rtx-cve-2023-45779

本仓库按原样（AS IS）提供，用于配套Meta Red Team X 漏洞披露。它不是 Meta 的官方项目，也不会 像官方项目一样获得支持。 一组脚本和制品，用于演示检测和利用搭载以 AOSP 测试密钥签名的 APEXes 的 Android 设备。有关该问题的完整信息， 请参阅我们的博客文章“缺失的签名：多个品牌如何忘记保护 Android 的 关键组件”。 文件 apex-checker/ ：一组 Bash 脚本，用于保存已知测试密钥的摘要， 并批量检查 APEX 是否使用了这些密钥的签名。 apex-forger/ ：围绕 AOSP 的 apexer 和 deapexer...

HP Poly Edge E Series 安全漏洞

The HP Poly Edge E Series is a series of IP desktop phones produced by the American company HP. The HP Poly Edge E Series contains security vulnerabilities. These vulnerabilities stem from the inclusion of test keys and certificates within the devices, which may allow attackers to extract these...

Malicious code in asap-test-keys (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1775 Malicious code in asap-test-keys (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2023-7530 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 2023-12-05 security patch Description: The issue is related to the APEX module framework of AOSP, where improperly used crypto could lead to a malicious update of platform components. This could result in local...