Which of the following are considered Bluetooth security violations? Each correct answer represents a complete solution. Choose two.

Cross-site scripting (XSS) is a web application vulnerability that injects malicious scripts into web pages viewed by other users, with no relation to Bluetooth protocols.

SQL injection targets database-driven web applications by inserting malicious SQL code into input fields, and has no connection to Bluetooth communication.

Bluesnarfing is a Bluetooth attack that exploits the OBEX push profile to gain unauthorized access to data stored on a Bluetooth-enabled device without the owner's knowledge. It is a direct Bluetooth security violation that can expose contacts, messages, and calendar data.

The Bluebug attack exploits weaknesses in Bluetooth implementations to take control of a device's phone features, such as placing calls or sending SMS messages without user consent. It specifically targets the Bluetooth AT command channel to hijack device functionality.

Social engineering is a psychological manipulation tactic used to trick individuals into divulging confidential information and is not specific to Bluetooth technology.