PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Abusing Samsung KNOX to remotely install a malicious application: story of a half patched vulnerability

blog.quarkslab.com | vulnerability | #android | #mobile-security | #exploit | #vulnerability | #samsung | #knox
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Story of a half-patched Samsung KNOX flaw: an insecure update mechanism in the UniversalMDMClient app let remote attackers install an arbitrary app; S4, S4 mini, Note 3 and Ace 4 stayed vulnerable.
Published
Collected

Related coverage

blog · projectzero.google
Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge
Project Zero researched the Samsung Galaxy S6 Edge and reported 11 high-impact security issues, discussing motivations, methodology and lessons learned from the device research.
High · vulnerability · codeberg.org
cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC
Demonstrates an effective local root privilege escalation chain in default CUPS environments by abusing printer discovery and Ghostscript font search paths.
vulnerability · volexity.com
APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)
As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]
vulnerability · volexity.com
CVE-2014-6271 – Remotely Exploitable Vulnerability in Bash
With the excitement of public details of a remotely exploitable vulnerability in bash (CVE-2014-6271) coming to light today, we decided it was as good of time as any to finally […]
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
Back