CVE-2026-128987

A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service, requesting a response, and stopping socket reads while keeping the connection open. Because the socket transport handles broken pipe write errors as retryable, the application enters a...

bmcweb

OpenBMC webserver This component attempts to be a "do everything" embedded webserver for OpenBMC. Features The webserver implements a few distinct interfaces: DBus event websocket. Allows registering for changes to specific dbus paths, properties, and will send an event from the websocket if thos...

Polkit-CVE-2021-3560

Polkit-CVE-2021-3560 Background In early 2021 a researcher named Kevin Backhouse discovered a seven year old privilege escalation vulnerability since designated CVE-2021-3560 in the Linux polkit utility. Fortunately, different distributions of Linux and even different versions of the same...

CVE-2021-3560

CVE-2021-3560 a reliable C based exploit for CVE-2021-3560. Summary: Yestreday i stumbled upon this blog post by Kevin Backhouse discovered this vulnerability, i tried the bash commands provided in the blogpost and to my surpise it worked on my Kali Linux box! CVE-2021-3560 is an authentication...

Polkit-exploit

Polkit-exploit - CVE-2021-3560 Privilege escalation with polkit - CVE-2021-3560 Summary CVE-2021-3560 is an authentication bypass on polkit, which allows unprivileged user to call privileged methods using DBus, in this exploit we will call 2 privileged methods provided by accountsservice CreateUs...

xdg-dbus-proxy security update

An update is available for xdg-dbus-proxy. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was...

RLSA-2026:98635 Important: xdg-dbus-proxy security update

xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts. Security Fixes: xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows...

POC-Bash-CVE-2021-3560

Bash-CVE-2021-3560 POC Bash -- CVE-2021-3560 Polkit Local Privilege Escalation Exploit This repository provides a bash exploit for CVE-2021-3560, a local privilege escalation vulnerability in polkit affecting many modern Linux distributions. !!!!!! Under test may cause instability !!!!! 💥...

RLSA-2026:98530 Important: xdg-dbus-proxy security update

xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts. Security Fixes: xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows...

xdg-dbus-proxy security update

An update is available for xdg-dbus-proxy. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was...

Rocky Linux 9 [CIQ] Security Update: xdg-dbus-proxy / xdg-dbus-proxy-debuginfo / etc (crlsa-2026_98530)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202698530 advisory. xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape CVE-2026-94422 Tenable has extracted the preceding description bloc...

CVE-2021-3560

Polkit Vulnerability - CVE-2021-3560 📕 Introduction In 2021, a researcher named Kevin BackHouse discovered a privilege escalation vulnerability in the polkit utility. however, not all linux versions are vulnerable to polkit. Below is an example of a vulnerable version; Red Hat Enterprise Linux 8...

xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

Important: Red Hat Security Advisory: xdg-dbus-proxy security update

An update for xdg-dbus-proxy is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

Important: Red Hat Security Advisory: xdg-dbus-proxy security update

An update for xdg-dbus-proxy is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RHEL 9 : xdg-dbus-proxy (RHSA-2026:98530)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98530 advisory. xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone...

RHEL 10 : xdg-dbus-proxy (RHSA-2026:98635)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98635 advisory. xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalon...

RockyLinux 9 : xdg-dbus-proxy (RLSA-2026:98530)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:98530 advisory. xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape CVE-2026-94422 Tenable has extracted the preceding description...

polkit-auto-exploit

polkit-auto-exploit Automatic Explotation PoC for Polkit CVE-2021-3560 Summary CVE-2021-3560 is an authentication bypass on polkit, which allows unprivileged user to call privileged methods using DBus, in this exploit we will call 2 privileged methods provided by accountsservice CreateUser and...