256 matches found
Super-UEFIinSecureBoot-Disk
Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk es una prueba de concepto no mantenida ni mejorada activamente imagen de arranque con el cargador de arranque GRUB2 diseñada para ser utilizada como base para unidades flash USB de recuperación. Característica clave: el disco es completament...
pwnage24mtk
pwnage24mtk 针对MTK设备的证书利用。MTK证书验证过程中存在逻辑缺陷。类似于CVE-2023-20696。 已修补。 CVE-2023-20696 CVE-2025-20730 架构检测存在一些问题。等我有空时需要修复。或者任何人都可以提交pull request。 这是一个vibe编码的版本，我稍后会重写。但目前是可用的。 免责声明 本项目仅用于研究目的。 请确保在使用前已获得授权。 不允许用于非法用途。 不允许使用此漏洞提供付费服务。 对于MTK设备，preloader验证bl2ext/lk/atf，然后跳转到该镜像。 这些镜像是使用ASN.1证书签名的。...
mtkclient
언어: 🇺🇸 🇨🇳 MTKClient 단순히 익스플로잇, 플래시 읽기/쓰기 및 엽기적인 작업을 위한 mtk 도구입니다. Windows의 경우, 기본 mtk 포트와 usbdk 드라이버를 설치해야 합니다 아래 지침 참조. Linux의 경우, 오래된 kamakiri를 사용할 때만 패치된 커널이 필요합니다 Setup 폴더 참조 플래시 읽기/쓰기 제외. mtk 스크립트가 실행되면, 장치를 꺼서 brom 모드로 부팅하고, 볼륨 업 + 전원 또는 볼륨 다운 + 전원 중 하나를 누르고 있는 상태에서 전화기를 연결하세요. 도구가 감지하면 버튼에서...
EDR-Preloader
EDR-Preloader AppVerifierレイヤーをハイジャックすることで、EDRが自プロセスにDLLをフックまたはロードするのを防ぐEDRバイパス 詳細はこちら: malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html...
pwnage24mtk
pwnage24mtk 针对MTK设备的证书漏洞利用。MTK证书验证过程中存在一个逻辑缺陷。类似于CVE-2023-20696。可能已在6月被修补。 免责声明 本项目仅用于研究目的。使用前请确保已获得授权。禁止非法使用。不允许使用此漏洞利用程序提供付费服务。 对于MTK设备，预加载器preloader会验证bl2ext/lk/atf，然后跳转执行。这些镜像使用ASN.1证书进行签名。但在ASN.1解析过程中存在一个逻辑缺陷。 对于旧的V5/V6设备，证书内容通过bypassmode...
cve-2026-43499-firetv-sheldonp-writeup
Amazon Fire TV Stick 第3世代sheldonpにおけるCVE-2026-43499 Linuxカーネルの権限昇格をプリローダーダウングレードとブートローダーアンロックへと連鎖させる。 概要 本リポジトリは、Amazon Fire TV Stick 第3世代sheldonp上でのCVE-2026-43499エクスプロイトチェーンの、私による許可された再現を記録したものである。このチェーンでは、一時的なカーネルrootを用いて制御されたプリローダーダウングレードを実行し、その後、既存のKamakiri...
mediatek-mt8365-preloader-exploit
Analysis of Preloader Vulnerabilities in MediaTek MT8365 MT81...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
CVE-2026-20435 concerns a logic error in the preloader of MediaTek-based devices that allows reading device unique identifiers. The vulnerability can enable local information disclosure with physical access and no required user interaction or execution privileges. Affected component: preloader; u...
EUVD-2026-9160
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
PT-2026-22560
Name of the Vulnerable Software and Affected Versions Samsung Preloader affected versions not specified MediaTek chipsets affected versions not specified Description A logic error in the preloader allows the reading of device unique identifiers, leading to local information disclosure. This flaw...
CVE-2025-23682
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bhuvnesh Gupta Preloader Quotes preloader-quotes allows Reflected XSS.This issue affects Preloader Quotes: from n/a through = 1.0.0...
CVE-1999-0917
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files...
CVE-2025-20730
In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141...
CVE-2025-20730
In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141...