CVE-2025-48543

This repository contains a functional exploit for CVE-2025-48543, targeting a use-after-free (UAF) vulnerability in the Android Binder component. The exploit leverages a dangling BinderProxy object to hijack control flow, execute a ROP chain, and achieve privilege escalation to SYSTEM on the host kernel.

This repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.