ubertooth

Ubertooth Il progetto Ubertooth è una piattaforma di sviluppo wireless open source adatta alla sperimentazione Bluetooth. Ubertooth è dotato di uno sniffer BLE Bluetooth Smart capace e può sniffare alcuni dati dalle connessioni Bluetooth Classic Basic Rate BR. L'ultima release è 2020-12-R1...

CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE Buffer Overflow Discoverer : Golden Ticket Labs Vendor : Particle Date Assigned : August 12th 2025 MITRE Description A buffer overflow in the blecontrolrequestchannel.cpp component of Particle Device OS v5.6.0 enables arbitrary function pointer overwrite du...

BLE-TPMS

CVE-2024-39081 Link: https://vulners.com/cve/CVE-2024-39081 BLE BASED TREEL TPMS for bikes Here, we performed and explained TPMS data manipulation over bluetooth. we can send false alarm to App user over bluetooth. Detailed vulnerability findings and analysis are stored in the repository. File Na...

btrpa-scan

btrpa-scan Scansione Bluetooth Low Energy BLE con risoluzione avanzata degli Indirizzi Privati Risolvibili RPA. Scopri i dispositivi BLE nelle vicinanze, traccia un dispositivo specifico tramite indirizzo MAC o risolvi gli indirizzi randomizzati per la privacy utilizzando una chiave di risoluzion...

cve-2025-2082-POV

CVE-2025-2082 – Function Pointer Overwrite PoV VCSEC-style This repository demonstrates a Proof of Vulnerability PoV simulating a critical memory corruption flaw inspired by CVE-2025-2082, discovered in Tesla's VCSEC Vehicle Controller Security component. The vulnerability allows an attacker to...

CVE-2020-11539

CVE-2020-11539: Improper Access Control in Tata Sonata Smartband Information Description: It has been identified that the smart band has no pairing mode 0 BLE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't hav...

Google-Nest-Cam-Bug-Disclosures

Google-Nest-Cam-Bug-Disclosures Affected: Dropcam Pro, Nest Cam Indoor/Outdoor models Latest Build Affected: 205-600052 Partial Fixed Build: 205-600055 UPDATE The latest fw version 205-600055 does not fix the WiFi dissassociation vulnerability in the Dropcam Pro. If the supplied WiFi network does...

obike

oBike Protocol Description BLE/HTTP This document provides an analysis of the oBike communication protocols as of January 2018. Results have been presented at the insomni'hack security conference 2019: slides recording as well as at the AREA41 security conference 2018: slides recording General...

bleah

Este repositorio está OBSOLETO, por favor usabettercap ya que esta herramienta ha sido migrada a sus módulos BLE...

BLEBoy

BLEBoy Goal Create a BLE peripheral that supports all BLE pairing methods that can be used for training and testing, including out-of-band OOB pairing. The perpiheral must be configurable and easy to re-create using consumer parts. About BLEBoy is a BLE peripheral implemented using the Adafruit...

CVE-2026-51376

PoC of BLE cache poisoning attack in Bitchat 1.15.0 Write up: https://barghest.asia/blog/bitchat-cache-poisoning/ Requirements: bleak, pynacl Usage: python3 barghest.py --scan python3 barghest.py --target...

CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication

CVE-2026-22017 – Firmware Update via BLE Without Authentication Program Code Python bleak peripheral blefirmwareupdate.py - Simulated BLE peripheral accepting firmware writes from bleak import BleakServer, BleakGATTCharacteristic import asyncio class FirmwareService: def initself: self.firmwareda...

ble_proxy

BLE HTTP Proxy System A Bluetooth Low Energy BLE based HTTP proxy system that routes web browser traffic through an iOS device. This allows web browsing through the iOS device's internet connection using BLE as the transport layer. Architecture Overview Browser → Windows Proxy → BLE/TCP → iOS/Moc...

ble_connect_rust

This repository does not have a README...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: Heap-Based Type Confusion in L2CAP CVE-2020-12351 Linux: Heap-Based Type Confusion in L2CAP PoC CVE-2020-12351 on BLE implementation Why did I modify the original PoC? The original PoC is focused on sending a malicious l2cap packet via Bluetooth Classic. However, I had a requirement to tes...

Secure Polarization-Shift Backscatter Identification Applied to Battery-Free BLE Sensors Powered by Wireless Power Transfer

This paper presents a lightweight and protocolindependent security mechanism for battery-free Bluetooth Low Energy BLE sensor nodes operating in Simultaneous Wireless Information and Power Transfer SWIPT architecture. The proposed approach exploits polarization-shift backscattering of the wireles...

Exploit for CVE-2026-77812

CVE-2026-77812 — DJI Cleartext BLE Transmission of Wi-Fi PSK a...

Linux Distros Unpatched Vulnerability : CVE-2026-90087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: do not leak an hciconn when a second LE connect is rejected createleconncomplete decides whether the failed connection is still pending by comparing ...

EUVD-2026-81275

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

CVE-2026-89034 TCH QRing R20_B006 Unauthenticated BLE Access

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...