CVE-2014-4322_adaptation

CVE-2014-4322adaptation 只是尝试适配 Note 4，我并不清楚自己在做什么。 目前有一种通过 ADB 写入系统的方法（CVE-2014-7951 和 CVE-2014-7953）。 zxz0O0 已确认写入系统有效。 我们需要的是获取系统 UID 以执行 CVE-2014-4322。 我目前正在研究 CVE-2014-4322 的工作原理，看看能否将其封装在 APK 中（giefroot 可能已经实现了这一点）。 然后再检查安装 SuperUser 的使用条款。 如果有人碰巧看到这个，我完全是个新手，完全不知道自己在做什么。...

EUVD-2021-12381

Malware in sbrugna...

EUVD-2021-12346

Malware in sbrugna...

EUVD-2023-25624

Malicious code in bioql PyPI...

The vulnerability of the isSystemUid() function in the AccountManagerService.java module of Android operating systems allows a hacker to disclose protected information.

The vulnerability of the isSystemUid function in the AccountManagerService.java module of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow attackers to disclose protected information...

CVE-2025-48545

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48545

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48545

The AccountManagerService.java module in Android is vulnerable to a confused deputy flaw within the isSystemUid function. This flaw allows a local application to bypass access control mechanisms and access privileged APIs , potentially leading to local privilege escalation or the disclosure of pr...

CVE-2025-48545

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48545

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-8192

There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Inten...

CVE-2025-8192: Time-of-check Time-of-use (TOCTOU) Race Condition

There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Inten...

Exploit for Deserialization of Untrusted Data in Google Android

Exploration of CVE-2024-31317 CVE-2024-31317 provides unpriviledged access to any uid and SELinux scope available to proper Android apps. This provides access to uid 1000 system and uid 2000 shell, and can be triggered entirely from an unpriviledged app, allowing for persistence of any...

CVE-2021-25393

Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data...

CVE-2021-25485

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket...

CVE-2022-39857

Improper access control vulnerability in CameraTestActivity in FactoryCameraFB prior to version 3.5.51 allows attackers to access broadcasting Intent as system uid privilege...

CVE-2024-49737

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2024-49737

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2024-49737

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2024-49737: Incorrect Default Permissions

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...