Ivanti warns of critical Endpoint Manager code execution flaw

American IT software company Ivanti warned customers today to patch a newly disclosed vulnerability in its Endpoint Manager ...
WeLiveSecurity

Analysis of two arbitrary code execution vulnerabilities affecting WPS Office

ESET researchers discovered a code execution vulnerability in WPS Office for Windows (CVE⁠-⁠2024⁠-⁠7262), as it was being exploited by APT-C-60, a South Korea-aligned cyberespionage group. Upon ...
Bleeping Computer

Apache fixes critical OFBiz remote code execution vulnerability

Apache has fixed a critical security vulnerability in its open-source OFBiz (Open For Business) software, which could allow attackers to execute arbitrary code on vulnerable Linux and Windows servers.
Dark Reading

Fortinet Zero-Day Bug May Lead to Arbitrary Code Execution

An unnamed threat actor claims that a zero-day vulnerability found within Fortinet's FortiGate firewalls can be exploited remotely, allowing the attacker to execute arbitrary code without ...
Computing

Ivanti patches Endpoint Manager flaw allowing remote code execution

Ivanti is urging customers to apply newly released patches after disclosing a critical security vulnerability in its widely ...
CSOonline

Cursor’s autorun lets hackers execute arbitrary code

Oasis Security has uncovered a flaw in the widely used AI-powered code editor Cursor that lets malicious repositories silently execute code the moment a developer opens them. According to a disclosure ...