LeakValue

Android 13 引入了许多增强功能，以强化 Parcel 序列化机制 这是 Android 安全与隐私团队关于所做改进的演示 这很棒，绝对能消除许多漏洞或使其无法利用。同时，他们描述了如何攻破我之前的利用程序，该程序允许应用将代码加载到其他应用（包括系统应用）中 但现在我带着一个新利用程序回来了，它能以不同的方式实现同样的效果。它依赖于上述 Parcel 强化期间引入的以下漏洞： CVE-2022-20452 公告, 补丁 CVE-2022-20474 公告, 补丁 !应用显示文本的截图。标题：LeakValue。正文：创建了 6 个 ValueLeaker。正在锁定...

packages_apps_ManagedProvisioning_CVE-2021-39692

このリポジトリには README がありません。...

universal-android-debloater-next-generation

通用安卓去臃肿工具 下一代 !warning 免责声明 ：使用风险自负。我们不对您的设备可能发生的任何问题负责。 这是 UAD 项目 的一个独立分支。该项目旨在通过移除不必要且晦涩的系统应用来提升隐私和效率（能耗、速度、内存）。 这还可以通过减少攻击面来提升安全性。更多详情请阅读维基。 文档 关于 UAD-ng（及相关内容）的一切都可以在维基上找到，例如： 快速上手 本应用的功能 使用指南 推荐的安卓应用替代品 如何通过从源码构建获取最新版本 OEM 厂商的一些奇怪行为 推荐的 APK 分析应用 隐私 UAD-ng 不会收集或传输任何用户数据。唯一的外部连接是向 GitHub 发送的 G...

test-poc

CVE-2021-0928, writeToParcel/createFromParcel serialization...

CVE-2019-25347 thesystem App 1.0 - 'username' SQL Injection

thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts...

MAL-2026-849 Malicious code in jsonconfig-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 883897a307b53ac17e981eac46b8d6f8c31d88fc2628c6d57c5f7f191ed84b81 During installation, package installs a script that listens for remote commands and executes them. The script is also added to autostart configuration and...

Malicious code in requests-auth-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 03bb4c04410c4e3c58d7292eb47f8f76a2fbe5265abea29826ac910e890350d0 During installation, package installs a script that listens for remote commands and executes them. The script is also added to autostart configuration and...

Malicious code in devtools-webhook-cicd-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 807557cb6ac51aece00eeb28f55b89815176c95172780dcdded46b667f843771 During installation, package installs a script that listens for remote commands and executes them. The script is also added to autostart configuration and...

EUVD-2025-206356

A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application d9sysdef.exe. Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM...

CVE-2021-0691

In the SELinux policy configured in systemapp.te, there is a possible way for systemapp to gain code execution in other processes due to an overly-permissive SELinux policy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed fo...

EUVD-2011-3522

Malware in sbrugna...

EUVD-2021-26326

Malware in sbrugna...

EUVD-2020-1979

Malware in sbrugna...

EUVD-2023-48480

Malicious code in bioql PyPI...

EUVD-2023-25526

Malicious code in bioql PyPI...

CVE-2025-48558

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

CVE-2025-48558

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

CVE-2025-48558

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

CVE-2025-48558

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

CVE-2025-48558

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...