CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CVE-2026-43499-A36

CVE-2026-43499-A36 Standalone, device-tested CVE-2026-43499 port for the Canadian Galaxy A36 5G SM-A366W on exact firmware A366WVLS3AYG1, including KernelSU late-load and Root My Galaxy integration. This repository contains the device-specific native side of Root My Galaxy: exact firmware profile...

Root-My-Galaxy-Payloads

Root My Galaxy Payloads 本仓库包含 Root My Galaxy 的设备特定原生端部分： 精确的固件配置文件和偏移量； 应用域 CVE-2026-43499 漏洞利用源码及编译后的 payload； 应用引导辅助程序源码； 经验证的 KernelSU 延迟加载构建产物； 应用程序使用的支持源。 本仓库有意不包含 Android 应用程序源代码。 支持的 payload Payload| 兼容机型| 内核版本| 状态 ---|---|---|--- r9q-G990B2XXSJIZF1| Galaxy S21 FE 5G SM-G990B2| 5.4.289|...

Root-My-Galaxy-Payloads-Testing

Root My Galaxy Payloads This repository contains the device-s...

Malicious code in robase-library-quick-install (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3655afd9220b8d5df96a51d63e383fd4face5be5f31a2da02bcaf379d6625c6b During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

EUVD-2026-16100

The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21. This is due to missing capability checks on the connect and listenfortokens methods of the FormLiftInfusionsoftManager class, both of which are hooked ...

EUVD-2020-26586

Malware in sbrugna...

CVE-2020-5417

Cloud Foundry CAPI Cloud Controller, versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain which is true in the default CF Deployment manifest, were vulnerable to developers maliciously or accidentally claiming certain sensitive routes, potentially...

CVE-2020-5417 Cloud Controller may allow developers to claim sensitive routes

Cloud Foundry CAPI Cloud Controller, versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain which is true in the default CF Deployment manifest, were vulnerable to developers maliciously or accidentally claiming certain sensitive routes, potentially...