CVE-2026-113131

A flaw was found in the Bluetooth component of Chromium. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser's sandbox an isolated execution environment by tricking a user into visiting a specially crafted HTML page. The issue stems from memory...

CVE-2026-113060

A flaw was found in chromium-browser. Improper input validation in the Bluetooth component allows a remote attacker to potentially execute arbitrary code inside the browser's isolated sandbox environment by convincing a user to visit a crafted HTML page...

bluehood

Bluehood Bluetooth Neighborhood - Track BLE devices in your area and analyze traffic patterns. WARNING: Alpha Software This project is in early development and is not ready for production use. Features may change, break, or be removed without notice. Use at your own risk. Data collected should be...

CVE-2026-113005

A flaw was found in chromium-browser. A memory corruption vulnerability in the Bluetooth component allows a remote attacker to execute arbitrary code within the browser's restricted sandbox environment. To exploit this flaw, an attacker must entice a user into visiting a specially crafted HTML pa...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

system_bt_AOSP10_r33_CVE-2021-0522

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

bitchat

bitchat A decentralized peer-to-peer messaging app with dual transport architecture: local Bluetooth mesh networks for offline communication and internet-based Nostr protocol for global reach. No accounts, no phone numbers, no central servers. It's the side-groupchat. bitchat.free 📲 App Store...

CVE-2026-78117

The Infineon PSOC 6 BLESS HCI driver (specifically in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c) is vulnerable to a race condition due to the use of a file-scope variable, static cy_stc_ble_hci_tx_packet_info_t hci_tx_pkt, to store outgoing HCI packet descriptors. Because psoc6_bless_send(...

CVE-2026-18748

The Bluetooth Classic A2DP host is vulnerable to an out-of-bounds read due to improper handling of the codec Information Element (IE). Specifically, a2dp_process_config_ind() in subsys/bluetooth/host/classic/a2dp.c fails to validate the length of the codec IE, copying only the first 8 bytes while...

ultrablue

Ultrablue, a remote attestation server for your phone Ultrablue User-friendly Lightweight TPM Remote Attestation over Bluetooth is a solution to allow individual users to perform boot state attestation with their phone. It consists in a server, running on a computer, acting as the attester, and a...

RadareEye

A tool for scanning nearby devices and execute command when the target device comes in between range.. NOTE:- RadareEye Owner will be not responsible if any user performs malicious activities using this tool. Use it for Learning purpose only. Installation of RadareEye : git clone...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

BlueToolkit

Extensible Bluetooth vulnerability testing framework for BR/EDR and BLE. Docs • Installation • Usage • Exploits • Hardware • TODOs • Automotive Evaluation • Bluetooth Resources • License BlueToolkit is a modular, black-box Bluetooth security testing framework for Bluetooth Classic BR/EDR and...

wigle-wifi-wardriving

WiGLE Wireless Wardriving Network stumbling client for Android, from wigle.net. This client provides geolocated detection and logging for WiFi, Bluetooth, and cellular signals using Android devices. As of January 2023, this application supports Android SDK versions 24 Nougat and up. For older...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

Komfy-Switch-Wifi-Password-Disclosure

Komfy-Switch-Wifi-Password-Disclosure Intro This writeup will detail my finding on D-Link's Komfy Switch with Camera to retrieve the device's associated wifi ssid and password over bluetooth 4.0 BLE. The Komfy switch is a home security and automation product that can replace a wall switch in your...

openwifipass

OpenWifiPass An open source implementation of the grantor role in Apple's Wi-Fi Password Sharing protocol. Disclaimer OpenWifiPass is experimental software and is the result of reverse engineering efforts by the Open Wireless Link project. The code serves solely documentary and educational...

CVE-2026-98633

A flaw was found in the Linux kernel's Bluetooth NXP UART driver, which can lead to a Denial of Service DoS. When device coredump support is disabled in the kernel configuration, handling firmware dump data fails to release cloned socket buffers upon encountering an unsupported operation error. A...

bluez

BlueZ - Bluetooth protocol stack for Linux Copyright C 2000-2001 Qualcomm Incorporated Copyright C 2002-2003 Maxim Krasnyansky [email protected] Copyright C 2002-2010 Marcel Holtmann [email protected] Compilation and installation In order to compile Bluetooth utilities you need followin...

bitchat-android

!WARNING This software has not received external security review and may contain vulnerabilities and may not necessarily meet its stated security goals. Do not use it for sensitive use cases, and do not rely on its security until it has been reviewed. Work in progress. bitchat for Android A secur...