poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS 인증 우회 이 디렉토리에는 CVE-2026-0073에 대한 Python 개념 증명PoC이 포함되어 있습니다. 이 스크립트는 AI 지원 코드 생성 기법을 사용하여 생성되었습니다. 요약 CVE-2026-0073은 ADB 데몬 인증서 검증auth.cpp의 adbdtlsverifycert에서 발생하는 로직 결함입니다. 취약한 검증 코드는 EVPPKEYcmp...의 0이 아닌 반환 값을 모두 일치로 처리합니다. 예상되는 비교 결과 처리 방식은 다음과 같아야 합니다: 1 = ...

CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

CVE-2026-0073 — Android ADBD TLS 인증 우회 EVPPKEYcmp 유형 혼동 → 권한 없는 ADB 셸 🔥 개요 Android의 ADB 데몬adbd에는 로컬 네트워크의 모든 공격자가 사용자 인증 없이 대상 기기에서 전체 셸 권한을 얻을 수 있게 하는 치명적인 인증 우회 취약점이 존재합니다. 이 취약점은 daemon/auth.cpp 파일의 adbdtlsverifycert 함수에 존재하며, 여기서 EVPPKEYcmp가 부울 값으로 사용됩니다. 저장된 키가 RSA 키이고 제공된 TLS 클라이언트 인증서가 RSA...

GhostLock-NVIDIA-Shield-9.2.4

NVIDIA Shield TV Pro 9.2.4용 GhostLock 2019 NVIDIA Shield TV Promdarcy에서 Shield Experience 9.2.4를 실행하는 환경을 위해 검증된 GhostLock futex PI use-after-freeCVE-2026-43499의 arm64 포트입니다. 이 페이로드는 실행 중인 ADB 데몬의 자격 증명을 변경하므로, 부트로더 잠금 해제, userdata 초기화, su 설치 또는 검증된 파티션 수정 없이도 새 ADB 셸이 UID 0으로 실행됩니다. 이는 승인된 보안 연구...

poc-CVE-2026-0073

CVE-2026-0073 PoC 무선 ADB TLS 인증 우회 이 디렉토리에는 CVE-2026-0073에 대한 Python 개념 증명PoC이 포함되어 있습니다. 이 스크립트는 AI 지원 코드 생성 기법을 사용하여 생성되었습니다. 요약 CVE-2026-0073은 ADB 데몬 인증서 검증auth.cpp의 adbdtlsverifycert의 논리적 결함입니다. 취약한 검증 로직은 EVPPKEYcmp...의 0이 아닌 모든 반환 값을 성공적인 일치로 처리합니다. 예상되는 비교 결과 처리는 다음과 같아야 합니다: 1 = 키 일치 0 = ...

CVE-2026-78745

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352EDMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge ADB daemon adbd...

CVE-2026-78745

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352EDMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge ADB daemon adbd...

CVE-2026-78745

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352EDMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge ADB daemon adbd...

CVE-2026-78745

The HiDPT / Weyon HiDPTAndroid devices using Hi3751V350 and Hi3751V352E_DMO platforms are vulnerable to remote code execution. The root cause is the remote exposure of the Android Debug Bridge (ADB) daemon (adbd ), which allows an attacker to establish a session with root-level privileges without...

PT-2026-85782

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E DMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge ADB daemon adbd...

EUVD-2026-71611

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352EDMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge ADB daemon adbd...

Exploit for Incorrect Implementation of Authentication Algorithm in Google Android

CVE-2026-0073 – Android ADBD TLS Authentication Bypass E...

CVE-2022-26580

PAX A930 device with PayDroid7.1.1VirgoV04.3.26T120210419 can allow the execution of specific command injections on selected binaries in the ADB daemon shell service. The attacker must have physical USB access to the device in order to exploit this vulnerability...

EUVD-2020-4065

Malware in sbrugna...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Remove WARNON from functionfsbind This commit addresses an issue related to a kernel panic that occurs when paniconwarn is enabled. The issue is caused by the unnecessary use of WARNON in functionfsbind, which c...

CVE-2020-11723

Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when performing a forensic extraction...

CVE-2022-26580

PAX A930 device with PayDroid7.1.1VirgoV04.3.26T120210419 can allow the execution of specific command injections on selected binaries in the ADB daemon shell service. The attacker must have physical USB access to the device in order to exploit this vulnerability...

CVE-2022-26580

PAX A930 device with PayDroid7.1.1VirgoV04.3.26T120210419 can allow the execution of specific command injections on selected binaries in the ADB daemon shell service. The attacker must have physical USB access to the device in order to exploit this vulnerability...

Command injection

PAX A930 device with PayDroid7.1.1VirgoV04.3.26T120210419 can allow the execution of specific command injections on selected binaries in the ADB daemon shell service. The attacker must have physical USB access to the device in order to exploit this vulnerability...

CVE-2022-26581

PAX A930 device with PayDroid7.1.1VirgoV04.3.26T120210419 can allow an unauthorized attacker to perform privileged actions through the execution of specific binaries listed in ADB daemon. The attacker must have physical USB access to the device in order to exploit this vulnerability...

CVE-2022-26581: Missing Authorization

PAX A930 device with PayDroid7.1.1VirgoV04.3.26T120210419 can allow an unauthorized attacker to perform privileged actions through the execution of specific binaries listed in ADB daemon. The attacker must have physical USB access to the device in order to exploit this vulnerability...