80099 matches found
CVE-2026-28609-matroska-pcm-oob
CVE-2026-28609 — Matroska PCM Out-of-Bounds Write Proof-of-concept, instrumented reproduction harness, and technical write-up for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audio track. At a glance CVE ID:...
zte-smartlife-app-pwned
Proof of Concept PoC Suites This directory contains the minimal, standalone PoC tooling used to validate the ZTE SmartLife backend vulnerabilities CVE-2026-86552, CVE-2026-86553, CVE-2026-86554, CVE-2026-86555. All endpoints have been patched and key material rotated by ZTE. The scripts and keys...
CVE-2024-0044
CVE-2024-0044 Overview CVE-2024-0044 is a vulnerability discovered in certain Android applications that allows attackers to escalate privileges by exploiting a flaw in the run-as command. This vulnerability can be exploited by crafting a specific payload that grants unauthorized access to...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock for Humane AI Pin GhostLock for Humane AI Pin is an...
Rootsmart-v2.0
Rootsmart 2.0 con cve-2019-2215 + Ransomware Descargo de responsabilidad Este proyecto es únicamente con fines educativos. Este proyecto utiliza código de rkshrksh/2048-Game y kangtastic/cve-2019-2215. Descripción del proyecto Este proyecto es parte del módulo de Seguridad Móvil del Singapore...
frameworks_opt_net_wifi_CVE-2021-0390
This repository does not have a README...
system_bt_AOSP10_r33_CVE-2020-0471
Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...
rasputin
RASPutin Ressources and papers related to my conferences and work on unRASPs. These work is in progress, please be patient : Don't hesitate to contribute / contact me / do PR ! Talks Insomni'hack 2022 - Forging golden hammer against Android app protections This talk is the first from a new serie...
vendor-android-cves
vendor-android-cves Collections of our POCs/fuzzing scripts/harness for vendor android CVEs, including those on BlackHat ASIA 2022: https://www.blackhat.com/asia-22/briefings/schedule/the-hidden-rce-surfaces-that-control-the-droids-26083 Update: I've received news about the SMT exploit in this...
CVE-2026-20516
CVE-2026-20516: MiracastService confused deputy on Android TV Research and disclosure by Davide Di Matteo @Dingo97. This is my first credited CVE. I found an improperly exported, system-privileged Miracast service while researching a PEAQ Android TV. A caller can supply an intent extra that makes...
CVE-2026-0073-Android-client-TLS-auth-bypass
CVE‑2026‑0073 is a logic bug in Android’s ADB daemon adbd that allows an attacker to bypass TLS mutual authentication and open a remote shell on a device that has wireless debugging enabled and has been paired with any computer at least once. The root cause is a single misused API: the return val...
ReArk
ReArk English | 简体中文 ReArk is a desktop reverse engineering and AI-assisted analysis tool for HarmonyOS and Android applications. Open HarmonyOS .hap, .app, and .abc files or Android .apk and .aab packages to inspect code, resources, metadata, and application behavior in one workspace. Combine...
android-pentest-tool
Android pentest tool designed for kali linux javaFX + Spring boot + bash scripts make all routine steps in one click Update Version 1.0 released! Build root@kitploit: mvn clean package Run root@kitploit: java -jar target/android-pentest-tool.jar TODO: add installation steps add features list more...
cve-2015-1538-1
Se incluye un script de Python que genera un MP4 explotando la vulnerabilidad ‘stsc’, también conocida como CVE-2015-1538 1. Esta es una de las vulnerabilidades más críticas que reporté en la biblioteca Stagefright. El resultado esperado del exploit es una reverse shell como el usuario media. Com...
shellshocker-android
shellshocker-android Esta es una aplicación de Android que te ayuda a detectar si tu máquina que ejecuta bash es vulnerable mediante CVE-2014-6271 Stefano Belli, C Copyleft, comparte, reconstruye, modifica, redistribuye como creas que debería ser mejor Google+: http://plus.google.com/+StefanoBell...
CVE-2024-23700
CVE-2024-23700 - PoC de escalada de privilegios en Android Companion Device Proyecto que ilustra CVE-2024-23700, una vulnerabilidad de escalada de privilegios relacionada con el mecanismo Companion Device en Android. El PoC demuestra que una aplicación puede aprovechar el flujo de vinculación de...
CVE-2024-50657
CVE-2024-50657: Control de Acceso Incorrecto en la apk de Owncloud Un problema en la apk de Owncloud para Android v.4.4.1 permite a un atacante físicamente cercano escalar privilegios a través de la clase PassCodeViewModel, específicamente en el método checkPassCodeIsValid. Tipo de Vulnerabilidad...
Exploit for CVE-2026-36213
CVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Es...
system_bt_AOSP10_r33_CVE-2020-0225
Pila Bluetooth Fluoride Compilación y ejecución en AOSP Simplemente compile AOSP - Fluoride está ahí por defecto. Compilación y ejecución en Linux Instrucciones para Ubuntu, probado en 14.04 con Clang 3.5.0 y 16.10 con Clang 3.8.0 Descargar código fuente root@kitploit: mkdir /fluoride cd /fluorid...