Whisper_Bully

Whisper Bully Bluetooth BDADDR Extraction, Denial-of-Service & Hijack Research Tool © 2026 @Ymsniper — For authorized security research only. Overview Whisper Bully is a three-stage Bluetooth security research tool targeting devices that advertise Google Fast Pair service UUID fe2c. It demonstrat...

DIY_WhisperPair

DIY-WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit OFFICIAL IMPLEMENTATION NOW LIVE , thanks to the team at KU Leuven Thanks for the shoutout LEGAL NOTICE : This is a security research tool. ReadLEGAL.md before use. Unauthorized access to computer systems...

WhisperPair

WhisperPair: Arsenal de Pruebas para Google Fast Pair -green Una herramienta práctica para comprobar si los dispositivos Google Fast Pair son vulnerables a ataques de emparejamiento, vinculación de cuentas y de nivel de protocolo. Este repositorio proporciona el arsenal de pruebas WhisperPair, un...

FrostedFastPair

About POC for CVE-2025-36911 WhisperPair vulnerability, allowing you to connect to supported devices with no authentication info. This firmware only performs discovery and vulnerability confirmation and does not implement complete audio listening. Output on during tests: Testing Mac: will use the...

CVE-2025-36911-Wisper_Pair_Target_Finder

This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages! Tested only on Debian Based Distros using python3 Usage: root@kitploit: sudo apt update && sudo apt install python3 && sudo a...

whisper-pair

Fast Pair Vulnerability Scanner Security research tool for detecting Bluetooth accessories vulnerable to WhisperPair attacks 🌐 WhisperPair Research • 📦 Installation • 🚀 Usage • 🔬 Technical Details ⚠️ Disclaimer This tool is for authorized security testing and research only. Testing devices without...

CVE-2026-82356

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

CVE-2026-82356 Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

whisperpair-poc-tool

WhisperPair-PoC-Tool and Research A deep dive into CVE-2025-36911 and the security gaps in Google's Fast Pair ecosystem Blog Post Executive Summary Google Fast Pair was designed to make Bluetooth pairing seamless: tap a notification and you're connected. But what happens when that seamless...

CVE-2025-36911-exploit

WhisperPair CLI de Python Herramienta de explotación rápida para CVE-2025-36911 en Python para probar nuestro equipo Autor: Sébastien Dudek @FlUxIuS @ Penthertz Créditos: whisperpair.eu por el descubrimiento y esta bonita APK de @ZalexDev que acortó el tiempo de implementación wpair-app ⚠️ Aviso...

jwt-spoof-tool

jwt-spoof-tool Tool Description : I made this tool for learning purpose and automating jwt token hijacking without depending on using burpsuite the code is well documented and easy to follow Based on CVE-2018-0114 The Vulnerabilty happend because in backend the server check jwk object embeded...

wpair-app

WPair Escáner y herramienta de investigación de vulnerabilidades CVE-2025-36911 p. ej., WhisperPair Características • Instalación • Uso • Cómo funciona • Vulnerabilidad • Créditos Descargo de responsabilidad Esta aplicación es una implementación independiente creada por @ZalexDev a título persona...

CVE-2025-36911_scan

CVE-2025-36911 scanner Tests unauthenticated BR/EDR L2CAP connections to audio PSMs A2DP/AVRCP and detects Fast Pair service GFPS on BLE. Requirements Linux BlueZ installed and bluetooth service active for BLE functionality. Bluetooth adapter enabled bluetoothctl power on. Debian based OS...

ALPINE-CVE-2026-93990

Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input, allowing malformed UTF-16 sequences to be accepted. Attackers can craft UTF-16 encoded XML with lone high surrogates that consume following code units, hiding markup characters from the parser and...

PT-2026-91932

A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALLENGE message contains duplicated string-valued AV PAIR entries. The parser allocates memory for each string value but does not free the previous allocation when the same AV PAIR type...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fixed an error in the unwind operation of rxecreateqp. In the function rxecreateqp, the rxeqpfrominit function is called to initialize the qp. Internally, things like the spin locks are not set up until rxeqpinitreq is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: openvswitch: Fixed a race condition related to port output. Assume the following setup on a single machine: 1. An openvswitch instance with one bridge and default flows. 2. Two network namespaces: “server” and “client”. 3...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize freeqp completion before using it. In irdmacreateqp, if ibcopytoudata fails, it will call irdmadestroyqp to clean up. This process will attempt to wait for the completion of freeqp, but freeqp has not yet...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroying QP/RQ Previously when destroying a QP/RQ, the result of the firmware destruction function was ignored and upper layers weren't informed about the failure. Which in turn could...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rxe: Clear all QP fields if creation failed rxeqpdocleanup relies on valid pointer values in QP for the properly created ones. However, if rxeqpfrominit fails, the QP fields may be filled with garbage, causing the followi...