RCE flaw in ImunifyAV puts millions of Linux-hosted sites at risk

The ImunifyAV malware scanner for Linux server, used by tens of millions of websites, is vulnerable to a remote code ...
InfoWorld

Copy-paste vulnerability hits AI inference frameworks at Meta, Nvidia, and Microsoft

Cybersecurity researchers have uncovered a chain of critical remote code execution (RCE) vulnerabilities in major AI ...
SecurityWeek

Android Update Patches Critical Remote Code Execution Flaw

Google announced a fresh set of security updates for the Android platform, to address two vulnerabilities in the System ...
Security Boulevard

Microsoft’s November Security Update of High-Risk Vulnerability Notice for Multiple Products

Overview On November 12, NSFOCUS CERT detected that Microsoft released the November Security Update patch, which fixed 63 security issues involving widely used products such as Windows, Microsoft ...
Infosecurity Magazine

Microsoft Fixes Windows Kernel Zero Day in November Patch Tuesday

Microsoft has patched a zero-day vulnerability in the Windows Kernel under active exploitation by threat actors ...
SecurityWeek

Imunify360 Vulnerability Could Expose Millions of Sites to Hacking

Imunify360 website security products are affected by a high-severity vulnerability that could expose millions of sites to ...
InfoQ

Redis Critical Remote Code Execution Vulnerability Discovered after 13 Years

This critical (CVSS 10.0) use-after-free (UAF) vulnerability in Lua scripting could allow authenticated attackers to execute ...
Infosecurity Magazine

New GDI Flaws Could Enable Remote Code Execution in Windows

Flaws in Windows Graphics Device Interface (GDI) have been identified that allow remote code execution and information ...

Synology fixes BeeStation zero-days demoed at Pwn2Own Ireland

Synology has addressed a critical-severity remote code execution (RCE) vulnerability in BeeStation products that was ...
The Hacker News

Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack

The zero-day vulnerability that has been listed as exploited in Tuesday's update is CVE-2025-62215 (CVSS score: 7.0), a ...
InfoQ

TorchServe Potentially Exposed to Remote Code Execution

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...
SDxCentral

VU#148244: PandasAI interactive prompt function can be exploited to run arbitrary Python code through prompt injection, which can lead to remote code execution (RCE)

PandasAI, an open source project by SinaptikAI, has been found vulnerable to Prompt Injection attacks. An attacker with access to the chat prompt can craft malicious input that is interpreted as code, ...