cve-2024-0044

CVE-2024-0044 CVE-2024-0044 は、"run-as" 攻撃の実行を可能にし、ローカルでの権限昇格を引き起こします。これにより、攻撃者はモバイルデバイス上で任意のアプリケーションがローカルに保存したプライベートファイルにアクセスでき、"アプリケーションサンドボックス" が提供するセキュリティ保証が侵害されます。 モバイルデバイスで ADB シェルアクセスと開発者モードの有効化が必要です。 影響を受ける Android バージョンは 12、12L、13、14 です。 2024年3月に Meta Red Team X によって発見・公開されました。 Google は...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

PSSRoot

基于CVE-2016-5195（DirtyCOW）的一键Root程序； 该程序适用于PlayStation认证设备， 但也可能对其他旧款安卓设备有用； 在以下设备上测试通过： root@kitploit: Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel 3.4.0+1.0.21100-313065 Sony Tablet P Android 3.2; Kernel 2.6.36.3 Sony Tablet S Android 4.0.3; Kernel 2.6.39.4...

CVE-2025-67264

CVE-2025-67264 describes an OS command-injection in the com.sprd.engineermode component on Doogee Note59/Note59 Pro/Note59 Pro+. The vulnerability allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell, attributed to incomplete patching of CVE-202...

PT-2026-4525

Name of the Vulnerable Software and Affected Versions Doogee Note59 Doogee Note59 Pro Doogee Note59 Pro+ affected versions not specified Description A flaw exists within the com.sprd.engineermode component that could allow a local attacker to execute arbitrary code and escalate privileges. This i...

CVE-2025-67264

An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell, due to incomplete patching of CVE-2025-31710...

EUVD-2014-7803

Malware in sbrugna...

EUVD-2013-6572

Malware in sbrugna...

Exploit for Command Injection in Google Android

unisoc-su A method for CVE-2025-31710https://nvd.nist.gov/v...

CVE-2023-33745

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access without requiring a password...

CVE-2019-1010221

LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell patches to fix this are at https://review.lineageos.org/c/LineageOS/androidsystemcore/+/234800,...

Exploit for Special Element Injection in Google Android

!python-static-badgehttps://img.shields.io/badge/Python-blue?...

(Pwn2Own) Ubiquiti Networks EV Station setDebugPortEnabled Exposed Dangerous Method Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ubiquiti Networks EV Station. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

Code injection

In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-39630

In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

ASB-A-202768292

In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-1010221

LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell patches to fix this are at https://review.lineageos.org/c/LineageOS/androidsystemcore/+/234800,...

CVE-2019-1010221

LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell patches to fix this are at https://review.lineageos.org/c/LineageOS/androidsystemcore/+/234800,...

CVE-2019-1010221

The CVE-2019-1010221 entry concerns LineageOS 16.0 and earlier where an Incorrect Access Control allows adb root state to be set from a normal adb shell. The underlying issue is that the property used to enable root in adb (service.adb.root) can be manipulated when adb is enabled, enabling an att...

OnePlus Left A Backdoor That Allows Root Access Without Unlocking Bootloader

Another terrible news for OnePlus users. Just over a month after OnePlus was caught collecting personally identifiable information on its users, the Chinese smartphone company has been found leaving a backdoor on almost all OnePlus handsets. A Twitter user, who goes by the name "Elliot Anderson"...