Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: 6lowpan: resetting the link-local header in the IPv6 receive path The Bluetooth 6lowpan.c netdev module has the headerops function; therefore, it must set the link-local header for the RX skb packet. Otherwise, thin...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl – Prevent potential NULL dereferencing. The btrtlinitialize function checks whether rtlloadfile either had an error or loaded a zero-length file. However, if it loads a zero-length file, the error code is not set...

-BuL

DEDSECBKIF DEDSECBKIF is a keystroke injection tool for Android, Linux, and iOS. With the help of CVE-2023-45866, it grants users unprecedented control over targeted systems, enabling various functions from keystroke injection to advanced system manipulations. DESCRIPTION DEDSECBKIF is a potent...

CVE-2025-36911_scan

CVE-2025-36911 scanner Tests unauthenticated BR/EDR L2CAP connections to audio PSMs A2DP/AVRCP and detects Fast Pair service GFPS on BLE. Requirements Linux BlueZ installed and bluetooth service active for BLE functionality. Bluetooth adapter enabled bluetoothctl power on. Debian based OS sudo ap...

CVE-2026-49933: Access of Uninitialized Pointer

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2026-106149

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth affected versions not specified Description An uninitialized pointer dereference in the handle le monitor device event function within msft.cc allows for a control-flow hijack in the privileged bluetooth process. This issue...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0344-1 Rating: critical References: 1283262 Cross-References: CVE-2026-102299 CVE-2026-102300 CVE-2026-102301 CVE-2026-102302 CVE-2026-102303 CVE-2026-102304 CVE-2026-102305 CVE-2026-102306 CVE-2026-102307...

ROS-20261005-73-0037

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Mahesh-970-CVE-2023-21125_bluedriod_repo

This repository does not have a README...

BadBlue

BadBlue विंडोज़ CVE-2024-21306 BadBlue कार्यान्वयन DuckyScript का उपयोग करके अनधिकृत पीयरिंग जो कोड निष्पादन की ओर ले जाती है HID कीबोर्ड का उपयोग करके यह marcnewlin द्वारा खोजे गए CVE का एक कार्यान्वयन है और BlueDucky से कुछ कोड परिचय BadBlue एक शक्तिशाली उपकरण है जो ब्लूटूथ उपकरणों में कमजोरियो...

system_bt_AOSP10_r33_CVE-2020-0471

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

CVE-2023-52709-PoC

إثبات المفهوم لـ CVE 2023-52709 "مكدس بلوتوث TI قد يفشل في توليد عنوان خاص عشوائي قابل للحل RPA مما يؤدي إلى رفض الخدمة للأجهزة النظيرة المربوطة بالفعل" CVE 2023-52709 ملخص عند تشغيل حالة اختبار Defensics SMP legacy 1001 مع وضع التكرار على الجهاز قيد الاختبار DUT المُكوّن كعنوان خاص قابل للحل، بع...

CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass

CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Bypass Summary A payment authentication bypass vulnerability was discovered in the CSC Pay Mobile App, affecting version 2.19.4. The flaw allowed an attacker to initiate a payment, disable Bluetooth at a specific point in the process, and...

APT_REPORT

APTREPORT تم جمعه بواسطة @blackorbird https://x.com/blackorbird مجموعة مثيرة للاهتمام من تقارير APT والعينات والبرمجيات الخبيثة والتقنيات وجمع المعلومات الاستخباراتية مجموعات APT حسب الدولة مجموعات الجهات الفاعلة في التهديدات التي تتعقبها Palo Alto Networks Unit 42...

CVE-2017-0541

poc and vulnerability analysis of CVE-2017-0541...

Learn.BlueJam

BlueJam KNOB Attack With KNOB your Bluetooth speakers can be monitored for iPhone and Android use. The first way you can do this is to step up the KNOB attack. The second is to let the KNOB attack decrypt or weaken Bluetooth traffic between the two devices. By doing this, you will have an...

ESP32Marauder nightly_41f11df

ESP32 Marauder A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32 Getting Started Download the latest release of the firmware. Check out the project wiki for a full overview of the ESP32 Marauder For Sale Now You can buy the ESP32 Marauder using this link...

RustyInjector

⚠️ Disclaimer: For Research and Educational Purposes Only This project is a Proof of Concept PoC demonstrating Bluetooth keystroke injection, re-implemented in Rust. It is intended strictly for educational and security research purposes. Do not use this code to compromise systems without explicit...

system_bt_AOSP10_r33_CVE-2020-0225

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

BlueBorn

BlueBorn CVE-2017-0785 Archlinux installation paru -S python-pybluez-git bluez-utils-compat pyhton3 python3-pip sudo pip install pwn TUTORIALS Discovery hcitool scan Scanning ... XX:XX:XX:XX:XX:XX Device 1 XX:XX:XX:XX:XX:XX Device 2 Use the exploit python CVE-2017-0785.py TARGET=XX:XX:XX:XX:XX V...