177 matches found
WhisperPair
WhisperPair: Google Fast Pair 用テストハーネス -green Google Fast Pair デバイスが、ペアリング、アカウントバインド、およびプロトコルレベルの攻撃に対して脆弱かどうかをテストするための実用的なツールです。 このリポジトリは、Google Fast Pair デバイスのセキュリティを評価するためのツールである WhisperPair テストハーネスを提供します。研究者と実務者の両方が、私たちの調査結果を再現し、自身のデバイスをテストできるように設計されています。...
BlueSpy
BlueSpy - Bluetoothデバイスから音声を録音するPoC このリポジトリには、正当なユーザーに気付かれることなくBluetoothデバイスから音声を録音・再生する概念実証（PoC）の実装が含まれています。 このPoCは、マドリードで開催されたRootedCON 2024 の講演BSAM: Seguridad en Bluetooth の中でデモンストレーションされました。...
Exploit for Improper Authentication in Google Android
BT-HID-PoC — CVE-2023-45866 Interactive Wizard DISCLAIMER...
Astra Linux – Vulnerability in Linux
A flaw involving double-free memory corruption in the Linux kernel’s HCI device initialization subsystem was discovered. This flaw allows a malicious HCI TTY Bluetooth device to be attached to the system. A local user could exploit this flaw to crash the system. This flaw affects all Linux kernel...
CVE-2021-0965
In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-0933
In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetoo...
EUVD-2025-201273
An issue in the Bluetooth Human Interface Device HID of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject arbitrary keystrokes via a spoofed Bluetooth HID device...
CVE-2025-63896
An issue in the Bluetooth Human Interface Device HID of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject arbitrary keystrokes via a spoofed Bluetooth HID device...
CVE-2025-4321
In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation...
CVE-2025-4321
The CVE-2025-4321 entry concerns Silabs RS9116W-WiSeConnect SDK used in Bluetooth devices. Affected component: the RS9116-WiseConnect SDK handling L2CAP; root cause is processing malformed L2CAP packets, leading to a Denial of Service. Impact as stated: device remains non-operational until a hard...
CVE-2025-4321 DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets
In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation...
EUVD-2020-29851
Malware in sbrugna...
EUVD-2005-2548
Malware in sbrugna...
EUVD-2017-11871
Malware in sbrugna...
EUVD-2021-26108
Malware in sbrugna...
EUVD-2021-12302
Malware in sbrugna...
EUVD-2014-8507
Malware in sbrugna...
EUVD-2018-21160
Malware in sbrugna...