root-my-webos-tv

내 webOS TV 루팅하기 간단한 Python 스크립트로, 취약한 webOS 기기에서 root로 텔넷 서버를 시작합니다. 확인된 TV webOS 4.9.7 - 5.30.40 모델 LG43UM7000PLA webOS 5.5.0 - 04.50.51 모델 OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 모델 OLED48C1PUB webOS 7.3.1-43 mullet-mebin - 03.33.85 모델 OLED55A23LA 설치 1. Python 3을...

lg-webos-kexec

lg-webos-kexec kexec를 통해 루팅된 LG webOS TV에서 커스텀 Linux 커널 부팅 — RAM에서 실행, secure-boot 우회 없음. 상태: 작업 진행 중. 커스텀 커널을 스테이징하여 userspace에 도달할 수 있지만, 아직 사용 가능한 OS로 유지되지는 않습니다. 대상 LG 50UP81009LR webOS 6.5, Realtek RTD2875, armv7l. Homebrew Channel로 루팅됨; 스톡 서명 커널 + webOS userspace는 그대로 유지됩니다. 입증된 것 실기기 검증 완료...

chronomaly-webos

Chronomaly — CVE-2025-38352 на LG webOS Эксплойт ядра для CVE-2025-38352 состояние гонки таймера CPU POSIX / use-after-free, обеспечивающий постоянный root на LG webOS Smart TV с ядром 5.4.268 на ARM64. Проверено на 4 моделях телевизоров с различными версиями прошивки. Ответственно раскрыто в...

The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system allows a hacker to execute arbitrary commands on behalf of the dbus user.

The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a malicious acto...

The vulnerability of the getAudioMetadata method of the com.webos.service.attachedstoragemanager service in the LG WebOS operating system allows a hacker to execute arbitrary commands.

The vulnerability of the getAudioMetadata method in the com.webos.service.attachedstoragemanager service of the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a...

Exploit for OS Command Injection in Lg Webos

Root my webOS TV A simple python script that starts a telnet...

LG webOS 操作系统命令注入漏洞

LG webOS is a Linux kernel-based smart TV operating system from LG Corporation in South Korea. An OS command injection vulnerability exists in LG webOS, which stems from an OS command injection vulnerability in the processAnalyticsReport method of the com.webos.service.cloudupload service. Affect...

LG webOS 安全漏洞

LG webOS is a Linux kernel-based smart TV operating system from LG, a South Korean company. A security vulnerability exists in LG webOS that originates from a command injection vulnerability in the om.webos.service.connectionmanager/tv/setVlasticAddress endpoint. Affected products and...

LG webOS Security Vulnerability

LG webOS is a Linux kernel-based smart TV operating system from South Korea's LG. A security vulnerability exists in LG webOS. An attacker could exploit the vulnerability to read arbitrary files on the server running the application...

LG webOS Security Vulnerability

LG webOS is a Linux kernel-based operating system for Smart TVs from the South Korean company LG. A security vulnerability exists in LG webOS. An attacker could exploit this vulnerability to execute arbitrary code...

SUSE CVE-2020-9759

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files...

DEBIAN-CVE-2020-9759

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files...

UBUNTU-CVE-2020-9759

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files...

LG SuperSign EZ CMS 2.5 Remote Code Execution

Exploit Title: LG SuperSign EZ CMS 2.5 - Remote Code Execution Date: 2018-09-18 Exploit Author: Alejandro Fanjul Vendor Homepage:https://www.lg.com Software Link: https://www.lg.com/ar/software-lg-supersign Version: SuperSignEZ 1.3 Tested on: LG WebOS 3.10 CVE : CVE-2018-17173 1. Description LG...

LG SuperSign CMS File Upload Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. A file upload vulnerability exists in LG SuperSign CMS, which can be exploited by an attacker...

LG webOS Connect - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application LG webOS Connect published at the 'play' market has multiple vulnerabilities...