Nostr Web Client

When will you stop pushing unsafe tech?

New Vulnerabilities: In 2025, several new vulnerabilities have been reported, including:

CVE-2025-32875: Insufficient authentication during Bluetooth binding, allowing unauthorized devices to connect during initial setup.

CVE-2025-32876: Weakness in the encryption process during Bluetooth handshakes, particularly in certain Android environments.

CVE-2025-44559: A Denial of Service (DoS) vulnerability in the Bluetooth Low Energy (BLE) stack, allowing attackers to disrupt services by sending crafted packets.

nostr:nevent1qqsdtpytt3y5am2gd0zgt54k73exdas2vyawkg6uwrvkdahs3fv0jygpr4mhxue69uhkummnw3ezucnfw33k76twv4ezuum0vd5kzmp0qgsgydql3q4ka27d9wnlrmus4tvkrnc8ftc4h8h5fgyln54gl0a7dgsrqsqqqqqp8ehzfs

Reply to this note

Please Login to reply.

Discussion

Russo 4mo ago

Specific Vulnerabilities Related to OBEX

Bluesnarfing: This attack exploits OBEX to access all files on a victim's device without consent. It remains a concern, especially for devices that do not implement robust security measures.

BLUFFS Vulnerabilities: A recent set of vulnerabilities known as BLUFFS affects Bluetooth Core Specifications 4.2 to 5.4, allowing attackers to impersonate devices and intercept communications

moonsettler 4mo ago

"allowing attackers to impersonate devices and intercept communications"

sounds like a feature for alphabet.

REUZ 4mo ago

It saying don't use it?

Russo 4mo ago

I would not use it

AU9913 4mo ago

Where you getting these?

Russo 4mo ago

Anywhere in the web where track vulns, pick the CVE and search it