trackem

trackem Passive Device Tracker AndroidTrackEm Mobile is a real-time, passive Wi-Fi + Bluetooth LE probe-request scanner designed for OSINT, red-team ops, and wireless research.It listens for client devices phones, laptops, IoT that are actively broadcasting the names of Wi-Fi networks...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi는 Linux용 2.4GHz 및 5GHz WiFi 및 Bluetooth 스펙트럼 인식 도구입니다. WiFi 스캐닝, Bluetooth Low Energy 및 Classic 탐지, 소프트웨어 정의 무선 스펙트럼 분석HackRF, Ubertooth, GPS 추적, FAA RemoteID 드론 탐지, 드론/로버 탑재 원격 운영, 그리고 ECS 8.17 인덱싱을 Elasticsearch 또는 OpenSearch에 통합하는 단일 플랫폼입니다. 전체가 Python 3로 작성되었습니다. 이...

openwifipass

OpenWifiPass Apple의 Wi-Fi 비밀번호 공유 프로토콜에서 grantor 역할의 오픈 소스 구현입니다. 면책 조항 OpenWifiPass는 실험적인 소프트웨어이며 Open Wireless Link 프로젝트의 리버스 엔지니어링 노력의 결과입니다. 이 코드는 오직 문서화 및 교육 목적으로 제공됩니다. 테스트되지 않았고 불완전 합니다. 예를 들어, 이 코드는 요청자의 신원을 확인하지 않습니다. 따라서 민감한 Wi-Fi 자격 증명과 함께 이 구현을 사용하지 마십시오. OpenWifiPass는 Apple Inc.와 제휴하...

CVE-2023-52709-PoC

CVE 2023-52709 の概念実証 "TI Bluetooth スタックが解決可能なランダムプライベートアドレス RPA の生成に失敗し、既にペアリングされたピアデバイスに対する DoS を引き起こす" CVE 2023-52709 概要 DUT が解決可能なプライベートアドレスとして構成されている状態で、ループモードで Defensics テストケース SMP legacy 1001 を実行すると、しばらくするとデバイスが解決不可能なランダムプライベートアドレスを生成し、既にペアリングされたピアデバイスに対してサービス拒否 DoS を引き起こします。...

Komfy-Switch-Wifi-Password-Disclosure

Komfy-Switch-Wifi-Password-Disclosure はじめに このレポートでは、D-Link の Komfy Switch with Camera において、Bluetooth 4.0（BLE）経由でデバイスに関連付けられた Wi-Fi SSID とパスワードを取得した発見について詳述します。Komfy スイッチは、家庭用セキュリティおよびオートメーション製品で、家の壁スイッチを置き換えて、ビデオ監視、温度・湿度レベル・空気質のモニタリング、照明スイッチのリモートコントロールを提供します。 Bluetooth BLE プロファイリング...

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Security researcher Olivier Laflamme has disclosed two independent root remote code execution RCE chains affecting the Unitree G1 EDU , including a Bluetooth Low Energy BLE path that can reach root on the robot's Locomotion PC. The flaws are tracked asCVE-2026-76639 and CVE-2026-76640 , with the...

CVE-2026-65935

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

CVE-2026-65932

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below...

EUVD-2026-58082

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

CVE-2026-65935

CVE-2026-65935 describes a bypass of the Bluetooth LE legacy passkey entry by manipulating the temporary key value, affecting the RS9116W and SiWx917 hardware. The root cause is not fully disclosed in the provided notes beyond the bypass mechanism; the vulnerability impacts the pairing process, p...

CVE-2026-65935 Bypassing passkey entry in legacy pairing

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

CVE-2026-65935

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

CVE-2026-65935 Bypassing passkey entry in legacy pairing

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

CVE-2026-66875

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range approximately 10–30 meters can silently rebind the device to an attacker-controlled account, extract stored hormone measurements in cleartext, cause a denial-of-service via...

EUVD-2020-3890

Malware in sbrugna...

EUVD-2023-43716

Malicious code in bioql PyPI...

EUVD-2025-23489

Malicious code in bioql PyPI...

EUVD-2023-51036

Malicious code in bioql PyPI...

EUVD-2023-58627

Malicious code in bioql PyPI...

Google Android Information Disclosure Vulnerability (CNVD-2025-23028)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by an insecure default value flaw in the generateRandomPasword function in LocalBluetoothLeBroadcast.java. An attacker can exploit the leak to obtai...