CVE-2026-28593

creationtimestamp| type| source ---|---|--- 2026-09-09 04:45:41+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-28572

creationtimestamp| type| source ---|---|--- 2026-09-09 04:45:27+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

root-s24-e1s

Root S24 e1s / S921BXXSDCZB2 在 Galaxy S24 SM-S921B 固件 S921BXXSDCZB2（内核 6.1.138-android14-11）上实现每次启动的本地 root，然后延迟加载 KernelSU Next ，使 com.rifsxd.ksunext 报告为 Working LKM。 与 Root My Galaxy 无关联。无 GitHub payload 源、无多设备目录。仅针对单一固件，捆绑 payload。请仅在你拥有的设备上使用。 下载 从 Releases 安装 APK。 KernelSU Next 管理器（必需）： v3.3...

RootMyVivo

RootMyVivo 🛡️ 一键root vivo/iQOO设备，支持锁定引导加载程序。 基于CVE-2026-43499（GhostLock）+ KernelSU。 工作原理 1. 自动识别型号和内核版本 2. 从RootMyVivo-Payloads下载匹配的payload 3. 运行漏洞利用（LDPRELOAD / helper binary） 4. 获取root → 通过ksud late-load加载KernelSU 5. 通过service.d配置持久化 支持的设备 型号| SoC| 内核| 状态 ---|---|---|--- iQOO Neo 11 PD2520|...

cve-2026-13934

CVE-2026-13934 这是工作项目仓库。调查·分析·工作·报告都在一个仓库中 处理D088/D091。 此文件是仓库·看板入口文档 。文件夹·产出物规范的全文请参阅 docs/conventions.md。 正文现状·结论·链接在报告report条目晋升时更新。 调查·分析·工作代理不会修改根 README。 一句话摘要 : Google Chrome 的 WebGPU 实现 Dawn 在创建 YCbCr 采样器时未检查 Vulkan 规范所要求的参数约束,导致已掌握渲染器进程的攻击者可将违反规范的值一路传送到 GPU 进程CWE-20。修复以两层 方式加入验证与后端强制,并已在...

hp-slate7-root-kit

适用于 Android 4.1.1 的 HP Slate 7 2800 Root English | Русский 本仓库包含一套完整、自包含的工具包，用于通过利用本地漏洞 CVE-2015-1805 ，在运行固件 1.05.18 和内核 Linux 3.0.8+ 的 HP Slate 7 2800 上获取持久的 root 访问权限。该工具包已在真实平板上运行，并且结果已在一个全新的 ADB 会话中以及正常重启后得到验证。 这不是通用的 Android root 工具。该漏洞利用程序特定于此 HP 内核配置。请勿在其他型号、固件或内核版本上运行它。 已验证的配置 参数| 已验证的值...

spd_dump-macos

spddump for macOS English | 简体中文 UNISOC（展锐）BootROM/FDL 刷写工具的 macOS 移植。基于 ilyakurdyukov/spreadtrumflash（MIT）， 补齐闭源 spddump 的 execaddr2（CVE-2022-38694 签名校验绕过）， 并在 macOS（arm64 + libusb）上完成全链路： root@kitploit: BootROM → CVE 越界写 → FDL1 → FDL2 → GPT 解析 → 分区读写 → reset 验证平台：UMS9621（T158），Android 13，kernel...

AndroidWebviewInjectDemo

AndroidWebviewInjectDemo 一个用于测试 Android WebView 安全问题（CVE-2012-6636）的应用演示。...

CVE-2026-87624

A flaw was found in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit a user interface UI misrepresentation vulnerability. This vulnerability allows the attacker to spoof UI elements by using a specially crafted HTML page, potentially deceiving...

CVE-2026-87552

A flaw was found in Google Chrome on Android. A local attacker could exploit missing authorization in the TrustedWebActivities feature via a co-installed application. This could allow the attacker to obtain sensitive information...

CVE-2026-87503

A flaw was found in Google Chrome's Downloads component on Android. A remote attacker could leverage social engineering techniques with a specially crafted HTML page to bypass system access restrictions. This could allow the attacker to gain unauthorized access to parts of the system...

CVE-2026-87576

A flaw was found in the GPU component of Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit an uninitialized resource vulnerability by crafting a malicious HTML page. This could allow the attacker to read memory outside of the sandbox,...

CVE-2026-87565

A flaw was found in Google Chrome on Android. A remote attacker could exploit an information leak in the Passwords component by enticing a user to visit a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87640

A flaw was found in WebView in Google Chrome on Android. A remote attacker who has compromised the renderer process could exploit an out-of-bounds read vulnerability by crafting a malicious HTML page. This could lead to the disclosure of memory outside of the sandbox, potentially exposing sensiti...

CVE-2019-6447

CVE-2019-6447 本文介绍了手动利用ES文件管理器中发现的Android开放端口漏洞。该开放的TCP端口允许攻击者安装后门并收集所有用户数据。此外，本文还将提供概念验证（PoC）来巩固该漏洞，并额外介绍关于后门攻击的概述。下载PDF文档，好好享受吧！！！干杯！！！...

deluded-openssl-3.2.0

欢迎使用 OpenSSL 项目 OpenSSL 是一个健壮、商业级、功能齐全的开源工具包， 用于 TLS（原 SSL）、DTLS 和 QUIC（目前仅支持客户端）协议。 协议实现基于一个全强度的通用密码学库，该库也可以独立使用。 此外，还包含一个经验证符合 FIPS 标准的密码学模块。 OpenSSL 源自 Eric A. Young 和 Tim J. Hudson 开发的 SSLeay 库。 OpenSSL 项目的官方网站是 www.openssl.org。 目录 概述 下载 构建与安装 文档 许可证 支持 贡献 法律事项 概述 OpenSSL 工具包包括： libssl 实现了所有...

CVE-2026-87597

A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...

DEBIAN-CVE-2026-87643

Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87643

Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87640

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...