209 matches found
CVE-2026-43499-OnePlus15
CVE-2026-43499 — OnePlus 15 LPE Educational PoC WARNING: This repository is provided for educational and research purposes only. No pre-built binaries or releases are distributed. You must build everything from source. Android 16 local privilege escalation for OnePlus 15. Fork of...
opace6-cve-2026-64560
OnePlus Ace 6 Temporary Root Tool Obtain temporary root privileges for the current boot session on OnePlus Ace 6 via CVE-2026-64560 Linux kernel POSIX CPU timer UAF. Invalidated after reboot, does not modify system partitions. !WARNING May cause device reboot or data loss. Use only on your own...
ghostlock-selinux-disabler
GhostLock SELinux Disabler Write-1-only extraction of JoinChang/ghostlock-oneplus for CVE-2026-43499. It disables SELinux enforcing on supported, vulnerable OnePlus kernels with a locked bootloader, and does nothing else: no cred overwrite, no root shell, no KernelSU, no bootstrap, and no KASLR...
GhostLock-for-OnePlus15T
GhostLock — OnePlus 15T Kernel exploit targeting locked-bootloader OnePlus 15T devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Modified from the originalGhostLock-for-OnePlus...
ghostlock-oneplus
GhostLock — Locked Bootloader Jailbreak Kernel exploit for Android devices with locked bootloader. Achieves temporary root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...
op13-cve-2026-64560
OnePlus 13 OP5D0DL1 CVE-2026-64560 Device-specific adaptation of the CVE-2026-64560 Android proof of concept for the exact OnePlus 13 PJZ110 builds listed below. It provides temporary root access for the current boot through an ADB-shell-only helper. !WARNING This is experimental kernel exploit...
android_kernel_modules_and_devicetree_oneplus_sm8550
This repository does not have a README...
GhostLock-for-OnePlus
GhostLock — OnePlus Kernel exploit targeting locked-bootloader OnePlus devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Table of Contents Vulnerability Overview Supported Devices...
opace6-cve-2026-64560
OnePlus Ace 6 Temporary Root Tool Obtain temporary root privileges for the current boot session on OnePlus Ace 6 via CVE-2026-64560 Linux kernel POSIX CPU timer UAF vulnerability. Invalidated after reboot, does not modify system partitions. !WARNING May cause device reboot or data loss. Use only ...
android_kernel_oneplus_avicii
OnePlus Nord avicii NeverSettle Kernel Source OnePlus Nord codename:- avicii is the first upper mid-range non-flagship smartphone from OnePlus Technology Co., Ltd. released in the year 2020. The phone is available in 2 variants based on region: AC2001 India & AC2003 Europe & Global Features|...
CVE-2026-70386
Improper neutralization of special elements used in an OS command 'OS command injection' and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally installed Android application, with no permissions declared and no user interaction beyond launching it, can execute arbitra...
CVE-2026-70387
Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 logging HAL exposes a binder method that fork's and calls execl"/vendor/bin/sh", "sh", "-c", cmd, NULL with a caller-supplied command string. The only authorization check is...
CVE-2026-70387
This vulnerability exists in OnePlus OxygenOS on Android due to an Exposed Dangerous Method and Incorrect Authorization in the olc2 logging HAL . The HAL exposes a binder method that forks and executes a shell command (execl) using a caller-supplied string. The system only verifies that the calli...
CVE-2026-70387 OnePlus OxygenOS exposed dangerous method vulnerability
Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 logging HAL exposes a binder method that fork's and calls execl"/vendor/bin/sh", "sh", "-c", cmd, NULL with a caller-supplied command string. The only authorization check is...
EUVD-2026-107155
Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 logging HAL exposes a binder method that fork's and calls execl"/vendor/bin/sh", "sh", "-c", cmd, NULL with a caller-supplied command string. The only authorization check is...
EUVD-2026-107149
Improper neutralization of special elements used in an OS command 'OS command injection' and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally installed Android application, with no permissions declared and no user interaction beyond launching it, can execute arbitra...
PT-2026-120514
Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 logging HAL exposes a binder method that fork's and calls execl"/vendor/bin/sh", "sh", "-c", cmd, NULL with a caller-supplied command string. The only authorization check is...
PT-2026-120508
Improper neutralization of special elements used in an OS command 'OS command injection' and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally installed Android application, with no permissions declared and no user interaction beyond launching it, can execute arbitra...
