APatch

APatch The patching of Android kernel and Android system. A new kernel-based root solution for Android devices. APM: Support for modules similar to Magisk. KPM: Support for modules that allow you to inject any code into the kernel Provides kernel function inline-hook and syscall-table-hook. APatc...

cowroot

cowroot Universal Android root tool based on CVE-2016-5195. Watch this space. Current Status: Only works on 32-bit devices Only able to get root on Cyanogenmod devices, when both getuid and geteuid are patched i.e. bypasses su checks. I've ported...

omae-wa-cheese-da

omae-wa-cheese-da Image L/E física arbitraria de GPU CVE-2025-21479 - filtración de KASLR - SELinux permisivo - servidor root de gancho de inicio seguro de RKP & bypass de DEFEX ejecución de binario personalizado LDPRELOAD Tarda unos 6 minutos.. Ten paciencia. Lo optimizaré después. Dispositivos...

CVE-2025-68287 usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3removerequests call paths This patch addresses a race condition caused by unsynchronized execution of multiple call paths invoking dwc3removerequests, leading to premature...

CVE-2025-61482

Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets,...

EUVD-2023-53712

Malicious code in bioql PyPI...

KernelSU Security Vulnerability

kernelsu is a kernel-based solution for obtaining root privileges on Android devices. A security vulnerability exists in KernelSU 0.7.1 and earlier versions, which stems from the fact that the logic in the KernelSU kernel module for obtaining the path to an apk can be bypassed, resulting in any...

Hardcoded credentials

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it...

CVE-2022-38117 Juiker app - Hard-coded Credentials

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it...

CVE-2022-38117 Juiker app - Hard-coded Credentials

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it...

PT-2022-24211

Name of the Vulnerable Software and Affected Versions Juiker app affected versions not specified Description The issue concerns a hard-coded AES key in the source code of the Juiker app. This allows a physical attacker, who has gained Android root privilege, to use the AES key and decrypt users'...

PT-2022-19242

Name of the Vulnerable Software and Affected Versions StrongBox affected versions not specified Description The issue arises when the Trusted Execution Environment TEE is compromised, allowing attackers to exploit improper state maintenance in StrongBox. This enables them to change the Android Ro...

Google Android Device RAMpage Vulnerability

Rowhammer is a hardware reliability issue for the new generation of DRAM chips. rampage is a variant of the Rowhammer attack. Google Android devices suffer from the RAMpage vulnerability. An attacker can gain root privileges on the target device by exploiting the previously publicized Drammer...

CVE-2017-2696

The emergdata driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter t...

How to use Rowhammer vulnerability Root Android phone with Video demo+Exploit source code-the vulnerabilities and early warning-the black bar safety net

! Recently, security research experts through research found a root the Android phone to the new method, i.e., by Rowhammer vulnerability to root Android phone. In addition, the attacker can even use this exploit with presently known Android vulnerabilities Bandroid and Stagefright to the target...

Chainfire's SuHide — Now You Can Hide Your Android Root Status On Per-App Basis

Famous Android developer Chainfire released an experimental hack with a new app, called "Suhide," that allows users to hide the root status of their rooted Android devices on an app-by-app basis. Rooting your Android device can bring a lot of benefits by giving you access to a wide variety of app...