100688 matches found
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtectโข app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0307
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect app allow a non-administrative local user to escalate to NT AUTHORITY\SYSTEM on Windows or root on macOS and Linux, enabling arbitrary command execution with administrative privileges. The GlobalProtect ap...
DroneCamera
DroneCamera An Android app for viewing the live video stream from HASAKEE FPV drones. Built by reverse engineering the proprietary UDP protocol used by the drone's WiFi camera. Supported Drone HASAKEE FPV Drone WiFi SSID: HASAKEE-WiFi-XXXXX VGA camera using the 0x6363 UDP protocol Drone IP:...
CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component
CVE-2026-22010 โ Android Intent Redirection to Exported Component Program Code Java/Android simulation root@kitploit: // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b super.onCreateb; Intent incomin...
CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices
= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: Marco de Explotaciรณn RFCOMM Bluetooth "Heartbleed" CVE-2025-13834 Autor: Sastra Adi Wiguna Purple Elite Teaming Fecha: 20 de enero de 2026 Versiรณn: 1.0 Rรฉplica a nivel de sistema completo Licencia: SOLO USO EN RED TEAM N...
GhostLock-H80GT
English | ไธญๆ Honor 80 GT Privilege Escalation PoC: GhostLock CVE-2026-43499 A local privilege escalation exploit for the Honor 80 GT AGT-AN00 , CVE-2026-43499 โ a use-after-free in the kernel rtmutex removewaiter path โ plus a companion KernelSU kernel-module loading solution. In principle the bu...
CyberPup
CyberPup A free, open-source cybersecurity app for everyday people. CyberPup helps non-technical users lock down their digital lives through guided checklists, bite-sized lessons, and tools like breach checking. All guidance is grounded in well-known frameworks from ACSC, CISA, and NIST -...
PCAPdroid v2.0.1
PCAPdroid PCAPdroid is a privacy-friendly open source app which lets you track, analyze and block the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, inspect HTTP, decrypt TLS traffic and much more! PCAPdroid simulates a VPN in order to...
MobSF_AI
MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...
Exploit for Use After Free in Linux Linux_Kernel
RMV Exploit โ ัะธััะฐั ัะฑะพัะบะฐ CVE-2026-43499 ะดะปั iQOO Neo 11 PD...
adbHijacker
CVE-2026-0073 โ Android ADB TLS Authentication Bypass A proof-of-concept exploit and network scanner for CVE-2026-0073 , a critical zero-click, no-interaction remote code execution vulnerability in Android adbd's ADB-over-TCP authentication path. The vulnerability is a logic bug in...
CVE-2026-0073-Research
CVE-2026-0073-Research CVE-2026-0073 is an RCE with a CVSS severity score of 8.3, and here we will explain how it works. First Part : Code analysis: At first, the only thing that could possibly be interesting is learn more about the bug itself. My first source is :...
CVE-2026-0073
๐ CVE-2026-0073: Android adbd Authentication Bypass Weaponized Proof of Concept for the Wireless ADB TLS Auth Bypass vulnerability. Discovered by Barghest, Weaponized PoC by devtint. ๐ Overview CVE-2026-0073 is a critical cryptographic logic failure in the Android Debug Bridge daemon adbd that...
cve-2026-31431-copyfail
CVE-2026-31431 โ "Copy Fail" ๐ Educational technical analysis of one of the most significant Linux kernel vulnerabilities since Dirty Pipe 2022. This repository is intended for research, study, and defense. No functional exploit is distributed here. Table of Contents What is it? For laypeople: th...
poc-CVE-2026-0073
CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass This directory contains a Python proof of concept for CVE-2026-0073. The script is generated using AI-assisted code generation techniques. Summary CVE-2026-0073 is a logic issue in ADB daemon certificate verification adbdtlsverifycert in auth.cpp. Th...
CVE-2026-0073-Android-adbd-authentication-bypass-POC
Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should wo...
CVE-2026-0073-Android-ADBD-bypass-POC
CVE-2026-0073 โ Android ADBD TLS Auth Bypass EVPPKEYcmp type confusion โ unauthorized ADB shell ๐ฅ Overview A critical authentication bypass in Android's ADB daemon adbd allows any attacker on the local network to obtain a full shell on a target device without user authorization. The vulnerability...
CVE-2026-7671
CVE-2026-7671 - Tornet Scooter OTP Brute Force Summary Improper restriction of excessive authentication attempts CWE-307 in Tornet Scooter Mobile App 4.75 on Android. Details The /TwoFactor endpoint does not implement rate limiting or lockout. A 4-digit OTP 0000-9999 can be brute-forced remotely...
exploit_playground
About This is where I will post analysis of Public Exploits, or some of my 1day exploits. Public exploit analysis Personally I think the best way to learn a public exploit is by understanding it line-by-line until I can understand the exploit to the fullest. I will post some of these...
TheLastBundleMismatch
Mysterious patch Let's start this time with the patch that appeared as fix for CVE-2023-45777 in Android Security Bulletin: root@kitploit: diff --git a/services/core/java/com/android/server/accounts/AccountManagerService.java...