113 matches found
obex
Obex - DLL 阻止 Obex 是一个 PoC 工具/技术，可用于阻止不需要的模块（例如 EDR 或监控库）在进程初始化期间或运行时被加载到新启动的进程中。 功能 在调试控制下，使用参数生成任意进程。 按名称阻止可配置的 DLL 列表。 同时适用于启动 DLL 和动态加载的 DLL（LoadLibrary）。 使用纯 C 语言编写，无外部依赖。 使用方法 root@kitploit: obex.exe "" dll1.dll,dll2.dll,... 如果未提供 DLL 列表，则使用默认阻止列表（在撰写本文时仅为 amsi.dll）。 DLL 名称不区分大小写。 工作原理...
nOBEX
nOBEX 简介 nOBEX 允许模拟 PBAP、MAP 和 HFP 配置文件，以测试使用这些配置文件的车辆信息娱乐系统和类似设备。nOBEX 提供 PBAP 和 MAP 客户端，用于从真实手机克隆这些配置文件的真实虚拟文件系统。这意味着可以下载整个电话簿和所有短信。原始 vcard、XML 列表和 MAP BMSG 结构都会被存储，并且可以根据需要进行修改以进行负面测试。然后，nOBEX 可以充当 PBAP 和 MAP 服务器，允许车辆和其他设备连接并检索电话簿和消息信息。Vcard、BMSG 和 XML...
ROS-20260129-73-0013
A vulnerability in the OBEX protocol implementation of the Bluetooth protocol stack for Linux BlueZ is related to reading outside the valid range. Exploitation of the vulnerability could allow a remote attacker to gain access to protected information...
MiracleLinux 9 : bluez-5.72-2.el9 (AXSA:2024-9114:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9114:01 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 BlueZ: Audio Profile AVRCP...
CLSA-2025-1763031616 bluez: Fix of 10 CVEs
CVE-2023-27349: fix crash while handling unsupported events in avrcp - CVE-2023-44431: fix Stack-based buffer overflow and remote code execution vulnerability - CVE-2023-45866: restrict HID connections to avoid unauthorized input injection - CVE-2023-50229: fix heap-based buffer overflow...
EUVD-2007-0522
Malware in sbrugna...
EUVD-2006-0220
Malware in sbrugna...
EUVD-2007-0521
Malware in sbrugna...
EUVD-2006-2367
Malware in sbrugna...
EUVD-2013-4773
Malware in sbrugna...
EUVD-2006-1370
Malware in sbrugna...
EUVD-2007-0519
Malware in sbrugna...
EUVD-2005-1811
Malware in sbrugna...
EUVD-2007-0520
Malware in sbrugna...
EUVD-2005-3990
Malware in sbrugna...
EUVD-2023-56306
Malicious code in bioql PyPI...
MGASA-2025-0115 Updated bluez packages fix security vulnerabilities
BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. CVE-2023-44431 BlueZ Audio Profile AVRCP avrcpparseattributelist Out-Of-Bounds Read Information Disclosure Vulnerability. CVE-2023-51580 BlueZ Audio Profile AVRCP parsemediaelement Out-Of-Bounds Read...
Linux Distros Unpatched Vulnerability : CVE-2023-51594
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive informati...
bluez: OBEX library out-of-bounds read information disclosure vulnerability
A flaw was found within the handling of OBEX protocol parameters in BlueZ. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a...