124 matches found
ghostlock-pfem10
GhostLock — PFEM10 Exploit per CVE-2026-43499 IonStack per OPPO Find X5 Pro PFEM10. Kernel 5.10.236-android12-9-o, UAF su futex CMPREQUEUEPI → primitiva di scrittura pi-tree. Usalo a tuo rischio. Aspettati panics / riavvii. Non aggiornare il firmware. Build root@kitploit: ./build.sh richiede...
ColorOS-CVE-2025-10184
Quelle Technische Analyse der Schwachstelle und Lösung Schwachstellenbeschreibung Typ: Datenbank-Injektion 1=1 AND Wirkung: Jede App kann SMS-Daten auslesen. Keine Berechtigung erforderlich, keine Benutzerinteraktion, unbemerkter Zugriff Auswirkung: Alle SMS-Nachrichten und SMS-Verifizierungscode...
oppo-A5-PRO-5G-CVE-2026-43499
Este repositorio nao tem um README...
CVE-2026-43499-pmg110-root
pmg110-root CVE-2026-43499futex PI rtmutexwaiter use-after-free 로컬 권한 상승, OPPO PMG110 / K15 Pro+ — MediaTek MT6991, ColorOS 16용으로 포팅됨. 파일 하나만 푸시하고 LDPRELOAD로 실행합니다: root@kitploit: adb push out/preload-pmg110-16.0.9.400.so /data/local/tmp/preload.so adb shell chmod 644 /data/local/tmp/preload.so a...
CVE-2025-10184_PoC
APK Build for CVE‑2025‑10184 PoC Esta é a build APK do PoC para CVE‑2025‑10184 A vulnerabilidade existe em com..providers.telephony e permite que qualquer aplicativo leia mensagens SMS sem possuir a permissão de leitura de SMS Código-fonte Este código-fonte e mais detalhes podem ser vistos no...
CVE-2026-43499_OPPO-MT6835
CVE-2026-43499 / PoC de GhostLock para OPPO MT6835 Este repositorio conserva una instantánea de investigación compacta para la cadena de explotación estilo GhostLock dirigida a un dispositivo basado en OPPO MT6835. Alcance Árbol de código fuente del exploit en exploit Prueba de concepto mínima en...
oppo-ghostlock
oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux Kernel Privilege Escalation Research Project Overview GhostLock CVE-2026-43499 is a kernel stack UAF vulnerability affecting Linux 2.6.39 through 7.1-rc1, triggered via a FUTEXCMPREQUEUEPI race condition. This project ports the x8664...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 Ghos...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499-pgp110 CVE-2026-43499 futex PI rtmutex...
Exploit for Use After Free in Linux Linux_Kernel
pmg110-root CVE-2026-43499 futex PI rtmutexwaiter use-af...
CVE-2026-22077
OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure...
OPPO O+ Connect 安全漏洞
OPPO O+ Connect is a multi-device connectivity and data collaboration platform developed by OPPO Corporation in China. There is a security vulnerability in OPPO O+ Connect, which stems from the failure to verify the identity of the caller on the pipeline interface, potentially leading to an...
CVE-2026-22077
OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure...
CVE-2026-22077
CVE-2026-22077 affects OPPO Wallet. A trusted-domain validation flaw enables bypass of protected interface access, which can lead to account token hijacking and sensitive information disclosure. The CVSS 4.0 vector indicates local attack vector, high confidentiality impact, and no user interactio...
EUVD-2026-25784
OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure...
CVE-2026-22077 Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet
OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure...
CVE-2026-22077 Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet
OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure...
PT-2026-35363
OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure...
OPPO Wallet 访问控制错误漏洞
OPPO Wallet is a mobile wallet application developed by OPPO Corporation in China. It integrates payment, card and coupon management, as well as digital lifestyle services. OPPO Wallet has a access control vulnerability, which stems from a trust domain verification flaw. This vulnerability could...