CVE-2024-0044

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

📄 Android 13 Local Privilege Escalation

Android version 13 local privilege escalation proof of concept exploit. Exploit Title: Android 13 - Local Privilege Escalation Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Version: = 13 Tested on: Win,...

Exploit for Special Element Injection in Google Android

CVE-2024-0044- CVE-2024-0044: a "run-as any app" high-severity...

Exploit for Special Element Injection in Google Android

!python-static-badgehttps://img.shields.io/badge/Python-blue?...

Exploit for Special Element Injection in Google Android

EvilDroid: Automated Exploit for CVE-2024-0044 EvilDroid...

Exploit for Special Element Injection in Google Android

CVE-2024-0044-EXP Uses CVE-2024-0044 to extract data from ba...

Exploit for Special Element Injection in Google Android

CVE 2024 0044 CVE-2024-0044, identified in the createSessionI...

Exploit for Special Element Injection in Google Android

CVE-2024-0044-EXP This tool exploits CVE-2024-0044 to enable...

Exploit for Special Element Injection in Google Android

CVE 2024 0044 CVE-2024-0044, identified in the createSessionI...

CVE-2024-0044

creationtimestamp| type| source ---|---|--- 2024-03-11 18:26:36+00:00| seen| https://t.me/ctinow/204927 2024-03-11 18:26:49+00:00| seen| https://t.me/ctinow/204940 2024-04-11 06:00:32+00:00| published-proof-of-concept| https://t.me/androidMalware/2172 2024-06-08 08:11:05+00:00|...

CVE-2024-0044

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-0044

CVE-2024-0044 is an Android framework issue in PackageInstallerService where createSessionInternal accepts an installerPackageName that is not properly validated, allowing a local attacker with adb access to run-as any app. The root cause is insufficient validation of the installerPackageName arg...