CVE-2026-29120

Technical details beyond what’s in the Initial Description are not publicly provided in the connected documents. Monitor for updates to the CVE-2026-29120 entry as new disclosures may clarify affected components, impact, or remediation.

CVE-1999-0701

After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password...

EUVD-2006-4852

Malware in sbrugna...

EUVD-2015-6248

Malware in sbrugna...

EUVD-2018-16984

Malware in sbrugna...

EUVD-2025-28403

Malicious code in bioql PyPI...

CVE-2025-5206 Pixelimity Installation index.php sql injection

A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php of the component Installation. The manipulation of the argument sitedescription leads to sql injection. The attack can be launched remotely...

RustDesk Self-Host Server (Linux)

Binary data rustdeskselfhostingserverlinuxinstalled.nbin...

ForU CMS Code Injection Vulnerability

ForU CMS is an open source website builder from ForU. ForU CMS suffers from a code injection vulnerability, which originates from an unknown section in /install/index.php and results in code injection via the parameter dbnam...

iSmile Soft CMS 0.3.0 Add Administrator

==================================================================================================================================== | Title : iSmile Soft CMS v0.3.0 Add Admin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bit ...

islamnt CMS 2.1.0 Add Administrator

==================================================================================================================================== | Title : islamnt CMS v2.1.0 Add ADmin Vulnerability Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

Xzengine 1.7 Add Administrator

==================================================================================================================================== | Title : xzengine v.1.7 Add Admin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.332-bit | | Vendo...

CVE-2022-43702 Incomplete verification of installation file signature

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify or replace the installer to execute malicious code...

CVE-2022-36271

CVE-2022-36271 affects Outbyte PC Repair Installation File 1.7.112.7856, where a DLL hijacking flaw (missing iertutil.dll) enables a local attacker to place a malicious DLL with the same name and obtain admin privileges. Affected component is the installation file; root cause is uncontrolled sear...

Apache Log4j Installation File Detected

Apache Log4j is an open source Java-based logging framework leveraged within numerous Java applications. The scanner detected the presence of installation files referring to the usage of Apache Log4j. No source data...

Duplicator Plugin for WordPress Installation File Detected

WordPress Duplicator Plugin files have been detected on the target WordPress installation. This may present an attacker with sensitive information to mount further attacks. No source data...

The vulnerability of the installation file of the Kaspersky Security Center Web Console allows a perpetrator to increase their privileges.

The vulnerability of the installation file of the Kaspersky Security Center Web Console relates to errors in the mechanism for checking the path to dynamically linked libraries. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the installation file of the Kaspersky Anti-Ransomware Tool allows a perpetrator to increase their privileges.

The vulnerability of the installation file of the Kaspersky Anti-Ransomware Tool is related to errors in the mechanism for checking the path to dynamically linked libraries. Exploiting this vulnerability can allow an attacker to increase their privileges...

Someone Hacked PHP PEAR Site and Replaced the Official Package Manager

Beware! If you have downloaded PHP PEAR package manager from its official website in past 6 months, we are sorry to say that your server might have been compromised. Last week, the maintainers at PEAR took down the official website of the PEAR pear-php.net after they found that someone has replac...

CVE-2018-5199 WIZVERA Remote Code Execution Vulnerability

In Veraport G3 ALL on MacOS, due to insufficient domain validation, It is possible to overwrite installation file to malicious file. A remote unauthenticated attacker may use this vulnerability to execute arbitrary file...