Apkx-Hunter

APKX-Hunter v2.7.2 — Paquet Debian APKX-Hunter est un framework open-source d'analyse statique Android écrit entièrement en C , conçu spécifiquement pour les évaluations de sécurité Android, le reverse engineering, l'analyse de malwares, le scan de conformité OWASP MASVS , le bug bounty et les...

QuadraInspect

QuadraInspect / /\ \ / / / / / / / / / / / / / / / / // // / / / / / / / // / // / // / // / / / // // // / / // / / // / \\,/,/,// ,/// /// .//// // La sécurité des appareils mobiles est devenue une préoccupation majeure en raison de la quantité croissante de données sensibles qui y...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 Poc ne peut pas être utilisé Toutes les ressources proviennent de cet article https://bbs.kanxue.com/thread-268506.htm La cause principale de cette vulnérabilité est l'incohérence entre la lecture et l'écriture de l'objet Parcel, qui remonte précisément au code suiva...

CVE-2024-0044

CVE-2024-0044/A-307532206 — это уязвимость высокой степени серьезности в Android Framework, которая позволяет злоумышленникам с доступом adb выполнять произвольный код под UID произвольного приложения. Изначально она была обнаружена Томом Хеббом из Meta Red Team X. В интернете можно найти множест...

CVE-2023-35674

Description CVE-2023-35674 est une vulnérabilité de sécurité de niveau élevé de type zero-day située dans Android Framework. Cette vulnérabilité permet à un attaquant d’élever ses privilèges sans aucune interaction de l’utilisateur ni privilège d’exécution supplémentaire. Cette vulnérabilité se...

CVE-2025-48595-Android-Framework-Integer-Overflow-

CVE-2025-48595 - Уязвимость целочисленного переполнения в Android Framework Описание CVE-2025-48595 – это уязвимость целочисленного переполнения integer overflow в нескольких местах платформы Android. Данная ошибка позволяет выполнить код , что приводит к локальному повышению привилегий без...

EUVD-2026-73992

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73986

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28642

A logic error in the executeRequest method of ActivityStarter.java within the Android Framework can lead to an unauthorized background activity launch. This vulnerability allows for a local escalation of privilege without requiring additional execution privileges or user interaction. Affected dev...

Exploit for Integer Overflow or Wraparound in Google Android

CVE-2025-48595 — Android Framework Integer Overflow Vulnerabil...

Lost in Migration: Exposing Android Framework Vulnerabilities in Parallel Java-Kotlin Implementations

Android has adopted Kotlin alongside Java across apps and core system components. During this shift, we observe parallel implementations in the Android Open Source Project AOSP where the same component is implemented in both Java and Kotlin. In principle, their functional purposes are identical. ...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component allows a perpetrator to increase their privileges.

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the performPreInstallChecks() function in the InstallRepository.kt script of the Android operating system’s Framework component allows a malicious actor to escalate their privileges.

The vulnerability of the performPreInstallChecks function in the InstallRepository.kt scenario of the Android operating system’s framework component is related to a data protection mechanism breach. Exploiting this vulnerability could allow an attacker to enhance their privileges...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2022-0492link is external Linux Kernel Improper Authentication Vulnerability CVE-2025-48595link is external Android Framework Integer Overflow Vulnerability The...

The vulnerability of the verifySignature method in the ApkChecksums.java class of the Framework operating system component in Android allows a hacker to trigger a service failure.

The vulnerability of the verifySignature method in the ApkChecksums.java class of the Framework operating system component in Android involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the approvalLevelForDomainInternal method in the DomainVerificationService.java class of the Android operating system framework allows a hacker to increase their privileges.

The vulnerability of the approvalLevelForDomainInternal method in the DomainVerificationService.java class of the Android operating system framework component is related to incorrect code generation management. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the setGlobalProxy method in the DevicePolicyManagerService.java class of the Android operating system’s Framework component allows a hacker to increase their privileges.

The vulnerability of the setGlobalProxy method in the DevicePolicyManagerService.java class of the Android operating system’s framework is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to increase their privileges...