Meta FAIRChem contains a deserialization vulnerability in the reaction_db_path component that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating of 7.8 by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem related to deserialization of untrusted data in the adsorbate_db_path component. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem's dense_eval dft-compute component due to deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating with a CVSS score assigned by ZDI of 7.8.
A remote code execution vulnerability exists in Meta FAIRChem's dense_eval results-file deserialization process. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8 by the Zero Day Initiative.
Meta FAIRChem contains a deserialization vulnerability that allows remote attackers to execute arbitrary code if a user interacts with malicious content such as a crafted webpage or file. This vulnerability requires user interaction for exploitation and has been assigned a high severity rating by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem OMolRunner due to deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating with a CVSS score of 7.8 assigned by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem due to unsafe deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
A remote code execution vulnerability exists in Meta FAIRChem's process_mlrs component due to deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating assigned by the Zero Day Initiative.
Meta FAIRChem contains a deserialization vulnerability in the AdsorbMLRunner component that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem due to unsafe deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem due to unsafe deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating by the Zero Day Initiative with a CVSS score of 7.8.
A remote code execution vulnerability exists in Meta FAIRChem's write_top_k_vasp component. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8 by the Zero Day Initiative.
Meta FAIRChem contains a vulnerability in the get_computational_df_to_predict function that allows remote attackers to execute arbitrary code via deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating of 7.8 by the Zero Day Initiative.
A remote code execution vulnerability exists in the run_validation component of Meta FAIRChem. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating by the Zero Day Initiative.
Meta FAIRChem contains a deserialization vulnerability in the dense_eval dft-targets component that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8 by the Zero Day Initiative.
A double free vulnerability in Pixar Animation Studio OpenUSD crate file parsing allows remote attackers to execute arbitrary code. Exploitation requires interaction with the OpenUSD library, with attack vectors varying by implementation. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
This report discusses difficulties in getting phishing sites hosted on Vercel's platform taken down despite abuse reports. The phishing site impersonates a legitimate brand to harvest credit card data via fake checkout and 3DS OTP prompts. The reporter seeks community advice on effective takedown strategies, including reporting methods and escalation tactics. No direct technical details or exploit code are provided.
The abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, contained a critical remote code execution (RCE) vulnerability in its updater mechanism. The updater contacted an abandoned domain over unencrypted HTTP and accepted unsigned executables, allowing anyone controlling the domain to execute code with SYSTEM/root privileges on millions of Windows and macOS devices. Researchers mitigated the risk by registering the domain and remotely disabling the updater through a remediation payload. However, Android users remain exposed, and the app's outdated embedded Chrome engine presents additional risks. Users are advised to uninstall the software entirely.
A new remote code execution (RCE) vulnerability (CVE-2026-115560) in PHP affects systems with a rare combination of configuration settings involving session serialization handlers and upload progress. No patch is currently available. The PHP security team recommends disabling session upload progress as a mitigation. This vulnerability is distinct from recently patched critical PHP2Shell RCE flaws. Exploitation requires unusual runtime changes to session serialization handlers, making it unlikely in typical deployments.
Hewlett Packard Enterprise (HPE) released security updates addressing 72 vulnerabilities in ArubaOS, including eight maximum-severity flaws involving authentication bypass and remote code execution (RCE). These critical vulnerabilities affect multiple versions of AOS-8 and AOS-10 and can be exploited remotely without privileges or user interaction. HPE strongly urges customers to apply patches promptly and recommends restricting access to management interfaces to reduce exploitation risk. No public exploit code or active exploitation has been reported as of the advisory date.