stunner

STUNNER Stunner는 STUN, TURN 및 TCP 기반 TURN 서버를 테스트하고 공격하는 도구입니다. TURN은 주로 화상 회의 및 오디오 채팅WebRTC에서 사용되는 프로토콜입니다. 잘못 구성된 서버를 발견하면 이 도구를 사용하여 TURN 프로토콜을 통해 서버 뒤의 내부 네트워크로 모든 트래픽을 릴레이하는 로컬 SOCKS 프록시를 열 수 있습니다. 이 도구는 Cisco Expressway 테스트 중에 개발되었으며, 이로 인해 일부 취약점이 발견되었습니다:...

CVE-2026-68554 Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

CVE-2026-68554 Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

CVE-2026-68553

Coturn (open-source TURN/STUN server) prior to 4.13.0 is affected by a format string vulnerability in its Redis integration. An authenticated TURN user can inject printf-style format specifiers into the STUN USERNAME or REALM attribute. These values pass is_secure_string() validation and are embe...

PT-2026-78699

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.15.0 Description An on-path attacker can modify authenticated STUN requests sent over plain UDP or TCP by appending attributes after the MESSAGE-INTEGRITY attribute and adjusting the STUN header length. Because the...

CVE-2026-73213

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...

UBUNTU-CVE-2026-53450

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, coturn rejects loopback peers by default unless allow-loopback-peers is enabled, but the default loopback guard can be bypassed by using the IPv4-mapped IPv6 peer address ::ffff:127.0.0.1 in a TURN...

EUVD-2013-6750

Malware in sbrugna...

New NAT/Firewall Bypass Attack Lets Hackers Access Any TCP/UDP Service

A new research has demonstrated a technique that allows an attacker to bypass firewall protection and remotely access any TCP/UDP service on a victim machine. Called NAT Slipstreaming, the method involves sending the target a link to a malicious site or a legitimate site loaded with malicious ads...

Chrome OS exploit: one byte overflow and symlinks

The following article is an guest blog post from an external researcher i.e. the author is not a Project Zero or Google researcher. This post is about a Chrome OS exploit I reported to Chrome VRP in September. The Project Zero folks were nice to let me do a guest post about it, so here goes. The...

Belkin Wemo Home Automation Devices远程安全限制绕过漏洞

BUGTRAQ ID: 65632 CVECAN ID: CVE-2013-6949 Belkin Wemo Home Automation devices 是家电远程控制系列产品。 Belkin Wemo Home Automation设备使用 STUN & TURN 协议，该漏洞让控制了一个Wemo设备的攻击者可用 STUN & TURN 协议中继连接到其他的Wemo设备。 0 Belkin Wemo Home Automation 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...