289 matches found
pwnage24mtk
pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. Patched. CVE-2023-20696 CVE-2025-20730 There are some issues about architecture detect.Need to be fixed when I am free.Or anyone can make a pull request. This is a vibe-coded...
Super-UEFIinSecureBoot-Disk
Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk is a proof-of-concept not actively maintained or enhanced bootable image with GRUB2 bootloader designed to be used as a base for recovery USB flash drives. Key feature: disk is fully functional with UEFI Secure Boot mode activated. It can...
EDR-Preloader
EDR-Preloader An EDR bypass that prevent EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer For details, see: malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html...
mtkclient
Langue : 🇺🇸 🇨🇳 MTKClient Un outil mtk pour l'exploitation, la lecture/écriture de la mémoire flash et d'autres trucs fous. Sous Windows, vous devez installer le port mtk standard et le pilote usbdk voir les instructions ci-dessous. Sous Linux, un noyau patché n'est nécessaire que lors de...
libprocesshider
libprocesshider Скрытие процесса в Linux с помощью ld preloader. Полное руководство доступно по адресу https://sysdigcloud.com/hiding-linux-processes-for-fun-and-profit/ Кратко: скомпилируйте библиотеку: gianluca@sid:/libprocesshider$ make gcc -Wall -fPIC -shared -o libprocesshider.so...
cve-2026-43499-firetv-sheldonp-writeup
CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...
pwnage24mtk
pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. May be patched at June Disclaimer This project is only used for researching. Make sure you get authorized before you use it. Not allowed for illegal use. It is not allowed to...
mediatek-mt8365-preloader-exploit
Analysis of Preloader Vulnerabilities in MediaTek MT8365 MT81...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
A logic error in the preloader of MediaTek chipsets (affecting approximately 875 million Android devices) allows for the reading of device unique identifiers. An attacker with physical access can exploit this via USB in under 45 seconds, even when the device is powered off, to bypass lock screens...
EUVD-2026-9160
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2026-20435
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
PT-2026-22560
Name of the Vulnerable Software and Affected Versions Samsung Preloader affected versions not specified MediaTek chipsets affected versions not specified Description A logic error in the preloader allows the reading of device unique identifiers, leading to local information disclosure. This flaw...
CVE-2026-20435: Insufficiently Protected Credentials
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...
CVE-2025-23682
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bhuvnesh Gupta Preloader Quotes preloader-quotes allows Reflected XSS.This issue affects Preloader Quotes: from n/a through = 1.0.0...