553 matches found
killerbee
KillerBee KillerBee is a Framework and Tools for Testing & Auditing ZigBee and IEEE 802.15.4 Networks Notice usb0.x support is being deprecated/removed Apimote v1 support is being deprected/removed If you require these features please create an issue to explain your usecase and requirements...
IoT-Pentest-devices-and-purpose
IoT Pentest Devices and Their Purpose - 2025 Edition This document outlines the latest tools and hardware for IoT security testing in 2025, covering different protocols and technologies. It includes cutting-edge attacks, newly discovered vulnerabilities, and updated hardware and software tools wi...
iotmap
IoTMap IoTMap is a tool that models IoT networks using one or multiple protocols simultaneously. This is work in progress, as a part of a PhD thesis on Internet Of Things security. This repository is regularly updated as new results are obtained. This project supports 3 protocol as this time : BL...
zigdiggity
ZigDiggity Version 2 Introducing ZigDiggity 2.0 , a ZigBee penetration testing framework created by Matt Gleason & Francis Brown of Bishop Fox. Special thanks to Caleb Marion! ZigDiggity version 2 is a major overhaul of the original package and aims to enable cybersecurity professionals, auditors...
CVE-2021-27289
🐝 CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices 📑 Table of Contents Before We Get Serious The Story Behind This CVE Vulnerability Affected Devices Technical Details Attack Scenario Impact Proof of Concept Demo Videos Original Blog Post Researcher Zigbee Basics Background and...
CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit
CVE-2026-21006 – Zigbee Light Link Factory Reset Exploit Program Code Python Zigbee simulation zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself, cmdid: if cmdid ==...
CLEANSTART-2024-CW43891 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4
Security vulnerability affects the wireshark package. MONGO and ZigBee TLV dissector infinite loops in Wireshark 4...
CVE-2026-85079
EmberZNet version 9.1.1 and earlier are vulnerable to an out-of-bounds write caused by processing malformed Simple_Desc_req responses from network devices. This vulnerability could potentially lead to remote code execution . The attack requires the response to originate from a device that has alr...
CVE-2026-85079 Out-of-bounds write in Zigbee Simple_Desc_req handling
In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...
CVE-2026-85079 Out-of-bounds write in Zigbee Simple_Desc_req handling
In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...
CVE-2026-94502 Out-of-bounds write in Zigbee Publish Price Matrix handling
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...
CVE-2026-94502
EmberZNet versions 9.1.1 and earlier are vulnerable to an out-of-bounds write caused by a malformed Publish Price Matrix command. This vulnerability specifically impacts devices supporting the Price Cluster and requires the malicious message to originate from a device that has already joined the ...
CVE-2026-94502 Out-of-bounds write in Zigbee Publish Price Matrix handling
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...
killerbee
KillerBee KillerBee è un framework e strumenti per testare e auditare reti ZigBee e IEEE 802.15.4 Avviso Il supporto per usb0.x è stato deprecato/rimosso Il supporto per Apimote v1 è stato deprecato/rimosso Se hai bisogno di queste funzionalità, per favore crea un issue per spiegare il tuo caso...
SUSE CVE-2026-95391
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service...
CVE-2026-95391
A flaw was found in the ZigBee ZCL protocol dissector in Wireshark. This issue occurs when malformed packets are decoded from a pcap file or the network, causing a use-after-free, resulting in a denial of service. Mitigation If the ZigBee ZCL protocol dissector is not being used, it can be disabl...
DEBIAN-CVE-2026-95391
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service...
CVE-2026-95391
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service...