APatch

APatch Le patchage du noyau Android et du système Android. Une nouvelle solution de root basée sur le noyau pour les appareils Android. APM : Prise en charge de modules similaires à Magisk. KPM : Prise en charge de modules qui vous permettent d'injecter n'importe quel code dans le noyau fournit l...

frameworks_base1_CVE-2021-0315

لا يحتوي هذا المستودع على ملف README...

Root-My-Galaxy-tests

Root My Galaxy Root My Galaxy est un installeur en un clic pour les versions explicitement prises en charge de firmware Samsung. L'application elle-même est tenue séparée des offsets d'appareils, des charges utiles d'exploitation natives et des artefacts de compilation KernelSU. Dernière version ...

square__retrofit_CVE-2018-1000850_2-4-0

Retrofit Client HTTP sécurisé par les types pour Android et Java par Square, Inc. Pour plus d'informations, veuillez consulter le site web. Téléchargement Téléchargez le dernier JAR ou récupérez-le via Maven : com.squareup.retrofit2 retrofit 2.4.0 ou Gradle : implementation...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 FUSIONNÉ AVEC LE DÉPÔT D'ORIGINE : Trouvez-le ici https://github.com/CamsShaft/IonStack-S22 Root complet dans le domaine du noyau avec selinux permissif sur mon SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. NOTES : Je ne vais pas entrer dans les détails n...

CVE-2019-9465

CVE-2019-9465 هذا تطبيق Android تجريبي لـ CVE-2019-9465...

ReparcelBug

Android: إثبات المفهوم لخلل عدم التطابق بين writeToParcel/createFromParcel انظر https://github.com/michalbednarski/IntentsLab/issues/2issuecomment-344365482 لوصف الخلل. يحتوي هذا المستودع على إثبات المفهوم PoC لـ CVE-2017-0806، وهو عدم تطابق في صنف GateKeeperResponse...

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

Google has announced a new security measure that limits access to Android's accessibility services to verified applications classified as Accessibility Tools when Advanced Protection is enabled. With malicious Android applications abusing the API serving as the main conduit for malware and...

CVE-2026-103097

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

CVE-2026-103096

API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

SUSE CVE-2025-8042

Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability was fixed in Firefox 141...

CVE-2026-103097

The GV-Eye Relay Payment API is vulnerable to an information disclosure flaw where an API key is hardcoded and retrievable from the application package. Because Android applications can be reverse-engineered, an unauthorized user can extract these sensitive credentials from the client application...

CVE-2026-103096

The GV-Eye application is vulnerable to a hardcoded API key issue. Because Android applications can be reverse engineered , an attacker can extract sensitive API credentials directly from the application package. This allows unauthorized users to misuse the key for unintended purposes. No specifi...

PT-2026-104062

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An API key is hardcoded and retrievable from the application package. Because Android applications can be reverse engineered, embedding sensitive API credential...

CVE-2026-102670

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it...

CVE-2026-102670

The Joyland AI app is vulnerable because it explicitly permits cleartext HTTP traffic on devices running Android 9+ . This configuration deviates from the platform's default security behavior, which is to block such traffic, potentially exposing sensitive information during transmission. No speci...

CVE-2026-102670 Joyland AI enables HTTP

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it...

EUVD-2026-91029

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it...

CVE-2026-103922

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...