hi_my_name_is_keyboard

Hi, My Name is Keyboard This repository contains proof-of-concept scripts for CVE-2023-45866, CVE-2024-21306, and CVE-2024-0230. Additional details can be found in the blog post. Proof of Concept| Description ---|--- Android Keystroke Injection| Force-pairs a virtual Bluetooth keyboard with a...

hi_my_name_is_keyboard

你好，我的名字是键盘 该仓库包含针对 CVE-2023-45866、CVE-2024-21306 和 CVE-2024-0230 的概念验证脚本。更多细节可在博客文章中查看。 概念验证| 描述 ---|--- Android 按键注入| 强制将虚拟蓝牙键盘与存在漏洞的 Android 设备配对，并注入 10 秒钟的 tab 按键。 Linux 按键注入| 强制将虚拟蓝牙键盘与 Linux 主机配对，并注入 10 秒钟的 tab 按键。 macOS 按键注入| 强制将虚拟蓝牙键盘与 macOS 主机配对，并注入按键以打开网页浏览器并执行 Google 搜索。 iOS 按键注入|...

EUVD-2024-16028

Malicious code in bioql PyPI...

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

Trackpad on the latest Magic Keyboards for iPad Pro M4 is not compatible with the CWA for iOS

The trackpad on the latest Magic Keyboards for the new iPad Pro M4 11-inch and 13-inch is currently not compatible with the Citrix Workspace app on iOS...

Exploit for CVE-2024-0230

cve-2024-0230-blue Helper script to...

The vulnerability of the Bluetooth microprogramming software technology used in Apple’s Magic Keyboard allows a intruder to gain unauthorized access to Bluetooth traffic.

The vulnerability of the Bluetooth microprogramming software in Apple’s Magic Keyboard wireless keyboard relates to the management of user sessions. Exploiting this vulnerability could allow a hacker to gain unauthorized access to Bluetooth traffic...

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

CVE-2024-0230

Summary (CVE-2024-0230): A session management issue in Apple Magic Keyboard is addressed by firmware update 2.0.6. With physical access to the accessory, an attacker may extract the Bluetooth pairing key and monitor Bluetooth traffic. Provided sources consistently cite the fix in Magic Keyboard F...

PT-2024-1415

Name of the Vulnerable Software and Affected Versions Magic Keyboard versions prior to 2.0.6 Description A session management issue was addressed with improved checks. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

About the security content of Magic Keyboard Firmware Update 2.0.6

About the security content of Magic Keyboard Firmware Update 2.0.6 This document describes the security content of Magic Keyboard Firmware Update 2.0.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation h...

Apple Magic Keyboard Security Flaw

The Apple Magic Keyboard is a wireless keyboard from Apple, Inc. A security vulnerability exists in Apple Magic Keyboard, which stems from a session management issue that allows an attacker with access to the physical accessory to extract its Bluetooth pairing key and monitor Bluetooth...

Exploit for Improper Authentication in Google Android

Hi, My Name is Keyboard This repository contains proof-of-con...

New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices

A critical Bluetooth security flaw could be exploited by threat actors to take control of Android, Linux, macOS and iOS devices. Tracked as CVE-2023-45866, the issue relates to a case of authentication bypass that enables attackers to connect to susceptible devices and inject keystrokes to achiev...