Apple will likely be updating every Mac with M4, which hasn’t happened in over a decade
Seemingly, for the first time in forever, Apple will be updating every single Mac with an M4 chip, presuming rumors hold correct. There have been a number of times where this has been close, but it hasn’t happened anytime in the past decade, at least. more…

Read more »

Indie App Spotlight: ‘Currency’ is an ad-free and offline app to convert currencies
Welcome to Indie App Spotlight. This is a weekly 9to5Mac series where we showcase the latest apps in the indie app world. If you’re a developer and would like your app featured, get in contact. Currency is a completely free currency conversion app for iPhone and Mac, with no ads, a clean design, and offline functionality. It has support for over 160 currencies, making it an easy to use tool for any international travel. more…

Read more »

M4 MacBook Pros sound like absolute monsters! [The CultCast]
This week on Cult of Mac's podcast: The first benchmarks and reviews for the M4 Pro and M4 Max MacBook Pros come in amazingly good. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

With iOS 18, Apple Makes Locked iPhones Harder to Crack
After publishing an article breaking the news about how police were seeing iPhones stored for examination mysteriously reboot themselves, 404 Media covers the subsequent revelation that Apple has increased security in iOS 18 by automatically rebooting iPhones after they have spent four days in a locked state.Read original article

Read more »

M4 Mac mini SSD storage can be upgraded, but it isn’t easy yet
Earlier this week, we reported that the storage in the new Mac mini is actually modular, meaning that it isn’t soldered to the logic board of the Mac, and ultimately would be user accessible. However, that didn’t necessarily mean it’d be easy for users to upgrade the storage on their own – though that didn’t stop one individual. more…

Read more »

iPhones on iOS 18.1 will automatically reboot and lock down after being idle for a while
A hidden feature in iOS 18.1 will automatically reboot a locked iPhone when it is asleep but hasn't been unlocked for a while, presumably as a security measure.The feature has been identified as an "inactivity reboot," and is similar to a feature found on Macs. The Mac version, known as "hibernation mode," saves the state of the device to disk when put to sleep, in case the power fails or the battery runs out before the user can return to the machine.By flushing the last state of the device, iPhone users are better protected from forensic searches by law enforcement or other entities. The change also makes it more difficult for anyone to break into the device using brute-force or other methods.The reboot timer is not reliant on charging or network functions, and is only tied to inactivity since the last unlock. This means the reboot will take place after a period of time, even if network connections are not maintained. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

This screaming deal drops Costco membership to just $20
Save on everything from Apple Watches and MacBooks to tires and rotisserie chickens with this Costco membership deal. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Exclusive Satechi early Black Friday sale for 9to5 readers: 30% off everything sitewide – all-time lows on MagSafe stands, Find My gear, more
We have teamed up with Satechi to offer 9to5 readers exclusive early Black Friday sale pricing on the entire collection of the brand’s wonderful charging accessories, keyboards, and more. This time around we are taking things up a notch with a solid 30% off everything the brand sells sitewide – we are told there are no exclusions here either (you just can’t stack two codes at checkout). Our exclusive promo code works on all of the brand’s 2024 releases as well as items that are already seeing markdowns on the listing pages. Head over to the official Satechi site and apply our exclusive 30OFF9to5 code at checkout to redeem the sale price. But be sure to head below for some of the particular highlights form the sale as well. more…

Read more »

Hands-on with Image Playground, Visual Intelligence and ChatGPT in iOS 18.2
New Apple Intelligence features in iOS 18.2 include Image Playground, Genmoji, Visual Intelligence, ChatGPT integration and more.  (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple @ Work: Generative AI will impact Apple IT admins in this important way
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. Everywhere you read, discussions around AI everywhere. It’s in the tools we use, the news we read, and the discussions happening across nearly every industry. But with AI so embedded in our conversations, AI fatigue has set in. IT practitioners are becoming weary of promises that AI will revolutionize the world overnight, and skepticism is growing. more…

Read more »

Twelve South PlugBug Find My Charger review: slim USB-C charger you should never lose
Macworld At a glanceExpert's Rating Pros 2 or 4 USB-C ports Built-in Find My locator Slim charger International Travel Set available Cons Our Verdict Twelve South PlugBug With Find Me is a great travel charger with a built-in locator to give you peace of mind that you should never lose your trusty charger again. Price When Reviewed This value will show the geolocated pricing text for product undefined Best Pricing Today Price When ReviewedFrom $69.99 Best Prices Today: Twelve South PlugBug with Find My Retailer Price $69.99 View Deal Twelve South $69.99 View Deal $79.95 View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket We have reviewed a lot of USB-C charger, from tiny ones you could lose in a pocket to giant desktop chargers with enough ports for every device you own. While we’d never forget where the big desktop charger is situated, the smaller and more portable chargers have a frustrating habit of disappearing… “Can I borrow your charger for a minute?” is the plaintive plea that most charger owners will hear every now and again or far too frequently in a large office or family. That minute can stretch far enough to the point where when you next need to charge your phone or laptop you suddenly find it’s not where it should be—maybe your colleague or family member didn’t even ask you and just took it “for a minute”. Short of taping an AirTag onto your charger you have little option but to go hunt the office or house for it. Or maybe you left it in a suitcase that has gone missing. Accessory maker Twelve South has a cunning product that could make that hunt all the easier. Its PlugBug With Find My charger has a locator built into it. It’s hidden away in a back compartment, so looks better than a sleek charger with an AirTag strapped on. It works just like an AirTag, and you set it up the same way and check for it in the Find My app’s Items section. You can make it sound an alert and all the other features available to Find My app items. Like the AirTag it requires a replaceable battery—one is included—that is easy to swap out when it runs out in a couple of years. Not just a big AirTag The principal purpose of the PlugBug is as a USB-C wall charger, and it comes in two models. Twelve South The PlugBug 50 has two USB-C ports, each rated at 50W. Use both at the same time and one will charge at 30W and the other at 20W. 50W is powerful enough to charge a MacBook Air. MacBook Pro owners would be better served with the more powerful 120 model. The PlugBug 120 has four USB-C ports, each rated at 120W. Use all four at the same time and they will charge at 50W, two at 25W and the last one at 20W, or one 50W, two 20W and one 25W. Three might configure as 65/35/20W, and two at 70/30W. The charger detects dynamically delivers the right amount of fast charging power to each device being charged so you don’t have to worry about which port to connect each device to. Design The PlugBug With Find My is long but thin so is especially suitable in those hotel rooms with power sockets tucked into hard to reach places behind desks or nightstands. It features a fetching red section that makes it visually easy to spot, too—which could come in handy when you try to distinguish it in a busy café or airport environment. While the PlugBug is a more than capable home charger, it is especially useful on your travels. The U.S. model has folding prongs for extra travel slimness. (Exclusive to PlugBug Travel) Includes switchable adapter plugs for US, UK, EU, AU, KR and CN with travel case The PlugBug 50 measures 3.3 x 1.9 x 0.9 inches (8,3 x 4.9 x 2.2cm), and weighs 3.9oz (110g). The PlugBug 120 measures 4.1 x 2.4 x 1.2 inches (10.4 x 6 x 3.1cm), and weighs 8.8oz (250g). Twelve South The U.K. and E.U. versions ship with plugs attachments for both regions. The U.S. model features just the foldable North American prongs. Apple sells an exclusive Twelve South PlugBug Travel Set, which includes interchangeable international adapters for U.S., U.K., E.U., AU, KR and CN and a travel case, for both the 2-port and 4-port models ($79.95 and $129.95). Price In the U.S. the PlugBug 50 costs $69.99 and the PlugBug 120 is priced at $119.99, direct from Twelve South or via Amazon. See also the value-for-money Travel Set sold excusively through the Apple Store. In Canada the two models are priced C$99.99 and C$169.99. In the U.K. its £69.99 and £119.99. And in the E.U. it’s 79,99 and 139,99 Euros. For more USB-C charging options check out our recommendations for the best iPhone chargers and best MacBook chargers. Verdict We thought we’d seen it all from the wide range of USB-C chargers but the powerful Twelve South PlugBug With Find Me is a great travel charger with a built-in locator to give you peace of mind that you should never lose your trusty charger again. It won’t stop you forgetting it and leaving it at home only to slam into your thoughts as your reach the airport or hotel, but at least you’ll know exactly where it is.

Read more »

Today in Apple history: Turnaround artist Gil Amelio joins Apple’s board
On November 9, 1994, future CEO Gil Amelio joined Apple's board. Everyone in Cupertino hopes he can turn around the struggling company. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Police Freak Out at iPhones Mysteriously Rebooting Themselves, Locking Cops Out
Law enforcement officers are warning other officials and forensic experts that iPhones which have been stored securely for forensic examination are somehow rebooting themselves, returning the devices to a state that makes them much harder to unlock, 404 Media is reporting, citing a law enforcement document it obtained. From the report: The exact reason for the reboots is unclear, but the document authors, who appear to be law enforcement officials in Detroit, Michigan, hypothesize that Apple may have introduced a new security feature in iOS 18 that tells nearby iPhones to reboot if they have been disconnected from a cellular network for some time. After being rebooted, iPhones are generally more secure against tools that aim to crack the password of and take data from the phone. "The purpose of this notice is to spread awareness of a situation involving iPhones, which is causing iPhone devices to reboot in a short amount of time (observations are possibly within 24 hours) when removed from a cellular network," the document reads. Apple did not provide a response on whether it introduced such an update in time for publication. Read more of this story at Slashdot.

Read more »

How much MacBook do you really need?
Macworld With the MacBook Air and MacBook Pro, Apple offers standard configurations to make it easy to pick a laptop. They seem straightforward, but if you start to think about all the things you do on a Mac–whether you’re a student or a professional–you can start to wonder about which model to choose and maybe even find it difficult to decide. It’s a decision you don’t want to take lightly. You’re investing a considerable amount of money, and you don’t want to end up with a Mac that isn’t up to the task or a Mac that has more than you need. This guide was created to help shoppers figure out what to look for when buying a MacBook. We’ll cover the main components you need to consider: the CPU, the GPU, the amount of unified memory (RAM), the SSD, the display, the battery, and the ports. We’ll go over what your use case may be, and which component configurations would work best to help you get the most bang for your buck. The M System on a Chip overview: CPU, GPU, unified memory, SSD Let’s first start with a brief overview of the heart of every Mac: the M System on a Chip. It’s called a System on a Chip (SoC, or just “chip”) because, unlike past chips, it has more than just a CPU that does the main job of processing work. It also houses the graphics processors (GPUs), the unified memory (a combination of CPU and GPU RAM), and the SSD for file storage. In the past, these were all separate components. Apple 13-inch MacBook Air (M3, 256GB/16GB RAM, 2024) Price When Reviewed: $1,099 Best Prices Today: $1,024 at Amazon$1099 at B&H$1099 at Best Buy Apple 15-inch MacBook Air (M3, 256GB/16GB RAM, 2024) Price When Reviewed: $1,299 Best Prices Today: $1,229.55 at Amazon$1299 at Best Buy A benefit of having all these components under one unified part is that it helps with performance and power efficiency. A drawback is that the user cannot upgrade the components after purchase. So, it’s even more important than before to carefully consider the specifications you need for what you do. CPU: Processing cores and how many you should get The Central Processing Unit (CPU) is the main data processing component and is divided into processing cores. There are two types of cores, which Apple divides into performance and efficiency cores. Generally, the more cores in a CPU, the faster the processing speed. Apple currently offers five CPU models in its MacBooks: the M2, M3, M4, M4 Pro, and M4 Max. The M2 and M3 has the lowest CPU core count, while the M4 Max has the highest. Which one is right for you? Let’s break it down based on tasks. M2 (8-core CPU with 4 performance and 4 efficiency cores): a good chip for everyday usage and can handle tasks in media editing apps. M3 (8-core CPU with 4 performance and 4 efficiency cores): you do the usual everyday tasks and work, which includes web browsing, light productivity apps (Pages, Numbers, Keynote, Microsoft Office), media streaming, light gaming, easy media production (iMovie, GarageBand). M4 (10-core CPU with 4 performance and 6 efficiency cores): a lot like the M3, but a bit faster. M4 Pro (12- or 14-core CPU with 8 or 10 performance cores and 4 efficiency cores): you are regularly performing work that’s a bit more in-depth, such as complex Excel spreadsheets, multi-layer image editing, and creation in Photoshop or other graphics apps, production of video and audio shorts, databases, serious gaming. M4 Max (14- or 16-core CPU with 10 or 12 performance cores and 4 efficiency cores): you make a living as a media producer (Final Cut Pro, Logic Pro, Autodesk Maya, etc.), software developer, or any other work that requires multitasking and long hours with heavy work. Keep in mind that the base M4 is robust enough to handle the tasks that the M4 Max is designed for–it just takes longer to finish. If you only occasionally need to do those high-end jobs or you’re learning how to do them, you can live with the M4. The M3 and M3 chips offer different CPU, GPU, memory, and SSD configurations.Macworld.se GPU: Graphics processing power The GPU (graphics processing unit) is primarily used for rendering graphics and video on the screen. However, because GPUs offer parallel processing, a GPU can be used for other jobs, including AI, though the NPU (which is the same across all MacBooks) handles much of that workload. As with the CPU, the GPU has processing cores, and the more cores, the better the performance. Apple partners the increase of CPU cores along with the increase of GPU cores, so you don’t have to worry about, say, getting a M3 Pro chip with not enough CPU cores. Which one is right for you? Let’s break it down based on tasks. M2 (8-core CPU): capable of everyday tasks and casual games. M3 (8- or 10-core GPU): general tasks and everyday work, media streaming, easy media production, light gaming. M4 (10-core GPU): like the M3, general tasks and everyday work, media streaming, easy media production, light gaming. M4 Pro (16- or 20-core GPU): moderate to serious media production and gaming. M4 Max (32- or 40-core GPU): professional-level media production and hard-core gaming. Apple 14-inch MacBook Pro (M4) Price When Reviewed: $1,599 | $1,799 | $1,999 Best Prices Today: $1,549 at Amazon$1599 at Apple$1599 at B&H Read our full Apple 14-inch MacBook Pro (M4) review Apple 14-inch MacBook Pro (M4 Pro) Price When Reviewed: $1,999 | $2,399 Best Prices Today: $1,949 at Amazon$1999 at Apple$1999 at B&H 14-inch MacBook Pro (M4 Max) Price When Reviewed: $3,199 Best Prices Today: $3,132.51 at Amazon$3199 at Apple$3199 at B&H Unified memory: More RAM is always better Apple’s M chips use unified memory, which is where the chip reads and writes the data it is working on. It’s called “unified memory” because it’s used by both the CPU and GPU. It’s often referred to as RAM (random access memory). (Traditionally, “RAM” referred to the memory used by the CPU only, and the GPU used video RAM or VRAM). Each M-series chip comes with a standard configuration of unified memory. Here are the standard memory configurations Apple offers and where you may want to upgrade. 16GB: Good enough if you’re doing general productivity work, internet access media streaming, and easy media production. 24GB or 32GB: Nice amount for moderate media production, graphic work, podcasting, and gaming. Even for people who don’t do processor-intensive work, this is a better fit. Above 32GB: Professional-level graphics and media production, software development, hardcore gaming.  Remember, you can’t add RAM later, so make sure you consider spending a little more to customize your Mac at purchase. For example, the M3’s standard configuration is 16GB, but an option for 24GB is available for $200. It’s not cheap, but we recommend getting as much memory as you can afford. You can’t go wrong with opting for more memory than the standard configuration–it helps with performance. When Apple originally introduced the MacBook Air in March 2024, the standard configurations came with 8GB of RAM. When Apple introduced the M4 series of MacBook Pro in October 2024, it increased the base standard configuration to 16GB. The MacBook Air also got the boost without a price increase. So, now all MacBooks have a minimum of 16GB of RAM with some standard configurations that have more. SSD: file storage The Mac uses a solid-state drive (SSD) to store your files, apps, and other data. But in addition to data storage, the SSD can play a role in a Mac’s performance. The larger the capacity, the better the performance, mostly in instances that involve very large files. The higher the SSD capacity, the more NAND chips Apple uses. The more chips in use, the faster the performance, because the data can be accessed in parallel. For example, a 10GB file saved over four SSD chips is faster than the same file saved over two SSD chips. For smaller files used by most people, the difference is still there but isn’t noticeable. So there are two considerations for the SSD size: How much room you need, and how big are the files you create. With that in mind, here are some recommendations. 256GB: General productivity work, internet access media streaming, and easy media production. 512GB: Frequent work in iMovie, GarageBand, and other consumer-level media production apps. 1TB or more: Professional media production in apps such as Final Cut Pro, Logic Pro, Compressor, etc., software development, graphics. These considerations don’t involve photos that can accumulate quickly and take up a lot of space or the Photos app. If you like having local access to your photos, consider an external storage device. This also doesn’t consider cloud storage, such as iCloud, Dropbox, Google Drive, and other services. You don’t want to work directly on files in cloud storage because it’s not an efficient way to work. But cloud storage is a viable way to manage the space on an SSD–you can move files you won’t need immediately to the cloud. The MacBook Air (left) has an LED display,. while the MacBook Pro (right) has a Mini LED screen.Foundry Display: Looks are everything Apple uses different display technology for the MacBook Air and MacBook Pro. The Air uses a tech that’s more affordable to implement, and it looks good, but it doesn’t look as good as the tech used for the MacBook Pro. Of course, you’ll pay more for the better Pro quality. Here are the two display technologies and who they are suited for. LED (MacBook Air): General-purpose use, but it can also handle consumer-level video and photo editing that you would do in apps such as Photos, Adobe Photoshop Elements, iMovie, etc. Also good for steaming videos from YouTube, Apple TV+, Netflix, etc., and moderate gaming. Mini LED (MacBook Pro): Serious video and photo editing and graphics work in pro-level apps (Final Cut Pro, Adobe Photoshop, etc.) where color and detail are important. Apple 16-inch MacBook Pro (M4 Pro) Price When Reviewed: $2,499 | $2,899 Best Prices Today: $2,449.99 at Amazon$2499 at Apple$2499 at B&H Read our full Apple 16-inch MacBook Pro (M4 Pro) review Apple 16-inch MacBook Pro (M4 Max) Price When Reviewed: $3,499 | $3,999 Best Prices Today: $3,422.51 at Amazon$3499 at Apple$3499 at B&H Battery life: All-day work The MacBooks offer excellent battery life that will last all day long. However, the different chips affect the duration because a chip that offers more processing prowess requires more battery power. There are also lots of considerations to think about regarding your specific use case. Here’s a look at how the different MacBooks compare and our recommendations. M3 MacBook Air: Apple cites the same battery life numbers for both the 13- and 15-inch models since both laptops have a 52.6-watt-hour battery (up to 18 hours), though you’ll probably get a little more battery with the 13-inch model due to the smaller screen. Either way, that’s the battery is long enough to last a whole day doing general-purpose work, access the internet, and work in Pages, Keynote, or Microsoft Office. You can even do light media work in iMovie or GarageBand, but heavier jobs will tax the battery. M4, M4 Pro/Max MacBook Pro: The 14-inch MacBook Pro has a 72.4-watt-hour battery; the M4 can last up to 24 hours, while the M4 Pro/Max lasts up to 22/18 hours. The 16-inch MacBook Pro is rated at 100-watt-hours, and the M4 Pro can last up to 24 hours, while the M4 Max lasts 21 hours. Since the Pro laptops are bigger than the Air, the battery is bigger. If you’re doing production-type work while on location and you can’t plug in, the Pro is the one to get, even if it’s bigger/heavier than the Air. Ports: Making connections All of Apple’s MacBooks have Thunderbolt/USB 4 ports, a MagSafe port, and a 3.5mm audio jack. But that’s where the commonality ends. Here’s what you need to know. MacBook Air: Two Thunderbolt/USB 4 ports. That’s because the Air is meant to serve primarily as a travel buddy in situations when you aren’t connecting too many devices–maybe an external Thunderbolt/USB-C display for presentations, or a drive to save/transfer files. The Thunderbolt ports conform to the Thunderbolt 3 specification, and while its fast, it is the slowest of the MacBooks. MacBook Pro: As a mobile desktop device, the MacBook Pros have an HDMI port for connecting an external display and an SDXC Card slot for file transfers from a camera or other device. All MacBook Pro models have three Thunderbolt/USB-C ports. However, laptops with the M4 chip have the Thunderbolt 4 implementation, while the M4 Pro and M4 Max chips support Thunderbolt 5, which is the fastest specification. The MacBook Pro has an SDXC Card slot (far left) and HDMI port (far right), which are not on the MacBook Air.Foundry For more information, check out the following guides: Best MacBook 2024: Which MacBook should you buy? MacBook Air vs Pro: Differences between MacBook Air and Pro MacBook Pro comparison: 14- vs 16-inch MacBook Pro M3 MacBook Air: Everything you need to know M3 MacBook Pro: Everything you need to know Apple 13-inch MacBook Air (M2, 256GB/16GB RAM) Price When Reviewed: $999 Best Prices Today: $799 at Amazon$799 at Best Buy$999 at Apple United States

Read more »

iPhone 16 DIY repair parts now available from Apple
Apple is now selling repair parts and tools for the iPhone 16 and iPhone 16 Pro through its Self Service Repair Store. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

How It Went
Election day, 2024.

Read more »

ChatGPT is currently down; Siri integration in iOS 18.2 affected
OpenAI’s popular AI chatbot ChatGPT is currently down, making the platform inaccessible to users around the world on Friday night. The outage has also affected integration with Siri in the iOS 18.2 beta as a consequence. more…

Read more »

New Mac Mini Has Modular Storage, 256GB Model Will Have Faster SSD
According to a partial teardown video of Apple's new Mac mini, the new machine features modular storage that can be removed. "As we saw with the Mac Studio, however, replacing the modular storage is complicated," notes MacRumors. The teardown also reveals two 128GB storage chips in the 256GB model, enabling faster SSD speeds comparable to higher-capacity versions. From the report: The criticism surrounding Apple's decision to use a single 256GB chip in some base-model Macs a few years ago primarily came from a vocal contingent of tech enthusiasts, and the average customer is unlikely to even notice the slower speeds in common day-to-day tasks. Nevertheless, it appears that customers who do want the fastest SSD speeds do not need to worry about which storage capacity they choose when ordering the new Mac mini. Read more of this story at Slashdot.

Read more »

New Mac Mini Has Modular Storage, 256GB Model Will Have Faster SSD
According to a partial teardown video of Apple's new Mac mini, the new machine features modular storage that can be removed. "As we saw with the Mac Studio, however, replacing the modular storage is complicated," notes MacRumors. The teardown also reveals two 128GB storage chips in the 256GB model, enabling faster SSD speeds comparable to higher-capacity versions. From the report: The criticism surrounding Apple's decision to use a single 256GB chip in some base-model Macs a few years ago primarily came from a vocal contingent of tech enthusiasts, and the average customer is unlikely to even notice the slower speeds in common day-to-day tasks. Nevertheless, it appears that customers who do want the fastest SSD speeds do not need to worry about which storage capacity they choose when ordering the new Mac mini. Read more of this story at Slashdot.

Read more »

9to5Mac Daily: November 8, 2024 – M4 Mac launch day is here
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by CardPointers: The best way to maximize your credit card rewards. Save 30% and get a $100 Savings Card today. more…

Read more »

PSA: Be super-careful opening your new M4 iMac
The iMac sits upside down inside its box, relative to the picture on the front. It can be an unwelcome surprise. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

New Apple Vision Pro study reveals promising performance in radiology
A new study published this week by researchers at the University of California, San Diego highlights how Apple Vision Pro can be used in healthcare settings. In particular, this study sought to compare diagnostic performance when using Apple Vision Pro versus using a desktop. Researchers also touted the “new opportunities for 3D virtualization” and ergonomics offered by Apple Vision Pro. more…

Read more »

Nvidia becomes first company to surpass $3.6 trillion market value after President Trump election win
Shares of Nvidia rallied to a record high on Thursday, making the chipmaker the first company in history to surpass a stock market value… The post appeared first on MacDailyNews.

Read more »

iPhone 17 Air: Here’s everything we know so far
According to multiple sources, Apple is planning an all-new iPhone 17 model for 2025 with a dramatic design overhaul. Here’s everything we know so far about the so-called iPhone 17 Air (which could also be called the iPhone 17 Slim or something completely different). more…

Read more »

Price drop: This 3-in-1 charger is perfect for Apple fans on the road
Need a travel charger for iPhone, Apple Watch and AirPods? Get the 3-in-1 Magnetic Wireless Charging Pad for just $26.97 for a limited time. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

It Doesn’t End
Progress hasn’t stopped, but it’s never easy, and never without backlash.

Read more »

Apple supplier Kioxia files for IPO
Bain Capital-backed Kioxia, an Apple NAND flash supplier, filed for an IPO on Friday and sources familiar with the matter said the… The post appeared first on MacDailyNews.

Read more »

How to start using Image Playground in iOS 18.2 to create funny selfies
Transform your iPhone 16 into a digital art studio with iOS 18.2's Image Playground, the latest tool for creating custom visuals with a few taps.Ninja the cat moves through the house unseenWith the release of iOS 18.2, Apple's Image Playground app offers users an accessible way to create custom digital images, sparking creative possibilities for iPhone owners. Part of Apple's expanding Apple Intelligence suite, Image Playground debuted in developer betas in late 2024.With each update, Apple has strived to make Image Playground more responsive and intuitive, aiming to provide a smoother user experience as the feature matures. In the second developer beta of iOS 18.2, notable improvements are already evident, particularly in rendering speed and the alignment between user prompts and generated images. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

The new Mac mini has a removable SSD but DIY upgrades won’t be easy
Macworld Apple gets a lot of flack for its non-friendly approach to user repairs and upgrades–you can’t really do them. But there’s a ray of hope with the new Mac mini that started shipping on Friday. In a teardown posted on X, ohgkg shows that the Mac mini’s SSD is on a separate board instead of integrated with the M4 chip. Partial teardown of M4 Mac Mini /w 16GB RAM & 256GB SSD. Interesting revealation [stet]: Wifi chip & antenna on the back of bottom air intake. SSD on a daughter board. And even the base 256GB version comes in two chips. No compromise in speed. Theoretically also end user upgradable. ohgkg via X, November 8, 2024 On X, L0vertodream also posted on X a Mac mini teardown. L0vetodream states that “it is indeed a 1-slot dual-slot with a maximum particle size of 1TB. It uses a BGA315 hard disk and the maximum upgrade capacity can be up to 2T” (translated). This SSD setup is similar to that of the Mac Studio, which also has separate SSD modules. Ars Technica points out that Apple’s implementation isn’t like that of Windows PCs where the SSD controller is contained with the SSD hardware. Apple’s SSD controller is built into the M-series chip. Because of that, you can’t simply swap out the Mac Studio’s or Mac mini’s SSD with a part bought from Amazon or some computer store. There are other reasons why off-the-shelf parts won’t work, like the possibility that the Mac’s SSD slots have restrictions on the types of modules that can be used. But the simple fact that Apple separated the SSD leaves the possibility of someone figuring out how to perform a DIY SSD upgrade. It would involve figuring out what modules can be used and being able to modify the controller–not easy tasks to do. There’s a Kickstarter for a Mac Studio SSD upgrade but it still requires a bit of work. It’s unclear if these modules will work with the M4 Mac mini. The other big revelation about the Mac mini SSD is that Apple uses two 128GB NAND chips in the 256GB SSD configuration. In the M2 Mac mini, Apple used one 256GB NAND chip, and that hinders performance because there’s no parallel processing as there is with two 128GB chips. With the M3, Apple switched to using two 128GB chips, but the company did not release an M3 Mac mini. Read our in-depth review of the M3 Pro Mac mini.

Read more »

Your iPhone may finally tell you how long it will take to charge
Macworld There are lots of battery-powered devices that can give you an estimate of how much longer they’ll need to stay plugged in until they’re fully charged. It’s not exactly a new feature. MacBooks gives you this info in the Battery menu of Settings or the menu bar, for example. With all the battery management and analysis built into our modern iPhones, it’s kind of remarkable that they don’t do this. Fortunately, a “time to charge” feature may be on the way. 9to5Mac discovered some code in the latest iOS 18.2 beta that points to a new BatteryIntelligence framework. The framework will take into account the amount of charge your battery can hold, its state of charge, and the amount of power it’s receiving from the charger (USB-C or wireless, we assume) and produce an estimate of how much longer it will take for the battery to charge. According to 9to5Mac, users will be able to do things like get a notification stating how long it will take to charge to the current limit (80% or whatever you set it to). I could see Apple incorporating the info into the Dynamic Island, or perhaps on the lock screen. The feature is not yet enabled, so it’s unclear if it will come in iOS 18.2 or a later release. It may also be restricted to specific iPhone models, much like the custom charge limits or other battery features.

Read more »

FBI: Spike in Hacked Police Emails, Fake Subpoenas
The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based technology companies.

Read more »

Canadian Man Arrested in Snowflake Data Extortions
A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka's alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.

Read more »

Vulnerability Summary for the Week of October 28, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info acnoo -- flutter_api  Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API: from n/a through 1.0.5. 2024-10-28 9.8 CVE-2024-50486 audit@patchstack.com  adirectory--aDirectory  Unrestricted Upload of File with Dangerous Type vulnerability in adirectory aDirectory allows Upload a Web Shell to a Web Server.This issue affects aDirectory: from n/a through 1.3. 2024-10-29 10 CVE-2024-50420 audit@patchstack.com  Ajar Productions--Ajar in5 Embed  Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through 3.1.3. 2024-10-29 10 CVE-2024-50473 audit@patchstack.com  Amin Omer--Sudan Payment Gateway for WooCommerce  Unrestricted Upload of File with Dangerous Type vulnerability in Amin Omer Sudan Payment Gateway for WooCommerce allows Upload a Web Shell to a Web Server.This issue affects Sudan Payment Gateway for WooCommerce: from n/a through 1.2.2. 2024-10-29 10 CVE-2024-50494 audit@patchstack.com  amu02aftab--Enable Shortcodes inside Widgets,Comments and Experts  The The Enable Shortcodes inside Widgets,Comments and Experts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2024-10-30 7.3 CVE-2024-9846 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Andy Moyle--Church Admin  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a before 5.0.0. 2024-10-28 7.1 CVE-2024-50438 audit@patchstack.com  Apache Software Foundation--Apache Lucene.Net.Replicator  Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replication node URL, can provide a specially-crafted JSON response that is deserialized as an attacker-provided exception type. This can result in remote code execution or other potential unauthorized access. Users are recommended to upgrade to version 4.8.0-beta00017, which fixes the issue. 2024-10-31 8 CVE-2024-43383 security@apache.org  apple -- ipados  A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox. 2024-10-28 9.6 CVE-2024-40867 product-security@apple.com  apple -- ipados  The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, iOS 17.7 and iPadOS 17.7, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. Processing a maliciously crafted file may lead to heap corruption. 2024-10-28 7.8 CVE-2024-44126 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. Processing a maliciously crafted file may lead to heap corruption. 2024-10-28 7.8 CVE-2024-44218 product-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup file may lead to modification of protected system files. 2024-10-28 7.1 CVE-2024-44252 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent. 2024-10-28 7.8 CVE-2024-44255 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup file may lead to modification of protected system files. 2024-10-28 7.1 CVE-2024-44258 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory. 2024-10-28 7.8 CVE-2024-44285 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- macos  A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1. An application may be able to break out of its sandbox. 2024-10-28 8.8 CVE-2024-44122 product-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- macos  A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A sandboxed process may be able to circumvent sandbox restrictions. 2024-10-28 8.6 CVE-2024-44270 product-security@apple.comproduct-security@apple.com  apple -- macos  A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to bypass Privacy preferences. 2024-10-28 7.1 CVE-2024-44156 product-security@apple.comproduct-security@apple.com  apple -- macos  A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to bypass Privacy preferences. 2024-10-28 7.1 CVE-2024-44159 product-security@apple.comproduct-security@apple.com  apple -- macos  A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library. 2024-10-28 7.5 CVE-2024-44203 product-security@apple.com  apple -- macos  This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences. 2024-10-28 7.5 CVE-2024-44208 product-security@apple.com  apple -- macos  A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to read sensitive location information. 2024-10-28 7.5 CVE-2024-44289 product-security@apple.comproduct-security@apple.com  apple -- xcode  This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data. 2024-10-28 7.5 CVE-2024-44228 product-security@apple.com  Apple--iOS and iPadOS  A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication. 2024-10-28 9.1 CVE-2024-44217 product-security@apple.com  Apple--macOS  The issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to break out of its sandbox. 2024-10-28 9.3 CVE-2024-44256 product-security@apple.comproduct-security@apple.com  Apple--macOS  A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.5 CVE-2024-44196 product-security@apple.comproduct-security@apple.com  Apple--macOS  A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.7 CVE-2024-44280 product-security@apple.comproduct-security@apple.com  Apple--macOS  This issue was addressed with additional entitlement checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.7 CVE-2024-44295 product-security@apple.comproduct-security@apple.com  Apple--visionOS  This issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. An attacker may be able to misuse a trust relationship to download malicious content. 2024-10-28 8.8 CVE-2024-44259 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  Apple--visionOS  The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory. 2024-10-28 7.7 CVE-2024-44277 product-security@apple.comproduct-security@apple.comproduct-security@apple.com  autodesk -- autocad  A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-7991 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-7992 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8588 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8589 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8590 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8591 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8592 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted CATPART file when parsed in ASMKERN230A.dll through Autodesk AutoCAD can force a Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8593 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8594 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8595 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force an Out-of-Bound Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8596 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8597 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8598 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8599 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8600 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8896 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9489 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9826 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9827 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9996 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9997 psirt@autodesk.com  Autodesk--AutoCAD  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8587 psirt@autodesk.com  Automattic--Newspack Blocks  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic Newspack Blocks allows Path Traversal.This issue affects Newspack Blocks: from n/a through 3.0.8. 2024-11-01 8.5 CVE-2024-37423 audit@patchstack.com  Azexo--Marketing Automation by AZEXO  Incorrect Privilege Assignment vulnerability in Azexo Marketing Automation by AZEXO allows Privilege Escalation.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. 2024-10-30 8.8 CVE-2024-50506 audit@patchstack.com  azexo--Marketing Automation by AZEXO  Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. 2024-10-29 9.9 CVE-2024-50480 audit@patchstack.com  buynowdepot -- advanced_online_ordering_and_delivery_platform  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BuyNowDepot Advanced Online Ordering and Delivery Platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through 2.0.0. 2024-10-28 9.8 CVE-2024-50497 audit@patchstack.com  Carl Alberto--Simple Custom Admin  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Carl Alberto Simple Custom Admin allows Reflected XSS.This issue affects Simple Custom Admin: from n/a through 1.2. 2024-10-29 7.1 CVE-2024-49647 audit@patchstack.com  CHANGING Information Technology--IDExpert  IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server. 2024-11-01 7.2 CVE-2024-10653 twcert@cert.org.twtwcert@cert.org.tw  Chetan Khandla--Woocommerce Product Design  Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-29 10 CVE-2024-50482 audit@patchstack.com  Chetan Khandla--Woocommerce Product Design  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-30 8.6 CVE-2024-50509 audit@patchstack.com  Chetan Khandla--Woocommerce Product Design  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-30 7.5 CVE-2024-50508 audit@patchstack.com  code-projects--Courier Management System  A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-01 7.3 CVE-2024-10607 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Courier Management System  A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-01 7.3 CVE-2024-10608 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--E-Health Care System  A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/admin_pswd as part of String leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "email" to be affected. But it must be assumed that parameter "admin_pswd" is affected as well. 2024-11-03 7.3 CVE-2024-10739 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--E-Health Care System  A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument f_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-03 7.3 CVE-2024-10741 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Restaurant Order System  A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10733 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Simple Car Rental System  A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-02 7.3 CVE-2024-10702 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Wazifa System  A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-02 7.3 CVE-2024-10699 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- hospital_appointment_system  A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-28 9.8 CVE-2024-10449 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- online_institute_management_system  A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-10-30 9.8 CVE-2024-10509 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- pet_shop_management_system  A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file birdsadd.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-31 9.8 CVE-2024-10556 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- pet_shop_management_system  A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file birdsupdate.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-31 9.8 CVE-2024-10561 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Free Exam Hall Seating Management System  A vulnerability classified as critical was found in Codezips Free Exam Hall Seating Management System 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-10-30 7.3 CVE-2024-10507 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Free Exam Hall Seating Management System  A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10736 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Free Exam Hall Seating Management System  A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10737 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  CozyThemes--Cozy Blocks  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.15. 2024-10-28 7.4 CVE-2024-50441 audit@patchstack.com  cure53--DOMPurify  DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2. 2024-10-31 9.1 CVE-2024-48910 security-advisories@github.comsecurity-advisories@github.com  D3TN--D3TN  Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block 2024-10-28 7.5 CVE-2024-10455 cve@gitlab.com  Daniel Schmitzer--DS.DownloadList  Deserialization of Untrusted Data vulnerability in Daniel Schmitzer DS.DownloadList allows Object Injection.This issue affects DS.DownloadList: from n/a through 1.3. 2024-10-30 9.8 CVE-2024-50507 audit@patchstack.com  David DONISA--WP donimedia carousel  Unrestricted Upload of File with Dangerous Type vulnerability in David DONISA WP donimedia carousel allows Upload a Web Shell to a Web Server.This issue affects WP donimedia carousel: from n/a through 1.0.1. 2024-10-30 9.9 CVE-2024-50511 audit@patchstack.com  Delta Electronics--InfraSuite Device Master  Delta Electronics InfraSuite Device Master versions prior to 1.0.12 are affected by a deserialization vulnerability that targets the Device-Gateway, which could allow deserialization of arbitrary .NET objects prior to authentication. 2024-10-30 9.8 CVE-2024-10456 ics-cert@hq.dhs.gov  Deryck Oate--User Toolkit  Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck Oñate User Toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through 1.2.3. 2024-10-30 9.8 CVE-2024-50503 audit@patchstack.com  Devsoft Baltic O--SurveyJS: Drag & Drop WordPress Form Builder  Unrestricted Upload of File with Dangerous Type vulnerability in Devsoft Baltic OÃœ SurveyJS: Drag & Drop WordPress Form Builder.This issue affects SurveyJS: Drag & Drop WordPress Form Builder: from n/a through 1.9.136. 2024-10-29 9.9 CVE-2024-50427 audit@patchstack.com  Eclipse Foundation--mosquitto  In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquitto_rr clients. 2024-10-30 9.1 CVE-2024-10525 emo@eclipse.orgemo@eclipse.orgemo@eclipse.org  Eclipse Foundation--mosquitto  In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker. 2024-10-30 7.5 CVE-2024-3935 emo@eclipse.orgemo@eclipse.orgemo@eclipse.org  esafenet -- cdg  A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2024-10-31 9.8 CVE-2024-10595 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  gaizhenbiao -- chuanhuchatgpt  A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions

Read more »

Booking.com Phishers May Leave You With Reservations
A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We'll also explore an array of cybercrime services aimed at phishers who target hotels that rely on the world's most visited travel website.

Read more »

Change Healthcare Breach Hits 100M Americans
Change Healthcare says it has notified approximately 100 million Americans that their personal, financial and healthcare records may have been stolen in a February 2024 ransomware attack that caused the largest ever known data breach of protected health information.

Read more »

The Global Surveillance Free-for-All in Mobile Ad Data
Not long ago, the ability to remotely track someone’s daily movements just by knowing their home address, employer, or place of worship was considered a powerful surveillance tool that should only be in the purview of nation states. But a new lawsuit in a likely constitutional battle over a New Jersey privacy law shows that anyone can now access this capability, thanks to a proliferation of commercial services that hoover up the digital exhaust emitted by widely-used mobile apps and websites.

Read more »

Vulnerability Summary for the Week of October 14, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info Acespritech Solutions Pvt. Ltd.--Social Link Groups  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Acespritech Solutions Pvt. Ltd. Social Link Groups allows Blind SQL Injection.This issue affects Social Link Groups: from n/a through 1.1.0. 2024-10-20 8.5 CVE-2024-49619 audit@patchstack.com  acm309--PutongOJ  PutongOJ is online judging software. Prior to version 2.1.0-beta.1, unprivileged users can escalate privileges by constructing requests. This can lead to unauthorized access, enabling users to perform admin-level operations, potentially compromising sensitive data and system integrity. This problem has been fixed in v2.1.0.beta.1. As a workaround, one may apply the patch from commit `211dfe9` manually. 2024-10-17 9.1 CVE-2024-48920 security-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.com  acronis -- cyber_files  Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. 2024-10-17 7.8 CVE-2024-49389 security@acronis.com  acronis -- cyber_files  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. 2024-10-17 7.3 CVE-2024-49390 security@acronis.com  acronis -- cyber_files  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. 2024-10-17 7.3 CVE-2024-49391 security@acronis.com  acronis -- cyber_protect  Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. 2024-10-15 9.1 CVE-2024-49388 security@acronis.com  acronis -- cyber_protect  Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. 2024-10-15 7.5 CVE-2024-49387 security@acronis.com  Agustin Berasategui--AB Categories Search Widget  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Agustin Berasategui AB Categories Search Widget allows Reflected XSS.This issue affects AB Categories Search Widget: from n/a through 0.2.5. 2024-10-18 7.1 CVE-2024-49240 audit@patchstack.com  Ahime--Ahime Image Printer  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ahime Ahime Image Printer.This issue affects Ahime Image Printer: from n/a through 1.0.0. 2024-10-16 7.5 CVE-2024-49245 audit@patchstack.com  Ahmet Imamoglu--Ahmeti Wp Timeline  Cross-Site Request Forgery (CSRF) vulnerability in Ahmet Imamoglu Ahmeti Wp Timeline allows Stored XSS.This issue affects Ahmeti Wp Timeline: from n/a through 5.1. 2024-10-17 7.1 CVE-2024-49237 audit@patchstack.com  Al Imran Akash--Recently  Deserialization of Untrusted Data vulnerability in Al Imran Akash Recently allows Object Injection.This issue affects Recently: from n/a through 1.1. 2024-10-16 9.8 CVE-2024-49218 audit@patchstack.com  anand23--Ajax Rating with Custom Login  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anand23 Ajax Rating with Custom Login allows SQL Injection.This issue affects Ajax Rating with Custom Login: from n/a through 1.1. 2024-10-17 9.3 CVE-2024-49246 audit@patchstack.com  andrewmrobbins--ShopWP  The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating the plugin's settings and injecting malicious scripts. 2024-10-16 7.2 CVE-2019-25214 security@wordfence.comsecurity@wordfence.com  Apa--Apa Banner Slider  Cross-Site Request Forgery (CSRF) vulnerability in Apa Apa Banner Slider allows SQL Injection.This issue affects Apa Banner Slider: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49622 audit@patchstack.com  Apa--APA Register Newsletter Form  Cross-Site Request Forgery (CSRF) vulnerability in Apa APA Register Newsletter Form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49621 audit@patchstack.com  apache -- activemq_artemis  Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could eventually allow an authenticated attacker to write arbitrary files to the filesystem and indirectly achieve RCE. Users are recommended to upgrade to version 2.29.0 or later, which fixes the issue. 2024-10-14 8.8 CVE-2023-50780 security@apache.org  apache -- cloudstack  Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing validation of the origin of the requests. This can allow an attacker to gain privileges and access to resources of the authenticated users and may lead to account takeover, disruption, exposure of sensitive data and compromise integrity of the resources owned by the user account that are managed by the platform. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1 Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. 2024-10-16 8.8 CVE-2024-45693 security@apache.orgsecurity@apache.orgsecurity@apache.org  apache -- cloudstack  The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service. An attacker that has access to a user's browser can use an unexpired session to gain access to resources owned by the logged out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. 2024-10-16 7.1 CVE-2024-45462 security@apache.orgsecurity@apache.orgsecurity@apache.org  Apache Software Foundation--Apache CloudStack  Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1, an attacker that can upload or register templates and volumes, can use them to deploy malicious instances or attach uploaded volumes to their existing instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Additionally, all user-uploaded or registered KVM-compatible templates and volumes can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run this on their secondary storage(s) and inspect output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; done The command can also be run for the file-based primary storages; however, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. For checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-10-16 8.5 CVE-2024-45219 security@apache.orgsecurity@apache.orgsecurity@apache.org  Apache Software Foundation--Apache Solr  Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing. This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0. Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue. 2024-10-16 9.8 CVE-2024-45216 security@apache.org  Apache Software Foundation--Apache Solr  Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the "trusted" metadata. ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to "trusted" ConfigSets that may not have been created with an Authenticated request. "trusted" ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated & Authorized. This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization. Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise. 2024-10-16 8.1 CVE-2024-45217 security@apache.org  Arif Nezami--Better Author Bio  Cross-Site Request Forgery (CSRF) vulnerability in Arif Nezami Better Author Bio allows Cross-Site Scripting (XSS).This issue affects Better Author Bio: from n/a through 2.7.10.11. 2024-10-17 7.1 CVE-2024-49229 audit@patchstack.com  arisoft--ARI Adminer WordPress Database Manager  The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14. This makes it possible for unauthenticated attackers to call the files directly and perform a wide variety of unauthorized actions such as accessing a site's database and making changes. 2024-10-16 7.3 CVE-2019-25215 security@wordfence.comsecurity@wordfence.com  arraytics--WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin  The WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin plugin for WordPress is vulnerable to Account Takeover/Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 1.0.25 via the save() due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to reset the emails and passwords of arbitrary user accounts, including administrators, which makes account takeover and privilege escalation possible. 2024-10-17 9.8 CVE-2024-9263 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Asep Bagja Priandana--Woostagram Connect  Unrestricted Upload of File with Dangerous Type vulnerability in Asep Bagja Priandana Woostagram Connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through 1.0.2. 2024-10-20 10 CVE-2024-49327 audit@patchstack.com  Autodesk--Revit  A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-16 7.8 CVE-2024-7993 psirt@autodesk.com  Autodesk--Revit  A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-16 7.8 CVE-2024-7994 psirt@autodesk.com  Avchat.net--AVChat Video Chat  Cross-Site Request Forgery (CSRF) vulnerability in Avchat.Net AVChat Video Chat allows Stored XSS.This issue affects AVChat Video Chat: from n/a through 2.2. 2024-10-20 7.1 CVE-2024-49605 audit@patchstack.com  bc2018--WordPress Landing Page Squeeze Page Responsive Landing Page Builder Free WP Lead Plus X  The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.99. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform administrative actions, such as adding pages to the site and/or replacing site content with malicious JavaScript via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2024-10-16 8.3 CVE-2020-36839 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Bhaskar Dhote--Back Link Tracker  Cross-Site Request Forgery (CSRF) vulnerability in Bhaskar Dhote Back Link Tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49617 audit@patchstack.com  Boyan Raichev--IP Loc8  Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 allows Object Injection.This issue affects IP Loc8: from n/a through 1.1. 2024-10-16 9.8 CVE-2024-48028 audit@patchstack.com  Brandon Clark--SiteBuilder Dynamic Components  Deserialization of Untrusted Data vulnerability in Brandon Clark SiteBuilder Dynamic Components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through 1.0. 2024-10-20 9.8 CVE-2024-49625 audit@patchstack.com  Brandon White--Author Discussion  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brandon White Author Discussion allows Blind SQL Injection.This issue affects Author Discussion: from n/a through 0.2.2. 2024-10-20 8.5 CVE-2024-49609 audit@patchstack.com  brx8r--Nice Backgrounds  Unrestricted Upload of File with Dangerous Type vulnerability in brx8r Nice Backgrounds allows Upload a Web Shell to a Web Server.This issue affects Nice Backgrounds: from n/a through 1.0. 2024-10-20 10 CVE-2024-49330 audit@patchstack.com  ChanGate--Property Management System  Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. 2024-10-15 9.8 CVE-2024-9972 twcert@cert.org.twtwcert@cert.org.tw  chertz--WP Easy Post Types  The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajax_import_content' function. This allows authenticated attackers, with subscriber-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. 2024-10-18 8.8 CVE-2024-10079 security@wordfence.comsecurity@wordfence.com  chertz--WP Easy Post Types  The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options and posts. 2024-10-18 7.3 CVE-2024-10078 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Cisco--Cisco Analog Telephone Adaptor (ATA) Software  A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device. This vulnerability is due to a lack of authentication on specific HTTP endpoints. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view or delete the configuration or change the firmware. 2024-10-16 8.2 CVE-2024-20458 ykramarz@cisco.com  Cisco--Cisco Analog Telephone Adaptor (ATA) Software  A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device with the privileges of the targeted user. 2024-10-16 7.1 CVE-2024-20421 ykramarz@cisco.com  cmssoft--CSV Product Import Export for WooCommerce  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cmssoft CSV Product Import Export for WooCommerce allows SQL Injection.This issue affects CSV Product Import Export for WooCommerce: from n/a through 1.0.0. 2024-10-17 8.5 CVE-2024-49244 audit@patchstack.com  code-projects -- pharmacy_management_system  A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_customer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-15 9.8 CVE-2024-9976 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Blood Bank Management System  A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file member_register.php. The manipulation of the argument fullname/username/password/email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "password" to be affected. But it must be assumed that other parameters are affected as well. 2024-10-15 7.3 CVE-2024-9986 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  CodeFlock--FREE DOWNLOAD MANAGER  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CodeFlock FREE DOWNLOAD MANAGER allows Path Traversal.This issue affects FREE DOWNLOAD MANAGER: from n/a through 1.0.0. 2024-10-17 8.6 CVE-2024-49315 audit@patchstack.com  CodePassenger--Job Board Manager for WordPress  Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress allows Privilege Escalation.This issue affects Job Board Manager for WordPress: from n/a through 1.0. 2024-10-17 9.8 CVE-2024-49322 audit@patchstack.com  Codezips--Sales Management System  A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-10-20 7.3 CVE-2024-10165 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Sales Management System  A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-10-20 7.3 CVE-2024-10166 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Sales Management System  A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown part of the file deletecustind.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-20 7.3 CVE-2024-10167 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Cookie Scanner Nikel Schubert--Cookie Scanner  Cross-Site Request Forgery (CSRF) vulnerability in Cookie Scanner - Nikel Schubert Cookie Scanner allows Stored XSS.This issue affects Cookie Scanner: from n/a through 1.1. 2024-10-17 7.1 CVE-2024-49220 audit@patchstack.com  cyberlord92--Miniorange OTP Verification with Firebase  The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources, and the user current password check is missing. This makes it possible for unauthenticated attackers to change user passwords and potentially take over administrator accounts. 2024-10-17 9.8 CVE-2024-9862 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  cyberlord92--Miniorange OTP Verification with Firebase  The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.6.0 due to the insecure 'administrator' default value for the 'default_user_role' option. This makes it possible for unauthenticated attackers to register an administrator user even if the registration form is disabled. 2024-10-17 9.8 CVE-2024-9863 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  cyberlord92--Miniorange OTP Verification with Firebase  The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0. This is due to missing validation on the token being supplied during the otp login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they know the phone number associated with that user. 2024-10-17 8.1 CVE-2024-9861 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Dan Alexander--SermonAudio Widgets  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dan Alexander SermonAudio Widgets allows SQL Injection.This issue affects SermonAudio Widgets: from n/a through 1.9.3. 2024-10-20 8.5 CVE-2024-49614 audit@patchstack.com  Dassault Systmes--3DSwymer  An authorization bypass through user-controlled key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an authenticated attacker to access some unauthorized data. 2024-10-16 7.7 CVE-2024-8040 3DS.Information-Security@3ds.com  Dassault Systmes--ENOVIA Collaborative Industry Innovator  A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. 2024-10-16 8.7 CVE-2024-6380 3DS.Information-Security@3ds.com  Dell--Dell OpenManage Enterprise  Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. 2024-10-17 8 CVE-2024-45766 security_alert@emc.com  Denis--Azz Anonim Posting  Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through 0.9. 2024-10-16 10 CVE-2024-49257 audit@patchstack.com  Dennis Hoppe--Encyclopedia / Glossary / Wiki  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dennis Hoppe Encyclopedia / Glossary / Wiki allows Reflected XSS.This issue affects Encyclopedia / Glossary / Wiki: from n/a through 1.7.60. 2024-10-17 7.1 CVE-2024-49320 audit@patchstack.com  didi--DDMQ  A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console Module. The manipulation with the input /;login leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. 2024-10-20 7.3 CVE-2024-10173 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Dotsquares--Google Map Locations  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dotsquares Google Map Locations allows Reflected XSS.This issue affects Google Map Locations: from n/a through 1.0. 2024-10-20 7.1 CVE-2024-49606 audit@patchstack.com  dueclic -- wp_2fa_with_telegram  The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator. 2024-10-15 8.8 CVE-2024-9687 security@wordfence.comsecurity@wordfence.com  dueclic -- wp_2fa_with_telegram  The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication. 2024-10-15 7.5 CVE-2024-9820 security@wordfence.comsecurity@wordfence.com  easy.jobs--EasyJobs  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.14. 2024-10-17 7.1 CVE-2024-43997 audit@patchstack.com  edo888--Translate WordPress Google Language Translator  The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Specifically affects users with older browsers that lack proper URL encoding support. 2024-10-16 7.1 CVE-2021-4452 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Edush Maxim--GoogleDrive folder list  Cross-Site Request Forgery (CSRF) vulnerability in Edush Maxim GoogleDrive folder list allows Stored XSS.This issue affects GoogleDrive folder list: from n/a through 2.2.2. 2024-10-20 7.1 CVE-2024-49335 audit@patchstack.com  emrevona--WP Fastest Cache  The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete arbitrary files from the server. 2024-10-16 8.8 CVE-2020-36836 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  ESi Technology--AIM LINE Marketing Platform  AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content. 2024-10-15 9.8 CVE-2024-9982 twcert@cert.org.twtwcert@cert.org.tw  F5--BIG-IP  BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. 2024-10-16 7.2 CVE-2024-45844 f5sirt@f5.com  facebook--Facebook Chat Plugin Live Chat Plugin for WordPress  The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_update_options function in versions up to, and including, 1.5. This flaw makes it possible for low-level authenticated attackers to connect their own Facebook Messenger account to any site running the vulnerable plugin and engage in chats with site visitors on affected sites. 2024-10-16 7.4 CVE-2020-36838 security@wordfence.comsecurity@wordfence.com  Fahad Mahmood--Endless Posts Navigation  Cross-Site Request Forgery (CSRF) vulnerability in Fahad Mahmood Endless Posts Navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through 2.2.7. 2024-10-20 7.1 CVE-2024-49629 audit@patchstack.com  Fahad Mahmood--Keep Backup Daily  : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fahad Mahmood Keep Backup Daily allows Retrieve Embedded Sensitive Data.This issue affects Keep Backup Daily: from n/a through 2.0.7. 2024-10-17 7.5 CVE-2024-48024 audit@patchstack.com  filemanagerpro -- file_manager  The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.3.9. This is due to missing or incorrect nonce validation on the 'mk_file_folder_manager' ajax action. This makes it possible for unauthenticated attackers to upload arbitrary files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2024-10-16 8.8 CVE-2024-8507 security@wordfence.comsecurity@wordfence.com  filemanagerpro -- file_manager  The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing file type validation via the 'mk_file_folder_manager_shortcode' ajax action in all versions up to, and including, 8.3.9. This makes it possible for unauthenticated attackers, if granted access to the File Manager by an administrator, to download and upload arbitrary backup files on the affected site's server which may make remote code execution possible. 2024-10-16 8.8 CVE-2024-8746 security@wordfence.comsecurity@wordfence.com  Fliperrr Team--Creates 3D Flipbook, PDF Flipbook  Unrestricted Upload of File with Dangerous Type vulnerability in Fliperrr Team Creates 3D Flipbook, PDF Flipbook allows Upload a Web Shell to a Web Server.This issue affects Creates 3D Flipbook, PDF Flipbook: from n/a through 1.2. 2024-10-16 9.9 CVE-2024-48034 audit@patchstack.com  formosasoft -- ee-class  The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents. 2024-10-15 8.8 CVE-2024-9980 twcert@cert.org.twtwcert@cert.org.tw  formosasoft -- ee-class  The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include the file, resulting in arbitrary code execution on the server. 2024-10-15 8.8 CVE-2024-9981 twcert@cert.org.twtwcert@cert.org.tw  Gabriele Valenti--Telecash Ricaricaweb  Deserialization of Untrusted Data vulnerability in Gabriele Valenti Telecash Ricaricaweb allows Object Injection.This issue affects Telecash Ricaricaweb: from n/a through 2.2. 2024-10-16 9.8 CVE-2024-48030 audit@patchstack.com  Gerry Ntabuhashe--GERRYWORKS Post by Mail  : Incorrect Privilege Assignment vulnerability in Gerry Ntabuhashe GERRYWORKS Post by Mail allows Privilege Escalation.This issue affects GERRYWORKS Post by Mail: from n/a through 1.0. 2024-10-20 8.8 CVE-2024-49608 audit@patchstack.com  Giveaway Boost--Giveaway Boost  Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4. 2024-10-20 9.8 CVE-2024-49332 audit@patchstack.com  google -- chrome  Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2024-10-15 8.8 CVE-2024-9954 chrome-cve-admin@google.comchrome-cve-admin@google.com  google -- chrome  Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low) 2024-10-15 8.8 CVE-2024-9965 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google Cloud--Migrate to Containers  There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the action to delete the local user "m2cuser". We recommend upgrading to 1.2.3 or beyond 2024-10-16 7.8 CVE-2024-9858 cve-coordination@google.com  Google--Chrome  Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9955 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9957 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9959 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9960 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9961 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 7.8 CVE-2024-9956 chrome-cve-admin@google.comchrome-cve-admin@google.com  Gora Tech LLC--Cooked Pro  Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0. 2024-10-17 10 CVE-2024-49291 audit@patchstack.com  Grafana--Grafana  The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack. The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions. 2024-10-18 9.9 CVE-2024-9264 security@grafana.com  Grayson Robbins--Disc Golf Manager  Deserialization of Untrusted Data vulnerability in Grayson Robbins Disc Golf Manager allows Object Injection.This issue affects Disc Golf Manager: from n/a through 1.0.0. 2024-10-16 9.8 CVE-2024-48026 audit@patchstack.com  Hasan Movahed--Duplicate Title Validate  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hasan Movahed Duplicate Title Validate allows Blind SQL Injection.This issue affects Duplicate Title Validate: from n/a through 1.0. 2024-10-20 8.5 CVE-2024-49623 audit@patchstack.com  helmholz -- myrex24_v2_virtual_server  An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost. 2024-10-15 7.5 CVE-2024-45272 info@cert.vde.cominfo@cert.vde.com  Henrique Rodrigues--SafetyForms  Cross-Site Request Forgery (CSRF) vulnerability in Henrique Rodrigues SafetyForms allows Blind SQL Injection.This issue affects SafetyForms: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49615 audit@patchstack.com  Hgiga--OAKlouds  The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk. Unauthenticated remote attackers still can download arbitrary system files, which may be deleted subsequently . 2024-10-14 9.8 CVE-2024-9924 twcert@cert.org.twtwcert@cert.org.tw  HMS Networks--EWON FLEXY 202  The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network can sniff the traffic and decode the credentials. 2024-10-17 8.2 CVE-2024-7755 ics-cert@hq.dhs.gov  HP Inc.--Certain HP DesignJet products  Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials. 2024-10-15 7.5 CVE-2024-5749 hp-security-alert@hp.com  Hung Trang Si--SB Random Posts Widget  : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hung Trang Si SB Random Posts Widget allows PHP Local File Inclusion.This issue affects SB Random Posts Widget: from n/a through 1.0. 2024-10-16 7.5 CVE-2024-48029 audit@patchstack.com  Igor Funa--Ad Inserter  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Igor Funa Ad Inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a through 2.7.37. 2024-10-17 7.1 CVE-2024-49248 audit@patchstack.com  Imagination Technologies--Graphics DDK  Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. 2024-10-14 7.8 CVE-2024-43701 367425dc-4d06-4041-9650-c2dc6aaa27ce  Infotuts--SW Contact Form  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infotuts SW Contact Form allows Blind SQL Injection.This issue affects SW Contact Form: from n/a through 1.0. 2024-10-20 8.5 CVE-2024-49612 audit@patchstack.com  Innovaweb Sp. z o.o.--Free Stock Photos Foter  Deserialization of Untrusted Data vulnerability in Innovaweb Sp. Z o.O. Free Stock Photos Foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through 1.5.4. 2024-10-16 8.8 CVE-2024-49227 audit@patchstack.com  Jack Zhu--photokit  Unrestricted Upload of File with Dangerous Type vulnerability in Jack Zhu allows Upload a Web Shell to a Web Server.This issue affects photokit: from n/a through 1.0. 2024-10-20 10 CVE-2024-49610 audit@patchstack.com  James Park--Analyse Uploads  Relative Path Traversal vulnerability in James Park Analyse Uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through 0.5. 2024-10-16 8.6 CVE-2024-49253 audit@patchstack.com  JetBrains--YouTrack  In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests 2024-10-17 8.1 CVE-2024-49579 cve@jetbrains.com  jetmonsters--Timetable and Event Schedule by MotoPress  The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_route_url() function called via a nopriv AJAX action in versions up to, and including, 2.3.8. This makes it possible for unauthenticated attackers to call that function and perform a wide variety of actions such as including random template, injecting malicious web scripts, and more. 2024-10-16 7.3 CVE-2020-36840 security@wordfence.comsecurity@wordfence.com  Jon Vincent Mendoza--Dynamic Elementor Addons  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jon Vincent Mendoza Dynamic Elementor Addons allows PHP Local File Inclusion.This issue affects Dynamic Elementor Addons: from n/a through 1.0.0. 2024-10-18 7.5 CVE-2024-49243 audit@patchstack.com  Jordan Lyall--MyTweetLinks  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordan Lyall MyTweetLinks allows Blind SQL Injection.This issue affects MyTweetLinks: from n/a through 1.1.1. 2024-10-20 8.5 CVE-2024-49618 audit@patchstack.com  Joshua Clayton--Feed Comments Number  Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Clayton Feed Comments Number allows Upload a Web Shell to a Web Server.This issue affects Feed Comments Number: from n/a through 0.2.1. 2024-10-16 10 CVE-2024-49216 audit@patchstack.com  Julian Weinert // cs&m--cSlider  Cross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m cSlider allows Stored XSS.This issue affects cSlider: from n/a through 2.4.2. 2024-10-17 7.1 CVE-2024-49221 audit@patchstack.com  Kubernetes--Image Builder  A security issue was discovered in the Kubernetes Image Builder versions

Read more »

Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach
Brazilian authorities reportedly have arrested a 33-year-old man on suspicion of being "USDoD," a prolific cybercriminal who rose to infamy in 2022 after infiltrating the FBI's InfraGard program and leaking contact information for 80,000 members. More recently, USDoD was behind a breach at the consumer data broker National Public Data that led to the leak of Social Security numbers and other personal information for a significant portion of the U.S. population.

Read more »

Sudanese Brothers Arrested in ‘AnonSudan’ Takedown
The U.S. government on Wednesday announced the arrest and charging of two Sudanese brothers accused of running Anonymous Sudan (a.k.a. AnonSudan), a cybercrime business known for launching powerful distributed denial-of-service (DDoS) attacks against a range of targets, including dozens of hospitals, news websites and cloud providers. One of the brothers is facing life in prison for allegedly seeking to kill people with his attacks.

Read more »

Early Black Friday Deal: 13-inch M2 MacBook Air with 16GB of RAM for $749, $250 off MSRP
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $250 off MSRP, now only $749. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. At the time of this post, the discount applied only to Space Gray and Midnight colors, but other colors may also qualify for the discount soon -- check their site for the latest information: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $749 $250 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Early Black Friday Deal: 13-inch M2 MacBook Air with 16GB of RAM for $749, $250 off MSRP
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $250 off MSRP, now only $749. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. At the time of this post, the discount applied only to Space Gray and Midnight colors, but other colors may also qualify for the discount soon -- check their site for the latest information: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $749 $250 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Get a new M4 Mac mini today for only $549, $50 off Apple’s MSRP
Amazon has the new M4 Mac mini with 16GB of memory and 256GB of storage on sale for $549 including free shipping. Their price is $50 off MSRP, and it's the lowest price currently available for a new M4 Mac from any Apple retailer. Price includes a $50 clippable coupon available on Amazon's site. Be sure to select Amazon as the retailer to see this coupon, rather than a third-party seller. For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »

Get a new M4 Mac mini today for only $549, $50 off Apple’s MSRP
Amazon has the new M4 Mac mini with 16GB of memory and 256GB of storage on sale for $549 including free shipping. Their price is $50 off MSRP, and it's the lowest price currently available for a new M4 Mac from any Apple retailer. Price includes a $50 clippable coupon available on Amazon's site. Be sure to select Amazon as the retailer to see this coupon, rather than a third-party seller. For the latest prices and sales, keep an eye on our Mac mini Price Tracker, updated daily.

Read more »

Apple M2 iPad Airs on early Black Friday sale for $100 off MSRP, prices start at $499
Best Buy has Apple's 11-inch and 13-inch iPad Airs with M2 CPUs on early Black Friday sale this weekend for $100 off MSRP with prices starting at $499. These are the cheapest new iPad Airs available from any Apple retailer: - 11" 128GB M2 WiFi iPad Air: $499, $100 off - 11" 256GB M2 WiFi iPad Air: $599, $100 off - 11" 512GB M2 WiFi iPad Air: $799, $100 off - 11" 1TB M2 WiFi iPad Air: $999, $100 off - 11" 128GB M2 WiFi + 5G iPad Air: $649, $100 off - 11" 256GB M2 WiFi + 5G iPad Air: $749, $100 off - 11" 512GB M2 WiFi + 5G iPad Air: $949, $100 off - 11" 1TB M2 WiFi + 5G iPad Air: $1149, $100 off - 13" 128GB M2 WiFi iPad Air: $699, $100 off - 13" 256GB M2 WiFi iPad Air: $799, $100 off - 13" 512GB M2 WiFi iPad Air: $999, $100 off - 13" 1TB M2 WiFi iPad Air: $1199, $100 off - 13" 128GB M2 WiFi + 5G iPad Air: $849, $100 off - 13" 256GB M2 WiFi + 5G iPad Air: $949, $100 off - 13" 512GB M2 WiFi + 5G iPad Air: $1149, $100 off - 13" 1TB M2 WiFi + 5G iPad Air: $1349, $100 off Sale prices valid for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available). For the latest prices & sales, keep an eye on our iPad Air Price Tracker, updated daily.

Read more »

Early Black Friday sale: HomePod minis for $84.99 at Verizon, save $14 (15% off)
Snag an Apple HomePod mini in your favorite color at early Black Friday prices, now $15 off at Verizon ($84.99). Compact yet powerful, the HomePod mini delivers rich, 360-degree sound and integrates seamlessly with your Apple devices and smart home setup. Their sale price applies to all mini colors and represents a rare HomePod sale price. Verizon service is not required for purchase. Buy online and choose free shipping or free local store pickup (if available). Sale price for online orders only, in-store price may vary. See our HomePod Price Tracker for the latest prices and deals from Apple and its retailers.

Read more »

Apple AirPods Pro with USB-C on Black Friday sale today for $169, $80 off MSRP
Best Buy has Apple's AirPods Pro with USB-C in stock and on Black Friday sale today for $169.99. That's $80 off MSRP. Sale prices for online orders only, in-store price may vary. Order online and choose free shipping or free local store pickup. This is limited-time, early Black Friday pricing. For the latest prices & deals, see our Apple AirPods Price Tracker, updated daily.

Read more »

Price Drop! Clearance 14-inch M3 Pro/M3 Max MacBook Pros for $400 off original MSRP
B&H Photo has dropped prices on clearance 14" M3 Pro and M3 Max MacBook Pros by $400 off original MSRP with prices now available starting at $1599. B&H offers free 1-2 day delivery to most US addresses: - 14" 11-Core M3 Pro MacBook Pro (18GB RAM/512GB SSD): $1599 $400 off MSRP - 14" 12-Core M3 Pro MacBook Pro (18GB RAM/1TB SSD): $1999 $400 off MSRP - 14" 14-Core M3 Max MacBook Pro (36GB RAM/1TB SSD): $2799 $400 off MSRP For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »

Take $50 off Apple’s 10th-generation iPads with the latest sales
Amazon and Best Buy are offering $50 discounts on Apple's 10th-generation iPads this week, with models now available starting at only $299. These are the lowest prices available for Apple's entry-level iPads: (1): Best Buy has Apple's 10th-generation WiFi iPads on sale for $50 off MSRP in their online store. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 10" 10th-generation 64GB WiFi iPads: $299 $50 off MSRP - 10" 10th-generation 256GB WiFi iPads: $449 $50 off MSRP - 10" 10th-generation 64GB WiFi + Cellular iPads: $449 $50 off MSRP - 10" 10th-generation 256GB WiFi + Cellular iPads: $599 $50 off MSRP (2): Amazon has Apple's 10th-generation WiFi iPads on sale for $50 off MSRP as well. Shipping is free: - 10" 10th-generation 64GB WiFi iPads: $299 $50 off MSRP - 10" 10th-generation 256GB WiFi iPads: $449 $50 off MSRP - 10" 10th-generation 64GB WiFi + Cellular iPads: $449 $50 off MSRP - 10" 10th-generation 256GB WiFi + Cellular iPads: $599 $50 off MSRP Note that Amazon's prices are dynamic, and the sale price may vary depending on model and color. See their site for the latest information. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Take $50 off Apple’s 10th-generation iPads with the latest sales
Amazon and Best Buy are offering $50 discounts on Apple's 10th-generation iPads this week, with models now available starting at only $299. These are the lowest prices available for Apple's entry-level iPads: (1): Best Buy has Apple's 10th-generation WiFi iPads on sale for $50 off MSRP in their online store. Sale prices for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 10" 10th-generation 64GB WiFi iPads: $299 $50 off MSRP - 10" 10th-generation 256GB WiFi iPads: $449 $50 off MSRP - 10" 10th-generation 64GB WiFi + Cellular iPads: $449 $50 off MSRP - 10" 10th-generation 256GB WiFi + Cellular iPads: $599 $50 off MSRP (2): Amazon has Apple's 10th-generation WiFi iPads on sale for $50 off MSRP as well. Shipping is free: - 10" 10th-generation 64GB WiFi iPads: $299 $50 off MSRP - 10" 10th-generation 256GB WiFi iPads: $449 $50 off MSRP - 10" 10th-generation 64GB WiFi + Cellular iPads: $449 $50 off MSRP - 10" 10th-generation 256GB WiFi + Cellular iPads: $599 $50 off MSRP Note that Amazon's prices are dynamic, and the sale price may vary depending on model and color. See their site for the latest information. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Early Black Friday Sale: New iPads for only $199
Best Buy has Apple's 9th generation 10.2" WiFi iPads on early Black Friday sale for starting at only $199 on their online store for a limited time. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 10" 64GB WiFi iPad (Space Gray or Silver): $199.99 MSRP $329 - 10" 256GB WiFi iPad (Space Gray or Silver): $349.99 MSRP $479 - 10" 64GB WiFi + Cellular iPad (Space Gray or Silver): $329.99 MSRP $459 - 10" 256GB WiFi + Cellular iPad (Space Gray or Silver): $479.99 MSRP $609 Best Buy's prices are among the lowest prices available for these base-model iPads. These are clearance iPads and will be available while supplies last. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Clearance 13-inch M2 MacBook Airs with 8GB of memory on sale again for only $699
Amazon has clearance 13" MacBook Airs with M2 CPUs and 8GB of RAM in stock today and on sale again for $300 off MSRP with prices starting at only $699. Shipping is free. These are the lowest prices available for M2-powered MacBook Airs anywhere: - 13" M2 MacBook Air 8GB/256GB (Space Gray): $699, $300 off MSRP - 13" M2 MacBook Air 8GB/256GB (Silver): $699, $300 off MSRP - 13" M2 MacBook Air 8GB/256GB (Midnight): $699, $300 off MSRP - 13" M2 MacBook Air 8GB/256GB (Starlight): $699, $300 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »