CVE-2024-31964

CVE-2024-31964 CVE-2024-31964 PoC: Mitel 6900w Series SIP Phone - Temporary Authentication Bypass Vulnerability details Summary It consists of a temporary authentication bypass vulnerability in the HTTP administrative website panel of several Mitel Products. Impact Allows an attacker to modify th...

fusionpbx_rce_vulnerability

Prelude This simple code tries to complete the implementation of the chained vulnerability introduced by Dustin Cobb at RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX. RCE Reproduction Steps 1. View the vulnerable operator screen in a web browser, located in this example at...

CVE-2026-110658

A flaw was found in Sofia-SIP. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Initiation Protocol SIP message containing an oversized multipart boundary that exceeds the message body length. During message parsing, this flaw causes the...

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – VoIP SIP Digest Authentication Replay Program Code Python SIP sim sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set @app.route'/call',...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet manipulation tools are...

BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- HACKING SIP/PJSIP crash remote asterisk instances : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

CVE-2023-28810

CVE-2023-28810 Exploit code for CVE-2023-28810. udp-config-changer.py Change the running configuration of a target hikvision intercom without needing any authentication. udp-password-brute.py Attempt to recover the admin password for the device via brute force guessing wordlist not supplied...

UBUNTU-CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658 Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP versions through 1.13.18 are vulnerable to a heap out-of-bounds read in the msg_multipart_parse() function. An unauthenticated remote attacker can trigger this vulnerability by sending an INVITE request with a multipart Content-Type where the boundary exceeds the actual body length. Thi...

CVE-2026-110658 Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658 Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

EUVD-2026-101131

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

PT-2026-114098

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg multipart parse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body...

Mr.SIP

Marco de seguridad, ataque y auditoría SIP Mr.SIP...

viproy-voipkit

Descontinuado Viproy era una herramienta PoC de evaluación de seguridad VoIP que tenía varios módulos y exploits que mantener. Sin embargo, fue desarrollada como un conjunto de módulos para Metasploit Framework. Dado que Metasploit Framework ha tenido actualizaciones significativas, los módulos...

isip

isip Kit interactivo de SIP para manipulación de paquetes, sniffing, ataques man-in-the-middle, fuzzing, simulación de ataques DoS. Video https://asciinema.org/a/11128 Configuración git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Uso Las herramientas de...