Apple Music subscriptions grow 36% year-over-year
Global online music streaming subscriptions grew 32% year-on-year reaching 358 million subscriptions in calendar year 2019, according to the latest findings from Counterpoint Research.

Read more »

Elago 3-in-1 charging hub is virtually unbreakable, a steal ...
A decent all-in-one charging hub that can top-up your iPhone, Apple Watch, and AirPods simultaneously doesn’t have to break the bank. Elago’s is insanely practical, virtually unbreakable, and a steal at just $30. It’s ideal not only for desks and bedside tables, but also those who frequently travel. It supports all iPhone and Apple Watch […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple Music is catching up with Spotify in global subscriber...
Apple Music is catching up with Spotify in global subscribers new research shows. Apple Music's subscription bas grew 36% year-over-year to grab… The post Apple Music is catching up with Spotify in global subscribers appeared first on MacDailyNews.

Read more »

10 things you didn’t know about Apple Watch [Cult of Mac M...
Take your mind off the coronavirus pandemic with our latest installment of Apple trivia. This time we focus on Cupertino’s kick-ass wearable. Yes, it’s 10 things you probably didn’t know about Apple Watch. For more diversions, read our latest reviews of Apple TV+ shows: The Amazing Stories season finale and promising new mystery Home Before […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

March 2020: Apple Stores close, but MacBook Air & iPad P...
Maybe 2019 was practice for Apple, as it is now used to releasing new products via a press release. That's what it had to do in March 2020 as the whole world self-isolated, and Apple Stores closed their doors.

Read more »

Apple TV Channels offering free EPIX access, extended free t...
A handful of streaming services are offering extended trials through the Apple TV app during the COVID-19 pandemic. Currently, you can get extended one-month trials of Showtime and other services, as well as completely free access to EPIX. Read on for the details. more… The post Apple TV Channels offering free EPIX access, extended free trials of Showtime and many more appeared first on 9to5Mac.

Read more »

Apple Music gains on Spotify in subscribers and revenue, Cou...
New data from Counterpoint this week underscores the continued growth of streaming music as the competition intensifies between Apple Music and Spotify. According to the data, Apple Music’s subscriber base grew by 36% in 2019, giving Apple a 19% share of the total paid subscriptions in the industry. more… The post Apple Music gains on Spotify in subscribers and revenue, Counterpoint data indicates appeared first on 9to5Mac.

Read more »

Making the Grade: A firewall is a crucial part of your netwo...
Although there are a lot of similarities in K–12 and enterprise networks, K–12 networks will have some requirements that must be considered when overhauling a network. Over the next few weeks, I am going to discuss all the various pieces of building a K–12 network. We will look at firewalls, switches, Wi-Fi, device management, and device selection. This week, I am going to look at picking the best firewall. more… The post Making the Grade: A firewall is a crucial part of your network, here’s how to pick one appeared first on 9to5Mac.

Read more »

A Hacker Found a Way To Take Over Any Apple Webcam
An anonymous reader quotes a report from Wired: Apple has a well-earned reputation for security, but in recent years its Safari browser has had its share of missteps. This week, a security researcher publicly shared new findings about vulnerabilities that would have allowed an attacker to exploit three Safari bugs in succession and take over a target's webcam and microphone on iOS and macOS devices. Apple patched the vulnerabilities in January and March updates. But before the fixes, all a victim would have needed to do is click one malicious link and an attacker would have been able to spy on them remotely. The bugs Pickren found all stem from seemingly minor oversights. For example, he discovered that Safari's list of the permissions a user has granted to websites treated all sorts of URL variations as being part of the same site, like https://www.example.com, http://example.com and fake://example.com. By "wiggling around," as Pickren puts it, he was able to generate specially crafted URLs that could work with scripts embedded in a malicious site to launch the bait-and-switch that would trick Safari. A hacker who tricked a victim into clicking their malicious link would be able to quietly launch the target's webcam and microphone to capture video, take photos, or record audio. And the attack would work on iPhones, iPads, and Macs alike. None of the flaws are in Apple's microphone and webcam protections themselves, or even in Safari's defenses that keep malicious sites from accessing the sensors. Instead, the attack surmounts all of these barriers just by generating a convincing disguise. Read more of this story at Slashdot.

Read more »

OutRun is a simple iPhone run tracker that is privacy focuse...
I’ve been using my iPhone to track my runs since 2010 when I first signed up for RunKeeper when I had an iPhone 3GS. I’ve  only used a GPS watch for varying points in my running career, so for me, the iPhone has always been my primary run tracker. In recent years, many of the popular running apps have been moving towards a subscription model (which is understandable considering the apps need constant development), but I always believed there was room for a simple running that that was private by default and shared the data with Apple Health/Activity app. Finally, there is a simple iPhone Run Tracker, and its called OutRun. more… The post OutRun is a simple iPhone run tracker that is privacy focused and integrates with Apple Health appeared first on 9to5Mac.

Read more »

Review: Yobi B3 HomeKit Doorbell is easy to install and use
The Yobi B3 HomeKit Doorbell camera was announced at CES 2019, and after a long road through development, has escaped the fate of most products shown at CES. It's now available for pre-order, and we have some hands-on experience to share.

Read more »

Apple granted patent for a HomePod audio system with ‘...
Apple has been granted a patent for an “audio system with configurable zones” that hints at future features for paired HomePods in, among other things, a home theater set-up.

Read more »

Today in Apple history: Apple frenemy Microsoft is born
April 4, 1975: Childhood friends Bill Gates and Paul Allen found Microsoft Corporation, a software company destined to become a tech behemoth — and a major Apple frenemy. A few years later, Microsoft will break through to the mainstream with Excel and Word, becoming a key developer of Macintosh software. Then comes the Windows operating […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Notable apps and updates, March 30-April 3
On a regular basis, Apple World Today posts a list of notable new apps or app updates that have been released. They may not necessarily be new, but they're popular and deserve mention. Here are this week’s picks.

Read more »

Intel’s new ‘Comet Lake-H’ processors are best suited ...
Apple has not announced an upgrade to the 16-inch MacBook Pro released late last year. But when it does sometime down the road, it’s likely to include the new CPU that Intel just announced. The “10th Gen Intel Core-H Series,” as it is officially named (or “Comet Lake-H” as the hardware enthusiasts call it) will offer clock speeds over 5GHz.Intel calls it the “world’s fastest mobile processor” and it’s the latest salvo in a growing battle between Intel and AMD in the laptop market. Apple has stuck with Intel chips for years and, assuming that continues, the 16-inch MacBook Pro is likely to get an upgrade to these processors later this year. Here’s what you can expect.To read this article in full, please click here

Read more »

How to check if your Mac’s software is 32- or 64-bit
MacOS 10.14 Mojave, the version of the Mac operating system before the new macOS Catalina, is the last version that supports 32-bit software. With Catalina, only 64-bit software will be supported.Catalina is here and if you decide to upgrade to the new macOS, you need to do a bit more than usual to prepare your Mac. You need to make sure your apps are 64-bit versions. If your app is a 32-bit version, it will not work. AppleApple actually started to warn people about the change with macOS 10.13 High Sierra. If you launch a 32-bit app in High Sierra, an alert pops up to tell you that your app needs to be updated. The alert appears only once in High Sierra, and in Mojave, it appears every 30 days.To read this article in full, please click here

Read more »

Apple Music subscriber base grew 36% in 2019, second only to...
Music streaming subscriptions were up 32% globally last year, with Apple Music maintaining a comfortable second place position behind Spotify, according to newly published estimates.

Read more »

These 17 movies will be available online early to help ease ...
The Call of the Wild, Onward, Bad Boys for Life, and more are available to rent or buy from streaming services way ahead of schedule.

Read more »

How Apple’s exemption program for in-app video purchas...
Amazon's Prime Video app now features in-app rentals and purchases across Apple's platforms. While that's new, there's much more to the story -- including the previously obscure Apple initiative that allowed it.

Read more »

Amazing Stories ends with a bang, should have settled for a ...
Amazing Stories’ season finale “The Rift” serves as a case study into the rebooted show’s highs and lows. With its five-episode run complete, the ways in which the Apple TV+ anthology series succeeded — and the ways it failed to cohere — become more obvious than ever. “The Rift” was directed by Mark Mylod and […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple acquires AI startup Voysis to bolster Siri
Apple has acquired Voysis, an artificial intelligence startup that developed a platform for digital voice assistants to better understand people’s… The post appeared first on MacDailyNews.

Read more »

Tim Cook to deliver virtual commencement address for Ohio St...
Apple CEO Tim Cook is scheduled to deliver a "virtual commencement address" for Ohio State University students graduating this spring, the university announced on Friday.

Read more »

Apple buys A.I. voice assistant startup
Apple has acquired Voysis, an artificial intelligence startup the high-tech company is expected to use to improve Siri and its natural language technology, based on published reports Friday. According to a Bloomberg report, the Dublin, Ireland-based company creates A.I. technologies that listen to and translate human voice. The Voysis platform allowed customers to ask more […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Tim Cook keeping commencement address streak with virtual Oh...
Tim Cook is known to deliver a commencement address in front of graduating college students every spring. This year is no exception, although the global health pandemic calls for unique measures: a virtual appearance. more… The post Tim Cook keeping commencement address streak with virtual Ohio State graduation on May 3 appeared first on 9to5Mac.

Read more »

9to5Rewards: Mac Pro Rack giveaway + OWC memory & storag...
We’ve teamed up with OWC this month for our biggest giveaway yet: Apple’s brand new Mac Pro Rack worth $6499 USD. Not only are we giving away Apple’s most expensive desktop machine to date, OWC is also including 384GB of its new memory and its Accelsior 4M2 4TB SSD made for the new Mac Pro (normally worth around $3000 USD combined!). Head below to enter the giveaway and more on OWC’s new Mac Pro products: more… The post 9to5Rewards: Mac Pro Rack giveaway + OWC memory & storage appeared first on 9to5Mac.

Read more »

University of Alabama selects Apple Watch to monitor footbal...
The University of Alabama's Crimson Tide football program caused a bit of a stir in the collegiate sports world this week when it was revealed that the team is using Apple Watch to monitor player fitness during the COVID-19 pandemic.

Read more »

Apple scoops up Voysis, an AI startup, to beef up Siri
Apple has acquired Voysis, an artificial intelligence start-up, to improve the natural language skills of Siri, its personal digit assistant.

Read more »

Bugs that let sites hijack Mac and iPhone cameras fetches $7...
Here's how one researcher bypass stringent restrictions Apple puts on webcam access.

Read more »

Apple acquires AI startup Voysis in apparent push to bolster...
Apple recently purchased Dublin, Ireland-based company Voysis, a startup that conducted work on improving natural language processing in virtual assistants.

Read more »

Amidst COVID-19, Disney+ Soars. Apple TV+ Not So Much
Analysis shows that Apple TV+ decisions about new content don’t seem to be resonating with viewers under lockdown.

Read more »

The Web’s Bot Containment Unit Needs Your Help
Anyone who's seen the 1984 hit movie Ghostbusters likely recalls the pivotal scene where a government bureaucrat orders the shutdown of the ghost containment unit, effectively unleashing a pent-up phantom menace on New York City. Now, something similar is in danger of happening in cyberspace: Shadowserver.org, an all-volunteer nonprofit organization that works to help Internet service providers (ISPs) identify and quarantine malware infections and botnets, has lost its longtime primary source of funding.

Read more »

Vulnerability Summary for the Week of March 9, 2020
Original release date: March 16, 2020The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.   High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info apache -- shardingsphere   In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE. 2020-03-11 7.5 CVE-2020-1947CONFIRM bookstack -- bookstack   BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This most impacts scenarios where non-trusted users are given permission to upload images in any area of the application. The issue was addressed in a series of patches in versions 0.25.3, 0.25.4 and 0.25.5. Users should upgrade to at least v0.25.5 to avoid this vulnerability. 2020-03-09 9 CVE-2020-5256MISCMISCMISCCONFIRM bwa_technology -- direx-pro_devices BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3. 2020-03-09 10 CVE-2020-10250MISC d-link -- dcs-930l_devices   setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter. 2020-03-09 9 CVE-2016-11021MISC d-link -- dir-825_devices   An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. 2020-03-07 9 CVE-2020-10215MISCMISC d-link -- dir-825_devices   An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. 2020-03-07 9 CVE-2020-10216MISCMISC d-link -- dir-825_devices   An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. 2020-03-07 9 CVE-2020-10213MISCMISC d-link -- dir-825_devices   An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_sync.cgi with a sufficiently long parameter ntp_server. 2020-03-07 9 CVE-2020-10214MISC dell -- digital_delivery   Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system. 2020-03-09 7.2 CVE-2020-5342MISC dell -- emc_isilon_onefs   Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required. When this happens, loss of control of the cluster can occur. 2020-03-06 10 CVE-2020-5328MISC dell -- security_management_server   Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerability. When the server is exposed to the internet and Windows Firewall is disabled, a remote unauthenticated attacker may exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host./ 2020-03-06 9.3 CVE-2020-5327MISC fat-free_framework -- fat-free_framework    In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUEST, $_GET, or $_POST) to the framework's Clear method. 2020-03-11 7.5 CVE-2020-5203MISCCONFIRM gitlab -- gitlab_community_and_enterprise_editions   An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Server-Side Request Forgery (SSRF) vulnerabilities caused by an insufficient validation to prevent DNS rebinding attacks. 2020-03-10 7.5 CVE-2019-12443MISCCONFIRM gitlab-- gitlab   GitLab 10.7 and later through 12.7.2 has Incorrect Access Control. 2020-03-06 7.5 CVE-2020-8113CONFIRMMISCMISC gitlab -- gitlab_community_and_enterprise_editions   An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization. 2020-03-10 7.5 CVE-2019-12428MISCCONFIRM google -- android In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648045References: N/A 2020-03-10 7.2 CVE-2020-0011MISC google -- android   In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143155861 2020-03-10 7.8 CVE-2020-0039MISC google -- android   In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143106535 2020-03-10 7.8 CVE-2020-0037MISC google -- android   In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770 2020-03-10 7.8 CVE-2020-0034MISC google -- android   In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143109193 2020-03-10 7.8 CVE-2020-0038MISC google -- android   In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144351324 2020-03-10 7.2 CVE-2020-0033MISC google -- android   In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137014293References: N/A 2020-03-10 7.2 CVE-2020-0010MISC google -- android   In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648844 2020-03-10 7.2 CVE-2020-0012MISC google -- android   In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144679405 2020-03-10 7.2 CVE-2020-0036MISC google -- android   In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-145364230 2020-03-10 9.3 CVE-2020-0032MISC google -- android   In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel 2020-03-10 7.2 CVE-2020-0041MISC google -- android   In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754 2020-03-10 7.2 CVE-2020-0069MISC hp -- storage_essentials   In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461. 2020-03-10 10 CVE-2017-10992MISC jenkins -- jenkins Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins. 2020-03-09 9 CVE-2020-2159MLISTCONFIRM jenkis -- jenkins   An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system. 2020-03-09 8.5 CVE-2020-2139MLISTCONFIRM lexmark -- markvision_exterprise   Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. ( 2020-03-09 7.5 CVE-2016-6918MISC magento -- advanced_newsletter   SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO. 2020-03-09 10 CVE-2014-1634MISC palo_alto_networks -- pan-os   A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. 2020-03-11 7.2 CVE-2020-1981CONFIRM palo_alto_networks -- pan-os   A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. This issue is fixed in PAN-OS 8.1.13, and all later versions. 2020-03-11 7.2 CVE-2020-1980CONFIRM phpgurukul -- job_portal   An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution. 2020-03-08 7.5 CVE-2020-10225MISCMISC phpgurukul -- online_book_store   An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution. 2020-03-08 7.5 CVE-2020-10224MISCMISC quest -- kace_k1000_systems_management_appliance   service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter. 2020-03-09 7.5 CVE-2019-20504MISC rconfig -- rconfig   lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter. 2020-03-08 9 CVE-2020-10221MISCMISCMISC rconfig -- rconfig   An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. 2020-03-07 7.5 CVE-2020-10220MISCMISC responsive_filemanager -- responsive_filemanager   upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an internal IP address. For example, an SSRF attempt may succeed if a .ico filename is added to the PATH_INFO. Also, an attacker could create a DNS hostname that resolves to the 0.0.0.0 IP address for DNS pinning. NOTE: this issue exists because of an incomplete fix for CVE-2018-14728. 2020-03-07 7.5 CVE-2020-10212MISC ricoh -- multiple_devices   A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and prior; Kantech EntraPass Global Edition versions 8.0 and prior. 2020-03-10 10 CVE-2019-7589CONFIRMCERT sap -- solution_manager   SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check. 2020-03-10 7.5 CVE-2020-6198MISCMISC sap -- solution_manager   SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager. 2020-03-10 7.5 CVE-2020-6207MISCMISC siemens -- multiple_simatic_devices   A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability. 2020-03-10 7.8 CVE-2019-19281MISC siemens -- simatic_s7-300_cpu_family_and_sinumerik_840d_sl A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SINUMERIK 840D sl (All versions). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known. 2020-03-10 7.8 CVE-2019-18336MISC siemens -- siprotec_4_and_sprotec_devices   A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens. 2020-03-10 7.8 CVE-2019-19279MISC sleuth_kit -- sleuth_kit   In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c. 2020-03-09 7.5 CVE-2020-10232MISCMLIST substack -- minimist   minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload. 2020-03-11 7.5 CVE-2020-7598MISC sumavision -- enhanced_multimedia_router   goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_useradministrator123456 request. 2020-03-11 7.5 CVE-2020-10181MISCMISC tibco_software -- spotfire_analytics_platform_for_aws_marketplace   The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permissions to the Spotfire Library, but not "Script Author" group permission, to modify attributes of files and objects saved to the library such that the system treats them as trusted. This could allow an attacker to cause the Spotfire Web Player, Analyst clients, and TERR Service into executing arbitrary code with the privileges of the system account that started those processes. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 10.8.0 and below and TIBCO Spotfire Server: versions 7.11.9 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5, and 10.3.6, versions 10.4.0, 10.5.0, 10.6.0, 10.6.1, 10.7.0, and 10.8.0. 2020-03-11 9 CVE-2020-9408CONFIRMCONFIRM twisted_matrix -- twisted_web   In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request. 2020-03-12 7.5 CVE-2020-10108MISCMISC twisted_matrix -- twisted_web   In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request. 2020-03-12 7.5 CVE-2020-10109MISCMISC urllib3 -- urllib3   The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. The percent_encodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length N, the size of percent_encodings may be up to O(N). The next step (normalize existing percent-encoded bytes) also takes up to O(N) for each step, so the total time is O(N^2). If percent_encodings were deduplicated, the time to compute _encode_invalid_chars would be O(kN), where k is at most 484 ((10+6*2)^2). 2020-03-06 7.8 CVE-2020-7212MISCMISCMISC wago -- pfc200_devices An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted XML file will direct the Cloud Connectivity service to download and execute a shell script with root privileges. 2020-03-11 9 CVE-2019-5161MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the extracted dns value from the xml file is used as an argument to /etc/config-tools/edit_dns_server %s dns-server-nr=%d dns-server-name= using sprintf(). This command is later executed via a call to system(). This is done in a loop and there is no limit to how many dns entries will be parsed from the xml file. 2020-03-11 9.3 CVE-2019-5167MISC wftpserver -- wing_ftp_server   Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and world-writable permissions. If a sensitive system file were edited this way, a low-privilege user may escalate privileges to root. 2020-03-07 7.2 CVE-2020-8634MISC wftpserver -- wing_ftp_server   Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and escalate privileges within the operating system by modifying system files. 2020-03-07 7.2 CVE-2020-8635MISC wordpress -- wordpress   The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter. 2020-03-10 7.5 CVE-2020-10257MISC zoho -- manageengine_desktop_central   An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. 2020-03-11 7.5 CVE-2020-8540CONFIRM zoho -- manageengine_desktop_central   Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets. 2020-03-06 10 CVE-2020-10189MISCMISCMISCCONFIRMMISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info ansible -- ansible   A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10. 2020-03-09 4.6 CVE-2020-1737CONFIRMMISCFEDORAFEDORA ansible -- ansible   A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p "; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc//cmdline'. 2020-03-11 4.4 CVE-2020-1733CONFIRMMISC avast -- antitrack   Avast AntiTrack before 1.5.1.172 and AVG Antitrack before 2.0.0.178 proxies traffic to HTTPS sites but does not validate certificates, and thus a man-in-the-middle can host a malicious website using a self-signed certificate. No special action necessary by the victim using AntiTrack with "Allow filtering of HTTPS traffic for tracking detection" enabled. (This is the default configuration.) 2020-03-09 5.8 CVE-2020-8987CONFIRMMISC barracuda -- load_balancer_adc   Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = V3.0), SCALANCE S612 (All versions >= V3.0), SCALANCE S623 (All versions >= V3.0), SCALANCE S627-2M (All versions >= V3.0). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it. 2020-03-10 not yet calculated CVE-2019-6585MISC technicolor -- tc7337net_devices   Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header. 2020-03-11 not yet calculated CVE-2020-10376MISC torpeodquery -- torpeodquery   Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java. 2020-03-12 not yet calculated CVE-2019-11343MISCMISC trendmicro -- password_manager_for_windows   Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation. 2020-03-12 not yet calculated CVE-2020-8469N/A unicode -- international_components_for_unicode_for_c/c++ An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp. 2020-03-12 not yet calculated CVE-2020-10531REDHATMISCMISCMISCMISCMISCGENTOOMISC untis -- webuntis   Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules. 2020-03-13 not yet calculated CVE-2020-10540MISC vesta -- vesta_control_panel   Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the dangerous command exec. This function can be dangerous if arguments passed to it are not filtered. Every user input in VestaCP that is used as an argument is filtered with the escapeshellarg function. This function comes from the PHP library directly and its description is as follows: "escapeshellarg() adds single quotes around a string and quotes/escapes any existing single quotes allowing you to pass a string directly to a shell function and having it be treated as a single safe argument." It means that if you give Username, it will have 'Username' as a replacement. This works well and protects users from exploiting this potentially dangerous exec function. Unfortunately, VestaCP uses this escapeshellarg function incorrectly in several places. 2020-03-10 not yet calculated CVE-2019-9859MISC wago -- e!cockpit   A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text. 2020-03-11 not yet calculated CVE-2019-5106MISC wago -- e!cockpit   An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware version is being installed. An attacker can create a custom firmware update package with invalid metadata in order to trigger this vulnerability. 2020-03-11 not yet calculated CVE-2019-5158MISC wago -- e!cockpit   An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially crafted firmware update file can allow an attacker to write arbitrary files to arbitrary locations on WAGO controllers as a part of executing a firmware update, potentially resulting in code execution. An attacker can create a malicious firmware update package file using any zip utility. The user must initiate a firmware update through e!COCKPIT and choose the malicious wup file using the file browser to trigger the vulnerability. 2020-03-11 not yet calculated CVE-2019-5159MISC wago -- pfc100_and_pfc200_devices   An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt() function which can be exploited to disclose hashed user credentials. This affects WAGO PFC200 Firmware version 03.00.39(12) and version 03.01.07(13), and WAGO PFC100 Firmware version 03.00.39(12). 2020-03-11 not yet calculated CVE-2019-5135MISC wago -- pfc200_devices An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1e9fc the extracted subnetmask value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled subnet-mask= using sprintf(). This command is later executed via a call to system(). 2020-03-11 not yet calculated CVE-2019-5174MISC wago -- pfc200_devices An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e9fc the extracted state value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state= using sprintf(). This command is later executed via a call to system(). 2020-03-11 not yet calculated CVE-2019-5173MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1e87c the extracted hostname value from the xml file is used as an argument to /etc/config-tools/change_hostname hostname= using sprintf(). This command is later executed via a call to system(). 2020-03-12 not yet calculated CVE-2019-5170MISC wago -- pfc200_devices   An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO PFC100 version 03.00.39(12). A specially crafted authentication request can bypass regular expression filters, resulting in sensitive information disclosure. 2020-03-11 not yet calculated CVE-2019-5134MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1ea28 the extracted type value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled config-type= using sprintf(). This command is later executed via a call to system(). 2020-03-11 not yet calculated CVE-2019-5175MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command. 2020-03-11 not yet calculated CVE-2019-5156MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject OS commands into the TimeoutUnconfirmed parameter value contained in the Firmware Update command. 2020-03-11 not yet calculated CVE-2019-5157MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file. 2020-03-11 not yet calculated CVE-2019-5166MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e900 the extracted gateway value from the xml file is used as an argument to /etc/config-tools/config_default_gateway number=0 state=enabled value= using sprintf(). This command is later executed via a call to system(). 2020-03-12 not yet calculated CVE-2019-5169MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send specially crafted packet at 0x1ea48 to the extracted hostname value from the xml file that is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled ip-address= using sprintf(). 2020-03-12 not yet calculated CVE-2019-5171MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any subnetmask values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled subnet-mask=‘) in length. A subnetmask value of length 0x3d9 will cause the service to crash. 2020-03-12 not yet calculated CVE-2019-5181MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e840 the extracted ntp value from the xml file is used as an argument to /etc/config-tools/config_sntp time-server-%d= using sprintf(). This command is later executed via a call to system(). This is done in a loop and there is no limit to how many ntp entries will be parsed from the xml file. 2020-03-11 not yet calculated CVE-2019-5172MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x40 is overflowed with the call to sprintf() for any gateway values that are greater than 512-len(‘/etc/config-tools/config_default_gateway number=0 state=enabled value=‘) in length. A gateway value of length 0x7e2 will cause the service to crash. 2020-03-12 not yet calculated CVE-2019-5176MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. 2020-03-12 not yet calculated CVE-2019-5179MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any hostname values that are greater than 1024-len(‘/etc/config-tools/change_hostname hostname=‘) in length. A hostname value of length 0x3fd will cause the service to crash. 2020-03-12 not yet calculated CVE-2019-5178MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any ip values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled ip-address=‘) in length. A ip value of length 0x3da will cause the service to crash. 2020-03-12 not yet calculated CVE-2019-5180MISC wago -- pfc200_devices   An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x440 is overflowed with the call to sprintf() for any type values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled config-type=‘) in length. A type value of length 0x3d9 will cause the service to crash. 2020-03-11 not yet calculated CVE-2019-5182MISC wago -- pfc200_devices   An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12) 2020-03-11 not yet calculated CVE-2019-5155MISC watchguard -- fireware The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI. 2020-03-12 not yet calculated CVE-2020-10532MISCMISC wordpress -- wordpress controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters. 2020-03-10 not yet calculated CVE-2018-14502MISCMISC wordpress -- wordpress The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of requests that leverage unintended comparisons of integers to strings. 2020-03-14 not yet calculated CVE-2020-10568MISCMISC wordpress -- wordpress The popup-builder plugin before 3.64.1 for WordPress allows information disclosure and settings modification, leading to in-scope privilege escalation via admin-post actions to com/classes/Actions.php. By sending a POST request to wp-admin/admin-post.php, an authenticated attacker with minimal (subscriber-level) permissions can modify the plugin's settings to allow arbitrary roles (including subscribers) access to plugin functionality by setting the action parameter to sgpbSaveSettings, export a list of current newsletter subscribers by setting the action parameter to csv_file, or obtain system configuration information including webserver configuration and a list of installed plugins by setting the action parameter to sgpb_system_info. 2020-03-13 not yet calculated CVE-2020-10195MISCMISC wordpress -- wordpress   An XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote attackers to inject arbitrary JavaScript into existing popups via an unsecured ajax action in com/classes/Ajax.php. It is possible for an unauthenticated attacker to insert malicious JavaScript in several of the popup's fields by sending a request to wp-admin/admin-ajax.php with the POST action parameter of sgpb_autosave and including additional data in an allPopupData parameter, including the popup's ID (which is visible in the source of the page in which the popup is inserted) and arbitrary JavaScript which will then be executed in the browsers of visitors to that page. Because the plugin functionality automatically adds script tags to data entered into these fields, this injection will typically bypass most WAF applications. 2020-03-13 not yet calculated CVE-2020-10196MISCMISC wordpress -- wordpress   An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfu_include_lib call. 2020-03-13 not yet calculated CVE-2020-10564MISCMISCMISC xerox -- phaser_3320_printers Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credentials may be extracted from the device via brute force guessing attacks. 2020-03-13 not yet calculated CVE-2019-13166MISCMISC xerox -- phaser_3320_printers Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions. 2020-03-13 not yet calculated CVE-2019-13167MISCMISC xerox -- phaser_3320_printers Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would allow an attacker to execute arbitrary code on the device. 2020-03-13 not yet calculated CVE-2019-13169MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow an attacker to execute arbitrary code on the device. 2020-03-13 not yet calculated CVE-2019-13172MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that would allow an unauthenticated attacker to execute arbitrary code on the device. This was caused by an insecure handling of the register parameters, because the size used within a memcpy() function, which copied the action value into a local variable, was not checked properly. 2020-03-13 not yet calculated CVE-2019-13171MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device. 2020-03-13 not yet calculated CVE-2019-13165MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Successful exploitation of this vulnerability can lead to the takeover of a local account on the device. 2020-03-13 not yet calculated CVE-2019-13170MISCMISC xerox -- phaser_3320_printers   Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device. 2020-03-13 not yet calculated CVE-2019-13168MISCMISC yii2cmf -- yii2cmf yidashi yii2cmf 2.0 has XSS via the /search q parameter. 2020-03-12 not yet calculated CVE-2018-10704MISCMISC zoho -- managenegine_opmanager   Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108. 2020-03-13 not yet calculated CVE-2020-10541MISC zoho -- managengine_applications_manager   Zoho ManageEngine Applications Manager 14590 and before allows a remote unauthenticated attacker to disclose license related information via WieldFeedServlet servlet 2020-03-13 not yet calculated CVE-2019-19799MISCMISC Back to top This product is provided subject to this Notification and this Privacy & Use policy.

Read more »

Live Coronavirus Map Used to Spread Malware
Cybercriminals constantly latch on to news items that captivate the public's attention, but usually they do so by sensationalizing the topic or spreading misinformation about it. Recently, however, cybercrooks have started disseminating real-time, accurate information about global infection rates tied to the Coronavirus/COVID-19 pandemic in a bid to infect computers with malicious software. 

Read more »

Crafty Web Skimming Domain Spoofs “https”
Earlier today, KrebsOnSecurity alerted the 10th largest food distributor in the United States that one of its Web sites had been hacked and retrofitted with code that steals credit card and login data. While such Web site card skimming attacks are not new, this intrusion leveraged a sneaky new domain that hides quite easily in a hacked site's source code: "http[.]ps" (the actual malicious domain does not include the brackets, which are there to keep readers from being able to click on it).

Read more »

Microsoft Patch Tuesday, March 2020 Edition
Microsoft Corp. today released updates to plug more than 100 security holes in its various Windows operating systems and associated software. If you (ab)use Windows, please take a moment to read this post, backup your system(s), and patch your PCs.

Read more »

FBI Arrests Alleged Owner of Deer.io, a Top Broker of Stolen...
FBI officials last week arrested a Russian computer security researcher on suspicion of operating deer.io, a vast marketplace for buying and selling stolen account credentials for thousands of popular online services and stores. Kirill V. Firsov was arrested Mar. 7 after arriving at New York's John F. Kennedy Airport, according to court documents unsealed Monday. Prosecutors with the U.S. District Court for the Southern District of California allege Firsov was the administrator of deer.io, an online platform that hosted more than 24,000 shops for selling stolen and/or hacked usernames and passwords for a variety of top online destinations.

Read more »

Nagios XI Authenticated Remote Command Execution
This Metasploit module exploits a vulnerability in Nagios XI versions before 5.6.6 in order to execute arbitrary commands as root. The module uploads a malicious plugin to the Nagios XI server and then executes this plugin by issuing an HTTP GET request to download a system profile from the server. For all supported targets except Linux (cmd), the module uses a command stager to write the exploit to the target via the malicious plugin. This may not work if Nagios XI is running in a restricted Unix environment, so in that case the target must be set to Linux (cmd). The module then writes the payload to the malicious plugin while avoiding commands that may not be supported. Valid credentials for a user with administrative privileges are required. This module was successfully tested on Nagios XI 5.6.5 running on CentOS 7. The module may behave differently against older versions of Nagios XI.

Read more »

Vulnerability Summary for the Week of March 2, 2020
Original release date: March 9, 2020The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.   High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info apple -- multiple_products   A denial of service issue was addressed with improved input validation. 2020-02-28 7.8 CVE-2019-8741MISCMISCMISCMISCMISCMISCMISC centreon -- centreon   An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/monitoring/status/Hosts/xml/hostXML.php instance parameter. 2020-03-05 7.5 CVE-2019-17647CONFIRMCONFIRMCONFIRMMISCCONFIRMCONFIRM centreon -- centreon   Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_remote request. 2020-02-28 9 CVE-2020-9463MISC cisco -- remote_phy_device_software A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exists because the affected software does not properly sanitize user-supplied input. An attacker who has valid administrator access to an affected device could exploit this vulnerability by supplying certain CLI commands with crafted arguments. A successful exploit could allow the attacker to run arbitrary commands as the root user, which could result in a complete system compromise. 2020-03-04 7.2 CVE-2020-3176CISCO cisco -- webex_network_recording_player_for_microsoft_windows_and_webex_player_for_microsoft_windows Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to insufficient validation of certain elements within a Webex recording that is stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit these vulnerabilities by sending a malicious ARF or WRF file to a user through a link or email attachment and persuading the user to open the file on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user. 2020-03-04 9.3 CVE-2020-3127CISCOMISC cisco -- webex_network_recording_player_for_microsoft_windows_and_webex_player_for_microsoft_windows Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to insufficient validation of certain elements within a Webex recording that is stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit these vulnerabilities by sending a malicious ARF or WRF file to a user through a link or email attachment and persuading the user to open the file on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user. 2020-03-04 9.3 CVE-2020-3128CISCO d-link -- dsl-2680_router   A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to reboot the router by submitting a reboot.html GET request without being authenticated on the admin interface. 2020-03-04 7.8 CVE-2019-19223MISCMISCMISCMISC d-link -- dwl-2600ap_devices   D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter. 2020-03-05 7.2 CVE-2019-20501MISCMISC d-link -- dwl-2600ap_devices   D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter. 2020-03-05 7.2 CVE-2019-20500MISCMISC d-link -- dwl-2600ap_devices   D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter. 2020-03-05 7.2 CVE-2019-20499MISCMISC enpeem -- enpeem   enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization. 2020-02-28 7.5 CVE-2019-10801MISCMISC envoy_proxy -- envoy   CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret (e.g. trusted CA) across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even though it was visible in the active config dump. 2020-03-04 7.5 CVE-2020-8664MISCCONFIRM envoy_proxy -- envoy   CNCF Envoy through 1.13.0 TLS inspector bypass. TLS inspector could have been bypassed (not recognized as a TLS client) by a client using only TLS 1.3. Because TLS extensions (SNI, ALPN) were not inspected, those connections might have been matched to a wrong filter chain, possibly bypassing some security restrictions in the process. 2020-03-04 7.5 CVE-2020-8660MISCCONFIRM eset -- cyber_security   A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files. 2020-03-03 7.2 CVE-2019-19792MISC eset -- mutliple_products   The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop. 2020-03-05 7.5 CVE-2020-10180MISC eyesofnetwork -- eonweb An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie. 2020-02-28 7.5 CVE-2020-9465MISCMISC fasterxml -- jackson-databind A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code. 2020-03-02 7.5 CVE-2019-14893CONFIRMMISC fasterxml -- jackson-databind A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code. 2020-03-02 7.5 CVE-2019-14892CONFIRMMISC huawei -- honor_v10_smartphones   Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter when initializing certain driver program. An attacker could trick the user into installing a malicious application, successful exploit could cause the device to reboot. 2020-02-28 7.1 CVE-2020-1792MISC huawei -- nip6800_and_secospace_ugs6600_and_usg9500_devices   NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the device reboot. 2020-02-28 7.8 CVE-2020-1873MISC hunan_jinyun_network_technology -- pbootcms An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter. 2020-03-02 7.5 CVE-2018-16356MISC hunan_jinyun_network_technology -- pbootcms An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter. 2020-03-02 7.5 CVE-2018-16357MISC kill-port-process -- kill-port-process The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability. 2020-02-28 10 CVE-2019-15609MISC mangoraft -- giting giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation. 2020-02-28 7.5 CVE-2019-10802MISCMISC mikrotik -- routeros An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack. 2020-03-02 7.1 CVE-2018-5951MISC mitel -- micollab_awv   A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts. 2020-03-02 7.5 CVE-2019-19607MISCCONFIRM mitel -- micollab_awv   A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts. 2020-03-02 7.5 CVE-2019-19608MISCCONFIRM netgear -- wnr10004_routers   An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web management interface (setup.cgi) are vulnerable to command injection, allowing remote attackers to execute arbitrary commands, as demonstrated by shell metacharacters in the sysDNSHost parameter. 2020-03-02 7.5 CVE-2019-20488MISC netkit-telnet -- netkit-telnet   utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions. 2020-03-06 10 CVE-2020-10188MISCMISC node-pdf-image -- node-pdf-image Lack of input validation in pdf-image npm package version

Read more »

U.S. Govt. Makes it Harder to Get .Gov Domains
The federal agency in charge of issuing .gov domain names is enacting new requirements for validating the identity of people requesting them. The additional measures come less than four months after KrebsOnSecurity published research suggesting it was relatively easy for just about anyone to get their very own .gov domain. In November's piece It's Way Too Easy to Get a .gov Domain Name, an anonymous source detailed how he obtained one by impersonating an official at a small town in Rhode Island that didn't already have its own .gov.

Read more »

Boost Mobile 1-day Flash Sale: $100 off all Apple iPhones + ...
Boost Mobile is offering Apple’s 2019 iPhone 11 and 11 Pro models for $100 off MSRP. Boost is also offering the same $100 discount on new previous-generation iPhone XS, XR, X, 8, and 7 models. For today only, 4/1/20, Boost will take an extra 10% off all iPhone using promo code FLASHAPR2020. Order online, then pick a Boost unlimited plan when the phone arrives. Boost Mobile is part of the Sprint network, and they offer plans beginning at $50 per month for one line. No annual contract → Read More...

Read more »

In stock! Apple’s new Mac Pro for $5995 with no sales tax ...
Apple reseller DataVision has the new 2019 Apple Mac Pro in stock today for $5995 ($5 off MSRP) including free shipping. DataVision charges sales tax for NY, NJ, PA, and CA residents only. If you don’t reside in one of those states, you can save potentially hundreds of dollars on your purchase through DataVision, depending on your state’s current sales tax rate. Multiple build-to-order configurations are available, and DataVision will include a free 45 day no-hassle return period in addition to Apple’s standard one-year warranty. See our Mac Pro Price Tracker and our Pro Display XDR Price Tracker for the latest prices & sales from Apple and → Read More...

Read more »

Apple Sources Confirm Spring Media Event Canceled Due To Soc...
NEWES: 03.31.20- A previously planned Apple media event scheduled to take place sometime this Spring that was rumored and widely expected to be held today, March 31, were confirmed by anonymous sources within the company who explained that, aside from manufacturing delays of new products that were to be announced, the underlying factor involved which led to its cancellation and subsequent postponement was due to social distancing measures in place locally that were designed to curb the further spread of the COVID-19 (also known as the novel coronavirus) outbreak. Earlier this month, the website Cult of Mac broke the news that Apple had nixed a product launch after a source within the company, who spoke on the condition of anonymity, confirmed that an order by the public health department in the county of Santa Clara — where the company’s headquarters, Apple Park in Cupertino, California are located — that effectively banned mass gatherings of 1,000 or more people (which, at the time, was in place through April 1), was a, according to the person, major factor, in Apples decision for the cancellation of a previously planned media event that was to be held this Spring. Social distancing measures in place prevented Apple from holding a previously planned media event this Spring which would have banned mass gatherings like those depicted here where guests are seen arriving to the Steve Jobs Theater at Apple Park in Cupertino, California ahead of last year’s “It’s Showtime!” keynote address that took place on March 25, 2019. (Photo: Apple, Inc.) Apple had grown, in the source’s own words, concerned, about bringing together close to 1,000 people for the media event that originally was scheduled for late March in the Steve Jobs Theater at Apple Park. The person also said that company executives reportedly had voiced some concern about being unable to ensure social distancing at a public venue in a confined building with people → Read More...

Read more »

Apple restocks 2017 13″ Dual-Core non-Touch Bar MacBook Pr...
Apple has restocked a limited number of Certified Refurbished 2017 13″ 2.3GHz Dual-Core non-Touch Bar MacBook Pros starting at $1019. An standard Apple one-year warranty is included with each model, outer cases are new, and shipping is free: – 13″ 2.3GHz/128GB Space Gray MacBook Pro (MPXQ2LL/A): $1019 original MSRP $1299 – 13″ 2.3GHz/256GB Space Gray MacBook Pro (MPXT2LL/A): $1189 original MSRP $1499 – 13″ 2.3GHz/256GB Silver MacBook Pro (MPXU2LL/A): $1189 original MSRP $1499 128GB models represent the cheapest 13″ MacBook Pros for sale at Apple. Keep an eye on our 13″ MacBook Pro Price Tracker for the latest prices → Read More...

Read more »

Save $300 on the 13″ 2.4GHz MacBook Pro with these Certifi...
Apple has a full line of Certified Refurbished 2019 13″ 2.4GHz 4-Core Touch Bar MacBook Pros available starting at $1529 and up to $300 off MSRP. Apple’s one-year warranty is included, shipping is free, and each MacBook has a new outer shell: – 13″ 2.4GHz/256GB Space Gray 4-Core Touch Bar MacBook Pro (MUHN2LL/A): $1529 $270 off MSRP – 13″ 2.4GHz/512GB Space Gray 4-Core Touch Bar MacBook Pro (MUHP2LL/A): $1699 $300 off MSRP – 13″ 2.4GHz/256GB Silver 4-Core Touch Bar MacBook Pro (MUHQ2LL/A): $1529 $270 off MSRP – 13″ 2.4GHz/512GB Silver 4-Core Touch Bar MacBook Pro (MUHR2LL/A): $1699 $300 off MSRP Apple refurbished prices are the cheapest available for these MacBook Pros anywhere. For the latest sales & prices, see our 13″ MacBook Pro → Read More...

Read more »

Just in! Apple’s new 2020 4-Core Mac mini $100 off MSRP at...
B&H Photo has Apple’s new 2020 4-Core Mac mini in stock and on sale today for only $699 including free overnight delivery for many US addresses. Their price is $100 off MSRP, and it’s the lowest price available for this new model from any Apple reseller. For the latest Mac mini sales and deals, see our Mac mini Price Tracker, → Read More...

Read more »

New 2020 13″ Space Gray MacBook Airs on sale for $50 off A...
B&H Photo has Apple’s new 2020 13″ Space Gray MacBook Airs on sale today for $50 off Apple’s MSRP. While they don’t have stock today, preorders are accepted at this discount. Overnight shipping is free to many addresses in the US once they receive stock: – 13″ 4-Core Space Gray MacBook Air: $949 $50 off MSRP – 13″ 6-Core Space Gray MacBook Air: $1249 $50 off MSRP Keep an eye on our 13″ MacBook Air Price Tracker for the latest sales & deals from Apple and → Read More...

Read more »

Clearance 4-Core Mac mini on sale for $629 with free overnig...
B&H Photo has clearance previous-generation 3.6GHz 4-Core Mac minis available for $629 including free overnight delivery to many addresses in the US. Their price is $170 off original MSRP for this mini, and it’s the lowest price available for this model, new, from any → Read More...

Read more »

The best deals on iPad Pros remain these Certified Refurbish...
Apple recently dropped prices on clearance 2019, Certified Refurbished, 11″ & 12″ iPad Pros with models now available starting at only $549. Each iPad comes with a standard Apple one-year warranty, outer cases are new, and shipping is free. The following configurations are available: – 11″ 64GB WiFi iPad Pro: $549 was $679 – 11″ 256GB WiFi iPad Pro: $679 was $809 – 11″ 512GB WiFi iPad Pro: $849 was $979 – 11″ 1TB WiFi iPad Pro: $1019 was $1149 – 11″ 64GB WiFi + Cellular iPad Pro: $679 was $719 – 11″ 256GB WiFi + Cellular iPad Pro: $809 was $939 – 11″ 512GB WiFi + Cellular iPad Pro: $979 was $1109 – 11″ 1TB WiFi + Cellular iPad Pro: $1149 was $1279 – 12.9″ 64GB WiFi iPad Pro: $699 was $849 – 12.9″ 256GB WiFi iPad Pro: $829 was $979 – 12.9″ 512GB WiFi iPad Pro: $999 was $1149 – 12.9″ 1TB WiFi iPad Pro: $1169 was $1319 – 12.9″ 64GB WiFi + Cellular iPad Pro: $829 was $979 – 12.9″ 256GB WiFi + Cellular iPad Pro: $959 was $1109 – 12.9″ 512GB WiFi + Cellular iPad Pro: $1129 was $1279 – 12.9″ 1TB WiFi + Cellular iPad Pro: $1299 was $1449 Keep an eye on our 11″ iPad Pro Price Tracker and 12″ iPad Pro Price Tracker for the latest → Read More...

Read more »

$100 off any Apple iPhone 11 model, XR, XS, or X with no-con...
Boost Mobile is offering Apple iPhone 11, 11 Pro, and iPhone 11 Pro Max models for $100 off MSRP with service. Their discount reduces the cost of an iPhone 11/64GB to $599, iPhone 11 Pro to $899 for the 64GB model, and $999 for the 64GB iPhone 11 Pro Max. Boost is also offering previous-generation iPhone XS, XS Max, XR, and X iPhones for $100 off. Prices for these models start at $499. Order online, then pick a Boost plan when the phone arrives. Boost Mobile is part of the Sprint network, and they offer plans beginning at only $35 per month for one line. No annual contract → Read More...

Read more »

Sunday Sale! Use your Apple Education discount to save up to...
Stuck at home during the coronavirus lockdowns and need a new computer for school work? Purchase a new Mac using Apple’s Education discount, and take up to $400 off MSRP. Purchase an iPad, and take up to $50 off MSRP. All teachers, students, and staff of any educational institution with a .edu email address qualify for the discount: – 2019 16″ 2.3GHz 8-Core Touch Bar MacBook Pro: $2599 $200 off – 2019 16″ 2.6GHz 6-Core Touch Bar MacBook Pro: $2199 $200 off – 2019 13″ 2.4GHz/512GB 4-Core Touch Bar MacBook Pro: $1899 $100 off – 2019 13″ 2.4GHz/256GB 4-Core Touch Bar MacBook Pro: $1699 $100 off – 2019 13″ 1.4GHz/128GB 4-Core Touch Bar MacBook Pro: $1199 $100 off – 2019 13″ 1.4GHz/256GB 4-Core Touch Bar MacBook Pro: $1399 $100 off – 2020 13″ Dual-Core MacBook Air: $899 $100 off – 2020 13″ Quad-Core MacBook Air: $1199 $100 off – 8-Core Mac Pro: $5599 $400 off – Pro Display XDR (standard): $4599 $400 off – Pro Display XDR (nano glass): $5599 $400 off – Pro Stand: $5599 $100 off – 27″ 8-Core iMac Pro: $4599 $400 off – 27″ 3.7GHz 5K iMac: $2099 $200 off – 27″ 3.1GHz 5K iMac: $1899 $100 off – 27″ 3.0GHz 5K iMac: $1699 $100 off – 21″ 3.0GHz 4K iMac: $1399 $100 off – 21″ 3.6GHz 4K iMac: $1249 $50 off – 21″ 2.3GHz iMac: $1049 $50 off – 3.6GHz Mac mini: $779 $20 off – 3.0GHz Mac mini: $1049 $50 off – 12.9″ iPad Pros: $50 off – 11″ iPad Pros: $50 off – 10.5″ iPad Airs: $20 off – 10.2″ iPads: $20 off – 7.9″ iPad minis: $20 off Not in the US? Click for the Canada or the → Read More...

Read more »

Use our exclusive price trackers at MacPrices.net to find th...
Looking for a new 2020 13″ MacBook Air or one of the new 2020 iPad Pros? Our Apple award-winning price trackers are the best place to look for the lowest prices and latest sales on Apple gear. Scan our price trackers for the latest information on sales, bundles, and availability on systems from Apple’s authorized internet/catalog resellers. We update the trackers continuously: – 16″ MacBook Pros – 13″ MacBook Pros – 13″ MacBook Airs – iMacs – iMac Pros – Mac minis – Mac Pros – Pro Display XDR – 7.9″ iPad minis – 10.2″ iPads – 10.5″ iPad Airs – 12″ iPad Pros – 11″ iPad Pros – Apple Watch – Apple TVs – Apple AirPods – iPhones Other price trackers include HomePods, Keyboards & Pointers, iPod touch, Smart Keyboards, and Apple Pencils. A full list of the available Apple price trackers is in the menu at the top of → Read More...

Read more »