BLEBoy

BLEBoy Objetivo Crear un periférico BLE compatible con todos los métodos de emparejamiento BLE que puedan utilizarse para formación y pruebas, incluido el emparejamiento fuera de banda OOB. El periférico debe ser configurable y fácil de recrear con componentes comerciales. Acerca de BLEBoy es un...

CVE-2026-51376

PoC del ataque de envenenamiento de caché BLE en Bitchat 1.15.0 Artículo: https://barghest.asia/blog/bitchat-cache-poisoning/ Requisitos: bleak, pynacl Uso: python3 barghest.py --scan python3 barghest.py --target...

CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication

CVE-2026-22017 – Actualización de firmware vía BLE sin autenticación Código del programa periférico Python bleak blefirmwareupdate.py - Simulated BLE peripheral accepting firmware writes from bleak import BleakServer, BleakGATTCharacteristic import asyncio class FirmwareService: def initself:...

ble_connect_rust

Este repositorio no tiene un README...

ble_proxy

Sistema de Proxy HTTP por BLE Un sistema de proxy HTTP basado en Bluetooth Low Energy BLE que enruta el tráfico del navegador web a través de un dispositivo iOS. Esto permite navegar por internet usando la conexión del dispositivo iOS mediante BLE como capa de transporte. Descripción General de l...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: Confusión de Tipo Basada en Heap en L2CAP CVE-2020-12351 Linux: Confusión de Tipo Basada en Heap en L2CAP PoC CVE-2020-12351 en implementación BLE ¿Por qué modifiqué el PoC original? El PoC original Andy Nguyen, Google Security Research Team se centra en enviar un paquete l2cap malicioso a...

CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address

CVE-2026-0101 – Suplantación de dirección BLE mediante dirección privada resoluble débil Código del programa Python usando simulación bleak bleperipheralsim.py - Simulated BLE peripheral with weak RPA verification import asyncio, random, hashlib from bleak import BleakServer, BleakScanner...

Exploit for CVE-2026-77812

CVE-2026-77812 — DJI Cleartext BLE Transmission of Wi-Fi PSK a...

Linux Distros Unpatched Vulnerability : CVE-2026-90087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: do not leak an hciconn when a second LE connect is rejected createleconncomplete decides whether the failed connection is still pending by comparing ...

EUVD-2026-81275

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

CVE-2026-89034 TCH QRing R20_B006 Unauthenticated BLE Access

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

CVE-2026-89034 TCH QRing R20_B006 Unauthenticated BLE Access

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

CVE-2026-89034

TCH QRing smart ring model R20_B006 (firmware RT09R20_1.00.00_250318) contains an unauthenticated Bluetooth Low Energy vulnerability. The exposed Nordic UART Service enforces no client authentication or command authorization, allowing any nearby attacker within BLE range to connect directly, bypa...

kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP implementation. A remote Bluetooth Low Energy BLE device can exploit this by sending a specially crafted L2CAP ECRED reconfiguration response. This can lead to the corruption of the channel list,...

bluehood v0.8.0

Bluehood Bluetooth Neighborhood - Track BLE devices in your area and analyze traffic patterns. WARNING: Alpha Software This project is in early development and is not ready for production use. Features may change, break, or be removed without notice. Use at your own risk. Data collected should be...

GhostESP v2.2-pre1

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

CVE-2026-47773 ArduinoBLE: Memory corruption via malformed ATT write request

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2026-47773 ArduinoBLE: Memory corruption via malformed ATT write request

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2026-47773 ArduinoBLE: Memory corruption via malformed ATT write request

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

PT-2026-90503

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...