SIP vulnerabilities