthenticated SQL injection in the DeleteRoomChanges method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-27255MISC idattend -- idweb Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-27260MISC idattend -- idweb Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 2023-10-25 9.1 CVE-2023-27262MISC idattend -- idweb Arbitrary file upload to web root in the IDAttend's IDWeb application 3.1.013 allows authenticated attackers to upload dangerous files to web root such as ASP or ASPX, gaining command execution on the affected server. 2023-10-25 8.8 CVE-2023-26578MISC idattend -- idweb Missing authentication in the StudentPopupDetails_Timetable method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-26570MISC idattend -- idweb Missing authentication in the SetStudentNotes method in IDAttend's IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-26571MISC idattend -- idweb Missing authentication in the SearchStudents method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-26574MISC idattend -- idweb Missing authentication in the SearchStudentsStaff method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction sensitive student and teacher data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-26575MISC idattend -- idweb Missing authentication in the SearchStudentsRFID method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-26576MISC idattend -- idweb Unauthenticated arbitrary file read in the IDAttend's IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-26580MISC idattend -- idweb Missing authentication in the GetActiveToiletPasses method in IDAttend's IDWeb application 3.1.052 and earlier allows retrieval of student information by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-27257MISC idattend -- idweb Missing authentication in the GetStudentGroupStudents method in IDAttend's IDWeb application 3.1.052 and earlier allows retrieval of student and teacher data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-27258MISC idattend -- idweb Missing authentication in the GetAssignmentsDue method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction of sensitive student and teacher data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-27259MISC idattend -- idweb Missing authentication in the StudentPopupDetails_ContactDetails method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-27375MISC idattend -- idweb Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-27376MISC idattend -- idweb Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend's IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers. 2023-10-25 7.5 CVE-2023-27377MISC inohom -- home_manager_gateway   Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting. This issue affects Home Manager Gateway: before v.1.27.12. 2023-10-27 7.5 CVE-2023-5570MISC langchain -- langchain In Langchain through 0.0.155, prompt injection allows execution of arbitrary code against the SQL service provided by the chain. 2023-10-20 9.8 CVE-2023-32785MISC langchain -- langchain In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks. 2023-10-20 7.5 CVE-2023-32786MISC m-files -- web_companion Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution  2023-10-20 7.8 CVE-2023-5523MISC modoboa -- modoboa Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2. 2023-10-20 8.8 CVE-2023-5690MISCMISC mosparo -- mosparo Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3. 2023-10-20 8.8 CVE-2023-5687MISCMISC netentsec -- application_security_gateway A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/iscgwtunnel/uploadiscgwrouteconf.php. The manipulation of the argument GWLinkId leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-243138 is the identifier assigned to this vulnerability. 2023-10-23 9.8 CVE-2023-5700MISCMISCMISC netentsec -- application_security_gateway A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_addr_fwresource_ip.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243057 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-10-20 7.2 CVE-2023-5681MISCMISCMISC openimageio -- openimageio An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of file bifs/unquantize.c 2023-10-23 8.8 CVE-2023-42295MISC pleaser -- pleaser please (aka pleaser) through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. (If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited.) 2023-10-20 7.8 CVE-2023-46277MISCMISCMISCMISC projectworlds_pvt._limited -- leave_management_system_project   Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database. 2023-10-27 9.8 CVE-2023-44480MISCMISC qnap -- qusbcam2 An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: QUSBCam2 2.0.3 ( 2023/06/15 ) and later 2023-10-20 8.8 CVE-2023-23373MISC radare -- radare2 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. 2023-10-20 8.8 CVE-2023-5686MISCMISC reconftw -- reconftw reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities. A vulnerability has been identified in reconftw where inadequate validation of retrieved subdomains may lead to a Remote Code Execution (RCE) attack. An attacker can exploit this vulnerability by crafting a malicious CSP entry on it's own domain. Successful exploitation can lead to the execution of arbitrary code within the context of the application, potentially compromising the system. This issue has been addressed in version 2.7.1.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. 2023-10-20 8.8 CVE-2023-46117MISCMISC secudos -- qiata SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user. 2023-10-20 7.8 CVE-2023-40361MISC silabs -- gecko_bootloader An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots. 2023-10-20 7.8 CVE-2023-3487MISCMISC sitolog -- sitolog_application_connect Sitolog sitologapplicationconnect v7.8.a and before was discovered to contain a SQL injection vulnerability via the component /activate_hook.php. 2023-10-20 9.8 CVE-2023-37824MISC sollace -- unicopia Sollace Unicopia version 1.1.1 and before was discovered to deserialize untrusted data, allowing attackers to execute arbitrary code. 2023-10-20 9.8 CVE-2023-39680MISC stb_image.h -- stb_image.h stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn't give guarantees about the content of output value `*delays` upon failure. Although it sets `*delays` to zero at the beginning, it doesn't do it in case the image is not recognized as GIF and a call to `stbi__load_gif_main_outofmem` only frees possibly allocated memory in `*delays` without resetting it to zero. It would be fair to say the caller of `stbi__load_gif_main` is responsible to free the allocated memory in `*delays` only if `stbi__load_gif_main` returns a non-null value. However, at the same time the function may return null value but fail to free the memory in `*delays` if internally `stbi__convert_format` is called and fails. The issue may lead to a memory leak if the caller chooses to free `delays` only when `stbi__load_gif_main` didn't fail or to a double-free if the `delays` is always freed 2023-10-21 9.8 CVE-2023-45666MISCMISCMISC stb_image.h -- stb_image.h stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attempt to double-free the out variable. This happens in `stbi__load_gif_main` because when the `layers * stride` value is zero the behavior is implementation defined, but common that realloc frees the old memory and returns null pointer. Since it attempts to double-free the memory a few lines below the first "free", the issue can be potentially exploited only in a multi-threaded environment. In the worst case this may lead to code execution. 2023-10-21 8.8 CVE-2023-45664MISCMISC stb_image.h -- stb_image.h stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set to a number that doesn't match the real number of components per pixel, the library attempts to flip the image vertically. A crafted image file can trigger `memcpy` out-of-bounds read because `bytes_per_pixel` used to calculate `bytes_per_row` doesn't match the real image array dimensions. 2023-10-21 8.1 CVE-2023-45662MISCMISC stb_image.h -- stb_image.h stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails, it returns a null pointer and may keep the `z` variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls `stbi__vertical_flip_slices` with the null pointer result value and the uninitialized `z` value. This may result in a program crash. 2023-10-21 7.5 CVE-2023-45667MISCMISCMISC stb_image.h -- stb_image.h stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_next`. This happens because two_back points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory allocation information. 2023-10-21 7.1 CVE-2023-45661MISCMISCMISC stb_image.h -- stb_vorbis.c stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f- >vendor[i] = get8_packet(f);`. The root cause is an integer overflow in `setup_malloc`. A sufficiently large value in the variable `sz` overflows with `sz+7` in and the negative value passes the maximum available memory buffer check. This issue may lead to code execution. 2023-10-21 7.8 CVE-2023-45676MISCMISCMISC stb_image.h -- stb_vorbis.c stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f- >vendor[len] = (char)'';`. The root cause is that if `len` read in `start_decoder` is a negative number and `setup_malloc` successfully allocates memory in that case, but memory write is done with a negative index `len`. Similarly if len is INT_MAX the integer overflow len+1 happens in `f- >vendor = (char*)setup_malloc(f, sizeof(char) * (len+1));` and `f- >comment_list[i] = (char*)setup_malloc(f, sizeof(char) * (len+1));`. This issue may lead to code execution. 2023-10-21 7.8 CVE-2023-45677MISCMISCMISCMISCMISCMISC stb_image.h -- stb_vorbis.c stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in `start_decoder` because at maximum `m- >submaps` can be 16 but `submap_floor` and `submap_residue` are declared as arrays of 15 elements. This issue may lead to code execution. 2023-10-21 7.8 CVE-2023-45678MISCMISCMISC stb_image.h -- stb_vorbis.c stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, but some of the pointers in `f- >comment_list` are left initialized and later `setup_free` is called on these pointers in `vorbis_deinit`. This issue may lead to code execution. 2023-10-21 7.8 CVE-2023-45679MISCMISCMISC stb_image.h -- stb_vorbis.c stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in `start_decoder`. The root cause is a potential integer overflow in `sizeof(char*) * (f- >comment_list_length)` which may make `setup_malloc` allocate less memory than required. Since there is another integer overflow an attacker may overflow it too to force `setup_malloc` to return 0 and make the exploit more reliable. This issue may lead to code execution. 2023-10-21 7.8 CVE-2023-45681MISCMISC stb_image.h -- stb_vorbis.c stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro when `var` is negative. As it can be seen in the definition of `DECODE_RAW` a negative `var` is a valid value. This issue may be used to leak internal memory allocation information. 2023-10-21 7.1 CVE-2023-45682MISCMISCMISCMISC stb_image.h -- stb_vorbis.c stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f- >vendor[len] = (char)'';`. The root cause is that if the len read in `start_decoder` is `-1` and `len + 1` becomes 0 when passed to `setup_malloc`. The `setup_malloc` behaves differently when `f- >alloc.alloc_buffer` is pre-allocated. Instead of returning `NULL` as in `malloc` case it shifts the pre-allocated buffer by zero and returns the currently available memory block. This issue may lead to code execution. 2023-10-21 7.8 CVE-2023-45675MISCMISCMISCMISC superwebmailer -- superwebmailer An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter. 2023-10-21 8.8 CVE-2023-38190MISCMISC superwebmailer -- superwebmailer An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a crafted sendmail command line. 2023-10-21 8.8 CVE-2023-38193MISCMISC thingnario -- photon An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint. 2023-10-21 8.8 CVE-2023-46055MISC tongda -- oa A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORD_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. VDB-243058 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2023-10-20 9.8 CVE-2023-5682MISCMISCMISC totolink -- a3700r_firmware An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function. 2023-10-25 9.8 CVE-2023-46574MISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel. 2023-10-25 9.8 CVE-2023-46554MISCMISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw. 2023-10-25 9.8 CVE-2023-46555MISCMISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter. 2023-10-25 9.8 CVE-2023-46556MISCMISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN. 2023-10-25 9.8 CVE-2023-46557MISCMISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice. 2023-10-25 9.8 CVE-2023-46558MISCMISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr. 2023-10-25 9.8 CVE-2023-46559MISCMISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup. 2023-10-25 9.8 CVE-2023-46560MISCMISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg. 2023-10-25 9.8 CVE-2023-46562MISCMISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS. 2023-10-25 9.8 CVE-2023-46563MISCMISC totolink -- x2000r_firmware TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ. 2023-10-25 9.8 CVE-2023-46564MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function uninstallPluginReqHandle. 2023-10-25 9.8 CVE-2023-46520MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function RegisterRegister. 2023-10-25 9.8 CVE-2023-46521MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function deviceInfoRegister. 2023-10-25 9.8 CVE-2023-46522MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function upgradeInfoRegister. 2023-10-25 9.8 CVE-2023-46523MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function loginRegister. 2023-10-25 9.8 CVE-2023-46525MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function resetCloudPwdRegister. 2023-10-25 9.8 CVE-2023-46526MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function bindRequestHandle. 2023-10-25 9.8 CVE-2023-46527MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function modifyAccPwdRegister. 2023-10-25 9.8 CVE-2023-46534MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getResetVeriRegister. 2023-10-25 9.8 CVE-2023-46535MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function chkRegVeriRegister. 2023-10-25 9.8 CVE-2023-46536MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getRegVeriRegister. 2023-10-25 9.8 CVE-2023-46537MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function chkResetVeriRegister. 2023-10-25 9.8 CVE-2023-46538MISCMISC tp-link -- tl-wr886n_firmware TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function registerRequestHandle. 2023-10-25 9.8 CVE-2023-46539MISCMISC trtek_software -- education_portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Education Portal allows SQL Injection. This issue affects Education Portal: before 3.2023.29. 2023-10-27 9.8 CVE-2023-5807MISC vercel -- next.js Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN. 2023-10-22 7.5 CVE-2023-46298MISCMISCMISC vmware -- fusion VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume) or when installing an upgrade. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed or being installed for the first time. 2023-10-20 7.8 CVE-2023-34045MISC vmware -- fusion VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during installation for the first time (the user needs to drag or copy the application to a folder from the '.dmg' volume) or when installing an upgrade. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed or being installed for the first time. 2023-10-20 7 CVE-2023-34046MISC wallix -- bastion WALLIX Bastion 9.x before 9.0.9 and 10.x before 10.0.5 allows unauthenticated access to sensitive information by bypassing access control on a network access administration web interface. 2023-10-23 7.5 CVE-2023-46319MISC wordpress -- wordpress The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins (present and active), active theme, various plugin settings, WordPress version, as well as some server settings such as memory limit, installation paths. 2023-10-20 7.5 CVE-2023-4668MISCMISC wordpress -- wordpress The Jetpack CRM plugin for WordPress is vulnerable to PHAR deserialization via the 'zbscrmcsvimpf' parameter in the 'zeroBSCRM_CSVImporterLitehtml_app' function in versions up to, and including, 5.3.1. While the function performs a nonce check, steps 2 and 3 of the check do not take any action upon a failed check. These steps then perform a 'file_exists' check on the value of 'zbscrmcsvimpf'. If a phar:// archive is supplied, its contents will be deserialized and an object injected in the execution stream. This allows an unauthenticated attacker to obtain object injection if they are able to upload a phar archive (for instance if the site supports image uploads) and then trick an administrator into performing an action, such as clicking a link. 2023-10-20 8.8 CVE-2022-3342MISCMISCMISC wordpress -- wordpress The Brizy plugin for WordPress is vulnerable to authorization bypass due to an incorrect capability check on the is_administrator() function in versions up to, and including, 1.0.125. This makes it possible for authenticated attackers to access and interact with available AJAX functions. 2023-10-20 8.1 CVE-2020-36714MISCMISC wordpress -- wordpress The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized user interaction in versions up to, and including, 2.50. This is due to missing capability checks on several AJAX actions and nonce disclosure in the source page of the administrative dashboard. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to call functions and delete and/or upload files. 2023-10-20 8.8 CVE-2020-36698MISCMISCMISC wordpress -- wordpress The Cyr to Lat plugin for WordPress is vulnerable to authenticated SQL Injection via the 'ctl_sanitize_title' function in versions up to, and including, 3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This potentially allows authenticated users with the ability to add or modify terms or tags to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. A partial patch became available in version 3.6 and the issue was fully patched in version 3.7. 2023-10-20 8.8 CVE-2022-4290MISCMISC wordpress -- wordpress The Horizontal scrolling announcement plugin for WordPress is vulnerable to SQL Injection via the plugin's [horizontal-scrolling] shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. 2023-10-20 8.8 CVE-2023-4999MISCMISC wordpress -- wordpress The Dropbox Folder Share for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.9.7 via the editor-view.php file. This allows unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included. 2023-10-20 9.8 CVE-2023-4488MISCMISC wordpress -- wordpress The Icegram Express plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.6.23 via the show_es_logs function. This allows administrator-level attackers to read the contents of arbitrary files on the server, which can contain sensitive information including those belonging to other sites, for example in shared hosting environments. 2023-10-20 7.2 CVE-2023-5414MISCMISCMISC wordpress -- wordpress The ImageMagick Engine plugin for WordPress is vulnerable to remote code execution via the 'cli_path' parameter in versions up to and including 1.7.5. This makes it possible for unauthenticated users to run arbitrary commands leading to remote command execution, granted they can trick a site administrator into performing an action such as clicking on a link. This makes it possible for an attacker to create and or modify files hosted on the server which can easily grant attackers backdoor access to the affected server. 2023-10-20 8.8 CVE-2022-2441MISCMISCMISCMISCMISCMISC wordpress -- wordpress Cross-Site Request Forgery (CSRF) vulnerability in PluginEver WC Serial Numbers plugin alert(9206)

Read more »

Find the best Holiday sales and deals on Apple products using our price trackers at MacPrices.net
Our Apple award-winning price trackers are the best place to look for the lowest prices and latest sales on all the latest Apple gear this Holiday shopping season. Scan our price trackers for the latest information on sales, bundles, & availability on systems from 20+ retailers, including Apple, Amazon, B&H Photo, Adorama, Expercom, Sams Club, and many more. We update the trackers continuously: - iPhones - 16" MacBook Pros, 14" MacBook Pros, 13" MacBook Pros, 15" MacBook Airs, 13" MacBook Airs - iMacs, Mac minis, Mac Studios, Mac Pros, Studio Display, Pro Display XDR - 8.3" iPad minis, 10.9" iPads, 10.9" iPad Airs, 11" iPad Pros, 12" iPad Pros - Apple Watch, Apple TVs, Apple AirPods Other price trackers include HomePods, Keyboards & Pointers, iPad Keyboards, AirTags, and Apple Pencils. A full list of the available Apple price trackers is in the menu at the top of this page. The post first appeared on MacPrices.net.

Read more »

Cyber Monday Flash Sale: Select Apple 15-inch M2 MacBook Airs for $270 off MSRP, lowest prices anywhere
As part of their Cyber Monday sale, B&H Photo has Apple's new 15" MacBook Airs with M2 CPUs (8GB RAM/256GB SSD) in stock today and on sale for $1029 in (at the time of this post) Space Gray and Midnight colors. This sale price is for Cyber Monday 2023 only! Free 1-2 delivery is available to most US addresses. Their prices are $270 off Apple's MSRP and are the lowest available for 15" Airs. For the latest sales & prices, see our 15" MacBook Air Price Tracker. The post first appeared on MacPrices.net.

Read more »

Cyber Monday Flash Sale: Apple M2 Mac mini for only $479, cheapest new Mac you can buy
B&H Photo has Apple dropped their Cyber Monday sale price on the base M2 Mac mini another $20 to $479, $120 off Apple's MSRP. That's the cheapest price for a new Mac this Cyber Monday anywhere. Price is for today only! Free 1-2 day shipping is available for most US addresses: - Mac mini M2/256GB SSD: $479, save $120 For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple Watch SE GPS models on Cyber Monday sale for $70 off MSRP, prices start at only $179
Walmart has Apple Watch SE GPS-only models on sale for $70 off MSRP today, each including free shipping, as part of their Cyber Monday sale. Their prices are the lowest currently available for SE Watches: - 40mm Apple Watch SE GPS: $179, save $70 - 44mm Apple Watch SE GPS: $209, save $70 Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple Watch SE GPS models on Cyber Monday sale for $70 off MSRP, prices start at only $179
Walmart has Apple Watch SE GPS-only models on sale for $70 off MSRP today, each including free shipping, as part of their Cyber Monday sale. Their prices are the lowest currently available for SE Watches: - 40mm Apple Watch SE GPS: $179, save $70 - 44mm Apple Watch SE GPS: $209, save $70 Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). For the latest prices & sales, keep an eye on our Apple Watch Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Cyber Monday one day offer from Visible, use this code to save $10 per month on Visible+
For today only at Visible, Cyber Monday 2023, they will take $10 off their Visible+ plan for the duration of your service with them. Use code 35FLASH to get Visible+ for $35 per month. According to Visible, "Celebrate Cyber Monday at Visible! Today only, save $10 off the Visible+ plan for the duration of your service. As long as you don't switch your plan from the Visible+ plan, you will continue to cash in on this exciting promotion for life! Hurry and promote Visible today!" Redeem your code today only at Visible. The post first appeared on MacPrices.net.

Read more »

Apple’s new 14-inch M3 MacBook Pros are on sale for $150 off MSRP for Cyber Monday at these Apple retailers
Apple retailers have Apple's 14-inch MacBook Pros with the new M3 CPU in stock and on Cyber Monday sale for $150 off MSRP. Prices start at only $1449. These retailers are offering the lowest prices on Cyber Monday: (1): B&H Photo has new 14" M3 MacBook Pros on Cyber Monday sale for $150 off MSRP, starting at only $1449. B&H offers free 1-2 day delivery to most US addresses: - 14" 8-Core M3 MacBook Pro (8GB RAM/512GB SSD): $1449 $150 off MSRP - 14" 8-Core M3 MacBook Pro (8GB RAM/1TB SSD): $1649 $150 off MSRP (2): Apple 14" MacBook Pros with M3 CPUs are in stock and on Cyber Monday sale for $150 off MSRP at Amazon. Shipping is free: - 14" M3 MacBook Pro (8GB/512GB): $1449, $150 off MSRP - 14" M3 MacBook Pro (8GB/1TB): $1649, $150 off MSRP (3): Best Buy is offering a $150 discount on 14" M3 MacBook Pros, as well, on their online store. Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB/512GB): $1449, $150 off MSRP - 14" M3 MacBook Pro (8GB/1TB): $1649, $150 off MSRP For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple’s new 14-inch M3 MacBook Pros are on sale for $150 off MSRP for Cyber Monday at these Apple retailers
Apple retailers have Apple's 14-inch MacBook Pros with the new M3 CPU in stock and on Cyber Monday sale for $150 off MSRP. Prices start at only $1449. These retailers are offering the lowest prices on Cyber Monday: (1): B&H Photo has new 14" M3 MacBook Pros on Cyber Monday sale for $150 off MSRP, starting at only $1449. B&H offers free 1-2 day delivery to most US addresses: - 14" 8-Core M3 MacBook Pro (8GB RAM/512GB SSD): $1449 $150 off MSRP - 14" 8-Core M3 MacBook Pro (8GB RAM/1TB SSD): $1649 $150 off MSRP (2): Apple 14" MacBook Pros with M3 CPUs are in stock and on Cyber Monday sale for $150 off MSRP at Amazon. Shipping is free: - 14" M3 MacBook Pro (8GB/512GB): $1449, $150 off MSRP - 14" M3 MacBook Pro (8GB/1TB): $1649, $150 off MSRP (3): Best Buy is offering a $150 discount on 14" M3 MacBook Pros, as well, on their online store. Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB/512GB): $1449, $150 off MSRP - 14" M3 MacBook Pro (8GB/1TB): $1649, $150 off MSRP For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple’s new 14-inch M3 MacBook Pros are on sale for $150 off MSRP for Cyber Monday at these Apple retailers
Apple retailers have Apple's 14-inch MacBook Pros with the new M3 CPU in stock and on Cyber Monday sale for $150 off MSRP. Prices start at only $1449. These retailers are offering the lowest prices on Cyber Monday: (1): B&H Photo has new 14" M3 MacBook Pros on Cyber Monday sale for $150 off MSRP, starting at only $1449. B&H offers free 1-2 day delivery to most US addresses: - 14" 8-Core M3 MacBook Pro (8GB RAM/512GB SSD): $1449 $150 off MSRP - 14" 8-Core M3 MacBook Pro (8GB RAM/1TB SSD): $1649 $150 off MSRP (2): Apple 14" MacBook Pros with M3 CPUs are in stock and on Cyber Monday sale for $150 off MSRP at Amazon. Shipping is free: - 14" M3 MacBook Pro (8GB/512GB): $1449, $150 off MSRP - 14" M3 MacBook Pro (8GB/1TB): $1649, $150 off MSRP (3): Best Buy is offering a $150 discount on 14" M3 MacBook Pros, as well, on their online store. Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB/512GB): $1449, $150 off MSRP - 14" M3 MacBook Pro (8GB/1TB): $1649, $150 off MSRP For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple’s new 14-inch M3 MacBook Pros are on sale for $150 off MSRP for Cyber Monday at these Apple retailers
Apple retailers have Apple's 14-inch MacBook Pros with the new M3 CPU in stock and on Cyber Monday sale for $150 off MSRP. Prices start at only $1449. These retailers are offering the lowest prices on Cyber Monday: (1): B&H Photo has new 14" M3 MacBook Pros on Cyber Monday sale for $150 off MSRP, starting at only $1449. B&H offers free 1-2 day delivery to most US addresses: - 14" 8-Core M3 MacBook Pro (8GB RAM/512GB SSD): $1449 $150 off MSRP - 14" 8-Core M3 MacBook Pro (8GB RAM/1TB SSD): $1649 $150 off MSRP (2): Apple 14" MacBook Pros with M3 CPUs are in stock and on Cyber Monday sale for $150 off MSRP at Amazon. Shipping is free: - 14" M3 MacBook Pro (8GB/512GB): $1449, $150 off MSRP - 14" M3 MacBook Pro (8GB/1TB): $1649, $150 off MSRP (3): Best Buy is offering a $150 discount on 14" M3 MacBook Pros, as well, on their online store. Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB/512GB): $1449, $150 off MSRP - 14" M3 MacBook Pro (8GB/1TB): $1649, $150 off MSRP For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple 14-inch M3 Pro/Max MacBook Pros are on Cyber Monday sale for $200 off MSRP at these retailers
Apple retailers have Apple's new 14-inch MacBook Pros with M3 Pro and M3 Max CPU on Cyber Monday sale for $200 off MSRP. Here is where to score the lowest prices today: (1): B&H Photo has new 14" M3 Pro and M3 Max MacBook Pros on Cyber Monday sale for $200 off MSRP, starting at $1799. B&H offers free 1-2 day delivery to most US addresses: - 14" 11-Core M3 Pro MacBook Pro (18GB RAM/512GB SSD): $1799 $200 off MSRP - 14" 12-Core M3 Pro MacBook Pro (18GB RAM/1TB SSD): $2199 $200 off MSRP - 14" 14-Core M3 Max MacBook Pro (36GB RAM/1TB SSD): $2999 $200 off MSRP (2): Cyber Monday 14-inch MacBook Pro deals for 2023 are now live at Amazon as well. Apple 14" MacBook Pros with M3 Pro and M3 Max CPUs are in stock and on sale for $200 off MSRP. Shipping is free: - 14" M3 Pro MacBook Pro (18GB/512GB): $1799, $200 off MSRP - 14" M3 Pro MacBook Pro (18GB/1TB): $2199, $200 off MSRP - 14" M3 Max MacBook Pro (36GB/1TB): $2999, $200 off MSRP For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Apple 16-inch M3 Max MacBook Pros are on Cyber Monday sale for $200 off MSRP
Apple retailers have new 16-inch M3 Max MacBook Pros on sale for $200 off MSRP for Cyber Monday. Here's where to get the best deal on one of these beasts today: (1): Apple retailer Expercom is now offering 16" M3 Max MacBook Pros for $200 off MSRP, with free shipping, for Cyber Monday: - 16" M3 Max MacBook Pro (36GB/1TB): $3299, $200 off MSRP - 16" M3 Max MacBook Pro (48GB/1TB): $3799.05, $200 off MSRP Discounts are also available on various custom options such as extra RAM and storage space. (2): Best Buy has 16" M3 Max MacBook Pros on sale for $200 off MSRP on their online store for Cyber Monday: - 16" M3 Max MacBook Pro (36GB/1TB): $3299, $200 off MSRP - 16" M3 Max MacBook Pro (48GB/1TB): $3799, $200 off MSRP Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest prices and sales, see our 16" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »