14 matches found
omae-wa-cheese-da
omae-wa-cheese-da Image GPU 임의 물리 읽기/쓰기 CVE-2025-21479 - KASLR 누출 - SELinux 허용 모드 - RKP 안전 init-hook 루트 서버 & DEFEX 우회 사용자 정의 바이너리 실행 LDPRELOAD 약 6분 정도 걸립니다.. 인내심을 가지세요. 나중에 최적화하겠습니다. 테스트된 기기 Galaxy Z Flip 5 SM-F731N 펌웨어: F731NKSU5EYD9 Android: 15 보안 패치: 2025-04-01 SoC: Snapdragon 8 Gen 2 SM8550 /...
APatch
APatch Android 커널 및 Android 시스템의 패치. Android 기기를 위한 새로운 커널 기반 루트 솔루션. APM: Magisk와 유사한 모듈 지원. KPM: 커널에 임의의 코드를 주입할 수 있는 모듈 지원 커널 함수 inline-hook 및 syscall-table-hook 제공. APatch는 KernelPatch에 의존합니다. APatch UI와 APModule 소스 코드는 KernelSU에서 파생 및 수정되었습니다. 최신 APK를 다운로드하는 유일한 방법은 Releases 섹션에서 받는 것입니다. 지원...
cowroot
cowroot CVE-2016-5195に基づくユニバーサルAndroidルートツール。今後に注目。 現在のステータス: 32ビットデバイスでのみ動作 getuidとgeteuidの両方がパッチされている場合(つまり、suチェックをバイパスする場合)にのみ、Cyanogenmodデバイスでルートを取得可能。 私は https://gist.github.com/scumjr/17d91f20f73157c722ba2aea702985d2 をAndroid arm32に移植しました。...
CVE-2025-68287 usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3removerequests call paths This patch addresses a race condition caused by unsynchronized execution of multiple call paths invoking dwc3removerequests, leading to premature...
CVE-2025-61482
Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets,...
EUVD-2023-53712
Malicious code in bioql PyPI...
KernelSU Security Vulnerability
kernelsu is a kernel-based solution for obtaining root privileges on Android devices. A security vulnerability exists in KernelSU 0.7.1 and earlier versions, which stems from the fact that the logic in the KernelSU kernel module for obtaining the path to an apk can be bypassed, resulting in any...
Hardcoded credentials
Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it...
CVE-2022-38117 Juiker app - Hard-coded Credentials
Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it...
CVE-2022-38117 Juiker app - Hard-coded Credentials
Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it...
Google Android Device RAMpage Vulnerability
Rowhammer is a hardware reliability issue for the new generation of DRAM chips. rampage is a variant of the Rowhammer attack. Google Android devices suffer from the RAMpage vulnerability. An attacker can gain root privileges on the target device by exploiting the previously publicized Drammer...
CVE-2017-2696
The emergdata driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter t...
How to use Rowhammer vulnerability Root Android phone with Video demo+Exploit source code-the vulnerabilities and early warning-the black bar safety net
! Recently, security research experts through research found a root the Android phone to the new method, i.e., by Rowhammer vulnerability to root Android phone. In addition, the attacker can even use this exploit with presently known Android vulnerabilities Bandroid and Stagefright to the target...
Chainfire's SuHide — Now You Can Hide Your Android Root Status On Per-App Basis
Famous Android developer Chainfire released an experimental hack with a new app, called "Suhide," that allows users to hide the root status of their rooted Android devices on an app-by-app basis. Rooting your Android device can bring a lot of benefits by giving you access to a wide variety of app...