mobilehackinglab/CVE-2026-28576-poc: open-source project for self-hosters
One picked contact, every contact: a targetSdk compat gate turns a single-contact picker grant into a full contacts database dump. Android 17 hardened the Contacts Provider against SQL injection with ...
Continue Reading