CVE-2026-0073-Android-adbd-authentication-bypass

Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should wo...

CVE-2026-36213-poc

CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation https://img.shields.io/badge/platform-Windows-blue https://img.shields.io/badge/CVE-2026--36213-red https://img.shields.io/badge/EDB--ID-52615-orange Overview This repository contains a Python proof-of-concept PoC for...

cve-2025-21479-iqoo11pro

CVE-2025-21479 临时 Root（iQOO 11 系列） 版本 项目| 值 ---|--- 设备| vivo iQOO 11 Pro（PD2254 / V2254A） 系统| Android 15，PD2254BA15.2.12.2.W10 内核| 5.15.178-g3dc7c01077b8-dirty SoC| Snapdragon 8 Gen 2（SM8550 / kalama） GPU| Adreno 740，OpenGL ES 3.2 [email protected] 已支持机型...

POC-CVE-2025-31931

Writeup Read it here: https://tinyhack.com/2025/11/09/cve-2025-31931-arbitrary-shared-library-loading-in-intel-itt-api-on-android-affects-opencv-4-10/...

NoFrak

NoFrak NoFrak is a Proof of Concept implementation for Android designed to prevent fracking attacks described in "Breaking and Fixing Origin-Based Access Control in Hybrid Web/Mobile Application Frameworks", by Martin Georgiev, Suman Jana, and Vitaly Shmatikov. NDSS 2014. Cordova Android Cordova...

StrandHogg2

StrandHogg2 Poc for StrandHogg2 CVE-2020-0096 Information of the original vulnerability Current Description In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional...

CVE-2023-20938-Public

README This repository contains a bug trigger for CVE-2023-20938 intended to demonstrate and study the vulnerability behavior. QEMU emulation : The bug trigger for reproducing the issue under QEMU is located in the libdevbinder/ directory. Real devices : The bug trigger intended for execution on...

Root-My-Galaxy

Root My Galaxy Root My Galaxy is a one-click installer for explicitly supported Samsung model and kernel combinations. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build artifacts. Latest release The device feed and native payloads are...

slythestx

🐍 Slythestx The Swiss Army Worm for Mobile Security A unified framework for static code analysis and dynamic vulnerability hunting on iOS and Android. 📖 Table of Contents Overview Key Features Architecture Analyzer Suite Quick Start Usage Release Notes Roadmap Contributing Disclaimer License ⚡...

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...

CVE-2024-36971

CVE-2024-36971 — Proof of Concept Research & Analysis Only ⚠️ DISCLAIMER — READ BEFORE USING THIS REPOSITORY This repository is intended only for defensive research, analysis, and responsible reporting. It contains a non-exploitable proof of concept file named CVE-2024-36971 and a publicly...

CVE-2025-48593

CVE-2025-48593: Zero-Click Remote Code Execution in Android System Author: LAKSHMIKANTHAN K letchupkt Date: November 2025 Severity: Critical A critical zero-click remote code execution vulnerability affecting Android 13-16 devices. Vulnerability Overview Attribute| Details ---|--- CVE ID|...

android_kernel_xiaomi_sm8150

This repository does not have a README...

android-kernel-exploitation

Android 内核漏洞利用 目标 本工作坊的目标是开始学习 Android 平台上的内核漏洞分析 与漏洞利用 。 使用方法 克隆仓库 root@kitploit: git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop Github Pages 网址 https://cloudfuzz.github.io/android-kernel-exploitation/ 工作坊直播 用于构建内核的 Docker root@kitploit: 构建 docker 镜像 docker build -t...

CVE-2016-5195-master

CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w proof of concept for Android This repository demonstrates the vulnerability on vulnerable Android devices attached via ADB. It does not disable SELinux see https://github.com/timwr/CVE-2016-5195/issues/9 or install superuser on the device...

CVE-2025-48595-Android-Framework-Integer-Overflow-

CVE-2025-48595 - Android Framework Integer Overflow Vulnerability Descripción CVE-2025-48595 es una vulnerabilidad de desbordamiento de entero integer overflow en múltiples ubicaciones del Framework de Android. Esta falla permite la ejecución de código que conduce a una escalada local de...

ZygoteExploitDemo

🔥 ZygoteExploitDemo - CVE-2024-31317 Android Security Lab 🚨 Educational Demonstration of Android Zygote Injection Vulnerability 📋 Overview This lab demonstrates CVE-2024-31317 , a critical Android vulnerability that allows a malicious app to escalate privileges to SYSTEM level UID 1000 and bypass...

CVE-2026-36213-poc

CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation https://img.shields.io/badge/platform-Windows-blue https://img.shields.io/badge/CVE-2026--36213-red https://img.shields.io/badge/EDB--ID-52615-orange Overview This repository contains a Python proof-of-concept PoC for...

CVE-2026-28609-matroska-pcm-oob

CVE-2026-28609 — Matroska PCM Out-of-Bounds Write Proof-of-concept, instrumented reproduction harness, and technical write-up for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audio track. At a glance CVE ID:...

zte-smartlife-app-pwned

Proof of Concept PoC Suites This directory contains the minimal, standalone PoC tooling used to validate the ZTE SmartLife backend vulnerabilities CVE-2026-86552, CVE-2026-86553, CVE-2026-86554, CVE-2026-86555. All endpoints have been patched and key material rotated by ZTE. The scripts and keys...