285 matches found
Mr.SIP
SIP Security, Attack and Audit Framework Mr.SIP is...
freeswitch-cve-2026-116779-POC
fscve — FreeSWITCH CVE-2026-116779 toolkit Detection and exploitation tooling for CVE-2026-116779 — an unauthenticated command injection in FreeSWITCH where an inbound SIP MESSAGE can select the api chat protocol and reach switchapiexecute. CVE CVE-2026-116779 GHSA-mg63-h38w-8p9p Type CWE-78 OS...
Exploit for CVE-2026-116779
fscve — FreeSWITCH CVE-2026-116779 toolkit !CIhttps://git...
CVE-2026-116779
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.3, sofiapresencehandlesipimessage split the To user of an inbound SIP MESSAGE on a plus sign and...
CVE-2026-116779
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.3, sofiapresencehandlesipimessage split the To user of an inbound SIP MESSAGE on a plus sign and...
CVE-2026-116779
FreeSWITCH versions prior to 1.11.3 are vulnerable to a code injection flaw in the sofia_presence_handle_sip_i_message() function. The vulnerability exists because the software splits the To user of an inbound SIP MESSAGE on a plus sign and treats the preceding string as a chat protocol selector ...
CVE-2026-116779 FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.3, sofiapresencehandlesipimessage split the To user of an inbound SIP MESSAGE on a plus sign and...
CVE-2026-116779
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.3, sofiapresencehandlesipimessage split the To user of an inbound SIP MESSAGE on a plus sign and...
EUVD-2026-117752
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.3, sofiapresencehandlesipimessage split the To user of an inbound SIP MESSAGE on a plus sign and...
CVE-2026-116779 FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.3, sofiapresencehandlesipimessage split the To user of an inbound SIP MESSAGE on a plus sign and...
CVE-2026-116779: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.3, sofiapresencehandlesipimessage split the To user of an inbound SIP MESSAGE on a plus sign and...
CVE-2023-27597
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.8 and 3.2.5, when a specially crafted SIP message is processed by the function rewriteruri, a crash occurs due to a segmentation fault. This issue causes the server to crash. It affects configurations...
CVE-2023-28097
OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large Content-Length value and a specially crafted Request-URI causes a segmentation fault in OpenSIPS. This issue occurs when a large amount of shared memo...
PT-2026-132064
Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.3 Description FreeSWITCH is a Software Defined Telecom Stack that allows the transition from proprietary telecom switches to software running on commodity hardware. A flaw exists where the sofia presence handl...
CVE-2026-110658
A flaw was found in Sofia-SIP. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Initiation Protocol SIP message containing an oversized multipart boundary that exceeds the message body length. During message parsing, this flaw causes the...
CVE-2026-57160 PJSIP: SIP message header buffer overflow
PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint in pjsip/src/pjsip/sipmsg.c, the function that serializes generic array headers such as Allow, Require, Supported, and Unsupported. Unde...
CVE-2026-45705
OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the findlinedelimiter function in the multipart body parser performs an out-of-bounds read via strncmp when searching for MIME boundary delimiters. After finding a -- pattern near the en...
CVE-2026-45103
OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the Content-Length header using unsigned int arithmetic with no overflow check. When an attacker sends a Content-Length value that overflows unsigned...
UBUNTU-CVE-2026-45103
OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the Content-Length header using unsigned int arithmetic with no overflow check. When an attacker sends a Content-Length value that overflows unsigned...