12324 matches found
CVE-2026-21107
CVE-2026-21107 is an out-of-bounds write vulnerability in Samsung Notes prior to version 4.4.45.5 , allowing a local attacker with low privileges to write to out-of-bounds memory. The CVSS 4.0 base score is 6.9 (MEDIUM) , with a local attack vector, low complexity, and no user interaction require...
EUVD-2026-74648
Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory...
CVE-2026-21107
Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory...
EUVD-2026-74647
Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings...
CVE-2026-21095
CVE-2026-21095 is a heap-based buffer overflow in the DNG decoder of the libimagecodec.quram.so library on Samsung mobile devices. The vulnerability allows remote attackers to achieve arbitrary code execution by supplying a crafted DNG image file, with the attack vector rated as network-based, lo...
CVE-2026-21090
CVE-2026-21090 is an out-of-bounds write vulnerability in libsaviextractor.so on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . A local attacker with low privileges can write to out-of-bounds memory. NVD assigns a CVSS 3.1 score of 7.8 (HIGH) , while Samsung's CNA ra...
ghostlock-h8q
GhostLock CVE-2026-43499 para Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q La mayor parte de este código se basa en el fork de @polygraphene del original. Se requirieron modificaciones importantes porque el primer paso principal select utilizado en la mayoría de las variantes publicadas del exploit no ...
CVE-2017-16524
CVE-2017-16524 Discovered by Omar Mezrag - 0xFFFFFF Affected Product Samsung Network Video Recorders - Web Viewer 1.0.0.193 on Samsung SRN-1670D Vendor of Product Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Vulnerability type Unrestricted file upload vulnerability Attack Vector...
samsung-bixby-command-execution-cve-2026-21055-improper-component-export
CVE-2026-21055 PoC — Exportación Incorrecta de Componentes de Samsung Bixby Prueba de concepto para CVE-2026-21055 : La exportación incorrecta de componentes de aplicaciones Android en Samsung Bixby anterior a la versión 4.0.70.8 permite a atacantes locales ejecutar comandos arbitrarios con...
CVE-2026-43499
CVE-2026-43499 A modified method to root Android device with locked bootloader via new exploit. Only for Samsung now or smthing like that devices cuz i ported it to N970U1, Fork of https://github.com/localhosts-A/CyberMeowfia...
smt878u-ionstack-poc
smt878u-ionstack-poc 纯C、主机辅助的重新root概念验证，针对 三星 Galaxy Tab S7 SM-T878U / gts7l 与 CVE-2026-43499 （IonStack / GhostLock）。 运行时链仅使用原生 C/ELF 组件。不需要在 Android 目标上安装 Python、Java、DEX、appprocess 或 JVM。ADB 用于部署和验证。 支持的配置文件 此 POC 在所有配置文件匹配之前故意关闭失败： root@kitploit: device: gts7l Android: 13 / SDK 33 fingerprint:...
CVE-2026-21018
SveService: Desbordamiento de Búfer Samsung SMR May 2026 SVE-2026-0478CVE-2026-21018 Versiones afectadas: Android 14, 15, 16 Estado de divulgación: Divulgación privada Una escritura fuera de los límites en SveService anterior a SMR May-2026 Release 1 permite a atacantes locales privilegiados...
CVE-2017-14262
SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd First, get the MD5 hash password of the 'admin' account. Send: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows NT 6.3...
Root-My-Galaxy
Root My Galaxy Root My Galaxy 是一个适用于明确受支持的 Samsung 型号与内核组合的一键安装工具。应用程序本身与设备偏移量、原生利用载荷以及 KernelSU 构建产物保持分离。 最新版本 设备源数据与原生载荷由 Root-My-Galaxy-Payloads 维护。 应用程序 该应用会选择型号列表和内核三部分版本号与手机匹配的载荷。例如，6.6.98-android15-8-... 与 6.6.98 匹配。高级模式会同时根据这两个值过滤目录，并允许手动选择，同时显示型号和内核版本警告。 构建 要求： Android Studio JBR 21...
CVE-2026-21045_and_CVE-2026-21048
CVE-2026-21045 y CVE-2026-21048 — PoC de escritura OOB en libimagecodec.quram.so de Samsung Resumen Este repositorio contiene archivos conceptuales de Prueba de Concepto PoC que demuestran vulnerabilidades de escritura fuera de límites OOB en la biblioteca de códec de imagen Quramsoft...
Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. id: CVE-2024-7399 info: name: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution author:...
CVE-2026-86315
A flaw was found in Samsung Open Source Escargot. This out-of-bounds write vulnerability, caused by numeric truncation, allows an attacker to corrupt native memory. By supplying specially crafted JavaScript for execution, a remote attacker can trigger this flaw, leading to the host process crashi...
CVE-2026-86315
Samsung Open Source Escargot (a JavaScript engine) on Linux x86-64 is affected by an out-of-bounds write caused by numeric truncation. A crafted class definition whose instance initialization entry count exceeds UINT16_MAX allows an attacker who can supply JavaScript for execution to corrupt nati...
Root-My-Galaxy
Root My Galaxy Root My Galaxy es un instalador de un solo clic para combinaciones de modelos y kernels de Samsung explícitamente compatibles. La aplicación en sí se mantiene separada de los offsets de dispositivos, los payloads de exploits nativos y los artefactos de compilación de KernelSU. Últi...
