Loading video...

Video Failed to Load

Go Home

Android 17 root Full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 (CVE-2026-10702) Click on the link -> root Android Discovered by Nebula Security PoC not available. Info:

androidmalware2's profile picture

Mobile Hacker

60,091 subscribers

50,797 views • 12 days ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Demo of using #BlueDucky to exploit 0-click Bluetooth vulnerability of targeted Android smartphone (CVE-2023-45866) Executed by Raspberry Pi 4 and Android running #NetHunter
0:46

Demo of using #BlueDucky to exploit 0-click Bluetooth vulnerability of targeted Android smartphone (CVE-2023-45866) Executed by Raspberry Pi 4 and Android running #NetHunter

Mobile Hacker

129,652 views • 2 years ago

New Pixnapping Attack: allows any Android app without permissions to leak info displayed by other apps exploiting Android APIs and a hardware side channel (CVE-2025-48561) Pixnapping is not fixed and probably affects all Androids. PoC: Not available yet. Steal 2FA codes 👇
0:29

New Pixnapping Attack: allows any Android app without permissions to leak info displayed by other apps exploiting Android APIs and a hardware side channel (CVE-2025-48561) Pixnapping is not fixed and probably affects all Androids. PoC: Not available yet. Steal 2FA codes 👇

Mobile Hacker

55,089 views • 8 months ago

❗️Chronomaly: Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable Linux kernels v5.10.x. GitHub:
0:23

❗️Chronomaly: Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable Linux kernels v5.10.x. GitHub:

Dark Web Informer

12,640 views • 5 months ago

Root Android while on the go using uConsole
0:26

Root Android while on the go using uConsole

Mobile Hacker

31,117 views • 5 months ago

PoC to takeover Android using another Android by exploiting critical Bluetooth vulnerability to install #Metasploit payload without proper Bluetooth pairing (CVE-2023-45866) It still affects Android 10 and bellow #NetHunter
1:33

PoC to takeover Android using another Android by exploiting critical Bluetooth vulnerability to install #Metasploit payload without proper Bluetooth pairing (CVE-2023-45866) It still affects Android 10 and bellow #NetHunter

Mobile Hacker

108,971 views • 2 years ago

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:
3:47

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:

Dark Web Informer

28,847 views • 5 months ago

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET
0:37

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET

Lukas Stefanko

55,818 views • 1 year ago

How to turn your android phone/tablet into a full Linux desktop NO VNC + NO ROOT
8:16

How to turn your android phone/tablet into a full Linux desktop NO VNC + NO ROOT

The Cybersecurity guy

37,573 views • 1 month ago

We implemented an exploit for RediShell (CVE-2025-49844). While doing so, we discovered that the publicly available PoC incorrectly uses loadstring to trigger the Redis UAF. Kudos to Wiz for the interesting findings!
0:27

We implemented an exploit for RediShell (CVE-2025-49844). While doing so, we discovered that the publicly available PoC incorrectly uses loadstring to trigger the Redis UAF. Kudos to Wiz for the interesting findings!

DARKNAVY

41,489 views • 8 months ago

Exfiltrate #WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability
1:47

Exfiltrate #WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability

Mobile Hacker

143,609 views • 2 years ago

Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130) Cheers to Pumpkin 🎃 for finding these CVEs + the OffensiveCon talk from gteissier & Quentin Minster Picavet for inspiration!
1:13

Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130) Cheers to Pumpkin 🎃 for finding these CVEs + the OffensiveCon talk from gteissier & Quentin Minster Picavet for inspiration!

Crusaders of Rust

81,777 views • 9 months ago

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.
12:44

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

The Lunduke Journal

36,758 views • 2 months ago

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
0:31

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

94,139 views • 2 months ago

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:
0:25

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:

Dark Web Informer

18,120 views • 8 months ago

🚀 Chasers! Stream your location to your PC! We've released the ability to stream your location from our iOS & Android app to WeatherWise on your PC. Why not use WeatherWise as a map overlay with your live video? Available for free on: iOS: Android: Browser: And to Plus subscribers using our Windows/Mac App
0:28

🚀 Chasers! Stream your location to your PC! We've released the ability to stream your location from our iOS & Android app to WeatherWise on your PC. Why not use WeatherWise as a map overlay with your live video? Available for free on: iOS: Android: Browser: And to Plus subscribers using our Windows/Mac App

WeatherWise.app

34,410 views • 1 year ago

#Warframe on Android is available worldwide! Download and play to receive a free Cumulus Collection before March 4. Full details available here:
0:53

#Warframe on Android is available worldwide! Download and play to receive a free Cumulus Collection before March 4. Full details available here:

WARFRAME

95,111 views • 4 months ago

🚨 Very concerning 0-click zero-day vulnerability for sale: allows unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on fully patched Windows 10/11 and Windows Server 2022 systems. The exploit is “reliable, low-resource, and bypasses the latest security mitigations.” Price: 25k POC:
0:53

🚨 Very concerning 0-click zero-day vulnerability for sale: allows unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on fully patched Windows 10/11 and Windows Server 2022 systems. The exploit is “reliable, low-resource, and bypasses the latest security mitigations.” Price: 25k POC:

International Cyber Digest

77,014 views • 10 months ago

i may have invented a new paradigm for mobile apps + chrome extensions never seen this before using Expo + to have a single code base deploying to - 🤖 android - 🍎 iOS - 💻 ALL browser extensions (chrome, firefox, etc.) 🤯
0:24

i may have invented a new paradigm for mobile apps + chrome extensions never seen this before using Expo + to have a single code base deploying to - 🤖 android - 🍎 iOS - 💻 ALL browser extensions (chrome, firefox, etc.) 🤯

Peer Richelsen — oss/acc

158,978 views • 7 months ago

The Rabbit R1 uses Android under the hood. Someone shared Rabbit R1's launcher APK with Android Authority, and with a bit of tinkering, they managed to install it on an Android PHONE (Pixel 6A) Entire interface users interact with is powered by a single Android app. Video Credit: Android Authority Source: Android Authority
0:22

The Rabbit R1 uses Android under the hood. Someone shared Rabbit R1's launcher APK with Android Authority, and with a bit of tinkering, they managed to install it on an Android PHONE (Pixel 6A) Entire interface users interact with is powered by a single Android app. Video Credit: Android Authority Source: Android Authority

AshutoshShrivastava

162,305 views • 2 years ago