lg-webos-kexec

lg-webos-kexec Boot a custom Linux kernel on a rooted LG webOS TV via kexec — in RAM, no secure-boot bypass. Status: work-in-progress. A custom kernel can be staged and reaches userspace, but it does not yet stay up as a usable OS. Target LG 50UP81009LR webOS 6.5, Realtek RTD2875, armv7l. Rooted...

chronomaly-webos

Chronomaly — CVE-2025-38352 on LG webOS Kernel exploit for CVE-2025-38352 POSIX CPU timer race condition / use-after-free achieving persistent root on LG webOS Smart TVs running kernel 5.4.268 on ARM64. Verified on 4 TV models across multiple firmware versions. Responsibly disclosed to LG's...

root-my-webos-tv

Root my webOS TV A simple python script that starts a telnet server on vulnerable webOS devices as root. Verified TVs webOS 4.9.7 - 5.30.40 model LG43UM7000PLA webOS 5.5.0 - 04.50.51 model OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 model OLED48C1PUB webOS 7.3.1-43 mullet-mebin -...

LG WebOS Service Arbitrary Command Execution

The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a malicious acto...

LG WebOS getAudioMetadata Arbitrary Command Execution

The vulnerability of the getAudioMetadata method in the com.webos.service.attachedstoragemanager service of the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a...

Exploit for OS Command Injection in Lg Webos

Root my webOS TV A simple python script that starts a telnet...

LG webOS operating system command injection vulnerability

LG webOS is a Linux kernel-based smart TV operating system from LG Corporation in South Korea. An OS command injection vulnerability exists in LG webOS, which stems from an OS command injection vulnerability in the processAnalyticsReport method of the com.webos.service.cloudupload service. Affect...

LG webOS security vulnerabilities

LG webOS is a Linux kernel-based smart TV operating system from LG, a South Korean company. A security vulnerability exists in LG webOS that originates from a command injection vulnerability in the om.webos.service.connectionmanager/tv/setVlasticAddress endpoint. Affected products and...

LG webOS Security Vulnerability

LG webOS is a Linux kernel-based smart TV operating system from South Korea's LG. A security vulnerability exists in LG webOS. An attacker could exploit the vulnerability to read arbitrary files on the server running the application...

LG webOS Security Vulnerability

LG webOS is a Linux kernel-based operating system for Smart TVs from the South Korean company LG. A security vulnerability exists in LG webOS. An attacker could exploit this vulnerability to execute arbitrary code...

SUSE CVE-2020-9759

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files...

DEBIAN-CVE-2020-9759

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files...

UBUNTU-CVE-2020-9759

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files...

LG SuperSign EZ CMS 2.5 Remote Code Execution

Exploit Title: LG SuperSign EZ CMS 2.5 - Remote Code Execution Date: 2018-09-18 Exploit Author: Alejandro Fanjul Vendor Homepage:https://www.lg.com Software Link: https://www.lg.com/ar/software-lg-supersign Version: SuperSignEZ 1.3 Tested on: LG WebOS 3.10 CVE : CVE-2018-17173 1. Description LG...

LG SuperSign CMS File Upload Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. A file upload vulnerability exists in LG SuperSign CMS, which can be exploited by an attacker...

LG webOS Connect - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application LG webOS Connect published at the 'play' market has multiple vulnerabilities...