Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: qca: fixed an issue where information was leaked when fetching the fw build id. Added missing sanity checks and moved the 255-byte build-id buffer off the stack to prevent the leakage of stack data through debugfs, ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fixed UAF in hciaclcreateconnsync This fixed the following UAF in hciaclcreateconnsync where a connection that is still pending may be freed after command submission conn-state == BTOPEN. This issue can also...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fixed a nullptrderef issue in rfcommchecksecurity. During our fuzz testing of the connection and disconnection processes at the RFCOMM layer, we discovered this bug. By comparing the packets generated during a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hcisync: Fixed a double-free in ‘hcidiscoveryfilterclear’. The function ‘hcidiscoveryfilterclear’ frees the ‘uuids’ array and then sets it to NULL. There is a small chance that the following races will occur:...

Astra Linux – Vulnerability in Linux

In the Linux kernel before version 5.12.4, the net/bluetooth/hcievent.c file contains a use-after-free issue when destroying an hcichan, specifically related to CID-5c4c8c954409. This issue results in the writing of an arbitrary value...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fixed a potential issue after the “user-after-free” operation. This fix addresses all cases where allocating a buffer using allocskb might release the “chan lock”, and reacquiring it later could result in the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hciuart: added a missing NULL check in h5enqueue. Syzbot encountered a general protection fault in pmruntimeresume. The problem was due to a missing NULL check. hu-serdev can be NULL, and we should not blindly pass...

CVE-2026-78306

DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...

CVE-2026-78306 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...

EUVD-2026-64752

DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...

CVE-2026-78306

DJI drones expose an unauthenticated DUML command interface over Bluetooth , allowing an attacker within Bluetooth range to modify Wi-Fi configuration parameters (SSID, PSK, MAC, regulatory country code, channel). By overwriting the Wi-Fi PSK with a known value, an attacker can connect to the dro...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

iOS-Bluetooth-Ethernet-Exploit

استغلال بوابة إيثرنت بدون تكلفة على iOS بلوتوث PAN → منفذ USB 62078 المؤلف: Fares Dahoumane Twitter/X: https://x.com/faresdahoumane التاريخ: يونيو 2026 الحالة: إفصاح عام النتائج فقط – التفاصيل التقنية الكاملة مُقدَّمة إلى BlackHat Arsenal للمراجعة. ⚠️ إخلاء المسؤولية هذا المستودع لأغراض تعليمية...

RedGridLink

Red Grid Link Navigazione MGRS offline e coordinamento di prossimità per piccole squadre 2-8 persone. Nessuna copertura cellulare necessaria. Basato sul motore MGRS di Red Grid MGRS. Field Link aggiunge sincronizzazione di prossimità zero-config tramite Bluetooth, con Apple Multipeer Connectivity...

BlueToolkit

Framework estensibile per il test delle vulnerabilità Bluetooth per BR/EDR e BLE. Documentazione • Installazione • Utilizzo • Exploit • Hardware • TODOs • Valutazione Automotive • Risorse Bluetooth • Licenza BlueToolkit è un framework modulare di test della sicurezza Bluetooth in modalità black-b...

libbtbb

libbtbb Questa è la libreria di decodifica della banda base Bluetooth, derivata dal progetto GR-Bluetooth. Può essere utilizzata per estrarre informazioni su pacchetti Bluetooth e piconet da dispositivi Ubertooth e da GR-Bluetooth/USRP. Questo codice è incompleto ed è ancora in fase di sviluppo...

ubertooth

Ubertooth Project Ubertooth is an open source wireless development platform suitable for Bluetooth experimentation. Ubertooth ships with a capable BLE Bluetooth Smart sniffer and can sniff some data from Basic Rate BR Bluetooth Classic connections. The latest release is 2020-12-R1. The latest...

ubertooth

Ubertooth Il progetto Ubertooth è una piattaforma di sviluppo wireless open source adatta alla sperimentazione Bluetooth. Ubertooth è dotato di uno sniffer BLE Bluetooth Smart capace e può sniffare alcuni dati dalle connessioni Bluetooth Classic Basic Rate BR. L'ultima release è 2020-12-R1...

shining-mask

Shining Mask Hacks Dieses Repository enthält Code und Anleitungen zum Erstellen eines benutzerdefinierten Bluetooth-Low-EnergyBLE-Controllers für die Shining LED Mask, der das Gesichtsbild aller Masken in BLE-Reichweite automatisch ändert. Dieses Repository ist eine Ergänzung zu Invasion of the...

BTLE

BTLE BTLE è una suite software libera e open-source per Bluetooth Low Energy BLE basata su Software Defined Radio, insieme a un progetto open di chip BTLE. Include: Banda base BTLE: descrizione degli algoritmi, implementazione in Python e Verilog, risultati con FPGA e SkyWater 130 PDK workflow...