CVE-2020-0022

CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 By Polo35 - 2020/08/24 "Usage: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Based on scripts by Jan Ruge CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click R...

public-research

Nokia Deepfield ERT — public research Threat research from the Nokia Deepfield Emergency Response Team ERT, focused on DDoS botnets and related infrastructure. Each directory covers a botnet family with a brief summary and machine-readable indicators of compromise IoCs. This repo consolidates pri...

com.phlox.tvwebbrowser

This repository does not have a README...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Executive summary macOS Music and TV do an insecure rename resulting in FDA by gaining full control over the user's TCC.db I reported this bug in separate tickets for each app, feel free to merge if applicable. The underlying problem is that these apps have FDA but fail to sanitize their file...

CVE-2019-2215

CVE-2019-2215 Temproot para TV Bravia mediante CVE-2019-2215. Resumen Demostración de un ataque de escalada de privilegios de solo lectura/escritura en memoria del kernel que resulta en un shell root temporal. Funciona en dispositivos Sony Bravia TV que ejecutan el firmware Android 8 PKG6.0724 co...

GhostLock-NVIDIA-Shield-9.2.4

GhostLock para NVIDIA Shield TV Pro 9.2.4 Puerto arm64 validado del use-after-free de futex PI de GhostLock CVE-2026-43499 para la NVIDIA Shield TV Pro 2019 mdarcy con Shield Experience 9.2.4. El payload cambia las credenciales del daemon ADB en vivo, por lo que los nuevos shells ADB tienen UID 0...

CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55972-Denegación-de-Servicio-Remota-no-Autenticada-DoS-en-TCL-Smart-TV-UPnP-DLNA-AVTransport Un TCL Smart TV que ejecuta una implementación vulnerable de UPnP/DLNA MediaRenderer se ve afectado por una Denegación de Servicio DoS remota y no autenticada. Proveedor: TCL Technology Group...

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55971-SSRF-Ciego-No-Autenticado-en-TCL-Smart-TV-UPnP-DLNA-AVTransport El Smart TV TCL 65C655, con la versión de firmware V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, es vulnerable a una Server-Side Request Forgery SSRF ciega y no autenticada a través del servicio UPnP...

CVE_2022_38181_Gazelle

Exploit for CVE-2022-38181 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE202238181. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32bit userspace. The POC exploits a bug in the ARM Mali...

lg-webos-kexec

lg-webos-kexec Arranca un kernel Linux personalizado en un TV LG webOS rooteado mediante kexec — en RAM, sin bypass de arranque seguro. Estado: trabajo en curso. Un kernel personalizado puede prepararse y llega al espacio de usuario, pero todavía no se mantiene activo como un SO utilizable...

root-my-webos-tv

Rootear mi TV webOS Un script simple de Python que inicia un servidor telnet en dispositivos webOS vulnerables como root. Televisores verificados webOS 4.9.7 - 5.30.40 model LG43UM7000PLA webOS 5.5.0 - 04.50.51 model OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 model OLED48C1PUB webOS...

ghostlock-sabrina

GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...

GhostLock

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Removed unnecessary locks from usbtvvideofree. The lock-related code in usbtvvideofree is now removed because it is unnecessary and may lead to a deadlock, as reported here:...

hazel-cve-2026-43499

Hazel Fire TV temporary root Temporary root exploit for the Amazon hazel Fire TV platform, based on CVE-2026-43499. The exploit is is intended for the ARM32 Linux 4.9 firmware shared by Hazel televisions from several manufacturers. Profiles currently cover firmware from PS7657.3645N through...

CVE-2026-20516

CVE-2026-20516: MiracastService confused deputy en Android TV Investigación y divulgación por Davide Di Matteo @Dingo97. Este es mi primer CVE acreditado. Encontré un servicio Miracast con privilegios de sistema, exportado incorrectamente, mientras investigaba un PEAQ Android TV. Un llamador pued...

cve-2026-43499-firetv-sheldonp-writeup

CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...

CVE-2018-16706

CVE-2018-16706 O cómo apago mi TV $ nmap 192.168.1.55 -p 9080 PORT STATE SERVICE 9080/tcp open glrpc Nmap done: 1 IP address 1 host up scanned in 0.05 seconds Detalles del CVE https://www.cvedetails.com/cve/CVE-2018-16706/...

Linux Distros Unpatched Vulnerability : CVE-2026-93234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gud: validate TV mode names before creating enum property The GUD protocol returns TV mode names as fixed-size GUDCONNECTORTVMODENAMELEN entries and require...

CVE-2026-93234

In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate TV mode names before creating enum property The GUD protocol returns TV mode names as fixed-size GUDCONNECTORTVMODENAMELEN entries and requires each name to be NUL-terminated. gudconnectoraddtvmode currently...