htb-machine-ringdown

htb-machine-ringdown Detailed design & exploitation writeup for Ringdown—an original Debian/Asterisk vulnerable machine featuring CVE-2024-42365 AMI, PJSIP pre-hash cracking, and Fail2ban POSIX ACL privilege escalation...

cve-2026-25994_PJSIP

CVE-2026-25994 – PJNATH ICE Stack Buffer Overflow pjsip ≤ 2.16 Overview CVE-2026-25994 is a stack-based buffer overflow vulnerability affecting the ICE Interactive Connectivity Establishment implementation in pjsip ≤ 2.16, specifically within the PJNATH component. The vulnerability exists in the...

BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- HACKING SIP/PJSIP crash remote asterisk instances : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

CVE-2026-77396

NIST description about CVE: PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/aviplayer.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived...

PJSIP 2.16 ICE Buffer Overflow

PJSIP versions 2.16 and prior contain a buffer overflow in the PJNATH ICE Session when processing credentials with excessively long usernames. A proof of concept sends a crafted SIP INVITE with a long ICE username to demonstrate the issue. https://packetstorm.news/download/240256...

CVE-2026-57187

A flaw was found in Asterisk. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS through a heap use-after-free memory error in the PJSIP communication handling component. By sending a Session Initiation Protocol SIP INVITE request over a connection-oriente...

CVE-2026-57185

A flaw was found in Asterisk. An authenticated remote attacker can trigger a buffer over-read in the PJSIP Message Waiting Indication MWI body parser by sending a specially crafted Session Initiation Protocol SIP NOTIFY request. Successful exploitation causes Asterisk to crash, resulting in a...

PJSIP 2.17 AVI Player Heap Buffer Overflow

PJSIP version 2.17 and earlier contains a heap-based out-of-bounds write in its AVI player when a crafted AVI chunk length exceeds the frame buffer capacity. The proof of concept generates a malformed AVI file and invokes a local test harness to demonstrate the crash...

Exploit for Heap-based Buffer Overflow in Teluu Pjsip

NIST description about CVE: PJSIP is a free and open source...

CLEANSTART-2024-BE10332 PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

Security vulnerability affects the pjproject package. PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE...

CLEANSTART-2024-XV73550 PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

Security vulnerability affects the pjproject package. PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE...

CLEANSTART-2024-YT39305 PJSIP is a free and open source multimedia communication library written in C

Security vulnerability affects the pjproject package. PJSIP is a free and open source multimedia communication library written in C...

CLEANSTART-2024-DE27508 PJSIP is a free and open source multimedia communication library written in C

Security vulnerability affects the pjproject package. PJSIP is a free and open source multimedia communication library written in C...

CLEANSTART-2024-TY36843 PJSIP is a free and open source multimedia communication library written in C language

Security vulnerability affects the pjproject package. PJSIP is a free and open source multimedia communication library written in C language...

CLEANSTART-2024-AR47752 PJSIP is a free and open source multimedia communication library written in C

Security vulnerability affects the pjproject package. PJSIP is a free and open source multimedia communication library written in C...

CLEANSTART-2024-TX30218 PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages

Security vulnerability affects the pjproject package. PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C, and Python languages...

Linux Distros Unpatched Vulnerability : CVE-2026-57187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

Linux Distros Unpatched Vulnerability : CVE-2026-57185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

CVE-2026-57187

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a heap-use-after-free in PJSIP TCP/SDP handling by sending a SIP INVITE over a...

DEBIAN-CVE-2026-57185

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the PJSIP MWI body parser by sending a carefully...