realme-c53-unlock-root

Realme C53 RMX3760 — Bootloader Unlock & Root Toolkit English | Bahasa Indonesia Unlock bootloader and root your Realme C53 and other Realme devices. Supports KernelSU, Magisk, or a hybrid of both. ⚠️ RMX3760 Unisoc T612 : Bootloader unlock + Magisk root are verified working on BOTH Android 15 and...

echidna

Echidna A bootloader unlocker for devices that are exploitable with katana. Supported devices Currently, all Snapdragon 845 devices are unlockable except Samsung Demo...

ubl-itel-s23

解锁引导加载程序 — Itel S23 S665L / Unisoc T606 指引如何使用CVE-2022-38694漏洞在Unisoc T606 UMS9230芯片组上解锁Itel S23 S665L的引导加载程序。 设备信息 属性| 值 ---|--- 品牌| Itel 型号| S665L S23 Android 版本| 12 SDK 31 构建版本| S665L-F065OPRSUVApAqAr-S-GL-20250207V533 处理器| Unisoc T606 UMS9230 CPU| 2x Cortex-A75 + 6x Cortex-A55 ARMv8, 64位 存储|...

cve-2019-2215-markw

面向 markw 的 Bad Binder !CAUTION 你所做的一切风险自负。我对你的设备变砖不承担责任。 使用 Deepseek V4 Flash 改编 适用于最新的国际版 MIUI 10。 概述 主要目标：在最新的官方 MIUI 上获取临时 root Root 可用于刷写自定义 aboot（我就是这么做的），从而无需小米账号即可解锁，还可用于卸载预装应用等其他操作。 使用方法 1. 使用 NDK 交叉编译器为 arm64 编译 bhsu98.c，或使用仓库中的预编译二进制文件 2. 使用 cve-2215-root.sh 运行它 请注意：...

So You Want To Build A Nethunter Kernel

所以你想构建一个 Nethunter 内核 引言 对于大多数想要设置 Nethunter 设备的人来说，最大的障碍是内核要求。除非你的设备已经有预构建（并持续维护）的内核，否则你会被告知需要自己构建一个。关于这一过程已经有大量文档，但根据我的经验，很难知道哪些内容适用于你的情况，哪些不适用。 这个问题因 混蛋 那些撰写标题党指南（如“为任何 Android 设备构建 Nethunter 内核！”）或作出虚假承诺（如“十分钟学会编译 Nethunter 内核！”）的人而更加严重。另一个 2025 年互联网的不幸现实是，许多 白痴 人认为 ChatGPT...

Exploit for Classic Buffer Overflow in Qualcomm Aqt1000_Firmware

BlackBerry KEY2 Research Reverse-engineering, unlock, and Lin...

Exploit for Classic Buffer Overflow in Qualcomm Aqt1000_Firmware

BlackBerry KEY2 Research Reverse-engineering, unlock, and Lin...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: uio: uiodmemgenirq: Fixed an issue where the unlock operation was missed in irq configuration. The commit b74351287d4b “uio: fixed a bug in uiodmemgenirqirqcontrol”. corrected the code so that disableirq was called without...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bcache: Fixup btreecachewait list damage We encountered a kernel crash due to “listadd corruption”. next-prev should be prev 0xffff9c801bc01210, but it was actually fffff9c77b688237c. Next: 0ffffae586d8afe68. crash struct...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: gpio: pca953x: Fixed the race condition in pca953xirqbussyncunlock. Ensure that i2clock is held when setting the interrupt latch and mask in pca953xirqBusSyncUnlock. This prevents race conditions. Another non-probing call site...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix race in lowcomms This patch fixes a race condition between queuework in dlmlowcommscommitmsg and srcureadunlock. queuework may take the final reference to a dlmmsg, causing msg-idx to contain garbage, as indicated by...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vcscreen: The load of the struct vcdata pointer in vcsread was moved to avoid a Use-After-Free UAF condition. After a call to consoleunlock in vcsread, the struct vcdata structure can be freed using vcdeallocate. Therefore, the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nfs: Handling of failures in nfsgetlockcontext during unlock path When memory is insufficient, the allocation of nfslockcontext in nfsgetlockcontext fails and returns -ENOMEM. If we mistakenly treat an nfs4unlockdata structure...

ubl-itel-s23

ブートローダーアンロック — Itel S23 S665L / Unisoc T606 Unisoc T606 UMS9230 チップセット上の CVE-2022-38694 エクスプロイトを使用して Itel S23 S665L のブートローダーをアンロックするためのガイド。 デバイス情報 プロパティ| 値 ---|--- ブランド| Itel モデル| S665L S23 Android| 12 SDK 31 ビルド| S665L-F065OPRSUVApAqAr-S-GL-20250207V533 SoC| Unisoc T606 UMS9230 CPU| 2x Cortex-A7...

MicrocodeDecryptor

免责声明 所有信息仅供教育目的使用。请自行承担遵循这些说明的风险。对于任何个人或组织基于本页信息行事或未行事而产生的任何直接或间接损害或损失，作者及其雇主均不承担责任。 描述 2020 年初，我们发现了 Red Unlock 技术，该技术能够提取 Intel Atom 微码。我们得以研究微码的内部结构，进而研究 x86 指令的实现。此外，我们还还原了微码更新的格式、算法以及用于保护微码的加密密钥（参见 RC4）。 常见问题解答 1. 我可以制作自定义微码更新吗？ 不，你不能。仅支持解密，因为微码具有用于完整性保护的 RSA 签名。 2. 支持哪些类型的 CPU？ 微码更新解密密钥取决于...

cve-2026-43499-firetv-sheldonp-writeup

CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...

CVE-2026-105113

Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock leaks on a nil-map panic path. Any authenticated non-admin member can issue four notification API calls to permanently deadlock the alerting subsystem, then exhaust memory with...

BIT-OPENBAO-2026-55776 OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/ could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. The Transit policy...

CVE-2026-98000

The Linux kernel contains a potential Use-After-Free (UAF) vulnerability in the hwmon subsystem specifically within the pec_store() function. The issue occurs because the code uses guard(mutex)(&hwdev->lock) to manage a mutex. If a chip write operation returns an error other than -EOPNOTSUPP, ...

CVE-2026-98000 hwmon: Fix potential UAF in pec_store

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...