Lucene search
+L

11 matches found

Kitploit
Kitploit
•added 2026/10/30 5:54 a.m.•29 views

bluehood

Bluehood Bluetooth Neighborhood - Track BLE devices in your area and analyze traffic patterns. WARNING: Alpha Software This project is in early development and is not ready for production use. Features may change, break, or be removed without notice. Use at your own risk. Data collected should be...

7.1CVSS7.8AI score0.08411EPSS
SaveExploits14
NVD
NVD
•added 2026/09/28 6:17 p.m.•18 views

CVE-2026-49994

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

9.1CVSS0.00283EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/28 5:55 p.m.•43 views

CVE-2026-49994 Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

9.1CVSS0.00283EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/28 5:55 p.m.•18 views

EUVD-2026-88401

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

9.1CVSS5.6AI score0.00283EPSS
SaveExploits0References3
Mend
Mend
•added 2026/09/28 5:55 p.m.•11 views

CVE-2026-49994

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

9.3CVSS5.6AI score0.00283EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/28 5:55 p.m.•30 views

CVE-2026-49994

Bluehood , a local Bluetooth activity monitor, is vulnerable to an authentication bypass in versions prior to 0.7.1 . When auth_enabled is active, only HTML page handlers enforce session validation; however, the */api/ handlers (including settings, devices, groups, and per-device endpoints like /...

9.1CVSS5.6AI score0.00283EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/09/28 5:55 p.m.•24 views

CVE-2026-49994 Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

9.1CVSS5.6AI score0.00283EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/28 5:55 p.m.•16 views

CVE-2026-49994 Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

9.1CVSS5.6AI score0.00283EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•13 views

PT-2026-102288

Name of the Vulnerable Software and Affected Versions Bluehood versions prior to 0.7.1 Description When auth enabled is active, session validation is only enforced on HTML page handlers. The /api/ endpoints, including /api/device/mac/notes, do not perform authentication checks. A network attacker...

9.1CVSS5.8AI score0.00283EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•16 views

CVE-2026-49994: Missing Authentication for Critical Function

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

9.1CVSS5.7AI score0.00283EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/14 12:40 a.m.•21 views

bluehood v0.8.0

Bluehood Bluetooth Neighborhood - Track BLE devices in your area and analyze traffic patterns. WARNING: Alpha Software This project is in early development and is not ready for production use. Features may change, break, or be removed without notice. Use at your own risk. Data collected should be...

7.1CVSS7.8AI score0.08411EPSS
SaveExploits14
Rows per page
Query Builder