libsrtp

libSRTP 简介 本软件包提供了安全实时传输协议（SRTP）、通用安全转换（UST）以及配套加密内核的实现。SRTP API 文档见 include/srtp.h，库文件为 libsrtp2.a（编译后生成）。 本文档描述 libSRTP，即来自 Cisco Systems, Inc. 的开源安全 RTP 库。RTP 是实时传输协议（Real-time Transport Protocol），是 IETF 定义的用于传输电话、音频和视频等实时数据的标准，参见 RFC 3550。安全 RTP（SRTP）是 RTP 的一种轮廓（profile），用于为 RTP 数据提供机密性，并为 RT...

WireBug

WireBug WireBugは、Voice-over-IPのペネトレーションテストのためのツールセットです。ウィザード形式で設計されており、簡単に使用できます。各ツールは個別のPythonまたはBashプログラムとしても利用できるため、単体でも使用可能です。 Installation インストールガイドはwikiを参照してください。 Tools FullBridge: 2つの定義されたインターフェースでレイヤ2ブリッジを設定するシンプルなBashスクリプトです。 TimeShift:...

CVE-2020-25748

CVE-2020-25748 建议描述 在 Rubetek RV-3406、RV-3409 和 RV-3411 摄像头（固件版本 v342、v339）中发现了一个明文传输问题。 中间人可以拦截并修改来自摄像头的视频数据，这些数据以未加密的形式传输。还可以修改来自 NTP 和 RTSP 服务器的响应，并强制摄像头使用更改后的值。 附加信息 已向供应商发送有关该漏洞的信函。 漏洞类型 CWE-319：敏感信息的明文传输 产品供应商 Rubetek https://rubetek.com/ 受影响产品代码库 摄像头 RV-3406 - 固件版本 339 和 342 受到影响。没有修复版本。 摄...

CVE-2026-18649

CVE-2026-18649 - GStreamer rtph264depay 无界内存增长 DoS 漏洞 针对 GStreamer H.264 RTP 解载荷器（rtph264depay）中资源耗尽漏洞的概念验证代码。相同的模式也影响 rtph265depay。 它是什么 在 H.264 FU-A 分片 RTP 重组过程中，每个传入分片都会被推送到内部的 GstAdapter 缓冲区，且缓冲区大小没有上限。适配器仅在 FU 头中设置了分片结束（E）位时才会刷新。远程攻击者先发送一个有效的起始分片，然后持续发送无限数量的后续分片，但始终不设置 E 位。缓冲区不断增长，直至进程内存耗尽并崩...

DCVC2

Discord语音频道C2（简称DCVC2） 这款多操作系统兼容工具旨在利用Discord的语音频道进行命令与控制（C2）操作。该工具完全基于实时协议（RTP）运行，主要借助DiscordGo，且不会在文本频道中留下任何恼人的痕迹。它是一款基于命令行的工具，所有操作严格在Windows/Linux/OSX的终端中执行。请负责任地使用，但也要玩得开心！; 要求： 1. 更新（之前的链接有误）了解DCVC2 2. 你需要一个Discord账号。 3. 你需要一个Discord服务器。 4. 在设置中将语音聊天速度提高到96kbps。 5...

CVE-2026-54632

SIPSorcery is a WebRTC, SIP, and VoIP library for C and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMessageAttributes, STUNXORAddressAttribute, and STUNAddressAttribute parsing path index untrusted bytes without sufficient length checks, while...

CVE-2026-54632 SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)

SIPSorcery is a WebRTC, SIP, and VoIP library for C and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMessageAttributes, STUNXORAddressAttribute, and STUNAddressAttribute parsing path index untrusted bytes without sufficient length checks, while...

CVE-2026-54632

SIPSorcery is a C#/.NET WebRTC, SIP, and VoIP library (NuGet). Prior to 10.0.9 , a single malformed UDP datagram sent to the RTP/ICE socket can remotely terminate an active media session (availability impact only). The root cause combines two issues: unchecked byte indexing in RTPChannel.OnRTPPac...

rtpnatscan

rtpnatscan 一个极简命令行工具，用于检查你的 RTP 代理 / NAT 辅助程序是否存在 RTP NAT 窃取攻击漏洞。...

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

Moderate: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

RHEL 10 : gstreamer1-plugins-good (RHSA-2026:65959)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65959 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

UBUNTU-CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

EUVD-2026-74264

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

CVE-2026-30754

A memory corruption vulnerability in FFmpeg before 8.1 occurs in the nal_send function within libavformat/rtpenc_h264_hevc.c . When transmitting H.264/HEVC streams via RTP, a crafted input file causes a negative size parameter (size=-3) to be passed to memcpy , leading to memory corruption. The i...