目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1000

100.0%
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2024-0044 基础信息
漏洞信息

对漏洞内容有疑问?看看神龙的深度分析是否有帮助!
查看神龙十问 ↗

尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
Google Android 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Google Android是美国谷歌(Google)公司的一套以Linux为基础的开源操作系统。 Google Android 存在安全漏洞,该漏洞源于 PackageInstallerService.java 文件的 createSessionInternal 方法存在输入验证不当,可能会以任何应用程序的方式运行。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
厂商产品影响版本CPE订阅
GoogleAndroid 15 -
二、漏洞 CVE-2024-0044 的公开POC
#POC 描述源链接神龙链接
1Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotelyhttps://github.com/scs-labrat/android_autorooterPOC详情
2CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13https://github.com/pl4int3xt/cve_2024_0044POC详情
3利用 CVE-2024-0044 Android 权限提升下载任意目标App沙箱文件。https://github.com/Re13orn/CVE-2024-0044-EXPPOC详情
4CVE-2024-0044: uma vulnerabilidade de alta gravidade do tipo "executar como qualquer aplicativo" que afeta as versões 12 e 13 do Androidhttps://github.com/007CRIPTOGRAFIA/c-CVE-2024-0044POC详情
5利用CVE-2024-0044 在Android12、13 下提权https://github.com/Kai2er/CVE-2024-0044-EXPPOC详情
6CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13https://github.com/hunter24x24/cve_2024_0044POC详情
7EvilDroid automates the exploitation of CVE-2024-0044, installing malicious payloads on a target device and extracting sensitive data. It features automated ADB connection checks, APK pushing, UID extraction, payload generation, and real-time progress updates, providing a seamless and professional user experience.https://github.com/nexussecelite/EvilDroidPOC详情
8a vulnerability affecting Android version 12 & 13https://github.com/nahid0x1/CVE-2024-0044POC详情
9CVE-2024-0044https://github.com/MrW0l05zyn/cve-2024-0044POC详情
10PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to installed apphttps://github.com/canyie/CVE-2024-0044POC详情
11CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13https://github.com/pl4int3xt/CVE-2024-0044POC详情
12CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13https://github.com/0xbinder/CVE-2024-0044POC详情
13CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13https://github.com/Dit-Developers/CVE-2024-0044-POC详情
14EvilDroid automates the exploitation of CVE-2024-0044, installing malicious payloads on a target device and extracting sensitive data. It features automated ADB connection checks, APK pushing, UID extraction, payload generation, and real-time progress updates, providing a seamless and professional user experience.https://github.com/sridhar-sec/EvilDroidPOC详情
15a vulnerability affecting Android version 12 & 13https://github.com/nishan0x1/CVE-2024-0044POC详情
16a vulnerability affecting Android version 12 & 13https://github.com/l1ackernishan/CVE-2024-0044POC详情
17a vulnerability affecting Android version 12 & 13https://github.com/l1ackerronin/CVE-2024-0044POC详情
18 Automated Exploit for CVE-2024-0044 .https://github.com/Athexhacker/EXPLOITERPOC详情
19CVE-2024-0044_PoChttps://github.com/HoyoenKim/CVE-2024-0044_PoCPOC详情
20a vulnerability affecting Android version 12 & 13https://github.com/ronin0x1/CVE-2024-0044POC详情
21CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13. This repo demonstrates how to exploit CVE-2024-0044. For educational and testing purposes only.https://github.com/Dit-Developers/CVE-2024-0044POC详情
22A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android deviceshttps://github.com/JackTekno/Chrome-Forensic_CVE-2024-0044POC详情
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC
三、漏洞 CVE-2024-0044 的情报信息
Please 登录 to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2024-0044

暂无评论


发表评论