55 matches found
CVE-2026-77875 Hide Photos - Secure vault 4.1.0 - Insecure storage of vault media and wallet records in shared external storage
The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...
Exploit for CVE-2026-64560
Xiaomi 15 dada CVE-2026-64560 Device-specific adaptation...
CVE-2025-67264
An OS command injection vulnerability exists in the com.sprd.engineermode component on Doogee Note59 , Note59 Pro , and Note59 Pro+ smartphones. This flaw allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell . The root cause is attributed to the...
PT-2026-4525
Name of the Vulnerable Software and Affected Versions Doogee Note59 Doogee Note59 Pro Doogee Note59 Pro+ affected versions not specified Description A flaw exists within the com.sprd.engineermode component that could allow a local attacker to execute arbitrary code and escalate privileges. This i...
CVE-2025-67264
An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell, due to incomplete patching of CVE-2025-31710...
EUVD-2013-6572
Malware in sbrugna...
EUVD-2014-7803
Malware in sbrugna...
Exploit for Command Injection in Google Android
unisoc-su A method for CVE-2025-31710https://nvd.nist.gov/v...
CVE-2023-33745
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access without requiring a password...
CVE-2019-1010221
LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell patches to fix this are at https://review.lineageos.org/c/LineageOS/androidsystemcore/+/234800,...
Exploit for Special Element Injection in Google Android
!python-static-badgehttps://img.shields.io/badge/Python-blue?...
(Pwn2Own) Ubiquiti Networks EV Station setDebugPortEnabled Exposed Dangerous Method Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ubiquiti Networks EV Station. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
Code injection
In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2021-39630
In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
ASB-A-202768292
In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2020-11836: Undefined Security Weakness
OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no...
PT-2021-9425
Name of the Vulnerable Software and Affected Versions OPPO Android Phone with MTK chipset and Android versions 8.1 through 11 Description The issue is related to an information leak vulnerability. The commands adb shell getprop ro.vendor.aee.enforcing return no, indicating a potential security...
CVE-2019-1010221
LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell patches to fix this are at https://review.lineageos.org/c/LineageOS/androidsystemcore/+/234800,...
CVE-2019-1010221
The CVE-2019-1010221 entry concerns LineageOS 16.0 and earlier where an Incorrect Access Control allows adb root state to be set from a normal adb shell. The underlying issue is that the property used to enable root in adb (service.adb.root) can be manipulated when adb is enabled, enabling an att...
CVE-2019-1010221
LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell patches to fix this are at https://review.lineageos.org/c/LineageOS/androidsystemcore/+/234800,...