CVE-2026-6992-PoC

CVE-2026-6992-PoC 针对蓝牙 PIN RCE 注入漏洞 CVE-2026-6992 的概念验证漏洞利用，重新整理自 https://github.com/utmost3/cve/issues/2 本人不声称发现该漏洞。本内容仅用于教育和作品集展示目的。对于不具备通过蓝牙进行管理能力的设备，此 PoC 可能无法生效。JNAP 请求较为棘手。 用法与详情 此漏洞利用程序应适用于具有蓝牙功能的 MR9600 路由器。 root@kitploit: usage: CVE-2026-6992-PoC.py -h -ti TARGETIP -tp TARGETPORT -lp...

CVE-2026-12222

CVE-2026-12222 affects Yealink SIP-T46U (firmware 108.86.0.118) via the Web FastCGI Service: function mod_webd.BlueToothTest in /api/inner/bttest, where manipulating btMac/pin/reserved can trigger a stack-based overflow. Exploitation reportedly public and feasible within a local network; vendor d...

EUVD-2013-4711

Malware in sbrugna...

kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack

A vulnerability was found in Linux Kernel, where Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack. When an attacker connects to a victim device using the address of the device and the victim initiates a Pairing, the attacker can reflect the encrypted nonce even...

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:0115-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0115-1 advisory. The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were...

Tesla Killer: The Fuzzed and the Furious

The Tesla doesn’t have a conventional OBDII port onboard diagnostics as such. There’s a connector, but it’s just provided with +12V/ground in order to power things like insurance telematics dongles. Instead, there’s the Tesla diagnostics connector X427 which is where things get a bit weird. That...

Unspecified Vulnerability in LIXIL Corporation My SATIS Genius Toilet Application

LIXIL Corporation My SATIS Genius Toilet application for Android is an Android-based application for controlling the SATIS series of toilets from LIXIL Japan. A security vulnerability exists in the LIXIL Corporation My SATIS Genius Toilet application for Android platform, which arises from the...

CVE-2013-4866

The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption water or heat or user discomfort...

Hardcoded credentials

The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption water or heat or user discomfort...

CVE-2013-4866

The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption water or heat or user discomfort...

LIXIL Satis Toilet Hard-Coded Bluetooth PIN

Trustwave SpiderLabs Security Advisory TWSL2013-020: Hard-Coded Bluetooth PIN Vulnerability in LIXIL Satis Toilet Published: 08/01/13 Version: 1.0 Vendor: LIXIL Corporation Product: Satis Version affected: Unknown Product description: The Satis is a "smart" toilet. It is controlled using LIXIL's...