CVE-2020-10135-BIAS

CVE-2020-10135-BIAS CVE 2020-10135, 일명 BIAS블루투스 가장 공격 얼마간의 시간과 우여곡절 끝에 BIAS블루투스 가장 공격 CVE 2020-10135를 수행할 수 있었습니다. Samsung S3 Neo+ 연결을 Linux 호스트로 가장했습니다. 멋지네요. Internalblue와 BIAS PoC에 감사드립니다. 제 관점에서 보면 공격을 수행하는 데 필요한 것은 거의 전부가 상대방과 이전에 페어링 및 연결되었던 가장된 장치의 BT 주소입니다. 나머지는 PoC가 작동하도록 얻을 수 있습니다...

bluffs

BLUFFS はじめに このリポジトリには、 BLUFFS: Bluetoothの前方秘匿性と未来秘匿性に対する攻撃と防御に関連するコードが含まれています。 論文概要...

EUVD-2026-67290

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2026-69658

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2026-69658 Ebyte NA111-M Cleartext Transmission of Sensitive Information

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2026-69658 Ebyte NA111-M Cleartext Transmission of Sensitive Information

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2026-69658

Ebyte NE2-D11 is vulnerable to cleartext transmission of MQTT credentials and control traffic , allowing network-level attackers to intercept sensitive data. The exposed information may enable unauthorized device impersonation and disruption of messaging functions . The vulnerability is rated CRI...

PT-2026-82777

Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 affected versions not specified Description MQTT credentials and control traffic are transmitted in cleartext, which exposes sensitive information to network-level attackers. This flaw may allow unauthorized device impersonation...

CVE-2026-69658: Cleartext Transmission of Sensitive Information

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

SUSE CVE-2026-23998

Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's Windows MDM management endpoint could allow requests to be processed without proper client certificate validation. In certain circumstances, this could allow an attacker to impersonate an enrolled...

Exploit for Improper Authentication in Google Android

BT-HID-PoC — CVE-2023-45866 Interactive Wizard DISCLAIMER...

EUVD-2026-36529

The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifying that the requester is the legitimate device or owner. An actor able to present a platform-valid request signature can retrieve credentials for arbitrary devices and register o...

CVE-2026-50101 Naxclow IoT Platform Not using password aging

Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each boot. Because this credential remains valid indefinitely and cannot be reset or revoked by the legitimate owner, any party that obtains it through any exposure path can maintai...

PT-2026-48958

Name of the Vulnerable Software and Affected Versions Naxclow affected versions not specified Description The platform API that returns device relay registration details fails to verify if the requester is the legitimate device or owner, exposing a persistent credential. An actor capable of...

Naxclow IoT Platform

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, intercept or manipulate communications, harvest sensitive credentials at scale, or gain unauthorized access. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

CVE-2026-5768

The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization. This allows attackers within BLE range to perform unauthorized control of device functions, including starting/stopping activities,...

EUVD-2026-33617

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the absence of input validation on aggregated data, can lead to stored XSS that enables theft of cookies from the pump’s web control interface. Older Orca heat pump devices...

CVE-2026-25599

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the absence of input validation on aggregated data, can lead to stored XSS that enables theft of cookies from the pump’s web control interface. Older Orca heat pump devices...

CVE-2026-25599

CVE-2026-25599 involves Orca heat pump devices communicating with the Orca server over unencrypted HTTP, with missing authentication and input validation on aggregated data. This combination enables stored XSS in the heat pump web control interface and potential cookie theft, as well as attacker ...

PT-2026-45397

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the absence of input validation on aggregated data, can lead to stored XSS that enables theft of cookies from the pump’s web control interface. Older Orca heat pump devices...