Meta FAIRChem reaction_db_path Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem dense_eval dft-compute Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem dense_eval results-file Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem Slab Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

PT-2026-125501

libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability...

ROS-20261026-73-0207

The vulnerability in rabbitmq-server relates to the lack of origin verification in websockets. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...

PHP 8.5.11 Session Upload Progress Remote Code Execution

PHP versions through 8.5.11 contain memory-corruption flaws that can allow unauthenticated remote code execution. This proof of concept uses crafted multipart upload-progress requests to trigger the vulnerability chain. https://packetstorm.news/download/237643...

PHP 8.5.11 Remote Code Execution Vulnerability Checker

PHP versions before 8.5.12, 8.4.27, 8.3.36, and 8.2.35 contain two vulnerabilities that may allow unauthenticated remote code execution. This tool checks a PHP version string for affected upstream releases and specific Ubuntu backports...

OpenSSH 9.7p1 Remote Code Execution

OpenSSH server versions 8.5p1 through 9.7p1 are affected by a regression that may allow unauthenticated remote code execution. This guide provides update and mitigation instructions...

CRM SOFTTRADE Infotech security vulnerability

CRM SOFTTRADE Infotech version 1.0 contains a security vulnerability stemming from SQL injection in its login page, which may allow remote attackers to execute arbitrary code...

Fusion Creators Studio SCP: Containment Breach Multiplayer buffer error vulnerability

Fusion Creators Studio SCP: Containment Breach Multiplayer versions 1.295 and earlier contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds write in the BlitzBanks function within the Skynet++ Virtual Machine component, potentially allowing remote attackers to execu...

PHP 8.5.11 Session Upload Progress Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain request-handling memory-corruption flaws. This proof of concept uses multipart upload progress handling to demonstrate remote code execution. https://packetstorm.news/download/237644...

PT-2026-123308

Name of the Vulnerable Software and Affected Versions Mautic versions 7.0.0 through 7.2.1 Description An unrestricted file upload issue exists in the campaign import feature. When processing a campaign archive, the application copies bundled asset files into a publicly accessible media directory...

VulnCheck KEV: CVE-2026-54675

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146102 advisory. PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after bei...

Meta FAIRChem reaction adsorbate_db_path Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem Bulk Class Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem write_top_k_vasp Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem AdsorbMLRunner Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem process_mlrs Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...