CVE-2017-13156-Janus

CVE-2017-13156-Janus 复现 攻击者利用Janus漏洞（CVE-2017-13156）可以绕过Android系统的signature scheme...

CVE-2021-1961

CVE-2021-1961에 대한 익스플로잇 코드입니다. 전체 분석 글은 제 블로그에서 확인할 수 있습니다. 익스플로잇을 빌드하려면 Android NDK의 ndk-build를 실행하세요. 익스플로잇을 실행하려면 /dev/qseecom에 접근할 수 있어야 합니다. 즉, 올바른 사용자/그룹과 올바른 SELinux 컨텍스트가 필요합니다. 이는 디버그 이미지에서 su system 명령어를 사용하거나, Magisk로 패치된 일반 이미지에서 su - system 명령어를 사용하여 수행할 수 있습니다. 다음은 Magisk로 패치된 일반...

CVE-2019-14041

CVE-2019-14041 CVE-2019-14041에 대한 개념 증명 코드 취약점에 대한 자세한 내용은 블로그 게시물에서 확인할 수 있습니다. 질문이 있으시면 Twitter@tamirzb로 DM을 보내주세요. 빌드 및 실행 빌드하려면 Android NDK의 ndk-build를 실행하세요. PoC를 실행하려면 /dev/qseecom에 접근 가능한 컨텍스트에서 실행해야 합니다. 결과 Pixel 3에서 Android 9를 실행 중인 기기에서 이 PoC를 실행하면 커널 패닉이 발생합니다. 이론적으로 이 PoC는 수정 없이 다른...

CVE-2019-14040

CVE-2019-14040 CVE-2019-14040 の概念実証コード 脆弱性の詳細はブログ記事でご覧いただけます。 ご質問があれば、Twitter @tamirzb でDMをお送りください。 ビルドと実行 ビルドするには、Android NDKの ndk-build を実行してください。 PoCを実行するには、以下のコマンドでバイナリを実行してください: root@kitploit: LDPRELOAD=libQSEEComAPI.so ./qseecomuaf /dev/qseecom にアクセス可能なコンテキストから実行してください。 結果 これをAndroid...

CVE-2017-13253

CVE-2017-13253 CVE-2017-13253 の PoC コード。 完全な解説はこちらからご覧いただけます。ブログ記事とは数値が少し異なります。理由は、ヒープサイズ0x2000の場合にクラッシュする確率が高いと判明したためです（もちろん、十分な回数実行すればいずれクラッシュします）。 質問/問題/コメントについては、Twitter @tamirzb でお気軽にご連絡ください。 ビルド これをビルドするには： 1. Android ソースコードをダウンロードします。 2. このリポジトリを AOSP/external に配置します。 3. 以下のコマンドを実行します：...

ghostlock-h8q

GhostLock CVE-2026-43499 for Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q このコードの大部分は、オリジナル の @polygraphene フォークに基づいています。 公開されているほとんどのエクスプロイト亜種で使用される主要なプライマー select が、これらの 6.12 Samsung ターゲットの rtmutexwaiter 構造体と正しく整合しないため、大幅な変更が必要でした。代わりに iosubmit が使用されています。 動作確認済み: h8q-F971USQU1AZFW SM-F971U,...

CVE-2026-87624

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74463

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87583

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-74460

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

EUVD-2026-74459

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87597

Google Chrome on Android versions prior to 153.0.8010.36 are affected by a UI misrepresentation vulnerability in the CustomTabs component. A remote attacker could spoof the address bar by leveraging a co-installed app. The vulnerability is rated Low by Chromium and carries a CVSS 3.1 base score o...

CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87583

A UI misrepresentation vulnerability in the Passwords component of Google Chrome on Android (prior to 153.0.8010.36 ) allows a remote attacker to spoof UI elements via a crafted HTML page. The attacker requires user interaction but no prior privileges, with the primary consequence being low impac...

CVE-2026-87583

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87583

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87624

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87624

Google Chrome for Android is affected by a UI misrepresentation vulnerability in the Passwords component, fixed in version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could spoof UI elements via a crafted HTML page. The CVSS 3.1 score is 4.2 (Medium) , refle...