CVE-2020-10135-BIAS

CVE-2020-10135-BIAS CVE 2020-10135 又名 BIAS（蓝牙冒充攻击） 看起来经过一段时间并费了一些周折后，我成功执行了 BIAS（蓝牙冒充攻击）CVE-2020-10135。冒充了 Samsung S3 Neo+ 与 Linux 主机的连接。很酷的东西。感谢 Internalblue 和 BIAS PoC。 从我的角度来看，我发现执行该攻击几乎只需要被冒充设备的 BT 地址，该设备此前已与另一端配对并连接。其余信息你都可以获取，以便 PoC 正常工作。 PoC/原始作者: https://github.com/francozappa/bias 日志 No...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414674 advisory. Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BDADDR of the peer...

CVE-2020-26555: Incorrect Authorization

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BDADDR of the peer device to complete pairing without knowledge of the PIN...