DCVC2

Discord Voice Channel C2 aka DCVC2 This multi operating system compatible tool was created to leverage Discord's voice channels for command and control operations. This tool operates entirely over the Real-Time Protocol RTP primarily leveraging DiscordGo and leaves no pesky traces behind in text...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

CVE-2026-18649

CVE-2026-18649 - GStreamer rtph264depay Unbounded Memory Growth DoS Proof of concept for a resource exhaustion vulnerability in GStreamer's H.264 RTP depayloader rtph264depay. The same pattern also affects rtph265depay. What it is During H.264 FU-A fragmented RTP reassembly, each incoming fragmen...

rtpnatscan

rtpnatscan A minimalistic command line tool to check if your RTP proxy / NAT helper is vulnerable to RTP NAT stealing attacks...

CVE-2020-25748

CVE-2020-25748 Suggested description A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can als...

DEBIAN-CVE-2026-111183

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-111183

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-111183 GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-111183

A heap-based buffer overflow exists in the rtpL16depay (as well as rtpL8 and rtpL24) audio depayloaders within GStreamer . The vulnerability is caused by a lack of proper validation of user-supplied data length before copying it to a heap-based buffer during the processing of RTP payload elements...

EUVD-2026-107395

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-111183 GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-111183

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

[SECURITY] [DLA 4837-1] gst-plugins-good1.0 security update

Debian LTS Advisory DLA-4837-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 15, 2026 https://wiki.debian.org/LTS Package : gst-plugins-good1.0 Version : 1.22.0-5+deb12u4 CVE ID : CVE-2025-47183 CVE-2026-1940 CVE-2026-3083 CVE-2026-3085 CVE-2026-1707...

libsrtp

Introduzione a libSRTP Questo pacchetto fornisce un'implementazione del Secure Real-time Transport Protocol SRTP, della Universal Security Transform UST e di un kernel crittografico di supporto. L'API SRTP è documentata in include/srtp.h, e la libreria si trova in libsrtp2.a dopo la compilazione...

Wireshark 1.10.x < 1.10.7 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.7. It is, therefore, affected by a vulnerability as referenced in the wireshark-1.10.7 advisory. - The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before...

CVE-2026-30754

A flaw was found in FFmpeg. This memory corruption vulnerability occurs during the Real-time Transport Protocol RTP encoding of H.264/HEVC streams. A remote attacker could exploit this by providing a specially crafted input file, leading to a negative size parameter being passed to a memory copy...

CVE-2026-101887

BlueALSA bluez-alsa/bluealsad contains a division-by-zero vulnerability in the LC3plus sink decoder a2dp-lc3plus.c, a2dplc3plusdecthread that allows a Bluetooth-adjacent attacker to crash the daemon by sending a crafted RTP media header with an attacker-controlled frame count field set to zero...

CVE-2026-101887

The BlueALSA daemon (bluez-alsa/bluealsad ) contains a division-by-zero vulnerability within the LC3plus sink decoder (specifically in a2dp-lc3plus.c and a2dp_lc3plus_dec_thread). A Bluetooth-adjacent attacker can trigger a SIGFPE by establishing an A2DP source connection and transmitting a non-f...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-debuginfo / etc (crlsa-2026_53452)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202653452 advisory. gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders CVE-2026-18649 Tenable has extracted the preceding...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.2:CLSA-2026:1786714360)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786714360 advisory. - A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a...