16 matches found
BlueDucky
BlueDucky الإصدار 2.1 Android 🦆 شكرًا لجميع الأشخاص في HackNexus. تأكد من الانضمام إلينا على VC! https://discord.gg/HackNexus ملاحظات: لن أتمكن من تشغيل هذا على جهاز كمبيوتر محمول أو أي جهاز آخر خارج Raspberry Pi للاختبار. وبسبب ذلك، يجب حل أي مشاكل تواجهونها فيما بينكم لأنني لا أملك أموالًا إضاف...
hi_my_name_is_keyboard
مرحبًا، اسمي لوحة المفاتيح يحتوي هذا المستودع على نصوص برمجية لإثبات المفهوم للثغرات CVE-2023-45866 وCVE-2024-21306 وCVE-2024-0230. يمكن العثور على تفاصيل إضافية في منشور المدونة. إثبات المفهوم| الوصف ---|--- حقن ضغطات المفاتيح في أندرويد| يفرض إقران لوحة مفاتيح Bluetooth افتراضية بجهاز أندرويد...
EUVD-2023-25283
Malicious code in bioql PyPI...
CVE-2023-21115
In btmsecencryptchange of btmsec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2020-0148
In btuhcifpincoderequestevt, btuhciflinkkeyrequestevt, and btuhciflinkkeynotificationevt of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. Us...
PT-2023-17991 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read due to a missing bounds check in the btm delete stored link key complete function of btm devctl.cc. This could lead to local information disclosure...
CVE-2023-21115
In btmsecencryptchange of btmsec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
Out-of-bounds
In btmsecencryptchange of btmsec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2023-21115
In btmsecencryptchange of btmsec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2020-0148
In btuhcifpincoderequestevt, btuhciflinkkeyrequestevt, and btuhciflinkkeynotificationevt of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. Us...
CVE-2020-10135
Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth...
CVE-2020-10135
A flaw was discovered in the Bluetooth protocol affecting the Bluetooth BR/EDR authentication. An attacker with physical access to the Bluetooth connection could perform a spoofing attack impersonating the address of a previously paired remote device. This attack may result in the attacking devic...
CVE-2017-17860
In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...
CVE-2017-17860
In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...
Code injection
In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...
