CVE-2025-7769

CVE-2025-7769 – Inyección Remota de Comandos en mobileapi Descripción : Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE‑2025‑7769 , una vulnerabilidad crítica de Inyección de Comandos remota encontrada en dispositivos Tigo Energy CCA que exponen el endpoint...

CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment

CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment Una evaluación de seguridad del Beat XP VEGA Smartwatch Firmware RB303ATV006229 centrada en la conectividad Bluetooth Low Energy BLE reveló una debilidad de diseño e implementación que permite que un dispositivo central BLE cercano...

sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Desatando el caos sobre Bluetooth Low Energy Este repositorio es parte del resultado de una investigación delASSET Research Group. SweynTooth comprende una familia de 18 vulnerabilidades en diferentes kits de desarrollo de software SDK de Bluetooth Low Energy BLE de seis grandes...

smart-sketcher-upload

smART Sketcher 2.0 - Bluetooth Authentication Bypass CVE-2026-0842 | Missing Authentication on BLE Interface Overview The smART Sketcher 2.0 is a Bluetooth-enabled toy projector that lets kids trace images. It has no authentication on its Bluetooth connection - anyone within range can connect and...

CVE-2026-51376

PoC del ataque de envenenamiento de caché BLE en Bitchat 1.15.0 Artículo: https://barghest.asia/blog/bitchat-cache-poisoning/ Requisitos: bleak, pynacl Uso: python3 barghest.py --scan python3 barghest.py --target...

ble_proxy

Sistema de Proxy HTTP por BLE Un sistema de proxy HTTP basado en Bluetooth Low Energy BLE que enruta el tráfico del navegador web a través de un dispositivo iOS. Esto permite navegar por internet usando la conexión del dispositivo iOS mediante BLE como capa de transporte. Descripción General de l...

fwbt

fwbt Writeup: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893 Without any configuration it will scan for Firewalla's in local proximity and leak th...

BLUE-SPY

BLUE-SPY - Fast Pair 脆弱性調査ツール セキュリティ免責事項と法的警告 ⚠️ 本ソフトウェアは、認可されたセキュリティ研究および倫理的なテストのみを目的としています。⚠️ このツールを、あなたが所有していない、または明示的な書面による許可を得ていないデバイスに対して不正に使用することは 違法 であり、以下の結果を招く可能性があります。 世界各国のコンピュータ詐欺および不正使用防止法（CFAA）および類似の法律に基づく刑事訴追 プライバシー侵害および不正アクセスに対する民事訴訟 盗聴罪 重大な法的・金銭的制裁...

EUVD-2026-63625

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

CVE-2026-69419

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

CVE-2026-69419

An integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code remotely. Microsoft's update guide is the reference; no specific affected version, patch, or exploit details are provided in the documents.

CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability

...

CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability

...

Azure Data Manager for Energy Remote Code Execution Vulnerability

Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...

PT-2026-79209

Name of the Vulnerable Software and Affected Versions Azure Data Manager for Energy affected versions not specified Description An integer overflow or wraparound occurs in Azure Data Manager for Energy, which allows an authorized attacker to execute code over a network. An integer overflow is a...

CVE-2026-19292

Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below...

EUVD-2026-57927

Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below...

CVE-2026-66875

The CVE-2026-66875 entry concerns the Mira hormone monitor firmware v1.7.1.47 (build 01070147). A remote unauthenticated attacker within BLE range (≈10–30 m) can: rebind the device to an attacker-controlled account; extract stored hormone measurements in cleartext; cause a denial-of-service via m...

CVE-2026-18844

The CVE-2026-18844 entry concerns the Pulsetto Vagus Nerve Stimulator firmware, where several undisclosed commands are accepted over BLE without authentication or encryption and are fully processed when powered on. The connected sources offer no details on affected software versions, specific com...

PT-2026-70900

The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy BLE interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when ...