zenfone9-root

zenfone9-root — root temporal en un ASUS Zenfone 9 con bootloader bloqueado Código de investigación y notas para obtener root temporal uid 0 en un ASUS Zenfone 9 AI2202 cuyo bootloader no puede desbloquearse — porque ASUS descontinuó su herramienta de desbloqueo, eliminó el conmutador de desbloqu...

Bootloader_Unlock_Retroid_Pocket_3Plus

Retroid Pocket 3Plus 引导加载程序解锁 用于 RP3+ 的两种引导加载程序解锁方法 使用 CVE-2022-38694 对 Retroid Pocket 3+ 进行引导加载程序解锁 按照本指南操作，即表示您承认了解解锁设备引导加载程序所涉及的风险。请确保在继续之前已备份所有重要数据。 鸣谢：本引导加载程序解锁过程基于以下仓库的工作：TomKing062/CVE-2022-38694unlockbootloader https://github.com/TomKing062/CVE-2022-38694unlockbootloader。 视频证明警告：...

cve-2026-43499-firetv-sheldonp-writeup

CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...

ghostlock-sabrina

GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...

pixel-ksu-root

pixel-ksu-root Rootea un Google Pixel de fábrica con el bootloader bloqueado desde un adb shell sin privilegios, usando una CVE del kernel — sin desbloqueo, sin flasheo, sin ayuda del fabricante. Un fallo del kernel alcanzable desde espacio de usuario proporciona una primitiva de lectura/escritur...

CVE-2026-102370

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

CVE-2026-102370

The TP-Link Kasa EC70 v4 and EC71 v4 devices are vulnerable because the production debug interface is not logically disabled at the firmware or chip level, and the bootloader remains unlocked. While debug traces are physically severed during manufacturing, an attacker with physical access can res...

RootMyVivo

RootMyVivo Root para vivo e iQOO con bootloader bloqueado. Sin desbloqueo, sin flashear boot — instalas el APK, pulsas el botón, esperas. Basado en GhostLock CVE-2026-43499, use-after-free en futex PI + instalación de KernelSU sobre el root temporal. English · 中文 Cómo funciona 1. Instalas el APK ...

BlackLotus-Detection

CVE-2022-21894 Repositorio público para todo lo relacionado con CVE-2022-21894 Página principal https://www.microsoft.com/en-us/security/blog/2023/04/11/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign/ Windows Defender ahora es capaz de eliminar esta amenaza "Posib...

Linux Distros Unpatched Vulnerability : CVE-2026-71974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds...

Linux Distros Unpatched Vulnerability : CVE-2026-71972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the videodisplayrle8bitmap function in drivers/video/videobmp.c. Attackers can suppl...

Linux Distros Unpatched Vulnerability : CVE-2026-74222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails,...

Linux Distros Unpatched Vulnerability : CVE-2026-71971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc3 with CONFIGIPDEFRAG enabled contains an out-of-bounds write vulnerability in the netdefragment function in net/net.c. Remote attackers...

zte-blade-v40-vita-unlock

ZTE Blade V40 Vita bootloader unlock — P606F02 / Unisoc UMS9230 / UFS Linux notes and scripts for unlocking with CVE-2022-38694. Done on my EEAP606F02 running MyOS11.0.138045EEA. Two things decide whether this works and neither is written down anywhere: 1. Never hold POWER while flashing. 10 s of...

SUSE CVE-2026-74222

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...

CVE-2019-5700

CVE-2019-5700 Desafortunadamente, no tengo un nombre moderno e ingenioso para esta vulnerabilidad. Este bug es bastante simple de explotar. De hecho, lo mantuve guardado durante bastante tiempo hasta que me di cuenta de que podría afectar a más dispositivos de los que pensé inicialmente. Alcance:...

meizu21-ghostlock-root

MEIZU 21 GhostLock Root Root en tiempo de ejecución para el MEIZU 21 con bootloader bloqueado, basado en GhostLock / CVE-2026-43499. Este repositorio contiene únicamente los offsets específicos del dispositivo, el payload ARM64 precompilado y los scripts necesarios para reproducir la configuració...

EUVD-2026-89432

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

EUVD-2026-89435

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...

CVE-2026-71974

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...