android

Google Android – IMemory Native Interface is Insecure for IPC Use

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=706

Google Android – IOMX ‘getConfig’/’getParameter’ Information Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=711

Google Android – ‘ih264d_process_intra_mb’ Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=523

Google Android 5.0.1 – Metaphor Stagefright (ASLR Bypass)

Source: https://github.com/NorthBit/Metaphor

Android One – mt_wifi IOCTL_GET_STRUCT Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=678

Qualcomm Adreno GPU MSM Driver – perfcounter Query Heap Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=734

Samsung Galaxy S6 – ‘android.media.process’ ‘MdConvertLine’ Face Recognition Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=616

Samsung Galaxy S6 – libQjpeg je_free Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=617

Google Android – ‘sensord’ Local Privilege Escalation

#include

Google Android ADB Debug Server – Remote Payload Execution (Metasploit)

##

Samsung – libQjpeg Image Decoding Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=495

Samsung Galaxy S6 Samsung Gallery – Bitmap Decoding Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=497

Samsung Galaxy S6 – libQjpeg DoIntegralUpsample Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=498

Samsung Galaxy S6 – android.media.process Face Recognition Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=499

Samsung Galaxy S6 Samsung Gallery – GIF Parsing Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=500

Samsung – SecEmailComposer QUICK_REPLY_BACKGROUND Permissions

Source: https://code.google.com/p/google-security-research/issues/detail?id=490

Samsung fimg2d – FIMG2D_BITBLT_BLIT ioctl Concurrency Flaw

Source: https://code.google.com/p/google-security-research/issues/detail?id=492

Samsung – ‘seiren’ Kernel Driver Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=491

Samsung – ‘m2m1shot’ Kernel Driver Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=493

Samsung SecEmailUI – Script Injection

# Source: https://code.google.com/p/google-security-research/issues/detail?id=494

Google Android – libstagefright Integer Overflow Remote Code Execution

#!/usr/bin/python2

Google Android – ‘Stagefright’ Remote Code Execution

#!/usr/bin/env python

AirDroid – Arbitrary File Upload

#/IN THE NAME OF GOD

Android WiFi-Direct – Denial of Service

Core Security - Corelabs Advisory

Nexus 5 Android 5.0 – Local Privilege Escalation

create an Android.mk as follow:

WhatsApp 2.11.476 (Android) – Remote Reboot/Crash App (Denial of Service)

# Mirror: http://pastebin.com/raw.php?i=CZChGAnG

Android WAPPushManager – SQL Injection

INTRODUCTION

Samsung Galaxy KNOX Android Browser – Remote Code Execution (Metasploit)

##

Boat Browser 8.0/8.0.1 – Remote Code Execution

CreatMalTxt POC - WebView

Adobe Reader for Android 11.1.3 – Arbitrary JavaScript Execution

------------------------------------------------------------------------

GoToMeeting for Android – Multiple Local Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/65123/info

Google Android – Signature Verification Security Bypass

source: https://www.securityfocus.com/bid/63547/info

Android Zygote – Socket and Fork Bomb (Denial of Service)

################# BootReceiver.java ##################

Google Android – ‘APK’ code Remote Security Bypass

#source: https://www.securityfocus.com/bid/60952/info

TaxiMonger for Android – ‘name’ HTML Injection

source: https://www.securityfocus.com/bid/60566/info

Facebook for Android – ‘LoginActivity’ Information Disclosure

source: https://www.securityfocus.com/bid/57173/info

Google Android 4.2 Browser and WebView – ‘addJavascriptInterface’ Code Execution (Metasploit)

##

Google Android Kernel 2.6 – Local Denial of Service Crash (PoC)

# Exploit Title: Android Kernel 2.6 Local DoS

Google Chrome for Android – Same-origin Policy Bypass Local Symlink

source: https://www.securityfocus.com/bid/55523/info

Google Chrome for Android – Local Application Handling Cookie Theft

source: https://www.securityfocus.com/bid/55523/info

Google Chrome for Android – Multiple ‘file::’ URL Handler Local Downloaded Content Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55523/info

Google Chrome for Android – com.android.browser.application_id Intent Extra Data Cross-Site Scripting

source: https://www.securityfocus.com/bid/55523/info

Android FTPServer 1.9.0 – Remote Denial of Service

# Exploit Title: Android FTPServer 1.9.0 Remote DoS

Webkit Normalize Bug – Android 2.2

LOADING...

Google Android – ‘content://’ URI Multiple Information Disclosure Vulnerabilities

Google Android 2.3.5 – PowerVR SGX Driver Information Disclosure

// source: https://www.securityfocus.com/bid/57900/info

Google Android 2.0/2.1/2.1.1 – WebKit Use-After-Free

Google Android 1.x/2.x – Local Privilege Escalation

#include

Android 1.x/2.x HTC Wildfire – Local Privilege Escalation

#include

Google Android 2.0/2.1 – Use-After-Free Remote Code Execution on Webkit

# Exploit Title: Android 2.0/2.1 Use-After-Free Remote Code Execution on