1147 matches found
GhostLock-H80GT
English | 中文 Honor 80 GT Privilege Escalation PoC: GhostLock CVE-2026-43499 A local privilege escalation exploit for the Honor 80 GT AGT-AN00 , CVE-2026-43499 — a use-after-free in the kernel rtmutex removewaiter path — plus a companion KernelSU kernel-module loading solution. In principle the bu...
Elysium-Vanguard-Sentinel-Audit
SENTINEL-ROOT-AUDIT: Набор для обнаружения гипервизора Honor Magic V2 ➲ Обзор проекта SENTINEL-ROOT-AUDIT — это профессиональный набор средств безопасности, предназначенный для аудита целостности ядра и обнаружения вмешательств на уровне гипервизора на Honor Magic V2 SM8550. Хотя основная...
cve-2026-43499-aak-an00
CVE-2026-43499 · Honor WIN RT AAK-AN00 Temporary Root Research Notes Written entirely by DeepSeek, I know nothing about it Spent another few days tinkering, zero progress, gave up Currently can obtain root, but it's highly unstable; network drops after rooting, unplugging the cable triggers a...
ghostlock-apk
GhostLock APK 독립 APK: CVE-2026-43499 GhostLock 커널 권한 상승 + Shizuku shell 신원 실행. 사전 요구 사항 HONOR AAK-AN00 / MagicOS 10 / Linux 6.6.89 / 4KB 페이지 Shizuku 설치 및 adb 방식으로 시작됨 adb shell sh /sdcard/Android/data/moe.shizuku.privileged.api/start.sh USB 디버깅 승인됨 작동 원리 1. Shizuku UserService : APK가 시작되면 Shizuku...
0xM0nCrush
0xM0nCrush 크로스 버전 Windows 프로세스 종료기. 서명된 HONOR 커널 드라이버MonProcessEX.sys를 로드하고, 모든 대상 프로세스의 PID를 확인한 뒤, 단일 IOCTL을 통해 커널 컨텍스트에서 프로세스를 종료한다. 커널 오프셋도, PDB 다운로드도, 빌드별 셸코드도 필요 없다 — 이 기법은 모든 Windows 10 및 Windows 11 빌드에서 동일하게 작동한다. 이 도구는 단일 자체 포함 실행 파일이다. Service Control Manager를 통해 드라이버를 설치하고, 종료를 수행한 뒤,...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — HONOR Magic 7 Lite / X9C 5G BRP-NX1 Port Port o...
ghostlock-honor-aak-probe
이 저장소에는 README가 없습니다...
Exploit for Use After Free in Linux Linux_Kernel
Honor X50 Privilege Escalation: GhostLock CVE-2026-43499 A...
ghostlock-aak-apk
GhostLock AAK Launcher CVE-2026-43499 · Linux kernel rtmutex stack Use-After-Free local privilege escalation LPE loader/trigger This repository is a security research and proof-of-concept PoC project , used to demonstrate and verify the trigger flow of the CVE-2026-43499 GhostLock vulnerability i...
ghostlock-honor-aak
ghostlock-honor-aak GhostLock CVE-2026-43499 exploit adapted for Honor AAK-AN00 MagicOS 10, kernel 6.6.89-android15...
honor-6.12.38-43499-research
CVE-2026-43499 Honor YLP-W00 6.12.38 PGO 権限昇格研究 研究状況：脆弱性は確認済みでトリガー可能、PI walk は成功しクラッシュしないが、完全な権限昇格チェーンは未実装。上流の更新を待機中。 本リポジトリは、Honor YLP-W00 タブレット（カーネル 6.12.38、+pgo+bolt+lto+mlgo）上で CVE-2026-43499 を利用した一時的な権限昇格の完全な研究過程を記録したものである。 一言結論 脆弱性トリガー成功（EDEADLK）、PI chain walk 成功（schedsetattr=0、クラッシュなし）。しかし...
CVE-2026-97561
In the Linux kernel, the following vulnerability has been resolved: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid When the administrator mounts with forceuid or forcegid uid=/gid= mount options, they expect all files to appear owned by the specified user/group. However, severa...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 Honor YLP-W00 6.12.38 PGO Privilege Escalatio...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if startnode is NULL Although commit 0c9992315e73 “ACPICA: Avoid walking the ACPI Namespace if it is not there” fixed the issue when both startnode and acpigblrootnode were NULL, the Linux kern...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 · Honor WIN RT AAK-AN00 Temporary Root Resear...
EUVD-2026-70221
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function setcoursemodeprice at lms/djangoapps/instructor/views/instructordashboard.py:430 is decorated only with @loginrequired and performs no course-level permission check. An...
PT-2026-84817
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function set course mode price at lms/djangoapps/instructor/views/instructor dashboard.py:430 is decorated only with @login required and performs no course-level permission chec...
Exploit for Use After Free in Linux Linux_Kernel
English | 中文 Honor 80 GT Privilege Escalat...