Yunus Aydın

**Name of the Vulnerable Software and Affected Versions** Pardus Parental Control versions prior to 0.7.0 **Description** An incorrect authorization issue exists in the polkit policy. This allows unprivileged local users to disable parental controls with root privileges. An attacker can execute the `PPCActivator.py` script using the `pkexec` command with the `--disable` argument to remove all restrictions, such as application limits and DNS filtering, without requiring authentication. **Recommendations** Update Pardus Parental Control to version 0.7.0 or later.

**Name of the Vulnerable Software and Affected Versions** Akaunting versions prior to 2.1.31 **Description** An OS command injection issue exists in the module installation and update flow. Authenticated users with admin panel access can execute arbitrary commands on the server by injecting shell metacharacters into the `alias` parameter, which is passed unvalidated to shell command execution. **Recommendations** Update to version 2.1.31 or later. Avoid using the `alias` parameter during module installation or updates until the system is updated.