89 matches found
ConscryptTrustUserCerts
Magisk - Conscrypt: confiar en certificados de usuario Este módulo hace que todos los certificados de usuario instalados pasen a formar parte del almacén de certificados del módulo APEX com.android.conscrypt en Android 14, de modo que se utilicen automáticamente al construir la cadena de confianz...
Pixel_GPU_Exploit
Mali GPU Kernel LPE Este artículo proporciona un análisis en profundidad de dos vulnerabilidades del kernel en la GPU Mali, alcanzables desde el sandbox de aplicaciones predeterminado, que identifiqué y reporté de forma independiente a Google. Incluye un exploit del kernel que logra capacidades...
K50G-POCOF4GT-CVE-2026-43499-PoC
Redmi K50 Gaming ingres — CVE-2026-43499 GhostLock 临时 Root PoC 免解锁 BL 一键临时 Root 。利用 GhostLock（CVE-2026-43499, futex PI Use-After-Free） 本地提权链拿到 root 锚点，随后通过 KernelSU 3.3.0 late-load 方式把 kernelsu 模块挂载进运行中的内核，配合 KSU 模块保持 SELinux Permissive 并修复网络。 目标设备: Redmi K50G / POCO F4 GT —— 代号 ingres, SoC SM845...
realme-c53-unlock-root
Realme C53 RMX3760 — Bootloader Unlock & Root Toolkit English | Bahasa Indonesia Unlock bootloader and root your Realme C53 and other Realme devices. Supports KernelSU, Magisk, or a hybrid of both. ⚠️ RMX3760 Unisoc T612 : Bootloader unlock + Magisk root are verified working on BOTH Android 15 and...
CRACK12
CRACK12 rooteando un ATOZEE P12 en Android 14 con CVE-2022-38694 — porque fastboot oem unlock dijo no, así que encontramos otra forma. qué rayos es esto resulta que hay esta tablet. la ATOZEE P12. nunca has oído hablar de ella. nadie lo ha hecho. cuesta como $80 y el nombre del fabricante suena...
CVE-2026-0073-Android-adbd-authentication-bypass
Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should wo...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 PoC for Galaxy S24 Ultra SM-S928U1 Device-sp...
CVE-2024-34662
Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors...
EUVD-2025-13686
Malicious code in bioql PyPI...
EUVD-2024-18587
Malicious code in bioql PyPI...
EUVD-2023-47010
Malicious code in bioql PyPI...
EUVD-2025-14892
Malicious code in bioql PyPI...
EUVD-2024-34898
Malicious code in bioql PyPI...
CVE-2025-21035
Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles...
CVE-2025-21035
Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles...
CVE-2025-21035
CVE-2025-21035 describes an improper access control in Samsung Calendar. The vulnerability affects Samsung Calendar versions prior to 12.5.06.5 on Android 14 and prior to 12.6.01.12 on Android 15, potentially allowing a physical attacker to access data across multiple user profiles. Root cause is...
PT-2025-35689
Name of the Vulnerable Software and Affected Versions: Samsung Calendar versions prior to 12.5.06.5 in Android 14 Samsung Calendar versions prior to 12.6.01.12 in Android 15 Description: Improper access control in Samsung Calendar allows physical attackers to access data across multiple user...
CVE-2025-21016
Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers to use the privileged APIs...
CVE-2025-21016
Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers to use the privileged APIs...
CVE-2025-21016
The CVE-2025-21016 issue affects Samsung PkgPredictorService in Chinese Android 13–16 prior to SMR Aug-2025 Release 1. The root cause is improper access control, enabling local attackers to invoke privileged APIs. Impact is limited to local privilege escalation via these privileged APIs, with doc...