BlueToolkit

Extensible Bluetooth vulnerability testing framework for BR/EDR and BLE. Docs • Installation • Usage • Exploits • Hardware • TODOs • Automotive Evaluation • Bluetooth Resources • License BlueToolkit is a modular, black-box Bluetooth security testing framework for Bluetooth Classic BR/EDR and...

esp32_bluetooth_classic_sniffer

BrakTooth ESP32 BR/EDR Active Sniffer/Injector Simple "Monitor mode" for Bluetooth Classic. Sniff or inject BR/EDR Baseband packets in ESP32 BT connections. This is a reverse engineered active BR/EDR sniffer and ESP32 patching framework, which can be used to explore the Bluetooth BT BR/EDR...

knob

README Repository about the Key Negotiation Of Bluetooth KNOB attacks on Bluetooth BR/EDR and Bluetooth Low Energy. Related Work From the Bluetooth Standard to Standard-Compliant 0-days HWIO20 Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy TOPS20 Bluetooth blues: KNOB...

Edimax BR-6478AC setWAN command injection root RCE

HTTP Basic auth POST /goform/setWAN — pppUserName/pptpUserName/L2TPUserName injected into system pipeline as root boa User root. """Edimax BR-6478AC setWAN authenticated command injection root.""" from future import annotations import base64 from urllib.parse import urlencode from kittysploit...

Edimax BR-6478AC v2.20 - Authenticated Command Injection in the formWlanMP Manuf — Detect

Fingerprint / reachability check for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the formWlanMP Manufacturing-Test Handler Reaching root Command Execution CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Edimax BR-6478AC v2.20 - Authenticated Command Injection in...

Edimax BR-6478AC formWlanMP command injection root RCE

HTTP Basic POST /goform/formWlanMP — command substitution in ateFunc or other fields reaches system as root. """Edimax BR-6478AC formWlanMP authenticated command injection root.""" from future import annotations import base64 import re from urllib.parse import urlencode from kittysploit import fr...

Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Confi — Detect

Fingerprint / reachability check for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the setWAN WAN-Configuration Handler Reaching root Command Execution CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Edimax BR-6478AC v2.20 - Authenticated Command Injection in the...

CVE-2026-116227

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The...

EUVD-2026-109632

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The...

CVE-2026-116227 Edimax BR-6208AC Virtual Server cross site scripting

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The...

CVE-2026-116227

The Edimax BR-6208AC (version 1.32) is affected by a cross-site scripting (XSS) vulnerability within the Virtual Server Page component. This vulnerability allows for remote exploitation through the manipulation of unknown code, potentially leading to unauthorized script execution in a user's brow...

PT-2026-123193

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The...

PT-2026-122008

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br multicast sg del exclude ports removes automatically added STAR EXCL port groups by calling br multicast del pg. For S,G entries, that deletion calls back into br multicast s...

PT-2026-121851

In the Linux kernel, the following vulnerability has been resolved: net: bridge: remove stale rcu barrier in br multicast dev del This rcu barrier came from a time call rcu calls were used in net/bridge/br multicast.c. Now kfree rcu is there, we can remove this problematic rcu barrier which cause...

Edimax BR-6478AC 2.20 Command Injection

Edimax BR-6478AC version 2.20 contains an authenticated command injection vulnerability in the setWAN WAN-configuration handler that can lead to root command execution. https://packetstorm.news/download/236506...

Edimax BR-6478AC 2.20 Command Injection

Edimax BR-6478AC firmware version 2.20 contains an authenticated command injection vulnerability in the formWlanMP manufacturing-test handler that permits command execution as root. https://packetstorm.news/download/236505...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53208)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig net/bluetooth/l2capcore.c:l2capsigchannel accepts BR/EDR signaling packets up to the channel MTU and dispatches each command without enforcing the signaling MTU MTUsig...

PT-2026-122238

Name of the Vulnerable Software and Affected Versions Wasmtime versions prior to 36.0.19 Wasmtime versions prior to 48.0.7 Wasmtime versions prior to 49.0.4 Description The Cranelift compiler backend on aarch64 can incorrectly compile a Wasm br table instruction when it contains more than...

acroform (>=0.1.2, <=0.1.3), bookbinder (0.1.0) +96 more potentially affected by unknown CVE via lopdf (>=0.8.0, <=0.41.0)

lopdf CARGO version =0.8.0, =0.1.2, =0.1.0, =0.0.1, =0.3.0, =0.1.10, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.7.3 - ebook-reader 0.1.1 - epub-reader 0.1.1 and more Source cves: unknown CVE Source advisory: GHSA-6FJ4-RCR3-R7RR...

acroform (>=0.1.2, <=0.1.3), bookbinder (0.1.0) +96 more potentially affected by unknown CVE via lopdf (>=0.8.0, <=0.41.0)

lopdf CARGO version =0.8.0, =0.1.2, =0.1.0, =0.0.1, =0.3.0, =0.1.10, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.7.3 - ebook-reader 0.1.1 - epub-reader 0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6FJ4-RCR3-R7RR...