CVE-2026-49881, using insecure context creation in Android 17's Telecom service to execute arbitrary code as UID 1000 system_server from an unprivileged app
☆112Sep 9, 2026Updated 2 months ago
Alternatives and similar repositories for TLPE
Users that are interested in TLPE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_…☆84Oct 8, 2025Updated last year
- ZXIC/Sanechips BootROM exploit☆16May 7, 2026Updated 6 months ago
- Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881…☆548Sep 9, 2026Updated 2 months ago
- As system user the provided code allows reading from and writing to the steady and param partitions in most flagship Samsung devices up t…☆13Aug 8, 2026Updated 3 months ago
- Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982☆55Jun 1, 2026Updated 5 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Linux Binder binder_free_transaction() process-lifetime use-after-free (CVE-2026-64468): unprivileged PoC + x86_64 LPE. Authorised securi…☆29Aug 20, 2026Updated 2 months ago
- CVE-2026-0091, play with an issue in android window management to perform arbitrary code execution in Launcher process from adb☆41Aug 31, 2026Updated 2 months ago
- PoC for CVE-2024-23700, Android slient privilege escalation allow to read/write contacts, SMS, calendar, call log and voicemail, make out…☆77Jan 26, 2026Updated 9 months ago
- Writeup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted A…☆110Oct 8, 2025Updated last year
- Writeup and exploit for CVE-2024-49746: Android's Parcel::continueWrite closing File Descriptors that are later used☆47Oct 8, 2025Updated last year
- PDoS using race condition in ActivityManager's CoreSettingsObserver☆11May 16, 2023Updated 3 years ago
- PoC of CVE-2023-40130☆14Sep 1, 2025Updated last year
- Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.☆312Jan 5, 2026Updated 10 months ago
- Preloader exploit for some MediaTek based Amazon devices☆33Oct 23, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- One-touch, universal root for Samsung devices as uinit:s0☆65Sep 19, 2026Updated last month
- PoC for CVE-2021-39749, allowing starting arbitrary Activity on Android 12L Beta☆38Apr 16, 2022Updated 4 years ago
- This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 …☆120Jan 5, 2026Updated 10 months ago
- RunAsAnyone: PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege es…☆183Sep 30, 2024Updated 2 years ago
- 176 vulnerabilities in Samsung preinstalled Android apps☆366Jul 15, 2026Updated 3 months ago
- Notes on RSA signature length handling in the Qualcomm PBL secure boot verifier.☆21Oct 5, 2026Updated last month
- notes about reverse engineering marvell HDD SoCs and booting Linux on them☆14Aug 18, 2026Updated 2 months ago
- Unlocking Bootloader via noavb exploit (still in progress)☆54May 19, 2026Updated 5 months ago
- Proof of concept app for Android permanent denial-of-service vulnerability CVE-2020-0443☆18Mar 15, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Exploit code for CVE-2021-1961☆121Sep 7, 2022Updated 4 years ago
- A lightweight tool to extract Anti-Rollback (ARB) version from Qualcomm ELF firmware images (e.g., xbl_config.img). Also supports basic M…☆20Jun 27, 2026Updated 4 months ago
- PoC associated to the talk "Attacking Samsung Galaxy A* Boot Chain" (https://www.blackhat.com/us-24/briefings/schedule/#attacking-samsung…☆95Sep 9, 2024Updated 2 years ago
- CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k☆262Jul 15, 2026Updated 3 months ago
- PoC of CVE-2022-20474☆21Feb 3, 2025Updated last year
- Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel …☆355Apr 12, 2023Updated 3 years ago
- Use CVE-2026-43499 to disable SELinux on Android☆17Jul 18, 2026Updated 3 months ago
- Proof-of-concept for CVE-2025-48593☆57Dec 2, 2025Updated 11 months ago
- Galaxy S26 port of GhostLock (CVE-2026-43499) exploit☆24Sep 6, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Files related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro.☆35Oct 14, 2024Updated 2 years ago
- MiniJVM is a stupidly simple JVM written in C for reverse-engineering purposes.☆21Jun 27, 2026Updated 4 months ago
- ☆93Aug 14, 2026Updated 2 months ago
- Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".☆771Sep 11, 2025Updated last year
- Android 14 kernel exploit for Pixel7/8 Pro☆564Apr 23, 2024Updated 2 years ago
- Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)☆301May 27, 2023Updated 3 years ago
- Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mit…☆103Updated this week
Are these results useful?