skylift

SkyLift SkyLift ist ein experimentelles Wi-Fi/BT-Geolokalisierungs-Spoofing-Gerät, das ESP8266- oder ESP32-Boards verwendet, um Wi-Fi-Beacon-Frames oder BT-Advertisements auszustrahlen, die die drahtlose Infrastruktur eines entfernten/Ziel-Standorts nachahmen. Das obige Beispiel zeigt eine...

BlueborneDetection

BlueborneDetection Scarica Per scaricare questo strumento, devi clonare o scaricare come zip questo repository. Utilizzo Compila: root@kitploit: make Accoppia il dispositivo Android e avvia lo script: root@kitploit: ./detectBlueborne Non dimenticare di utilizzare l'indirizzo MAC del dispositivo...

UniBLEed

UniBLEed Unitree G1 RCE PoC e script CVE-2026-76639 / CVE-2026-76640 dettagli tecnici su boschko.ca/g1-ble-rce/...

kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability allows a remote attacker to trigger an out-of-bounds read by sending a specially crafted, short Bluetooth HID report. This can lead to the disclosure of sensitive information from the system's memor...

rinhit

RinHit RinHit - framework di ricognizione per l'ecosistema macOS. Raccoglie artefatti dall'ecosistema Apple per costruire timeline di attività di rete, identità跨 dispositivo e correlazione della posizione fisica. Questo è il modulo di ricognizione open-source. Il payload Swift closed-source...

CVE-2020-10135-BIAS

CVE-2020-10135-BIAS CVE 2020-10135 noto anche come BIAS Bluetooth Impersonation Attack Sembra che dopo un po' e superando qualche ostacolo sia riuscito a eseguire BIAS Bluetooth Impersonation Attack CVE 2020-10135. Ho impersonato la connessione di un Samsung S3 Neo+ verso un host Linux. Roba...

writeup-cve-2019-19194

Writeup CVE-2019-19194 Questa è una writeup e una Proof-of-Concept teorica della CVE-2019-19194. ⚠️ Questa CVE è stata scoperta da https://asset-group.github.io/disclosures/sweyntooth/ Indice dei contenuti Sommario Software vulnerabile e versione Panoramica Stack di protocollo e architettura...

ROOT-OS-DEBIAN-12-CVE-2016-9917 CVE-2016-9917 in bluez - Patched by Root

Root has patched CVE-2016-9917 in the bluez package for Root:Debian:12. Multiple fixed versions available...

CVE-2023-21739

CVE-2023-21739 Sicherheitsanfälligkeit im Windows-Bluetooth-Treiber bezüglich Erhöhung von Berechtigungen. Authentifizierung| Komplexität| Vektor ---|---|--- nicht verfügbar| nicht verfügbar| nicht verfügbar Vertraulichkeit| Integrität| Verfügbarkeit ---|---|--- nicht verfügbar| nicht verfügbar|...

sploit-bX

sploit-bX Bash-Installer für die Exploits CVE-2017-0781 und CVE-2017-0785 sowie alles Notwendige für deren Nutzung. Diese Exploits dienen dazu, herauszufinden, ob unser Bluetooth angreifbar ist. Repository herunterladen git clone https://github.com/CarlosDelRosario7/sploit-bX Installation Wechsel...

The vulnerabilities of the functions l2cap_disconnect_req() and l2cap_disconnect_rsp() in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions l2capdisconnectreq and l2capdisconnectrsp in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem are related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting these vulnerabilities coul...

The vulnerability of the l2cap_information_rsp() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the l2capinformationrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the btusb_work() function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver allows a attacker to cause a service failure.

The vulnerability of the btusbwork function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver lies in a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mgmt_add_adv_patterns_monitorComplete() function in the net/bluetooth/mgmt.c module of the Bluetooth subsystem of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mgmtaddadvpatternsmonitorComplete function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the btintelHW_error() function in the drivers/bluetooth/btintel.c module of the Linux Bluetooth device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btintelHWerror function in the drivers/bluetooth/btintel.c module of the Linux Bluetooth device driver is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2026-81896

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...

The vulnerability of the l2cap_ecred_conn_req() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to access protected information or cause service failures.

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

whisperpair-poc-tool

WhisperPair-PoC-Tool e Ricerca Un'analisi approfondita di CVE-2025-36911 e delle lacune di sicurezza nell'ecosistema Fast Pair di Google Articolo del Blog Sommario Esecutivo Google Fast Pair è stato progettato per rendere l'associazione Bluetooth senza attriti: tocca una notifica e sei connesso. ...

CVE-2026-13213

The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...

CVE-2026-13213

Zephyr RTOS Bluetooth Hearing Access Service (HAS) GATT server (subsys/bluetooth/audio/has.c) contains a NULL-pointer dereference in security_changed(). The connection-callback set is installed unconditionally via BT_CONN_CB_DEFINE, so the callback fires before the application calls bt_has_regist...