Android ADB Debug Server Remote Payload Execution

Writes and spawns a native payload on an Android device that is listening for adb debug messages. Module Options msf use exploit/android/adb/adb/serverexec msf undefinedserverexec show actions ...actions... msf undefinedserverexec set ACTION msf undefinedserverexec show options ...show and set...

VTech Tablet: a plurality of data breach risks hidden-vulnerability warning-the black bar safety net

! In a recent VTech data leak after the event, everyone might think that VTech electronic toy safety won't be better than now worse. However, in this case, we found two vulnerabilities, a hacker can be from the children of their innotab tablet in grabbing data. Brush mode to steal data For lost,...

Huawei HG253s V2 Information Disclosure

Huawei HG253s v2 Vodafone-Spain is starting to rent a new Huawei HG253v2 router to the spanish costumers. This new router is coming with a new firmware version. This bug has been found by @VicenDominguez Vulnerability Basically, it is not validating the session cookie in some administration...

Quick Android Review Kit: QARK

Quick Android Review Kit – This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating “Proof-of-Concept” deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2014-7952, Android ADB backup APK injection vulnerability

The Android operating system offers a backup/restore mechanism of installed packages through the ADB utility. Full backup of applications including the private files stored on /data partition is performed by default, but applications can customize this behavior by implementing a BackupAgent class...

Android adb backup vulnerability exists that can be injected into the malicious APK-vulnerability warning-the black bar safety net

! Android in the system backup after the restore process on the existence of a serious Vulnerability, CVE-2 0 1 4-7 9 5 2, and so an attacker can inject malicious apk file to a backup filethus reducing the time a malicious app installed on the go. The vulnerability is by the Android command-line...

Bug in Android ADB Backup System Can Allow Injection of Malicious Apps

There’s a severe vulnerability in the way that all versions of Android handle the restoration of backups that can allow an attacker to inject a malicious APK file into the backup archive. The bug is the result of an issue with the ADB command-line tool for Android and the researchers who discover...

Amazon Patches Certificate Vulnerabilities in Fire Phones

Amazon last week patched three vulnerabilities in its Fire smartphones, including two in its Certinstaller package that put devices at risk. An attacker could take advantage of the vulnerability in the package, which allows mobile apps to install certificates on Amazon Fire devices without user...

CVE-2015-1188

The certificate verification functions in the HNDS service in Swisscom Centro Grande ADB DSL routers with firmware before 6.14.00 allows remote attackers to access the management functions via unknown vectors...

CVE-2015-1188

The CVE-2015-1188 issue affects Swisscom Centro Grande (ADB) DSL routers with firmware

Google Android adb backup 'server/BackupManagerService.java' directory traversal vulnerability

Android is an operating system based on the Linux open kernel and is a mobile operating system announced by Google Inc. on November 5, 2007.ADB creates a backup of your Android device that exists on your computer. Google Android adb backup has a directory traversal vulnerability in its...

Pirelli Router P.DG-A4001N WPA Key Reverse Engineering Rev 2

!/usr/bin/env python -- coding: utf-8 -- ''' @license: GPLv3 @author : Eduardo Novella @contact: ednoloainf.upv.es @twitter: @enovella ----------------- Target : ----------------- Vendor : ADB broadband Pirelli Router : Model P.DG-A4001N ISP : Arnet Telecom Argentina, MEO Portugal Possible-target...

ADB - Backup Archive File Overwrite Directory Traversal

ADB - Backup Archive File Overwrite Directory Traversal ADB backup archive path traversal file overwrite ------------------------------------------------ Using adb one can create a backup of his/her Android device and store it on the PC. The backup archive is based on the tar file format. By...

ADB - Backup Archive File Overwrite Directory Traversal

ADB backup archive path traversal file overwrite ------------------------------------------------ Using adb one can create a backup of his/her Android device and store it on the PC. The backup archive is based on the tar file format. By modifying tar headers to contain ../../ like patterns it is...

ADB Backup Traversal / File Overwrite

ADB backup archive path traversal file overwrite ------------------------------------------------ Using adb one can create a backup of his/her Android device and store it on the PC. The backup archive is based on the tar file format. By modifying tar headers to contain ../../ like patterns it is...

CVE-2014-7951 adb backup archive path traversal file overwrite

ADB backup archive path traversal file overwrite ------------------------------------------------ Using adb one can create a backup of his/her Android device and store it on the PC. The backup archive is based on the tar file format. By modifying tar headers to contain ../../ like patterns it is...

Android OS 4.4.4 Backup Agent Arbitrary Code Execution Vulnerability

The Android backup agent implementation was vulnerable to privilege escalation and race condition. An attacker with adb shell access could run arbitrary code as the system 1000 user or any other valid package. The attack is tested on Android OS 4.4.4. Android backup agent arbitrary code execution...

CVE-2015-0554

The ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

Integer overflow

The ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

CVE-2015-0554

The ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...