ghost-hoock

ghost-hoock A minimal fork of GhostLock that keeps only one primitive : turning off SELinux via CVE-2026-43499 futex PI UAF. -green Table of contents What is this How it works What was kept from the original What was removed Building Running Requirements Limitations and risks Project layout Licen...

ghostlock-honor-aak

ghostlock-honor-aak GhostLock CVE-2026-43499 exploit adapted for Honor AAK-AN00 MagicOS 10, kernel 6.6.89-android15...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 COMBINADO CON EL REPOSITORIO ORIGINAL: Encuéntralo aquí https://github.com/CamsShaft/IonStack-S22 Root completo en el dominio del kernel con selinux permisivo en mi SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. NOTAS: No voy a entrar en gran detalle ni...

CVE-2022-0847

信息 Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 如何利用漏洞 本地权限提升 gcc exploit.c -o exploit cp /bin/passwd . sudo chown root:roo...

android_kernel_oneplus_avicii

Fuente del Kernel NeverSettle de OnePlus Nord avicii OnePlus Nord nombre clave: avicii es el primer teléfono inteligente de gama media alta no insignia de OnePlus Technology Co., Ltd., lanzado en el año 2020. El teléfono está disponible en 2 variantes según la región: AC2001 India y AC2003 Europa...

ghostlock-app

GhostLock-App 中文: READMEZH.md Documentación Guía de portabilidad de perfiles de kernel - añadir soporte para un nuevo kernel. GhostLock empareja kernels por uname -r exacto y rechaza las compilaciones no compatibles, mostrando el estado en la parte superior. Los perfiles integrados se encuentran...

vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

Neo9Root Herramienta Caps-Root para iQOO Neo9 PD2338C sin desbloqueo — Esquema de elevación de privilegios por escritura física arbitraria basado en CVE-2025-21479 Adreno GPU SDS Sin necesidad de desbloquear el Bootloader, sin flashear, sin Magisk. Se obtiene escritura física arbitraria a nivel d...

qu1ckr00t

qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...

CVE-2022-20607

CVE-2022-20607 在 Pixel 蜂窝固件中，由于缺少边界检查，存在可能越界写入的问题。这可能导致需要 LTE 认证的远程代码执行。利用无需用户交互。产品：Android 版本：Android kernelAndroid ID：A-238914868参考：无 身份认证| 复杂度| 向量 ---|---|--- 不可用| 不可用| 不可用 机密性| 完整性| 可用性 ---|---|--- 不可用| 不可用| 不可用 CVSS 分数：不可用 参考 https://source.android.com/security/bulletin/pixel/2022-12-01 Brut...

CVE-2019-2215

CVE-2019-2215 Vulnerabilidad del kernel de Android CVE-2019-2215 PoC de root temporal. Funciona en dispositivos Google Pixel 2/Pixel 2 XL walleye/taimen que ejecutan la imagen QP1A.190711.020 de septiembre de 2019 con el kernel versión-BuildID 4.4.177-g83bee1dc48e8. Uso Actualmente, el binario so...

ghost-hoock

ghost-hoock Un fork mínimo de GhostLock que conserva solo una primitiva : desactivar SELinux mediante CVE-2026-43499 futex PI UAF. ghost-hoock ejecutándose en un Samsung A17 -green Tabla de contenidos Qué es esto Cómo funciona Qué se conservó del original Qué se eliminó Compilación Ejecución...

Certain HP LaserJet Enterprise and HP LaserJet Managed Printers – Potential Denial of Service

Certain HP LaserJet Enterprise and HP LaserJet Managed Printers may be potentially vulnerable to a Denial of Service due to race conditions when the Android kernel used by HP Workpath Applications is exploited. Disable Workpath Platform via the EWS or Fleet Management Tool...

ghostlock-pfem10

GhostLock — OPPO Find X5 Pro PFEM10 English · 中文 GhostLock CVE-2026-43499 port for the OPPO Find X5 Pro on ColorOS 16. Reaches a uid=0 child process and a loaded kernelsu.ko; the root process is intercepted. Vulnerability CVE-2026-43499 — futex PI use-after-free. removewaiter clears...

Astra Linux – Vulnerability in Linux 5.10, Linux

In bindervmaclose of binder.c, there is a potential exploit after the free function call due to improper locking. This could lead to a local escalation of privileges without the need for additional execution privileges. User interaction is not required for this exploitation. Product: Android...

Astra Linux – Vulnerability in Linux 5.10

In ioidentitycow of iouring.c, there is a potential way to corrupt memory due to a use after free. This could lead to a local escalation of privileges, as the exploit requires system execution privileges. User interaction is not required for exploitation. Product: Android Versions: Android kernel...

Astra Linux – Vulnerability in Linux 5.10, Linux

Product: Android Versions: Android kernel Android ID: A-224546354 References: Upstream kernel...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the aiopollcompletework function of the aio.c file, there is a possibility of memory corruption due to use after free. This could lead to a local privilege escalation without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android...

Astra Linux – Vulnerability in Linux, Linux 5.10

In socksocknested of sock.c, there is a potential exploit after the free function due to a race condition. This could lead to a local escalation of privileges, as the execution privileges required by the system are involved. User interaction is not required for this exploitation. Product: Android...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the context of dm-verity-target.c, there is a potential way to modify read-only files due to a missing permission check. This could lead to a local escalation of privileges, as System execution privileges are required. User interaction is not necessary for exploiting this vulnerability. Produc...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In binder.c, there is a potential way to corrupt memory due to a use after free. This could lead to a local escalation of privileges without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android Versions: Android kernel Android ID:...