DCVC2

Discord语音频道C2（简称DCVC2） 这款多操作系统兼容工具旨在利用Discord的语音频道进行命令与控制（C2）操作。该工具完全基于实时协议（RTP）运行，主要借助DiscordGo，且不会在文本频道中留下任何恼人的痕迹。它是一款基于命令行的工具，所有操作严格在Windows/Linux/OSX的终端中执行。请负责任地使用，但也要玩得开心！; 要求： 1. 更新（之前的链接有误）了解DCVC2 2. 你需要一个Discord账号。 3. 你需要一个Discord服务器。 4. 在设置中将语音聊天速度提高到96kbps。 5...

libsrtp

Introducción a libSRTP Este paquete proporciona una implementación del Protocolo de transporte seguro en tiempo real SRTP, la Transformada de Seguridad Universal UST y un núcleo criptográfico de soporte. La API de SRTP está documentada en include/srtp.h, y la biblioteca está en libsrtp2.a después...

WireBug

WireBug WireBug 是一套用于语音IP渗透测试的工具集。它被设计成一个向导模式，易于使用。这些工具也支持单独使用，每个工具都是一个独立的Python或Bash程序。 安装 请阅读 wiki 中的安装指南。 工具 FullBridge：一个简单的bash脚本，用于在两个指定接口之间设置二层桥接。 TimeShift：用于在中间人位置（配合FullBridge）响应NTP请求的工具，可返回过去或未来的时间戳。你可以轻松检查客户端（VoIP电话）是否验证了服务器证书（SIPS、H.323s、HTTPS、LDAPS等）的有效性，或将其用作DoS工具。...

rtpnatscan

rtpnatscan Una herramienta de línea de comandos minimalista para comprobar si tu proxy RTP / asistente NAT es vulnerable a ataques de robo de NAT RTP...

CVE-2026-30754

A flaw was found in FFmpeg. This memory corruption vulnerability occurs during the Real-time Transport Protocol RTP encoding of H.264/HEVC streams. A remote attacker could exploit this by providing a specially crafted input file, leading to a negative size parameter being passed to a memory copy...

CVE-2026-101887

The BlueALSA daemon (bluez-alsa/bluealsad ) contains a division-by-zero vulnerability within the LC3plus sink decoder (specifically in a2dp-lc3plus.c and a2dp_lc3plus_dec_thread). A Bluetooth-adjacent attacker can trigger a SIGFPE by establishing an A2DP source connection and transmitting a non-f...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.2:CLSA-2026:1786714360)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786714360 advisory. - A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-debuginfo / etc (crlsa-2026_53452)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202653452 advisory. gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders CVE-2026-18649 Tenable has extracted the preceding...

FFmpeg: Denial of Service via crafted RTP/ASF stream

A flaw was found in FFmpeg. A remote attacker can exploit an infinite loop vulnerability in the RTP/ASF demuxer by sending a specially crafted stream. This vulnerability occurs because the rtpasffixheader function does not properly validate the size of data chunks, preventing the processing loop...

AlmaLinux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.6:CLSA-2026:1786699059)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786699059 advisory. - A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a...

Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.6:CLSA-2026:1786699059)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786699059 advisory. - A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a...

CVE-2026-18649

CVE-2026-18649 - DoS por crecimiento ilimitado de memoria en GStreamer rtph264depay Prueba de concepto para una vulnerabilidad de agotamiento de recursos en el depayloader H.264 RTP de GStreamer rtph264depay. El mismo patrón también afecta a rtph265depay. Qué es Durante el reensamblaje de RTP...

gstreamer-plugins-good: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...

CVE-2020-25748

CVE-2020-25748 Descripción sugerida Se descubrió un problema de transmisión en texto claro en las cámaras Rubetek RV-3406, RV-3409 y RV-3411 versiones de firmware v342, v339. Un atacante en el medio puede interceptar y modificar los datos de video de la cámara, que se transmiten sin cifrar. Tambi...

kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists

A flaw was found in the drm/xe/rtp component of the Linux kernel. This vulnerability arises from the unconditional whitelisting of Output/Availability OA registers, which is a security violation. By default, these registers could be whitelisted after system events such as probe, graphics...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Good Plugins vulnerabilities (USN-8798-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8798-1 advisory. It was discovered that GStreamer Good Plugins incorrectly parsed certain MRF files. A remote...

The vulnerability of the RTP/ASF demultiplexer in the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the RTP/ASF demultiplexer in the FFmpeg multimedia library relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failure...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Good Plugins vulnerability (USN-8778-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8778-1 advisory. It was discovered that GStreamer Good Plugins did not limit the size of reassembly buffers when...

gstreamer-plugins-good: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...

gstreamer-plugins-good: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...