177 matches found
WhisperPair
WhisperPair: Testing Harness for Google Fast Pair A practical tool to test whether Google Fast Pair devices are vulnerable to pairing, account-binding, and protocol-level attacks. This repository provides the WhisperPair testing harness, a tool for evaluating the security of Google Fast Pair...
BlueSpy
BlueSpy - PoC to record audio from a Bluetooth device This repository contains the implementation of a proof of concept to record and replay audio from a bluetooth device without the legitimate user's awareness. The PoC was demonstrated during the talk BSAM: Seguridad en Bluetooth at RootedCON 20...
Astra Linux – Vulnerability in bluez
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability, as the target must connect...
Astra Linux – Vulnerability in Linux
A flaw involving double-free memory corruption in the Linux kernel’s HCI device initialization subsystem was discovered. This flaw allows a malicious HCI TTY Bluetooth device to be attached to the system. A local user could exploit this flaw to crash the system. This flaw affects all Linux kernel...
Exploit for Improper Authentication in Google Android
BT-HID-PoC — CVE-2023-45866 Interactive Wizard DISCLAIMER...
CVE-2021-0965
In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-0933
In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetoo...
EUVD-2025-201273
An issue in the Bluetooth Human Interface Device HID of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject arbitrary keystrokes via a spoofed Bluetooth HID device...
CVE-2025-63896
An issue in the Bluetooth Human Interface Device HID of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject arbitrary keystrokes via a spoofed Bluetooth HID device...
CVE-2025-4321
In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation...
CVE-2025-4321 DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets
In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation...
CVE-2025-4321
The CVE-2025-4321 entry concerns Silabs RS9116W-WiSeConnect SDK used in Bluetooth devices. Affected component: the RS9116-WiseConnect SDK handling L2CAP; root cause is processing malformed L2CAP packets, leading to a Denial of Service. Impact as stated: device remains non-operational until a hard...
EUVD-2017-11871
Malware in sbrugna...
EUVD-2005-2548
Malware in sbrugna...
EUVD-2020-29851
Malware in sbrugna...
EUVD-2021-26108
Malware in sbrugna...
EUVD-2021-12302
Malware in sbrugna...
EUVD-2018-21160
Malware in sbrugna...