EUVD-2015-4644

Malware in sbrugna...

EUVD-2012-5503

Malware in sbrugna...

EUVD-2018-20493

Malware in sbrugna...

EUVD-2025-19461

Malicious code in bioql PyPI...

pkexec, when used with --user nonpriv, allows local users to escape to the parent session

...

Linux Distros Unpatched Vulnerability : CVE-2023-4104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups. This...

Linux Distros Unpatched Vulnerability : CVE-2020-1712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. ...

Malicious code in policykit (npm)

The package policykit was found to contain malicious code...

MAL-2025-29481 Malicious code in policykit (npm)

The package policykit was found to contain malicious code...

CVE-2025-53391

A flaw was found in zulucrypt. Misconfigured PolicyKit allows settings within the CMakeLists.txt file to permit a local user to elevate their privileges to root. This insecure configuration bypasses authorization checks, allowing unauthorized actions. The vulnerability is triggered by the PolicyK...

CVE-2025-53391

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt6.2.0-1 package has insecure PolicyKit allowany/allowinactive/allowactive settings that allow a local user to escalate their privileges to root...

CVE-2025-53391

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt6.2.0-1 package has insecure PolicyKit allowany/allowinactive/allowactive settings that allow a local user to escalate their privileges to root...

DEBIAN-CVE-2025-53391

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt6.2.0-1 package has insecure PolicyKit allowany/allowinactive/allowactive settings that allow a local user to escalate their privileges to root...

UBUNTU-CVE-2025-53391

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt6.2.0-1 package has insecure PolicyKit allowany/allowinactive/allowactive settings that allow a local user to escalate their privileges to root...

PT-2025-27328

Name of the Vulnerable Software and Affected Versions: zuluCrypt version 6.2.0-1 Description: The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt has insecure PolicyKit settings, including allow any, allow inactive, and allow active, which allow a local user to escalate their privileges to...

CVE-2025-53391

Removed by vendor...

CVE-2025-53391

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt6.2.0-1 package has insecure PolicyKit allowany/allowinactive/allowactive settings that allow a local user to escalate their privileges to root...

CVE-2025-53391

CVE-2025-53391 affects Debian zuluCrypt (zulucrypt_6.2.0-1) where PolicyKit settings in zuluPolkit/CMakeLists.txt are insecure (allow_any/allow_inactive/allow_active). This misconfiguration allows a local user to escalate privileges to root via PolicyKit authorization. Debian patched this issue (...

CVE-2025-53391

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt6.2.0-1 package has insecure PolicyKit allowany/allowinactive/allowactive settings that allow a local user to escalate their privileges to root...

zuluCrypt 安全漏洞

zuluCrypt is an open source disk encryption front-end tool by mhogomchungu individual developer. A security vulnerability exists in zuluCrypt 6.2.0-1 and earlier versions, which stems from an improperly set PolicyKit that could result in local user privileges being elevated to root...