android_kernel_xiaomi_sunny

Kernel de Linux Este archivo se movió a Documentation/admin-guide/README.rst Tenga en cuenta que existen varias guías para desarrolladores y usuarios del kernel. Estas guías pueden generarse en varios formatos, como HTML y PDF. Para generar la documentación, use make htmldocs o make pdfdocs. Hay...

CVE-2026-43499-warhol-root

warhol-root Escalada de privilegios local CVE-2026-43499 IonStack, portada al Xiaomi 17T Pro warhol — MediaTek MT6993, Android 16. Solo GKI 6.12 / android16. El overlay de waiter, el layout de la pila pselect y cada offset de struct están anclados a esa rama, así que nada de esto se transfiere a...

cve-2024-4406-xiaomi13pro-exploit-files

cve-2024-4406-xiaomi13pro-exploit-files Files related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro...

Xiaomi Mi WiFi R3G Routers - Local file Inclusion

Xiaomi Mi WiFi R3G devices before 2.28.23-stable are susceptible to local file inclusion vulnerabilities via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. id: CVE-2019-18371...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE...

CVE-2026-43499-For-Xiaomi-17T-chagall

CVE-2026-43499-For-Xiaomi-17T-chagall CVE-2026-43499 se reproduce en Xiaomi 17T. kernelsu incompleto...

Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

android_kernel_xiaomi_sm8150

This repository does not have a README...

CVE-2026-43499-popsicle

CVE-2026-43499 para popsicle Este repositorio contiene una implementación de escalada de privilegios local de Android 16 para CVE-2026-43499 en Xiaomi 17 Pro Max popsicle. Kernel verificado: root@kitploit: 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k Los modelos Xiaomi 17, Pro y Ultra que...

CVE-2024-45352

CVE-2024-45352 vulnerabilidad en Xiaomi CVE-2024-45352...

-CVE-2024-45352

🚨 CVE-2024-45352 – Xiaomi Smarthome Remote Code Execution RCE 📌 Summary A critical vulnerability CVE-2024-45352 was discovered in the Xiaomi Smarthome application, allowing unauthenticated remote code execution RCE via improper input handling in the internal API parser. This vulnerability can be...

CVE-2026-43499-aristotle-apk

Aristotle ADB Enable Un'app Android minimale che attiva ADB su un au/KDDI Xiaomi "aristotle" XIG04, Android 12 le cui opzioni sviluppatore non sono raggiungibili, utilizzando un root temporaneo ottenuto da CVE-2026-43499. È uno strumento device-owner nella stessa categoria di KingRoot: esegue il...

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Escalatazione locale dei privilegi tmp-root per au/KDDI Xiaomi "aristotle" XIG04 su Android 12 , tramite CVE-2026-43499. Si tratta di una primitiva di rooting del proprietario del dispositivo: radica il tuo telefono ad es. per riattivare ADB quando ...

HyperOS-Directory-Traversal-Analysis

🔬 CVE-2025-21082: HyperOS AVCodec Use-After-Free Analisi completa della vulnerabilità Use-After-Free nel Media Framework AVCodec di Xiaomi HyperOS e simulazione in Rust...

CVE-2019-18370_XiaoMi_Mi_WIFI_RCE_analysis

Dieses Repository hat keine README-Datei...

xiaomi-cve-2024-45352

xiaomi-cve-2024-45352 Rapporto tecnico sulla vulnerabilità critica di Xiaomi Riepilogo della vulnerabilità È stata scoperta una vulnerabilità nel browser predefinito di Xiaomi com.android.browser su vari dispositivi MIUI. L'app non riesce a convalidare correttamente gli intent passati tramite...

duchamp-root

中文 | English +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Orgoglioso utente di JetBrains Mono ⚡ Questa README usa esclusivamente JetBrains Mono. Comic Sans è vietato. !IMPORTANT 🚨 Disclaimer Questo...

CVE-2020-0069_poc

Descrição Este repositório contém os materiais que usamos para investigar a CVE-2020-0069 em um Xiaomi Redmi 6a com um SoC Mediatek MT6762M. Existem três programas: kernelrw.c um programa C que permite ler/escrever memória do kernel poc.sh um script shell syscallhook.c uma biblioteca C que pode s...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898: Xiaomi Mi Router 4A Gigabit - SSRF tramite Host Header Injection -orange Riepilogo Una vulnerabilità di Server-Side Request Forgery SSRF esiste nello Xiaomi Mi Router 4A Gigabit Edition. L'interfaccia web del router non convalida l'header HTTP Host, consentendo a un attaccante non...

CVE-2026-72581

A server-side request forgery SSRF vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perform HTTP requests to arbitrary internal or external URLs. The /auth endpoint in api/main.py uses the user-supplied url POST parameter to...