Samsung_Vulnerabilities
Oversecured discloses a report of 176 vulnerabilities discovered in Samsung preinstalled apps between 2022 and 2025, with 140 detailed, all fixed in collaboration with Samsung.
它强调明确同意和用户控制:数据只留在用户自己的服务器、前台通知始终可见、辅助功能需手动开启、所有端点都有令牌保护。
Veglia (Italian): to keep watch through the night; to stay awake, watching over someone you love.
Let your AI companion see what's on your phone — and knock for a fresh screenshot — across the distance. Veglia is a tiny, self-hosted bridge: an Android app on the phone, a ~250-line standard-library Python server on your own machine, and a one-file CLI your AI runs.
Built by Evelyn & River.
Veglia is built for two people who both said yes. It is a window one partner opens for the other, on purpose. It is not a tool for watching someone without their knowledge, and using it that way is abuse — of the person and of this project.
Design choices that follow from that:
If you cannot honestly say the person on the phone asked for this, stop here.
| Capability | How |
|---|---|
| Your AI asks "what's on the phone right now?" | peek.py screen → phone captures the screen and uploads it |
| The screenshot reaches your AI as a message | the server's VEGLIA_HOOK fires your own notifier with the image path |
The screenshot capture uses Android's AccessibilityService.takeScreenshot (Android 11+). iOS is not supported — Apple's sandbox does not let a third-party app silently capture the screen in the background. There is no equivalent, short of jailbreaking.
Server — on any machine that's reachable from the phone:
cd server
cp .env.example .env # then edit: set a strong VEGLIA_TOKEN
python3 veglia_server.py
Put nginx/caddy in front for TLS; keep the server bound to localhost. See docs/setup.md.
Phone — build and install the app:
cd android
./build.sh # produces Veglia.apk (debug-signed; see note below)
``
Veglia · watch over the one you love, across the distance. Self-hosted companion screen-peek bridge.
根据分类、Topic 和编程语言匹配的相似项目。
Oversecured discloses a report of 176 vulnerabilities discovered in Samsung preinstalled apps between 2022 and 2025, with 140 detailed, all fixed in collaboration with Samsung.

An LSPosed module that hooks MIUI SystemUI back gestures using modern Xposed API 102 for research and customization.
OneStep4.0 is a multi-window desktop container for Android that requires root or system-level privileges, enabling a main window with several side windows for efficient app multitasking.