CVE-2026-111492

The MatchPoint Android app is vulnerable to SQL injection within its push notification handler. The application processes messages from Firebase Cloud Messaging and insecurely constructs database queries by concatenating untrusted data. An attacker capable of interacting with this component can m...

CVE-2026-111491

The MatchPoint Android app by TPC Software contains a vulnerability where credentials are stored in plain text within an SQLite database and the app's SharedPreferences . An attacker who gains access to the device's local data or a backup can retrieve usernames and passwords to gain unauthorized ...

packages_apps_Settings_AOSP10_r33_CVE-2020-0188_CVE-0219

This repository does not have a README...

packages_apps_Settings_AOSP10_r33_CVE-2020-0219

This repository does not have a README...

frameworks_base_AOSP10_r33_CVE-2022-20142

This repository does not have a README...

CVE-2022-46638

CVE-2022-46638 Its about vulnerability of AppLock Ver.5.6.2, a popular android app trusted by more than 100 million users in over 150 countries. PoC Unlock the application protected by AppLock just by tap the back button multiple times. 1. Open the application was locked by AppLock. 2. Dont input...

AhMyth-Android-RAT

AhMyth Android Rat Beta Version It consists of two parts : Server side : desktop application based on electron framework control panel Client side : android application backdoor Getting Started You have two options to install it 1 From source code Prerequisite : Electron to start the app Java to...

droid-hunter

.---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter '//||\ ''...

ShaikUsaf-frameworks_base_AOSP10_r33_CVE-2022-20138

This repository does not have a README...

CVE-2017-0785

CVE-2017-0785 PoC This is just a personal study based on the Android information leak vulnerability released by Armis. Further reading: https://www.facebook.com/khelfatni To run, be sure to have pybluez and pwntools installed. sudo apt-get install bluetooth libbluetooth-dev sudo pip install pyblu...

iovy_root_research

Inspired by dosomder/iovyroot https://github.com/dosomder/iovyroot A root tool based on the CVE-2015-1805 vulnerability It supports 32 and 64bit, get sys call table address via swi. ref to Getting syscalltable on Android...

frameworks_base_AOSP10_r33_CVE-2020-0203

This repository does not have a README...

tethr

Tethr Android Tethering Provisioning Check Bypass CVE-2017-0554 This is the repository for the proof of concept Tethr app which demonstrates CVE-2017-0554 to bypass the tether provisioning check on Android prior to version 7.1.2. Informational Blog Post Download Tethr Demo Video...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has patched vulnerabilities in Android. Samsung has also addressed the vulnerabilities relevant to Samsung Mobile devices. The critical vulnerabilities include remote code execution capabilities and privilege escalation. This allows attackers to gain unauthorized access to system component...

Exploit for CVE-2026-58868

CVE-2026-58868 A HEIF Grid Mismatch in Android's Media Decoder...

CVE-2026-123011

STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded...

EUVD-2026-117324

STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded...

CVE-2026-123011

STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded...

CVE-2026-123011

The st-mems-android-linux-sensors-hal component by STMicroelectronics, in versions prior to 7bdf334 , is vulnerable to an improper validation of specified quantity (CWE-1284). The software fails to verify if the number of channels requested exceeds the allowed limit. This could lead to low integr...

chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page

A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe...