CVE-2017-0785

PoC de CVE-2017-0785 Esto es solo un estudio personal basado en la vulnerabilidad de fuga de información de Android publicada por Armis. Lectura adicional: https://www.armis.com/blueborne/ Para ejecutarlo, asegúrate de tener instalados pybluez y pwntools. sudo apt-get install bluetooth...

buds-audit

buds-audit Version 1.0.0 Bluetooth security assessment tool for wireless earbuds affected by the Airoha SDK vulnerability chain CVE-2025-20700 / CVE-2025-20701 / CVE-2025-20702. Scans for nearby devices, fingerprints known-affected Airoha-based chipsets, and probes for unauthenticated GATT access...

PT-2026-107438

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In sol pdu decrypt, out is allocated as NET BUF SIMPLE17 and then filled with net buf...

Linux Distros Unpatched Vulnerability : CVE-2026-106314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page...

CVE-2026-106314

Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8...

Wireshark 1.6.x < 1.6.13 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.13 advisory. - Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allo...

DEBIAN-CVE-2026-106314

Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106314

Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106314

Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93676

Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106314

Google Chrome versions prior to 155.0.8059.39 are susceptible to an incorrect authorization flaw within the Bluetooth component. A remote attacker can exploit this vulnerability by using a crafted HTML page to obtain sensitive information . Remediation is available in version 155.0.8059.39 and la...

packages_apps_Bluetooth_AOSP10_r33_CVE-2020-0183

This repository does not have a README...

BlueborneDetection

BlueborneDetection Descarga Para descargar esta herramienta, tienes que clonar o descargar como zip este repositorio. Uso Compilar: make Empareja con el dispositivo Android y ejecuta el script: ./detectBlueborne No olvides usar la dirección MAC del dispositivo Android...

UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...

CVE-2026-6992-PoC

CVE-2026-6992-PoC Prueba de concepto de vulnerabilidad para la inyección de código arbitrario por Bluetooth CVE-2026-6992, reelaborado desde https://github.com/utmost3/cve/issues/2. No me atribuyo crédito por el descubrimiento de la vulnerabilidad. Esto es solo con fines educativos y de portafoli...

rinhit

RinHit RinHit - framework de reconocimiento del ecosistema macOS. Recopila artefactos del ecosistema Apple para construir líneas temporales de actividad de red, identidad entre dispositivos y correlación de ubicación física. Este es el módulo de reconocimiento de código abierto. El payload Swift...

BlueDucky

BlueDucky Ver 2.1 Android 🦆 Gracias a todas las personas de HackNexus. ¡Asegúrate de unirte a nosotros en VC ! https://discord.gg/HackNexus NOTAS: No podré ejecutar esto en una laptop u otro dispositivo que no sea una Raspberry Pi para pruebas. Debido a esto, cualquier problema que tengas deberá...

AZL-106422 CVE-2026-98295 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: coredump: Quiesce dump work on unregister hcidevcdhandlepktinit arms dumptimeout and coredump producers queue dumprx without holding an hdev reference. Unregister leaves both works live, so disconnecting during an acti...

DEBIAN-CVE-2026-98295

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: coredump: Quiesce dump work on unregister hcidevcdhandlepktinit arms dumptimeout and coredump producers queue dumprx without holding an hdev reference. Unregister leaves both works live, so disconnecting during an acti...

DEBIAN-CVE-2026-98297

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix queuing txwork after workqueue is drained hcisendacl, hcisendsco and hcisendiso queue hdev-txwork unconditionally. They can run from the L2CAP/SCO/ISO socket send path while hcidevclosesync is draining...