What happened
A public source linked this CVE to an advisory or demonstration repository. Review the original reference before use.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
PoC-in-GitHub · pentestfunctions/BlueDucky🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)★ 1899pentestfunctions2024-01-16CandidatePoC-in-GitHub · Eason-zz/BluetoothDuckyCVE-2023-45866 - BluetoothDucky implementation (Using DuckyScript)★ 16Eason-zz2024-01-16CandidatePoC-in-GitHub · jjjjjjjj987/cve-2023-45866-py★ 0jjjjjjjj9872024-01-23CandidatePoC-in-GitHub · cisnarfu/BluepopCVE-2023-45866★ 0cisnarfu2024-06-29CandidatePoC-in-GitHub · AvishekDhakal/CVE-2023-45866_EXPLOITSExploits Tested in Mi A2 Lite and Realme 2 pro★ 3AvishekDhakal2024-09-02CandidatePoC-in-GitHub · Chedrian07/CVE-2023-45866-POC★ 0Chedrian072024-10-09CandidatePoC-in-GitHub · Danyw24/blueXploitExploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)★ 16Danyw242024-12-15CandidatePoC-in-GitHub · xG3nesis/RustyInjectorRust implementation of Marc Newlin's keystroke injection proof of concept (CVE-2023-45866).★ 1xG3nesis2024-12-20CandidatePoC-in-GitHub · v3ilsm1th/CVE-2023-45866_WIP★ 0v3ilsm1th2025-03-27CandidatePoC-in-GitHub · Sergeb250/BlueDuckyBlueDucky exploits a Bluetooth vulnerability, specifically CVE-2023-45866, which allows an attacker to inject keystrokes into a target device. The attacker's device impersonates a Bluetooth keyboard to establish an encrypted connection without user authorization. The BlueDucky tool automates this process★ 2Sergeb2502025-08-26CandidatePoC-in-GitHub · hegaz0y/-BuLEDSEC_BKIF is a keystroke injection tool for Android, Linux, and iOS. With the help of CVE-2023-45866, it grants users unprecedented control over targeted systems, enabling various functions from keystroke injection to advanced system manipulations.★ 1hegaz0y2026-05-31CandidatePoC-in-GitHub · KiroShehata/CVE-2023-45866-Bluetooth-Security-ResearchSecurity research and controlled validation of CVE-2023-45866, examining unauthenticated Bluetooth HID connections, keystroke injection, affected configurations, and mitigations.★ 0KiroShehata2026-10-05CandidateSource timeline
Discovered through PoC-in-GitHubView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.