84 matches found
ABL_ROP
Updating ABL serial with ROP: When ran this notebook will load ABL and attempt to update the device's serial number via ROP chain to call memmove. Derived from eShard's https://github.com/eshard/pixel6-boot/blob/main/runablpublic.ipynb whilst following along with...
POCO-M7-Plus-Jailbreak
POCO M7 Plus SM6375 - Jailbreak Root Research Disclaimer: This document is written purely for educational and security research purposes. All testing was performed on my own device. I am not responsible for bricked devices, data loss, or misuse of this information. The vulnerabilities discussed...
Mi8E5-Unlocker-by-CVE-2026-43499
Mi 8e5 Unlock Toolkit Automated Unlocking Tool for Mi 8e5 Based on CVE-2026-43499 Project Overview Mi 8e5 Unlock Toolkit is an automated unlocking assistance tool designed for the Mi 8e5 device model. The project is implemented based on research related to CVE-2026-43499, integrating ADB, Fastboo...
Exploit for Write-what-where Condition in Linux Linux_Kernel
DirtyFrag Research — 5.4-qgki Research on CVE-2026-43284 Dir...
QuestStack — Updated!
QuestStack QuestStack is a Meta Quest root and bootloader unlocking project. Using the GhostLock privilege escalation chain and the CVE-2021-1931 ABL/fastboot vulnerability, QuestStack provides a way to gain root access on the latest Quest 1 firmware, temporarily boot using a vulnerable ABL, and...
Exploit for Use After Free in Linux Linux_Kernel
Mi 8e5 Unlock Toolkit Automated bootloader unlock assistant f...
CVE-2026-3966
CVE-2026-3966 affects the 648540858 wvp-GB28181-pro package up to version 2.7.4-20260107. The issue lies in the getDownloadFilePath function of ABLMediaNodeServerService.java under the IP Address Handler; manipulating the MediaServer.streamIp argument triggers server-side request forgery (SSRF). ...
PT-2026-24897
A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107. Affected by this vulnerability is the function getDownloadFilePath of the file /src/main/java/com/genersoft/iot/vmp/media/abl/ABLMediaNodeServerService.java of the component IP Address Handler. The manipulation of the...
WEB VIDEO PLATFORM Code Issues and Vulnerabilities
WEB VIDEO PLATFORM is an open-source project developed by WVP-PRO, based on the GB28181-2016 standard. Version 2.7.4-20260107 and earlier of WEB VIDEO PLATFORM have code vulnerabilities. These vulnerabilities stem from operations on the parameter MediaServer.streamIp in the file...
EUVD-2021-13192
Malware in sbrugna...
EUVD-2021-13177
Malware in sbrugna...
EUVD-2021-33429
Malicious code in bioql PyPI...
CVE-2025-36907: Heap-based Buffer Overflow
In drawsurfaceimage of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...
PT-2025-36670
In draw surface image of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...
CVE-2024-47020
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488...
CVE-2024-47031
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861...
CVE-2024-47014
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292...
CVE-2024-7345
Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...
Google Android elevation of privilege vulnerability (CNVD-2025-03021)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a flaw in the ABL component that can be exploited by an attacker to escalate privileges...
