CVE-2021-1961

Exploit-Code für CVE-2021-1961. Der vollständige Beitrag ist auf meinem Blog verfügbar. Um den Exploit zu bauen, führen Sie ndk-build des Android NDK aus. Um den Exploit auszuführen, benötigen Sie Zugriff auf /dev/qseecom, was bedeutet, dass Sie die richtige Benutzer-/Gruppenkombination und den...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Este programa é um exploit para cve-2018-8453. A vulnerabilidade em si existe no win7 e versões posteriores Mas note: só pode ser explorado no win8.1 e versões posteriores! Portanto, este EXP só pode ser usado para WIN8.1 e versões posteriores. Plataforma de...

oob_entry

oobentry: Pesquisa autorizada de exploração do kernel iOS para acesso tfp0 Visite os lançamentos: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip Um espaço tranquilo e criterioso para pesquisadores documentarem, discutirem e compartilharem conhecimento sobre...

kfd

Aviso rápido: não tenho a intenção de adicionar offsets para outros dispositivos e versões do iOS. kfd kfd, abreviação de kernel file descriptor, é um projeto para ler e escrever memória do kernel em dispositivos Apple. Ele aproveita diversas vulnerabilidades que podem ser exploradas para obter...

EchoDrv

EchoDrv ECHOAC एंटी-चीट ड्राइवर echodriver.sys में कर्नेल रीड/राइट भेद्यता का दुरुपयोग करने की अनुमति देने वाला टूल। उपयोग उदाहरण प्रायोजक मैं POST Luxembourg में कार्यरत हूँ और उनका आभारी हूँ कि उन्होंने इस प्रोजेक्ट को विकसित करने और बनाए रखने के लिए मुझे कुछ समय आवंटित किया! POST वेबसाइट पर...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp यह प्रोग्राम cve-2018-8453 का एक्सप्लॉइट है। विकास/परीक्षण प्लेटफ़ॉर्म: x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 नोट: कर्नेल को पढ़ने/लिखने के लिए Palette का उपयोग करें गंभीर घोषणा: यह उपकरण केवल तकनीकी अनुसंधान और सीखने के लिए है। अवैध उपयोग से होने...

cve-2019-2215

CVE-2019-2215 Temproot لهاتف Pixel 2 و Pixel 2 XL عبر CVE-2019-2215 بناءً على إثبات المفهوم بواسطة Jann Horn & Maddie Stone من Google Project Zero نظرة عامة عرض توضيحي لهجوم تصعيد الصلاحيات باستخدام القراءة/الكتابة على ذاكرة النواة فقط، مما يؤدي إلى الحصول على شل مؤقت بصلاحيات الجذر. يعمل على أجه...

cve-2019-2215_SH-M08

यह AQUOS sense 2 SH-M08 के लिए एक पोर्ट है, जो एक प्रूफ-ऑफ-कॉन्सेप्ट कोड है जो अक्टूबर 2019 से पहले के सुरक्षा पैच वाले Android उपकरणों पर रूट एक्सेस प्राप्त करता है। कार्य वातावरण निम्नलिखित OS संस्करणों पर कार्य करने की पुष्टि की गई है। अन्य संस्करणों या अन्य उपकरणों पर चलाने के लिए, कृपया...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 Prova de Conceito de Escalação de Privilégio Local Visão Geral Este projeto é uma prova de conceito educacional para uma vulnerabilidade de Escalação de Privilégio Local LPE no driver iqvw64e.sys SHA256:...

ghostlock-s26

GhostLock CVE-2026-43499 لهاتف Galaxy S26 تم نقل CVE-2026-43499 إلى سلسلة سامسونج Galaxy S26 — أندرويد 16 / GKI 6.12. ملف ثنائي واحد، ثلاثة أسطر نواة، مطابقة ديناميكية للمعلمات في وقت التشغيل: يغطي نظريًا سلسلة S26 بالكامل دون تجميع لكل إصدار. معظم جهود نقل GhostLock تستهدف جهازًا واحدًا أو...

huawei-p10-cve-2017-8890-unlock

Pesquisa sobre desbloqueio do bootloader do Huawei P10 CVE-2017-8890 Este repositório documenta um projeto de pesquisa autorizado pelo proprietário que portou a CVE-2017-8890 para um firmware do Huawei P10, converteu o use-after-free do kernel em leitura/gravação arbitrária do kernel e root...

weightBufs

WeightBufs: WeightBufs é um exploit de leitura/escrita r/w no kernel para todos os dispositivos Apple com suporte a Neural Engine. Bugs e exploit por @simo36; você pode ler meus slides de apresentação no POC para mais detalhes sobre as vulnerabilidades e as técnicas de exploração. O exploit não...

ZeroHVCI

ZeroHVCI - Contornando o HVCI sem privilégios de administrador ou driver de kernel O ZeroHVCI realiza leituras/gravações/chamadas de funções arbitrárias no kernel em ambientes protegidos pela Hypervisor-Protected Code Integrity HVCI sem exigir permissões de administrador ou drivers de kernel...

Linux Distros Unpatched Vulnerability : CVE-2026-46183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree with damonsysfslock damonsysfsquotgoal-path can b...

A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave

Posted by Seth Jenkins With the advent of a potential Dolby Unified Decoder RCE exploit, it seemed prudent to see what kind of Linux kernel drivers might be accessible from the resulting userland context, the mediacodec context. As per the AOSP documentation, the mediacodec SELinux context is...

EUVD-2024-20815

Malicious code in bioql PyPI...

EUVD-2022-35910

Malicious code in bioql PyPI...

Exploit for Use After Free in Google Android

This is a PoC Proof of Concept application demonstrating the power of an Android kernel arbitrary R/W, targeting CVE-2019-2215. The application is designed to exploit this vulnerability, which allows for arbitrary read and write access to the kernel. The exploit is implemented in the native/poc.c...

CVE-2024-23296

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write...

CVE-2024-23225

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write...