F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q ブートローダーアンロック不要の KernelSU Root CVE-2026-43499 一時 root → LDPRELOAD チャネルで DEFEX をバイパス → LTO なし clang-12 版 kernelsu.ko → su + KernelSU Manager 全機能 ステータス：✅ 2026-08-12 実機検証達成 （ファームウェア F9360ZCSAIZF1、カーネル 5.10.236-android12-9-2755199-abF9360ZCSAIZF1） 本プロジェクトは Bootloader ロック...

CVE-2025-45512

U-Boot 1.1.3 Exploit PoC 사용 가이드 소개 이 PoCProof of Concept는 2019년 8월 27일에 컴파일된 U-Boot 부트로더 버전 1.1.3의 취약점을 확인하기 위해 제작되었습니다. 이 코드는 OWASP IoT 보안 테스트 가이드ISTG 카테고리와 관련된 5가지 취약점을 구현합니다. 경고: 이 PoC는 테스트 권한이 있는 장치에서만 사용하십시오. 권한 없이 시스템에 사용하면 관련 법률을 위반할 수 있습니다. 요구사항 1. Python 3.6+ 2. 직렬 인터페이스UART를 통한 대상 장치의 물...

zenfone9-root

zenfone9-root — ブートローダーロックされた ASUS Zenfone 9 における一時的 root ブートローダーのロック解除ができない ASUS Zenfone 9 AI2202 で 一時的な root uid 0 を取得する ための研究用コードとメモ — ASUS が unlock ツールを廃止し、開発者オプションから OEM ロック解除トグルを削除し、現行ファームウェアでは fastboot oem unlock / flashing unlock を強硬に拒否するためである。 これはブートローダーのロック解除ではなく、何もフラッシュしない。これは ランタイム ro...

Bootloader_Unlock_Retroid_Pocket_3Plus

Retroid Pocket 3Plus 부트로더 잠금 해제 RP3+ 부트로더 잠금 해제 방법 2가지 CVE-2022-38694를 이용한 Retroid Pocket 3+ 부트로더 잠금 해제 이 가이드를 따르면 기기의 부트로더를 잠금 해제할 때 발생하는 위험을 이해했음을 인정하는 것입니다. 진행하기 전에 중요한 데이터를 모두 백업했는지 확인하세요. 크레딧: 이 부트로더 잠금 해제 프로세스는 다음 저장소의 작업을 기반으로 합니다: TomKing062/CVE-2022-38694unlockbootloade...

pixel-ksu-root

pixel-ksu-root ロックされたブートローダーのままの純正Google Pixelを、非特権のadb shellからカーネルCVEを使ってroot化する — アンロックもフラッシュもベンダーの協力も不要。...

CVE-2026-102370

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

CVE-2026-102370 Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

CVE-2026-102370 Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

CVE-2026-102370

The TP-Link Kasa EC70 v4 and EC71 v4 devices are vulnerable because the production debug interface is not logically disabled at the firmware or chip level, and the bootloader remains unlocked. While debug traces are physically severed during manufacturing, an attacker with physical access can res...

RootMyVivo

RootMyVivo ブートローダーがロックされたvivoおよびiQOO向けのRoot。ブートローダーのロック解除なし、bootの書き換えなし — APKをインストールして、ボタンを押して、待つだけ。 ベースはGhostLock（CVE-2026-43499、futex PIにおけるuse-after-free）+ 一時的なrootの上にKernelSUをインストールする仕組み。 English · 中文 使い方の流れ 1. リリースのAPKをインストール 2. Shizukuを起動（shellアクセス用に一度だけ）するか、TCP経由でADBを立ち上げる 3. 「ROOTを取得」を押す ...

Linux Distros Unpatched Vulnerability : CVE-2026-71974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds...

CVE-2026-102370: On-Chip Debug and Test Interface With Improper Access Control

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

Linux Distros Unpatched Vulnerability : CVE-2026-71972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the videodisplayrle8bitmap function in drivers/video/videobmp.c. Attackers can suppl...

Linux Distros Unpatched Vulnerability : CVE-2026-74222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails,...

Linux Distros Unpatched Vulnerability : CVE-2026-71971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc3 with CONFIGIPDEFRAG enabled contains an out-of-bounds write vulnerability in the netdefragment function in net/net.c. Remote attackers...

SUSE CVE-2026-74222

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...

EUVD-2026-89435

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...

EUVD-2026-89432

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

CVE-2026-71974

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

UBUNTU-CVE-2026-71974

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...