Kottke on the Art and Power of Hypertextual Writing
Italic and bold emphasis are information-density additives. But as Kottke observes, used deftly, hypertext links are an information-density *multiplier*.

Read more »

Apple Pay officially launches in Paraguay
Paraguay has become the latest country to support Apple Pay, according to a recent blog post from Mastercard. Here's what you need to know.Apple Pay has officially launched in Paraguay.Apple Pay makes it possible to complete payments on iPhone without the use of a physical card. While Apple's contactless payment method has been available in the United States for well over a decade, it's only now launching in Paraguay.As originally spotted by 9to5mac, Mastercard announced that cards issued by Banco Continental, Itau, and Ueno Bank can all be added to Apple Wallet and used with Apple Pay. The company revealed the move in a blog post, which highlights the user benefits of the Apple Pay launch. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Berkshire Hathaway’s tax bill on 2024 Apple stock sales: $20 billion
Berkshire Hathaway's significant reduction in its Apple holdings is expected to result in a hefty tax bill. After selling over 600 million… The post appeared first on MacDailyNews.

Read more »

EU might fine Apple for failure to comply with DMA, for real this time
The European Union's Digital Markets Act may lead to the first fine against Apple after repeated failed attempts to comply with the word and spirit of the law.EU could fine Apple soon over failure to comply with DMAApple has had a tough time trying to comply with the new laws meant to prevent monopolies from controlling a market. Specifically, Apple's anti-steering practices keep coming under fire.According to a report from Bloomberg, the EU may be gearing up to fine Apple for failure to comply with the DMA, though details are still unknown. The fine could be levied before Margrethe Vestager leaves office in November, or it could be pushed to a later date in 2024. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Apple Pay officially launches in Paraguay
Apple on Tuesday officially launched Apple Pay, its payment platform, for users in Paraguay. The news was confirmed by Mastercard on its website, which also reveals that customers of the main banks in Paraguay can now use Apple Pay. more…

Read more »

How to plan multi-stop routes in Apple Maps
You can use Apple Maps to plan multiple stops along the same route. You can add three, four, fifteen stops of a journey if you want. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Apple Stores in three U.S. cities will change locations on November 9
Apple Stores in three U.S. cities will move to new temporary locations on November 9, possibly due to renovations. Here's what you need to know.Apple's La Encantada store is moving to a new location. Image Credit: Apple.On Tuesday, Apple announced that its La Encantada retail store, in Tucson, Arizona will move to a new location that opens on November 9, at 10 AM local time. According to the company's website, the temporary store will be located on Level 2 of the outdoor shopping center, just in front of the stairs.As MacRumors points out, the La Encantada store was originally opened two decades ago, in 2004. Apple may opt to renovate the original store location while the temporary store is in use. There are currently no details as to when the La Encantada store will return to its original location. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Punch up your pix with this powerful Mac photo editor
Make even mundane photos look amazing with AI-powered photo editor Luminar Neo. This lifetime bundle also includes pro filters and training. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Live Activities are one of Apple’s best features, and they keep getting better
iOS 18 means we’ve had 18 years of iPhone software, so you’d think that adding meaningful new features would be tough. But one recent iOS addition, Live Activities, is among Apple’s best recent updates. And it keeps on getting better thanks to ongoing enhancements. more…

Read more »

GlobalFoundries forecasts upbeat Q4 results on strong demand from iPhone supplier
GlobalFoundries, the world's third-largest contract chipmaker, has raised its fourth-quarter revenue forecast, exceeding Wall Street… The post appeared first on MacDailyNews.

Read more »

Apple could face EU’s first-ever DMA fine as soon as this month
Apple is set to face the first-ever fine under the Digital Markets Act in the EU as soon as this month, Bloomberg reports. The EU initially issued its decision that Apple was in breach of the DMA in June. more…

Read more »

Apple’s global head of accessibility to attend Web Summit Lisbon 2024
This year’s Web Summit Lisbon kicks off next week, and guests will have the chance to attend a talk by Sarah Herrlinger, Apple’s current global head of accessibility. Unsurprisingly, the presentation will discuss how Apple considers accessibility when building its products. more…

Read more »

Apple News will let you watch live U.S. election results from your Home and Lock Screens
Apple's News app will deliver live U.S. election updates to iPhone and iPad users’ lockscreens. And if you’ve got a recent iPhone… The post appeared first on MacDailyNews.

Read more »

iOS 18.2’s Notes app gets three powerful Apple Intelligence upgrades
The second wave of Apple Intelligence features is coming soon, and it’s a huge upgrade—including for Apple Notes users. iOS 18 already packed a strong Notes update, but next month iOS 18.2 will bring three key AI improvements to Notes. Here’s what’s new. more…

Read more »

Tiny game controller offers outsize iPhone retro gaming fun [Review] ★★★☆☆
Clip the CRKD Atom iPhone game controller onto your keychain for gaming on the go. It’s ready for retro fun. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Tiny game controller offers outsize iPhone retro gaming fun [Review] ★★★☆☆
Clip the CRKD Atom iPhone game controller onto your keychain for gaming on the go. It’s ready for retro fun. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

M4 24-inch iMac vs M3 24-inch iMac compared — Apple's iconic Mac gets a speed boost
Apple's refreshed M4 24-inch iMac sports a fast chip, but that isn't the only reason to upgrade. Here's how the hot new model compares to the year-old M3 iMac that it replaces.Apple's M4 iMac hasn't changed all that much.Apple's launch of the new M4 iMac comes months after the chip first debuted in the 2024 iPad Pro. It also arrived in same week that the M4 Mac mini and M4 MacBook Pro were unveiled.This refreshed M4 iMac replaces the M3 iMac that went on sale in October 2023. With a familiar design, it's fair to say that all the biggest changes are on the inside. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Next Apple Watch Activity Challenge set for Veterans Day
Apple has a new Activity Challenge coming up soon for Apple Watch users. Next Monday, November 11 is Veterans Day, and Apple is offering special digital prizes for Watch owners who make exercise part of their day. more…

Read more »

Apple headcount grew to approximately 164,000 full-time employees worldwide this year
Apple's workforce has grown steadily in 2024, reaching approximately 164,000 full-time employees worldwide as of late September… The post appeared first on MacDailyNews.

Read more »

Best Buy slashes M3 MacBook Pros to as low as $1,099, save up to $600
Best Buy is clearing out remaining M3 MacBook Pro inventory for the holidays, with savings up to $600 off a variety of models.Best Buy is clearing out M3 MacBook Pro inventory with blowout pricing - Image credit: AppleThe blowout sale at Best Buy makes room for Apple's new M4 lineup — and shoppers can benefit from price drops to the tune of up to $600 off M3 models.Shop the savings Continue Reading on AppleInsider | Discuss on our Forums

Read more »

Stardew Valley now has multiplayer on Android and iOS – how to access the hidden mode
After a few months waiting, Stardew Valley’s latest major update has debuted on Android and iOS with a ton of new additions, and now it turns out that it also has a hidden multiplayer mode. more…

Read more »

iOS 18 could soon show you how long it will take for your iPhone to charge
iOS 18 adds a lot of new features to the iPhone, and there are even more to come with future updates like iOS 18.2. In addition to Genmoji, Image Playgrounds and a new Mail app, Apple has also been working on something else: the ability to show users how long it will take to charge an iPhone. more…

Read more »

Retro gold rush: which emulators are on the App Store, and what's coming
Apple is allowing emulators on the App Store. Here's what's arrived, and what's on the way to play your favorite retro games on your iPhone, updated on November 5.iPhone emulatorsThe early April changes to the App Store Review Guidelines reversed a rule that practically banned emulators from the App Store. After the rule was removed, it was expected that there would be a sudden rush of emulators being submitted to Apple for inclusion in the digital storefront.Emulators for the iPhone have existed for a while, but outside of the App Store as a side-loadable app. With Apple's changes, some of the projects are making the transition, and potentially gaining more traction from a larger user base in the process. Continue Reading on AppleInsider | Discuss on our Forums

Read more »

How to track election results on your iPhone–if you dare
Macworld No matter which way you’re voting, it’s hard to ignore the tension on this Election Day in the U.S. Polls are open all around the country, but the real anxiety doesn’t begin until later tonight when they start to close and votes are tabulated. And if you need one more way to obsessively track results, Apple News has you covered, whether you live in the U.S. or not. If you head over to the Apple News app on your iPhone, you’ll see a Follow the Election Live button at the top of the Today tab. Tap it and you’ll receive “real-time updates” tonight as electoral votes begin to be tallied, presumably beginning at 6 p.m. ET when the first polls begin to close in Kentucky and Indiana. The results will show up as a Live Activity on your Lock Screen and in the Dynamic Island, which you can click to get further information all night (and morning) long. Apple doesn’t illustrate how the tracker will operate, but a red/blue electoral college bar with live results could be the most nerve-wracking Dynamic Island activity ever made. It’s likely that the race isn’t decided tonight, but it’s unclear when the Live Activity will end. Apple News has comprehensive election coverage from a variety of sources, as well as state-by-state information for both subscribers and non-subscribers. You can also filter news by issue and candidate on the dedicated Election 2024 page.

Read more »

Nab more than 100 great Apple deals in this early holiday sale
Halloween's barely over and already the Apple holiday deals -- 99 big discounts -- are rolling at B&H Photo. (via Cult of Mac - Apple news, rumors, reviews and how-tos)

Read more »

Russian court fines Apple for not deleting two political podcasts
A Moscow court on Tuesday fined U.S. technology giant Apple 3.6 million roubles ($36,889) for refusing to remove two podcasts that… The post appeared first on MacDailyNews.

Read more »

Apple Warns Investors Future Products May Never Be as Profitable as iPhone
Apple has warned investors that future products may never be as profitable as its iPhone business, as it pushes into unproven new markets such as artificial intelligence and virtual reality headsets. From a report: The iPhone maker added the new warning on growth and profit margins to its latest annual report, in the list of "risk factors" facing the tech group's business. "New products, services and technologies may replace or supersede existing offerings and may produce lower revenues and lower profit margins," Apple said, "which can materially adversely impact the company's business, results of operations and financial condition." Apple routinely warns investors in its annual reports that competition, foreign exchange, supply chain issues and other factors can put "volatility and downward pressure" on its margins. The same 10-K regulatory filing in previous years suggested that new product introductions could have "higher cost structures." But until now, Apple has not been so direct in addressing the financial profile of its future products. Read more of this story at Slashdot.

Read more »

The M4 Mac mini could be the best offer Apple has ever made PC switchers
The M4 Mac mini arrives this Friday. The tiny, redesigned computer packs a lot of power, and with a low . All of which makes me think: this may be the best offering Apple has ever had for PC switchers. Here’s why. more…

Read more »

Deals: First cash deals on M4 Mac mini and iMac, $600 off 16GB MacBook Pro, 16GB MacBook Air $799, more
Today’s lineup of price drops is headlined by the very first cash discounts at Amazon on the all-new M4 Mac mini as well as the new M4 iMac configurations ahead of delivery day later this week. From there we move over to the laptops – Amazon is now offering a massive $600 price drop on the M3 MacBook Pro with 16GB RAM and a 1TB SSD alongside other models – as well as one of the best prices ever on the newly upgraded M2 MacBook Air with 16GB of RAM (the original $1,199 model is now $799). Beyond that, new lows on Apple’s 25W MagSafe charger join a host of early Black Friday sales from UGREEN, Anker, and more. Scope it all out down below.  more…

Read more »

9to5Mac Daily: November 5, 2024 – iOS 18.2 beta 2 and visionOS 2.2 changes
Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players. Sponsored by CardPointers: The best way to maximize your credit card rewards. Save 30% and get a $100 Savings Card today.  more…

Read more »

Canadian Man Arrested in Snowflake Data Extortions
A 26-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. On October 30, Canadian authorities arrested Alexander Moucka, a.k.a. Connor Riley Moucka of Kitchener, Ontario, on a provisional arrest warrant from the United States. Bloomberg first reported Moucka's alleged ties to the Snowflake hacks on Monday. At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). After scouring darknet markets for stolen Snowflake account credentials, the hackers began raiding the data storage repositories used by some of the world’s largest corporations.

Read more »

Vulnerability Summary for the Week of October 28, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info acnoo -- flutter_api  Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API: from n/a through 1.0.5. 2024-10-28 9.8 CVE-2024-50486 audit@patchstack.com  adirectory--aDirectory  Unrestricted Upload of File with Dangerous Type vulnerability in adirectory aDirectory allows Upload a Web Shell to a Web Server.This issue affects aDirectory: from n/a through 1.3. 2024-10-29 10 CVE-2024-50420 audit@patchstack.com  Ajar Productions--Ajar in5 Embed  Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through 3.1.3. 2024-10-29 10 CVE-2024-50473 audit@patchstack.com  Amin Omer--Sudan Payment Gateway for WooCommerce  Unrestricted Upload of File with Dangerous Type vulnerability in Amin Omer Sudan Payment Gateway for WooCommerce allows Upload a Web Shell to a Web Server.This issue affects Sudan Payment Gateway for WooCommerce: from n/a through 1.2.2. 2024-10-29 10 CVE-2024-50494 audit@patchstack.com  amu02aftab--Enable Shortcodes inside Widgets,Comments and Experts  The The Enable Shortcodes inside Widgets,Comments and Experts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. 2024-10-30 7.3 CVE-2024-9846 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Andy Moyle--Church Admin  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a before 5.0.0. 2024-10-28 7.1 CVE-2024-50438 audit@patchstack.com  Apache Software Foundation--Apache Lucene.Net.Replicator  Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replication node URL, can provide a specially-crafted JSON response that is deserialized as an attacker-provided exception type. This can result in remote code execution or other potential unauthorized access. Users are recommended to upgrade to version 4.8.0-beta00017, which fixes the issue. 2024-10-31 8 CVE-2024-43383 security@apache.org  apple -- ipados  A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox. 2024-10-28 9.6 CVE-2024-40867 product-security@apple.com  apple -- ipados  The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, iOS 17.7 and iPadOS 17.7, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. Processing a maliciously crafted file may lead to heap corruption. 2024-10-28 7.8 CVE-2024-44126 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. Processing a maliciously crafted file may lead to heap corruption. 2024-10-28 7.8 CVE-2024-44218 product-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup file may lead to modification of protected system files. 2024-10-28 7.1 CVE-2024-44252 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent. 2024-10-28 7.8 CVE-2024-44255 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup file may lead to modification of protected system files. 2024-10-28 7.1 CVE-2024-44258 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- ipados  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory. 2024-10-28 7.8 CVE-2024-44285 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- macos  A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1. An application may be able to break out of its sandbox. 2024-10-28 8.8 CVE-2024-44122 product-security@apple.comproduct-security@apple.comproduct-security@apple.com  apple -- macos  A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A sandboxed process may be able to circumvent sandbox restrictions. 2024-10-28 8.6 CVE-2024-44270 product-security@apple.comproduct-security@apple.com  apple -- macos  A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to bypass Privacy preferences. 2024-10-28 7.1 CVE-2024-44156 product-security@apple.comproduct-security@apple.com  apple -- macos  A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to bypass Privacy preferences. 2024-10-28 7.1 CVE-2024-44159 product-security@apple.comproduct-security@apple.com  apple -- macos  A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library. 2024-10-28 7.5 CVE-2024-44203 product-security@apple.com  apple -- macos  This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences. 2024-10-28 7.5 CVE-2024-44208 product-security@apple.com  apple -- macos  A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to read sensitive location information. 2024-10-28 7.5 CVE-2024-44289 product-security@apple.comproduct-security@apple.com  apple -- xcode  This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data. 2024-10-28 7.5 CVE-2024-44228 product-security@apple.com  Apple--iOS and iPadOS  A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication. 2024-10-28 9.1 CVE-2024-44217 product-security@apple.com  Apple--macOS  The issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to break out of its sandbox. 2024-10-28 9.3 CVE-2024-44256 product-security@apple.comproduct-security@apple.com  Apple--macOS  A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.5 CVE-2024-44196 product-security@apple.comproduct-security@apple.com  Apple--macOS  A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.7 CVE-2024-44280 product-security@apple.comproduct-security@apple.com  Apple--macOS  This issue was addressed with additional entitlement checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system. 2024-10-28 7.7 CVE-2024-44295 product-security@apple.comproduct-security@apple.com  Apple--visionOS  This issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. An attacker may be able to misuse a trust relationship to download malicious content. 2024-10-28 8.8 CVE-2024-44259 product-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.comproduct-security@apple.com  Apple--visionOS  The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory. 2024-10-28 7.7 CVE-2024-44277 product-security@apple.comproduct-security@apple.comproduct-security@apple.com  autodesk -- autocad  A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-7991 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-7992 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8588 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8589 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8590 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8591 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8592 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted CATPART file when parsed in ASMKERN230A.dll through Autodesk AutoCAD can force a Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8593 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8594 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8595 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force an Out-of-Bound Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8596 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8597 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8598 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8599 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8600 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8896 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9489 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9826 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9827 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9996 psirt@autodesk.com  autodesk -- autocad  A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-9997 psirt@autodesk.com  Autodesk--AutoCAD  A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-29 7.8 CVE-2024-8587 psirt@autodesk.com  Automattic--Newspack Blocks  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic Newspack Blocks allows Path Traversal.This issue affects Newspack Blocks: from n/a through 3.0.8. 2024-11-01 8.5 CVE-2024-37423 audit@patchstack.com  Azexo--Marketing Automation by AZEXO  Incorrect Privilege Assignment vulnerability in Azexo Marketing Automation by AZEXO allows Privilege Escalation.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. 2024-10-30 8.8 CVE-2024-50506 audit@patchstack.com  azexo--Marketing Automation by AZEXO  Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. 2024-10-29 9.9 CVE-2024-50480 audit@patchstack.com  buynowdepot -- advanced_online_ordering_and_delivery_platform  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BuyNowDepot Advanced Online Ordering and Delivery Platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through 2.0.0. 2024-10-28 9.8 CVE-2024-50497 audit@patchstack.com  Carl Alberto--Simple Custom Admin  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Carl Alberto Simple Custom Admin allows Reflected XSS.This issue affects Simple Custom Admin: from n/a through 1.2. 2024-10-29 7.1 CVE-2024-49647 audit@patchstack.com  CHANGING Information Technology--IDExpert  IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server. 2024-11-01 7.2 CVE-2024-10653 twcert@cert.org.twtwcert@cert.org.tw  Chetan Khandla--Woocommerce Product Design  Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-29 10 CVE-2024-50482 audit@patchstack.com  Chetan Khandla--Woocommerce Product Design  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-30 8.6 CVE-2024-50509 audit@patchstack.com  Chetan Khandla--Woocommerce Product Design  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommerce Product Design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through 1.0.0. 2024-10-30 7.5 CVE-2024-50508 audit@patchstack.com  code-projects--Courier Management System  A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-01 7.3 CVE-2024-10607 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Courier Management System  A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-01 7.3 CVE-2024-10608 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--E-Health Care System  A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/admin_pswd as part of String leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "email" to be affected. But it must be assumed that parameter "admin_pswd" is affected as well. 2024-11-03 7.3 CVE-2024-10739 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--E-Health Care System  A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument f_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. 2024-11-03 7.3 CVE-2024-10741 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Restaurant Order System  A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10733 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Simple Car Rental System  A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-02 7.3 CVE-2024-10702 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Wazifa System  A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-02 7.3 CVE-2024-10699 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- hospital_appointment_system  A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-28 9.8 CVE-2024-10449 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- online_institute_management_system  A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-10-30 9.8 CVE-2024-10509 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- pet_shop_management_system  A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file birdsadd.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-31 9.8 CVE-2024-10556 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  codezips -- pet_shop_management_system  A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file birdsupdate.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-31 9.8 CVE-2024-10561 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Free Exam Hall Seating Management System  A vulnerability classified as critical was found in Codezips Free Exam Hall Seating Management System 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-10-30 7.3 CVE-2024-10507 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Free Exam Hall Seating Management System  A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10736 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Free Exam Hall Seating Management System  A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. 2024-11-03 7.3 CVE-2024-10737 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  CozyThemes--Cozy Blocks  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.15. 2024-10-28 7.4 CVE-2024-50441 audit@patchstack.com  cure53--DOMPurify  DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2. 2024-10-31 9.1 CVE-2024-48910 security-advisories@github.comsecurity-advisories@github.com  D3TN--D3TN  Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block 2024-10-28 7.5 CVE-2024-10455 cve@gitlab.com  Daniel Schmitzer--DS.DownloadList  Deserialization of Untrusted Data vulnerability in Daniel Schmitzer DS.DownloadList allows Object Injection.This issue affects DS.DownloadList: from n/a through 1.3. 2024-10-30 9.8 CVE-2024-50507 audit@patchstack.com  David DONISA--WP donimedia carousel  Unrestricted Upload of File with Dangerous Type vulnerability in David DONISA WP donimedia carousel allows Upload a Web Shell to a Web Server.This issue affects WP donimedia carousel: from n/a through 1.0.1. 2024-10-30 9.9 CVE-2024-50511 audit@patchstack.com  Delta Electronics--InfraSuite Device Master  Delta Electronics InfraSuite Device Master versions prior to 1.0.12 are affected by a deserialization vulnerability that targets the Device-Gateway, which could allow deserialization of arbitrary .NET objects prior to authentication. 2024-10-30 9.8 CVE-2024-10456 ics-cert@hq.dhs.gov  Deryck Oate--User Toolkit  Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck Oñate User Toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through 1.2.3. 2024-10-30 9.8 CVE-2024-50503 audit@patchstack.com  Devsoft Baltic O--SurveyJS: Drag & Drop WordPress Form Builder  Unrestricted Upload of File with Dangerous Type vulnerability in Devsoft Baltic OÃœ SurveyJS: Drag & Drop WordPress Form Builder.This issue affects SurveyJS: Drag & Drop WordPress Form Builder: from n/a through 1.9.136. 2024-10-29 9.9 CVE-2024-50427 audit@patchstack.com  Eclipse Foundation--mosquitto  In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquitto_rr clients. 2024-10-30 9.1 CVE-2024-10525 emo@eclipse.orgemo@eclipse.orgemo@eclipse.org  Eclipse Foundation--mosquitto  In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker. 2024-10-30 7.5 CVE-2024-3935 emo@eclipse.orgemo@eclipse.orgemo@eclipse.org  esafenet -- cdg  A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. 2024-10-31 9.8 CVE-2024-10595 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  gaizhenbiao -- chuanhuchatgpt  A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions

Read more »

Booking.com Phishers May Leave You With Reservations
A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We'll also explore an array of cybercrime services aimed at phishers who target hotels that rely on the world's most visited travel website.

Read more »

Change Healthcare Breach Hits 100M Americans
Change Healthcare says it has notified approximately 100 million Americans that their personal, financial and healthcare records may have been stolen in a February 2024 ransomware attack that caused the largest ever known data breach of protected health information.

Read more »

The Global Surveillance Free-for-All in Mobile Ad Data
Not long ago, the ability to remotely track someone’s daily movements just by knowing their home address, employer, or place of worship was considered a powerful surveillance tool that should only be in the purview of nation states. But a new lawsuit in a likely constitutional battle over a New Jersey privacy law shows that anyone can now access this capability, thanks to a proliferation of commercial services that hoover up the digital exhaust emitted by widely-used mobile apps and websites.

Read more »

Vulnerability Summary for the Week of October 14, 2024
High Vulnerabilities PrimaryVendor -- Product Description Published CVSS Score Source Info Patch Info Acespritech Solutions Pvt. Ltd.--Social Link Groups  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Acespritech Solutions Pvt. Ltd. Social Link Groups allows Blind SQL Injection.This issue affects Social Link Groups: from n/a through 1.1.0. 2024-10-20 8.5 CVE-2024-49619 audit@patchstack.com  acm309--PutongOJ  PutongOJ is online judging software. Prior to version 2.1.0-beta.1, unprivileged users can escalate privileges by constructing requests. This can lead to unauthorized access, enabling users to perform admin-level operations, potentially compromising sensitive data and system integrity. This problem has been fixed in v2.1.0.beta.1. As a workaround, one may apply the patch from commit `211dfe9` manually. 2024-10-17 9.1 CVE-2024-48920 security-advisories@github.comsecurity-advisories@github.comsecurity-advisories@github.com  acronis -- cyber_files  Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. 2024-10-17 7.8 CVE-2024-49389 security@acronis.com  acronis -- cyber_files  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. 2024-10-17 7.3 CVE-2024-49390 security@acronis.com  acronis -- cyber_files  Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. 2024-10-17 7.3 CVE-2024-49391 security@acronis.com  acronis -- cyber_protect  Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. 2024-10-15 9.1 CVE-2024-49388 security@acronis.com  acronis -- cyber_protect  Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690. 2024-10-15 7.5 CVE-2024-49387 security@acronis.com  Agustin Berasategui--AB Categories Search Widget  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Agustin Berasategui AB Categories Search Widget allows Reflected XSS.This issue affects AB Categories Search Widget: from n/a through 0.2.5. 2024-10-18 7.1 CVE-2024-49240 audit@patchstack.com  Ahime--Ahime Image Printer  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ahime Ahime Image Printer.This issue affects Ahime Image Printer: from n/a through 1.0.0. 2024-10-16 7.5 CVE-2024-49245 audit@patchstack.com  Ahmet Imamoglu--Ahmeti Wp Timeline  Cross-Site Request Forgery (CSRF) vulnerability in Ahmet Imamoglu Ahmeti Wp Timeline allows Stored XSS.This issue affects Ahmeti Wp Timeline: from n/a through 5.1. 2024-10-17 7.1 CVE-2024-49237 audit@patchstack.com  Al Imran Akash--Recently  Deserialization of Untrusted Data vulnerability in Al Imran Akash Recently allows Object Injection.This issue affects Recently: from n/a through 1.1. 2024-10-16 9.8 CVE-2024-49218 audit@patchstack.com  anand23--Ajax Rating with Custom Login  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anand23 Ajax Rating with Custom Login allows SQL Injection.This issue affects Ajax Rating with Custom Login: from n/a through 1.1. 2024-10-17 9.3 CVE-2024-49246 audit@patchstack.com  andrewmrobbins--ShopWP  The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating the plugin's settings and injecting malicious scripts. 2024-10-16 7.2 CVE-2019-25214 security@wordfence.comsecurity@wordfence.com  Apa--Apa Banner Slider  Cross-Site Request Forgery (CSRF) vulnerability in Apa Apa Banner Slider allows SQL Injection.This issue affects Apa Banner Slider: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49622 audit@patchstack.com  Apa--APA Register Newsletter Form  Cross-Site Request Forgery (CSRF) vulnerability in Apa APA Register Newsletter Form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49621 audit@patchstack.com  apache -- activemq_artemis  Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could eventually allow an authenticated attacker to write arbitrary files to the filesystem and indirectly achieve RCE. Users are recommended to upgrade to version 2.29.0 or later, which fixes the issue. 2024-10-14 8.8 CVE-2023-50780 security@apache.org  apache -- cloudstack  Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing validation of the origin of the requests. This can allow an attacker to gain privileges and access to resources of the authenticated users and may lead to account takeover, disruption, exposure of sensitive data and compromise integrity of the resources owned by the user account that are managed by the platform. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1 Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. 2024-10-16 8.8 CVE-2024-45693 security@apache.orgsecurity@apache.orgsecurity@apache.org  apache -- cloudstack  The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service. An attacker that has access to a user's browser can use an unexpired session to gain access to resources owned by the logged out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. 2024-10-16 7.1 CVE-2024-45462 security@apache.orgsecurity@apache.orgsecurity@apache.org  Apache Software Foundation--Apache CloudStack  Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2.3 and 4.19.0.0 through 4.19.1.1, an attacker that can upload or register templates and volumes, can use them to deploy malicious instances or attach uploaded volumes to their existing instances on KVM-based environments and exploit this to gain access to the host filesystems that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of KVM-based infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Additionally, all user-uploaded or registered KVM-compatible templates and volumes can be scanned and checked that they are flat files that should not be using any additional or unnecessary features. For example, operators can run this on their secondary storage(s) and inspect output. An empty output for the disk being validated means it has no references to the host filesystems; on the other hand, if the output for the disk being validated is not empty, it might indicate a compromised disk. for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info. If the output is not empty, that might indicate a compromised disk; check it carefully."; qemu-img info -U $file | grep file: ; printf "nn"; done The command can also be run for the file-based primary storages; however, bear in mind that (i) volumes created from templates will have references for the templates at first and (ii) volumes can be consolidated while migrating, losing their references to the templates. Therefore, the command execution for the primary storages can show both false positives and false negatives. For checking the whole template/volume features of each disk, operators can run the following command: for file in $(find /path/to/storage/ -type f -regex [a-f0-9-]*.*); do echo "Retrieving file [$file] info."; qemu-img info -U $file; printf "nn"; done 2024-10-16 8.5 CVE-2024-45219 security@apache.orgsecurity@apache.orgsecurity@apache.org  Apache Software Foundation--Apache Solr  Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing. This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0. Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue. 2024-10-16 9.8 CVE-2024-45216 security@apache.org  Apache Software Foundation--Apache Solr  Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the "trusted" metadata. ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to "trusted" ConfigSets that may not have been created with an Authenticated request. "trusted" ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated & Authorized. This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization. Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise. 2024-10-16 8.1 CVE-2024-45217 security@apache.org  Arif Nezami--Better Author Bio  Cross-Site Request Forgery (CSRF) vulnerability in Arif Nezami Better Author Bio allows Cross-Site Scripting (XSS).This issue affects Better Author Bio: from n/a through 2.7.10.11. 2024-10-17 7.1 CVE-2024-49229 audit@patchstack.com  arisoft--ARI Adminer WordPress Database Manager  The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14. This makes it possible for unauthenticated attackers to call the files directly and perform a wide variety of unauthorized actions such as accessing a site's database and making changes. 2024-10-16 7.3 CVE-2019-25215 security@wordfence.comsecurity@wordfence.com  arraytics--WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin  The WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin plugin for WordPress is vulnerable to Account Takeover/Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 1.0.25 via the save() due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to reset the emails and passwords of arbitrary user accounts, including administrators, which makes account takeover and privilege escalation possible. 2024-10-17 9.8 CVE-2024-9263 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Asep Bagja Priandana--Woostagram Connect  Unrestricted Upload of File with Dangerous Type vulnerability in Asep Bagja Priandana Woostagram Connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through 1.0.2. 2024-10-20 10 CVE-2024-49327 audit@patchstack.com  Autodesk--Revit  A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 2024-10-16 7.8 CVE-2024-7993 psirt@autodesk.com  Autodesk--Revit  A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. 2024-10-16 7.8 CVE-2024-7994 psirt@autodesk.com  Avchat.net--AVChat Video Chat  Cross-Site Request Forgery (CSRF) vulnerability in Avchat.Net AVChat Video Chat allows Stored XSS.This issue affects AVChat Video Chat: from n/a through 2.2. 2024-10-20 7.1 CVE-2024-49605 audit@patchstack.com  bc2018--WordPress Landing Page Squeeze Page Responsive Landing Page Builder Free WP Lead Plus X  The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.99. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform administrative actions, such as adding pages to the site and/or replacing site content with malicious JavaScript via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2024-10-16 8.3 CVE-2020-36839 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Bhaskar Dhote--Back Link Tracker  Cross-Site Request Forgery (CSRF) vulnerability in Bhaskar Dhote Back Link Tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49617 audit@patchstack.com  Boyan Raichev--IP Loc8  Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 allows Object Injection.This issue affects IP Loc8: from n/a through 1.1. 2024-10-16 9.8 CVE-2024-48028 audit@patchstack.com  Brandon Clark--SiteBuilder Dynamic Components  Deserialization of Untrusted Data vulnerability in Brandon Clark SiteBuilder Dynamic Components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through 1.0. 2024-10-20 9.8 CVE-2024-49625 audit@patchstack.com  Brandon White--Author Discussion  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brandon White Author Discussion allows Blind SQL Injection.This issue affects Author Discussion: from n/a through 0.2.2. 2024-10-20 8.5 CVE-2024-49609 audit@patchstack.com  brx8r--Nice Backgrounds  Unrestricted Upload of File with Dangerous Type vulnerability in brx8r Nice Backgrounds allows Upload a Web Shell to a Web Server.This issue affects Nice Backgrounds: from n/a through 1.0. 2024-10-20 10 CVE-2024-49330 audit@patchstack.com  ChanGate--Property Management System  Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. 2024-10-15 9.8 CVE-2024-9972 twcert@cert.org.twtwcert@cert.org.tw  chertz--WP Easy Post Types  The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajax_import_content' function. This allows authenticated attackers, with subscriber-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. 2024-10-18 8.8 CVE-2024-10079 security@wordfence.comsecurity@wordfence.com  chertz--WP Easy Post Types  The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options and posts. 2024-10-18 7.3 CVE-2024-10078 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Cisco--Cisco Analog Telephone Adaptor (ATA) Software  A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to view or delete the configuration or change the firmware on an affected device. This vulnerability is due to a lack of authentication on specific HTTP endpoints. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view or delete the configuration or change the firmware. 2024-10-16 8.2 CVE-2024-20458 ykramarz@cisco.com  Cisco--Cisco Analog Telephone Adaptor (ATA) Software  A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device with the privileges of the targeted user. 2024-10-16 7.1 CVE-2024-20421 ykramarz@cisco.com  cmssoft--CSV Product Import Export for WooCommerce  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cmssoft CSV Product Import Export for WooCommerce allows SQL Injection.This issue affects CSV Product Import Export for WooCommerce: from n/a through 1.0.0. 2024-10-17 8.5 CVE-2024-49244 audit@patchstack.com  code-projects -- pharmacy_management_system  A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_customer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-15 9.8 CVE-2024-9976 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  code-projects--Blood Bank Management System  A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file member_register.php. The manipulation of the argument fullname/username/password/email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "password" to be affected. But it must be assumed that other parameters are affected as well. 2024-10-15 7.3 CVE-2024-9986 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  CodeFlock--FREE DOWNLOAD MANAGER  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CodeFlock FREE DOWNLOAD MANAGER allows Path Traversal.This issue affects FREE DOWNLOAD MANAGER: from n/a through 1.0.0. 2024-10-17 8.6 CVE-2024-49315 audit@patchstack.com  CodePassenger--Job Board Manager for WordPress  Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress allows Privilege Escalation.This issue affects Job Board Manager for WordPress: from n/a through 1.0. 2024-10-17 9.8 CVE-2024-49322 audit@patchstack.com  Codezips--Sales Management System  A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. 2024-10-20 7.3 CVE-2024-10165 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Sales Management System  A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. 2024-10-20 7.3 CVE-2024-10166 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Codezips--Sales Management System  A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown part of the file deletecustind.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. 2024-10-20 7.3 CVE-2024-10167 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Cookie Scanner Nikel Schubert--Cookie Scanner  Cross-Site Request Forgery (CSRF) vulnerability in Cookie Scanner - Nikel Schubert Cookie Scanner allows Stored XSS.This issue affects Cookie Scanner: from n/a through 1.1. 2024-10-17 7.1 CVE-2024-49220 audit@patchstack.com  cyberlord92--Miniorange OTP Verification with Firebase  The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources, and the user current password check is missing. This makes it possible for unauthenticated attackers to change user passwords and potentially take over administrator accounts. 2024-10-17 9.8 CVE-2024-9862 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  cyberlord92--Miniorange OTP Verification with Firebase  The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.6.0 due to the insecure 'administrator' default value for the 'default_user_role' option. This makes it possible for unauthenticated attackers to register an administrator user even if the registration form is disabled. 2024-10-17 9.8 CVE-2024-9863 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  cyberlord92--Miniorange OTP Verification with Firebase  The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0. This is due to missing validation on the token being supplied during the otp login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they know the phone number associated with that user. 2024-10-17 8.1 CVE-2024-9861 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Dan Alexander--SermonAudio Widgets  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dan Alexander SermonAudio Widgets allows SQL Injection.This issue affects SermonAudio Widgets: from n/a through 1.9.3. 2024-10-20 8.5 CVE-2024-49614 audit@patchstack.com  Dassault Systmes--3DSwymer  An authorization bypass through user-controlled key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an authenticated attacker to access some unauthorized data. 2024-10-16 7.7 CVE-2024-8040 3DS.Information-Security@3ds.com  Dassault Systmes--ENOVIA Collaborative Industry Innovator  A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. 2024-10-16 8.7 CVE-2024-6380 3DS.Information-Security@3ds.com  Dell--Dell OpenManage Enterprise  Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. 2024-10-17 8 CVE-2024-45766 security_alert@emc.com  Denis--Azz Anonim Posting  Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through 0.9. 2024-10-16 10 CVE-2024-49257 audit@patchstack.com  Dennis Hoppe--Encyclopedia / Glossary / Wiki  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dennis Hoppe Encyclopedia / Glossary / Wiki allows Reflected XSS.This issue affects Encyclopedia / Glossary / Wiki: from n/a through 1.7.60. 2024-10-17 7.1 CVE-2024-49320 audit@patchstack.com  didi--DDMQ  A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console Module. The manipulation with the input /;login leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. 2024-10-20 7.3 CVE-2024-10173 cna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.comcna@vuldb.com  Dotsquares--Google Map Locations  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dotsquares Google Map Locations allows Reflected XSS.This issue affects Google Map Locations: from n/a through 1.0. 2024-10-20 7.1 CVE-2024-49606 audit@patchstack.com  dueclic -- wp_2fa_with_telegram  The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator. 2024-10-15 8.8 CVE-2024-9687 security@wordfence.comsecurity@wordfence.com  dueclic -- wp_2fa_with_telegram  The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-factor code being stored in a cookie, which makes it possible to bypass two-factor authentication. 2024-10-15 7.5 CVE-2024-9820 security@wordfence.comsecurity@wordfence.com  easy.jobs--EasyJobs  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in easy.Jobs EasyJobs allows Reflected XSS.This issue affects EasyJobs: from n/a through 2.4.14. 2024-10-17 7.1 CVE-2024-43997 audit@patchstack.com  edo888--Translate WordPress Google Language Translator  The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Specifically affects users with older browsers that lack proper URL encoding support. 2024-10-16 7.1 CVE-2021-4452 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  Edush Maxim--GoogleDrive folder list  Cross-Site Request Forgery (CSRF) vulnerability in Edush Maxim GoogleDrive folder list allows Stored XSS.This issue affects GoogleDrive folder list: from n/a through 2.2.2. 2024-10-20 7.1 CVE-2024-49335 audit@patchstack.com  emrevona--WP Fastest Cache  The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete arbitrary files from the server. 2024-10-16 8.8 CVE-2020-36836 security@wordfence.comsecurity@wordfence.comsecurity@wordfence.com  ESi Technology--AIM LINE Marketing Platform  AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content. 2024-10-15 9.8 CVE-2024-9982 twcert@cert.org.twtwcert@cert.org.tw  F5--BIG-IP  BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. 2024-10-16 7.2 CVE-2024-45844 f5sirt@f5.com  facebook--Facebook Chat Plugin Live Chat Plugin for WordPress  The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_update_options function in versions up to, and including, 1.5. This flaw makes it possible for low-level authenticated attackers to connect their own Facebook Messenger account to any site running the vulnerable plugin and engage in chats with site visitors on affected sites. 2024-10-16 7.4 CVE-2020-36838 security@wordfence.comsecurity@wordfence.com  Fahad Mahmood--Endless Posts Navigation  Cross-Site Request Forgery (CSRF) vulnerability in Fahad Mahmood Endless Posts Navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through 2.2.7. 2024-10-20 7.1 CVE-2024-49629 audit@patchstack.com  Fahad Mahmood--Keep Backup Daily  : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fahad Mahmood Keep Backup Daily allows Retrieve Embedded Sensitive Data.This issue affects Keep Backup Daily: from n/a through 2.0.7. 2024-10-17 7.5 CVE-2024-48024 audit@patchstack.com  filemanagerpro -- file_manager  The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.3.9. This is due to missing or incorrect nonce validation on the 'mk_file_folder_manager' ajax action. This makes it possible for unauthenticated attackers to upload arbitrary files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. 2024-10-16 8.8 CVE-2024-8507 security@wordfence.comsecurity@wordfence.com  filemanagerpro -- file_manager  The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing file type validation via the 'mk_file_folder_manager_shortcode' ajax action in all versions up to, and including, 8.3.9. This makes it possible for unauthenticated attackers, if granted access to the File Manager by an administrator, to download and upload arbitrary backup files on the affected site's server which may make remote code execution possible. 2024-10-16 8.8 CVE-2024-8746 security@wordfence.comsecurity@wordfence.com  Fliperrr Team--Creates 3D Flipbook, PDF Flipbook  Unrestricted Upload of File with Dangerous Type vulnerability in Fliperrr Team Creates 3D Flipbook, PDF Flipbook allows Upload a Web Shell to a Web Server.This issue affects Creates 3D Flipbook, PDF Flipbook: from n/a through 1.2. 2024-10-16 9.9 CVE-2024-48034 audit@patchstack.com  formosasoft -- ee-class  The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents. 2024-10-15 8.8 CVE-2024-9980 twcert@cert.org.twtwcert@cert.org.tw  formosasoft -- ee-class  The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include the file, resulting in arbitrary code execution on the server. 2024-10-15 8.8 CVE-2024-9981 twcert@cert.org.twtwcert@cert.org.tw  Gabriele Valenti--Telecash Ricaricaweb  Deserialization of Untrusted Data vulnerability in Gabriele Valenti Telecash Ricaricaweb allows Object Injection.This issue affects Telecash Ricaricaweb: from n/a through 2.2. 2024-10-16 9.8 CVE-2024-48030 audit@patchstack.com  Gerry Ntabuhashe--GERRYWORKS Post by Mail  : Incorrect Privilege Assignment vulnerability in Gerry Ntabuhashe GERRYWORKS Post by Mail allows Privilege Escalation.This issue affects GERRYWORKS Post by Mail: from n/a through 1.0. 2024-10-20 8.8 CVE-2024-49608 audit@patchstack.com  Giveaway Boost--Giveaway Boost  Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4. 2024-10-20 9.8 CVE-2024-49332 audit@patchstack.com  google -- chrome  Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2024-10-15 8.8 CVE-2024-9954 chrome-cve-admin@google.comchrome-cve-admin@google.com  google -- chrome  Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low) 2024-10-15 8.8 CVE-2024-9965 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google Cloud--Migrate to Containers  There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This posed a security risk if the "analyze" or "generate" commands were interrupted or skipping the action to delete the local user "m2cuser". We recommend upgrading to 1.2.3 or beyond 2024-10-16 7.8 CVE-2024-9858 cve-coordination@google.com  Google--Chrome  Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9955 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9957 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9959 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9960 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 8.8 CVE-2024-9961 chrome-cve-admin@google.comchrome-cve-admin@google.com  Google--Chrome  Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) 2024-10-15 7.8 CVE-2024-9956 chrome-cve-admin@google.comchrome-cve-admin@google.com  Gora Tech LLC--Cooked Pro  Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0. 2024-10-17 10 CVE-2024-49291 audit@patchstack.com  Grafana--Grafana  The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack. The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions. 2024-10-18 9.9 CVE-2024-9264 security@grafana.com  Grayson Robbins--Disc Golf Manager  Deserialization of Untrusted Data vulnerability in Grayson Robbins Disc Golf Manager allows Object Injection.This issue affects Disc Golf Manager: from n/a through 1.0.0. 2024-10-16 9.8 CVE-2024-48026 audit@patchstack.com  Hasan Movahed--Duplicate Title Validate  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hasan Movahed Duplicate Title Validate allows Blind SQL Injection.This issue affects Duplicate Title Validate: from n/a through 1.0. 2024-10-20 8.5 CVE-2024-49623 audit@patchstack.com  helmholz -- myrex24_v2_virtual_server  An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost. 2024-10-15 7.5 CVE-2024-45272 info@cert.vde.cominfo@cert.vde.com  Henrique Rodrigues--SafetyForms  Cross-Site Request Forgery (CSRF) vulnerability in Henrique Rodrigues SafetyForms allows Blind SQL Injection.This issue affects SafetyForms: from n/a through 1.0.0. 2024-10-20 8.2 CVE-2024-49615 audit@patchstack.com  Hgiga--OAKlouds  The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk. Unauthenticated remote attackers still can download arbitrary system files, which may be deleted subsequently . 2024-10-14 9.8 CVE-2024-9924 twcert@cert.org.twtwcert@cert.org.tw  HMS Networks--EWON FLEXY 202  The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network can sniff the traffic and decode the credentials. 2024-10-17 8.2 CVE-2024-7755 ics-cert@hq.dhs.gov  HP Inc.--Certain HP DesignJet products  Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials. 2024-10-15 7.5 CVE-2024-5749 hp-security-alert@hp.com  Hung Trang Si--SB Random Posts Widget  : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hung Trang Si SB Random Posts Widget allows PHP Local File Inclusion.This issue affects SB Random Posts Widget: from n/a through 1.0. 2024-10-16 7.5 CVE-2024-48029 audit@patchstack.com  Igor Funa--Ad Inserter  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Igor Funa Ad Inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a through 2.7.37. 2024-10-17 7.1 CVE-2024-49248 audit@patchstack.com  Imagination Technologies--Graphics DDK  Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. 2024-10-14 7.8 CVE-2024-43701 367425dc-4d06-4041-9650-c2dc6aaa27ce  Infotuts--SW Contact Form  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infotuts SW Contact Form allows Blind SQL Injection.This issue affects SW Contact Form: from n/a through 1.0. 2024-10-20 8.5 CVE-2024-49612 audit@patchstack.com  Innovaweb Sp. z o.o.--Free Stock Photos Foter  Deserialization of Untrusted Data vulnerability in Innovaweb Sp. Z o.O. Free Stock Photos Foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through 1.5.4. 2024-10-16 8.8 CVE-2024-49227 audit@patchstack.com  Jack Zhu--photokit  Unrestricted Upload of File with Dangerous Type vulnerability in Jack Zhu allows Upload a Web Shell to a Web Server.This issue affects photokit: from n/a through 1.0. 2024-10-20 10 CVE-2024-49610 audit@patchstack.com  James Park--Analyse Uploads  Relative Path Traversal vulnerability in James Park Analyse Uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through 0.5. 2024-10-16 8.6 CVE-2024-49253 audit@patchstack.com  JetBrains--YouTrack  In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests 2024-10-17 8.1 CVE-2024-49579 cve@jetbrains.com  jetmonsters--Timetable and Event Schedule by MotoPress  The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_route_url() function called via a nopriv AJAX action in versions up to, and including, 2.3.8. This makes it possible for unauthenticated attackers to call that function and perform a wide variety of actions such as including random template, injecting malicious web scripts, and more. 2024-10-16 7.3 CVE-2020-36840 security@wordfence.comsecurity@wordfence.com  Jon Vincent Mendoza--Dynamic Elementor Addons  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jon Vincent Mendoza Dynamic Elementor Addons allows PHP Local File Inclusion.This issue affects Dynamic Elementor Addons: from n/a through 1.0.0. 2024-10-18 7.5 CVE-2024-49243 audit@patchstack.com  Jordan Lyall--MyTweetLinks  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordan Lyall MyTweetLinks allows Blind SQL Injection.This issue affects MyTweetLinks: from n/a through 1.1.1. 2024-10-20 8.5 CVE-2024-49618 audit@patchstack.com  Joshua Clayton--Feed Comments Number  Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Clayton Feed Comments Number allows Upload a Web Shell to a Web Server.This issue affects Feed Comments Number: from n/a through 0.2.1. 2024-10-16 10 CVE-2024-49216 audit@patchstack.com  Julian Weinert // cs&m--cSlider  Cross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m cSlider allows Stored XSS.This issue affects cSlider: from n/a through 2.4.2. 2024-10-17 7.1 CVE-2024-49221 audit@patchstack.com  Kubernetes--Image Builder  A security issue was discovered in the Kubernetes Image Builder versions

Read more »

Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach
Brazilian authorities reportedly have arrested a 33-year-old man on suspicion of being "USDoD," a prolific cybercriminal who rose to infamy in 2022 after infiltrating the FBI's InfraGard program and leaking contact information for 80,000 members. More recently, USDoD was behind a breach at the consumer data broker National Public Data that led to the leak of Social Security numbers and other personal information for a significant portion of the U.S. population.

Read more »

Sudanese Brothers Arrested in ‘AnonSudan’ Takedown
The U.S. government on Wednesday announced the arrest and charging of two Sudanese brothers accused of running Anonymous Sudan (a.k.a. AnonSudan), a cybercrime business known for launching powerful distributed denial-of-service (DDoS) attacks against a range of targets, including dozens of hospitals, news websites and cloud providers. One of the brothers is facing life in prison for allegedly seeking to kill people with his attacks.

Read more »

Lamborghini Carjackers Lured by $243M Cyberheist
The parents of a 19-year-old Connecticut honors student accused of taking part in a $243 million cryptocurrency heist in August were carjacked a week later, while out house-hunting in a brand new Lamborghini. Prosecutors say the couple was beaten and briefly kidnapped by six young men who traveled from Florida as part of a botched plan to hold the parents for ransom.

Read more »

Patch Tuesday, October 2024 Edition
Microsoft today released security updates to fix at least 117 security holes in Windows computers and other software, including two vulnerabilities that are already seeing active attacks. Also, Adobe plugged 52 security holes across a range of products, and Apple has addressed a bug in its new macOS 15 "Sequoia" update that broke many cybersecurity tools.

Read more »

Early Black Friday Sale: New iPads for only $199
Best Buy has Apple's 9th generation 10.2" WiFi iPads on early Black Friday sale for starting at only $199 on their online store for a limited time. Sale prices for online orders only, in-store prices may vary. Order online, and choose free shipping or free local store pickup (if available): - 10" 64GB WiFi iPad (Space Gray or Silver): $199.99 MSRP $329 - 10" 256GB WiFi iPad (Space Gray or Silver): $349.99 MSRP $479 - 10" 64GB WiFi + Cellular iPad (Space Gray or Silver): $329.99 MSRP $459 - 10" 256GB WiFi + Cellular iPad (Space Gray or Silver): $479.99 MSRP $609 Best Buy's prices are among the lowest prices available for these base-model iPads. These are clearance iPads and will be available while supplies last. For the latest prices & deals, keep an eye on our iPad Price Tracker, updated daily.

Read more »

Clearance 13-inch M2 MacBook Airs with 8GB of memory on sale again for only $699
Amazon has clearance 13" MacBook Airs with M2 CPUs and 8GB of RAM in stock today and on sale again for $300 off MSRP with prices starting at only $699. Shipping is free. These are the lowest prices available for M2-powered MacBook Airs anywhere: - 13" M2 MacBook Air 8GB/256GB (Space Gray): $699, $300 off MSRP - 13" M2 MacBook Air 8GB/256GB (Silver): $699, $300 off MSRP - 13" M2 MacBook Air 8GB/256GB (Midnight): $699, $300 off MSRP - 13" M2 MacBook Air 8GB/256GB (Starlight): $699, $300 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker, updated daily.

Read more »

13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup
Best Buy has Apple's newly upgraded 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their price equals that of Amazon's, which we posted yesterday. It's the lowest price out there for a new MacBook with 16GB of memory and a great deal: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP Sale price for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup
Best Buy has Apple's newly upgraded 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their price equals that of Amazon's, which we posted yesterday. It's the lowest price out there for a new MacBook with 16GB of memory and a great deal: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP Sale price for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup
Best Buy has Apple's newly upgraded 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their price equals that of Amazon's, which we posted yesterday. It's the lowest price out there for a new MacBook with 16GB of memory and a great deal: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP Sale price for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

13-inch M2 MacBook Air (16GB RAM/256GB SSD) on early Black Friday sale for $799, $200 off MSRP, with free store pickup
Best Buy has Apple's newly upgraded 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their price equals that of Amazon's, which we posted yesterday. It's the lowest price out there for a new MacBook with 16GB of memory and a great deal: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP Sale price for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Early Black Friday Deal: Apple’s newly upgraded 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. At the time of this post, the discount applied only to Silver and Starlight colors, but other colors may also qualify for the discount soon -- check their site for the latest information: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Early Black Friday Deal: Apple’s newly upgraded 13-inch M2 MacBook Air with 16GB of RAM for $799, $200 off MSRP
Amazon has Apple 13" MacBook Airs with M2 CPUs and 16GB of RAM on early Black Friday sale for $200 off MSRP, only $799. Their prices are the lowest currently available for these newly upgraded 13" M2 MacBook Airs. At the time of this post, the discount applied only to Silver and Starlight colors, but other colors may also qualify for the discount soon -- check their site for the latest information: - 13" M2 MacBook Air (16GB RAM/256GB SSD): $799 $200 off MSRP For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

13-inch 8GB M2 MacBook Airs for $749, $250 off Apple’s MSRP, with free store pickup today
Best Buy has Apple 13" MacBook Airs with M2 CPUs and 8GB of RAM in stock and on sale on their online store for $250 off MSRP. Prices start at $749. Their prices are the lowest currently available for new 13" M2 MacBook Airs: - 13" M2 MacBook Air (8GB RAM/256GB SSD): $749 $250 off MSRP - 13" M2 MacBook Air (8GB RAM/512GB SSD): $949 $250 off MSRP Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

13-inch 8GB M2 MacBook Airs for $749, $250 off Apple’s MSRP, with free store pickup today
Best Buy has Apple 13" MacBook Airs with M2 CPUs and 8GB of RAM in stock and on sale on their online store for $250 off MSRP. Prices start at $749. Their prices are the lowest currently available for new 13" M2 MacBook Airs: - 13" M2 MacBook Air (8GB RAM/256GB SSD): $749 $250 off MSRP - 13" M2 MacBook Air (8GB RAM/512GB SSD): $949 $250 off MSRP Prices valid for online orders only. In-store prices may vary. Order online and choose free shipping or free local store pickup (if available). For the latest sales & prices, see our 13" MacBook Air Price Tracker.

Read more »

Amazon is offering an early Black Friday $100 discount on the new iPad mini
Amazon is offering early Black Friday discounts on Apple's new 2024 WiFi iPad minis ranging up to $100 off MSRP, each with free shipping. These are the lowest prices available for new minis anywhere. The following models qualify for Amazon's discount as of the time of this post: - 8.3" 128GB WiFi iPad mini (Blue, Purple, Starlight): $399.99, $100 off MSRP - 8.3" 512GB WiFi iPad mini (Blue, Gray): $699.99, $100 off MSRP For the latest prices and sales, see our iPad mini Price Tracker, updated daily.

Read more »

Price Drop! Clearance 14-inch M3 MacBook Pros for $500 off original MSRP, only $1099, with optional free local store pickup
Best Buy is offering a $500 discount on clearance 14" M3 MacBook Pros on their online store this week with prices available starting at only $1099. Prices valid for online orders only, in-store prices may vary. Order online and choose free shipping or free local store pickup (if available): - 14" M3 MacBook Pro (8GB RAM/512GB SSD): $1099, $500 off MSRP - 14" M3 MacBook Pro (8GB RAM/1TB SSD): $1299, $500 off MSRP For the latest prices and sales, see our 14" MacBook Pro Price Tracker, updated daily.

Read more »