CVE-2019-2215-HuaweiP20Lite

将 CVE-2019-2215 bad binder 移植到华为 P20lite Android 8.0.0 描述 该项目是 CVE-2019-2215 在华为 P20lite 上的漏洞利用，系统版本为 Android 8.0.0。内核版本为 4.4.23。 这一漏洞很可能是该主题中记录最详尽的一个（教程、在实体手机上的实际移植），并且我有一部存在漏洞的手机，因此这是学习 Android 内核漏洞利用的良好起点。 警告：该漏洞利用会将所有 SELinux 类型设为宽松模式，因此可能允许其他应用绕过 SELinux。 安装 首先克隆仓库： root@kitploit: git clone...

TempRoot-Huawei

TempRoot-Huawei 通过 CVE-2019-2215 对华为加固内核实现临时 root 此代码为 P20 Pro CLT-AL00 编写，内核偏移取自固件，其构建指纹为：'HUAWEI/CLT-AL00/HWCLT:8.1.0/HUAWEICLT-AL00/176C00:user/release-keys' 背景 与三星的 KNOX 类似，华为加入了大量机制来防止黑客利用漏洞，并提升“安全性”。 启用了 DEBUGSPINLOCK，为自旋锁spinlock增加了额外检查 task struct 中的内核栈指针已使用随机偏移 ktioffset 进行混淆（类似 KASLR）...

EUVD-2018-19668

Malware in sbrugna...

EUVD-2020-29902

Malware in sbrugna...

EUVD-2019-14911

Malware in sbrugna...

EUVD-2018-19699

Malware in sbrugna...

EUVD-2019-14816

Malware in sbrugna...

EUVD-2019-14888

Malware in sbrugna...

CVE-2020-9073

Huawei P20 smartphones with versions earlier than 10.0.0.156C00E156R1P4 have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the...

CVE-2019-5211

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...

CVE-2020-9073

Huawei P20 smartphones with versions earlier than 10.0.0.156C00E156R1P4 have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the...

CVE-2020-9073

Huawei P20 smartphones with versions earlier than 10.0.0.156C00E156R1P4 have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the...

Authentication flaw

Huawei P20 smartphones with versions earlier than 10.0.0.156C00E156R1P4 have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the...

CVE-2020-9073

Summary: CVE-2020-9073 affects Huawei P20 smartphones with versions earlier than 10.0.0.156 (C00E156R1P4). The issue is an improper authentication vulnerability caused by insufficient validation of the user’s identity when performing certain operations. Exploitation requires physical access to th...

CVE-2020-9073

Huawei P20 smartphones with versions earlier than 10.0.0.156C00E156R1P4 have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the...

Huawei P20 Improper Authentication Vulnerability

Huawei P20 is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei P20 10.0.0.156 C00E156R1P4, which stems from the program not adequately verifying the user's identity. An attacker can exploit the vulnerability to bypass the restrictions...

The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system allows a intruder to disclose protected information.

The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information throug...

The vulnerability of Huawei P20’s microprogramming software arises from insufficient validation of input data, allowing a hacker to delete arbitrary files on the vulnerable device.

The vulnerability of Huawei P20’s microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to delete any files on the vulnerable device...

CVE-2019-5211

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...

CVE-2019-5211

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...