nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
93173b59a6f64f5a4ceaf599fcd76fe3ba1b2c23
PoC-in-GitHub/2026/CVE-2026-0073.json
T

559 lines
21 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1230289580,
"name": "CVE-2026-0073-Research",
"full_name": "novaek\/CVE-2026-0073-Research",
"owner": {
"login": "novaek",
"id": 115405298,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115405298?v=4",
"html_url": "https:\/\/github.com\/novaek",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/novaek\/CVE-2026-0073-Research",
"description": "CVE-2026-0073 is an RCE with a CVSS severity score of 8.3, and here we will explain how it works.",
"fork": false,
"created_at": "2026-05-05T21:22:41Z",
"updated_at": "2026-07-22T16:00:42Z",
"pushed_at": "2026-05-06T10:20:29Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230308713,
"name": "CVE-2026-0073-Android-adbd-authentication-bypass-POC",
"full_name": "SecTestAnnaQuinn\/CVE-2026-0073-Android-adbd-authentication-bypass-POC",
"owner": {
"login": "SecTestAnnaQuinn",
"id": 88168208,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88168208?v=4",
"html_url": "https:\/\/github.com\/SecTestAnnaQuinn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SecTestAnnaQuinn\/CVE-2026-0073-Android-adbd-authentication-bypass-POC",
"description": null,
"fork": false,
"created_at": "2026-05-05T21:53:08Z",
"updated_at": "2026-09-27T21:53:30Z",
"pushed_at": "2026-05-05T22:11:24Z",
"stargazers_count": 84,
"watchers_count": 84,
"has_discussions": false,
"forks_count": 37,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 37,
"watchers": 84,
"score": 0,
"subscribers_count": 1
},
{
"id": 1231171483,
"name": "poc-CVE-2026-0073",
"full_name": "adityatelange\/poc-CVE-2026-0073",
"owner": {
"login": "adityatelange",
"id": 21258296,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21258296?v=4",
"html_url": "https:\/\/github.com\/adityatelange",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/adityatelange\/poc-CVE-2026-0073",
"description": "CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC",
"fork": false,
"created_at": "2026-05-06T17:44:38Z",
"updated_at": "2026-10-31T07:11:27Z",
"pushed_at": "2026-05-06T17:53:25Z",
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": true,
"forks_count": 17,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": false,
"pull_request_creation_policy": "all",
"topics": [
"android",
"cve-2026-0073",
"may-2026",
"rce"
],
"visibility": "public",
"forks": 17,
"watchers": 68,
"score": 0,
"subscribers_count": 2
},
{
"id": 1231388578,
"name": "CVE-2026-0073-Android-ADBD-bypass-POC",
"full_name": "MartinPSDev\/CVE-2026-0073-Android-ADBD-bypass-POC",
"owner": {
"login": "MartinPSDev",
"id": 85715612,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85715612?v=4",
"html_url": "https:\/\/github.com\/MartinPSDev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MartinPSDev\/CVE-2026-0073-Android-ADBD-bypass-POC",
"description": "CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC\/Ed25519 key mismatch. PoC exploit for Android 14+.",
"fork": false,
"created_at": "2026-05-06T23:11:23Z",
"updated_at": "2026-11-07T12:33:00Z",
"pushed_at": "2026-05-07T11:15:25Z",
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"adbd",
"android",
"cve-2026-0073",
"evp-pkey-cmp",
"exploit",
"poc",
"security-research",
"tls-bypass",
"vulnerability"
],
"visibility": "public",
"forks": 6,
"watchers": 24,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231550347,
"name": "adbHijacker",
"full_name": "unnaim\/adbHijacker",
"owner": {
"login": "unnaim",
"id": 273420104,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/273420104?v=4",
"html_url": "https:\/\/github.com\/unnaim",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/unnaim\/adbHijacker",
"description": "A PoC tool for the CVE-2026-0073 on android 11+ devices which allows instant zero click RCE on any unpatched device with adb over tcp enabled",
"fork": false,
"created_at": "2026-05-07T04:13:12Z",
"updated_at": "2026-09-11T09:32:04Z",
"pushed_at": "2026-05-07T05:41:49Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231997018,
"name": "CVE-2026-0073",
"full_name": "0xBlackash\/CVE-2026-0073",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-0073",
"description": "CVE-2026-0073",
"fork": false,
"created_at": "2026-05-07T13:42:23Z",
"updated_at": "2026-07-24T11:30:53Z",
"pushed_at": "2026-05-07T14:11:06Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1233980294,
"name": "poc-CVE-2026-0073",
"full_name": "xqi1337\/poc-CVE-2026-0073",
"owner": {
"login": "xqi1337",
"id": 201985443,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/201985443?v=4",
"html_url": "https:\/\/github.com\/xqi1337",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xqi1337\/poc-CVE-2026-0073",
"description": "CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC",
"fork": false,
"created_at": "2026-05-09T15:40:26Z",
"updated_at": "2026-10-02T17:30:09Z",
"pushed_at": "2026-06-21T05:21:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1234010106,
"name": "CVE-2026-0073-Android-ADBD-bypass-POC",
"full_name": "xqi1337\/CVE-2026-0073-Android-ADBD-bypass-POC",
"owner": {
"login": "xqi1337",
"id": 201985443,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/201985443?v=4",
"html_url": "https:\/\/github.com\/xqi1337",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xqi1337\/CVE-2026-0073-Android-ADBD-bypass-POC",
"description": "CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC\/Ed25519 key mismatch. PoC exploit for Android 14+.",
"fork": false,
"created_at": "2026-05-09T16:25:34Z",
"updated_at": "2026-10-25T11:53:45Z",
"pushed_at": "2026-05-07T11:15:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237809851,
"name": "CVE-2026-0073-PoC-Exploit",
"full_name": "tc4dy\/CVE-2026-0073-PoC-Exploit",
"owner": {
"login": "tc4dy",
"id": 140116264,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140116264?v=4",
"html_url": "https:\/\/github.com\/tc4dy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-0073-PoC-Exploit",
"description": "CVE-2026-0073 – Android ADB Wireless Debugging Auth Bypass (CVSS 8.8) | Zero-click TLS type confusion to unauthenticated shell. 2 tools: Full Exploit (ADB shell, cmd exec, subnet scan, mDNS, stealth, SOCKS5) & SafeDetect (non-intrusive audit, CIDR, JSON\/CSV\/HTML). Red\/Blue team toolkit. Ethical & Safety use only.",
"fork": false,
"created_at": "2026-05-13T14:28:00Z",
"updated_at": "2026-10-27T16:43:39Z",
"pushed_at": "2026-09-26T09:57:51Z",
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"android",
"android-vuln",
"android-vulnerabilities",
"android-vulnerability",
"android-vulnerability-exploit-msf-venom-metasploid",
"cve-2026-0073",
"exploit",
"exploit-code",
"exploit-kit",
"poc",
"pocs",
"proof-of-concept",
"toolkit"
],
"visibility": "public",
"forks": 10,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
{
"id": 1244381609,
"name": "CVE-2026-0073",
"full_name": "0xbinder\/CVE-2026-0073",
"owner": {
"login": "0xbinder",
"id": 62325297,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62325297?v=4",
"html_url": "https:\/\/github.com\/0xbinder",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xbinder\/CVE-2026-0073",
"description": "An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS\/Zeroconf scanner to instantly discover randomized Wireless Debugging ports on Android 13+ and establishes a fully interactive raw PTY shell.",
"fork": false,
"created_at": "2026-05-20T08:02:35Z",
"updated_at": "2026-10-22T16:40:22Z",
"pushed_at": "2026-05-20T10:53:30Z",
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 29,
"score": 0,
"subscribers_count": 0
},
{
"id": 1249488788,
"name": "CVE-2026-0073-Android-client-TLS-auth-bypass",
"full_name": "m00ddy\/CVE-2026-0073-Android-client-TLS-auth-bypass",
"owner": {
"login": "m00ddy",
"id": 115099586,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115099586?v=4",
"html_url": "https:\/\/github.com\/m00ddy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/m00ddy\/CVE-2026-0073-Android-client-TLS-auth-bypass",
"description": "translating original python exploit to C",
"fork": false,
"created_at": "2026-05-25T18:54:04Z",
"updated_at": "2026-10-24T14:50:12Z",
"pushed_at": "2026-05-27T19:35:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1258908872,
"name": "CVE-2026-0073",
"full_name": "fredevsec\/CVE-2026-0073",
"owner": {
"login": "fredevsec",
"id": 242065111,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242065111?v=4",
"html_url": "https:\/\/github.com\/fredevsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fredevsec\/CVE-2026-0073",
"description": "0-Click RCE Android Adb TLS Wireless Debugging",
"fork": false,
"created_at": "2026-06-04T03:06:59Z",
"updated_at": "2026-08-06T03:51:26Z",
"pushed_at": "2026-06-04T23:02:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1282191373,
"name": "CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN",
"full_name": "ctn-Qvo\/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN",
"owner": {
"login": "ctn-Qvo",
"id": 197318837,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/197318837?v=4",
"html_url": "https:\/\/github.com\/ctn-Qvo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ctn-Qvo\/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN",
"description": "CVE-2026-0073-Android-ADBD-bypass-POC汉化版",
"fork": false,
"created_at": "2026-06-27T12:49:55Z",
"updated_at": "2026-10-29T04:43:29Z",
"pushed_at": "2026-06-27T12:50:20Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1342034413,
"name": "CVE-2026-0073-Android-adbd-authentication-bypass",
"full_name": "aye468448-eng\/CVE-2026-0073-Android-adbd-authentication-bypass",
"owner": {
"login": "aye468448-eng",
"id": 255684868,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/255684868?v=4",
"html_url": "https:\/\/github.com\/aye468448-eng",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aye468448-eng\/CVE-2026-0073-Android-adbd-authentication-bypass",
"description": "Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should work on others as well but exploitability may vary.",
"fork": false,
"created_at": "2026-08-21T16:53:02Z",
"updated_at": "2026-08-21T16:56:28Z",
"pushed_at": "2026-08-21T16:56:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1352342226,
"name": "POC-CVE-2026-0073",
"full_name": "naheeju\/POC-CVE-2026-0073",
"owner": {
"login": "naheeju",
"id": 86222949,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86222949?v=4",
"html_url": "https:\/\/github.com\/naheeju",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/naheeju\/POC-CVE-2026-0073",
"description": "Security research PoC for CVE-2026-0073: ADB authentication bypass verification",
"fork": false,
"created_at": "2026-08-31T11:39:29Z",
"updated_at": "2026-09-24T04:11:53Z",
"pushed_at": "2026-08-31T11:41:56Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433569401,
"name": "CVE-2026-0073",
"full_name": "umarrehmansiddiqui\/CVE-2026-0073",
"owner": {
"login": "umarrehmansiddiqui",
"id": 300436023,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/300436023?v=4",
"html_url": "https:\/\/github.com\/umarrehmansiddiqui",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/umarrehmansiddiqui\/CVE-2026-0073",
"description": "CVE-2026-0073: Android adbd TLS auth bypass PoC. Exploits a logic bug where OpenSSL's EVP_PKEY_cmp() returns -1 on key type mismatch (EC vs RSA), incorrectly evaluating to true and granting access. Includes functional Python and standalone C exploits to gain unauthenticated remote shell on Android devices with Wireless Debugging enabled.",
"fork": false,
"created_at": "2026-10-25T19:46:46Z",
"updated_at": "2026-10-27T00:14:13Z",
"pushed_at": "2026-10-25T21:53:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink