Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-

CVE-2026-49975 - HTTP/2 Bomb Proof of Concept Descripción CVE-2026-49975, también conocida como HTTP/2 Bomb , es una vulnerabilidad de denegación de servicio DoS remoto que afecta a la mayoría de los servidores web principales en su configuración HTTP/2 predeterminada. La vulnerabilidad fue...

CVE-2026-49975-POC

CVE-2026-49975 — HTTP/2 Bomb PoC Proof-of-concept exploit for CVE-2026-49975, a remote denial-of-service vulnerability in HTTP/2 server implementations. Discovered by Quang Luong Calif Security Research, disclosed June 2, 2026. For authorized security testing only. Do not use against infrastructu...

RedGuard

RedGuard - Excellent C2 Front Flow Control tool 中文文档 | English 0x00 介绍 工具介绍 RedGuard，是一款C2设施前置流量控制技术的衍生作品，有着更加轻量的设计、高效的流量交互、以及使用go语言开发具有的可靠兼容性。它所解决的核心问题也是在面对日益复杂的红蓝攻防演练行动中，给予攻击队更加优秀的C2基础设施隐匿方案，赋予C2设施的交互流量以流量控制功能，拦截那些“恶意”的分析流量，更好的完成整个攻击任务。 RedGuard是一个C2设施前置流量控制工具，可以避免Blue Team,AVS,EDR,Cyberspace...

http2-bomb-detector

http2-bomb-detector Bomba HTTP/2 CVE-2026-49975 herramienta de detección de vulnerabilidades no destructiva — para Nginx / Apache httpd Contexto de la vulnerabilidad CVE-2026-49975 es una vulnerabilidad de denegación de servicio remota a nivel de protocolo HTTP/2 de gran impacto, descubierta por ...

CVE-2026-49975

CVE-2026-49975 PoC de Bomba HTTP/2 Herramienta de reproducción de la vulnerabilidad de denegación de servicio remota en HTTP/2 Resumen de la vulnerabilidad CVE-2026-49975 es una vulnerabilidad de denegación de servicio HTTP/2 que afecta a los principales servidores web. Fue descubierta a principi...

http2-bomb-analysis-paper

Bomba HTTP/2: Ataque de cadena de amplificación de referencia indexada HPACK Inmersión técnica independiente de un estudiante de secundaria Junio de 2026 TL;DR Este repositorio contiene mi análisis completo de la vulnerabilidad HTTP/2 Bomb CVE-2026-49975 / CVE-2026-47774, que encadena dos...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 HTTP/2 Bomb Complete Reproduction Guide Based on QiAnXin CERT Advisory + Calif Original Research ================================================================ I. Vulnerability Overview CVE-2026-49975 is a critical denial-of-service DoS vulnerability in HTTP/2 server and proxy...

fides

Securing AI Agents with Information-Flow Control This repository contains a Jupyter notebook to accompany the academic paper "Securing AI Agents with Information-Flow Control". The notebook is structured as a tutorial to walk readers through the concepts introduced in the paper. This illustrates ...

CLEANSTART-2026-ZS57953 authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service

CVE-2026-66275 affects multiple packages. An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. See references for individual vulnerability details...

POC-CVE-2026-49975

-red CVE-2026-49975 HTTP/2 Bomb — PoC de bomba de compresión HPACK + retención de control de flujo PoC de investigación de seguridad por naheeju ⚠️ Esta es una herramienta funcional de DoS por agotamiento de memoria — no es un juguete. Abre flujos que fuerzan al objetivo a asignar memoria y los...

Exploit for Improper Handling of Highly Compressed Data (Data Amplification) in Apache Http_Server

!Go Versionhttps://img.shields.io/badge/Go-1.26%2B-00ADD8?lo...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS in the HTTP/2 flow-control process. An attacker can exhaust system memory by sending data faster than it is consumed by the application, causing unbounded buffering and potential service disruption. Details Denial ...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS in the HTTP/2 flow-control process. An attacker can exhaust system memory by sending data faster than it is consumed by the application, causing unbounded buffering and potential service disruption. Details Denial ...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS in the HTTP/2 flow-control process. An attacker can exhaust system memory by sending data faster than it is consumed by the application, causing unbounded buffering and potential service disruption. Details Denial ...

CVE-2026-69202

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received from the network rather than bytes consumed by the application, while each stream stores DATA in an unbounded channel. A hostile peer can...

Http4s Ember HTTP/2: unbounded inbound body buffering

Ember's HTTP/2 stack replenishes the inbound flow-control window based on bytes received off the wire, not bytes consumed by the application. Received DATA is buffered in an unbounded per-stream channel. Flow control therefore provides no backpressure: a peer can stream a large or unbounded body...

GHSA-6M4X-PP6Q-5JMM Http4s Ember HTTP/2: unbounded inbound body buffering

Ember's HTTP/2 stack replenishes the inbound flow-control window based on bytes received off the wire, not bytes consumed by the application. Received DATA is buffered in an unbounded per-stream channel. Flow control therefore provides no backpressure: a peer can stream a large or unbounded body...

CVE-2026-69202 Http4s Ember HTTP/2: unbounded inbound body buffering

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received from the network rather than bytes consumed by the application, while each stream stores DATA in an unbounded channel. A hostile peer can...

CVE-2026-69202 Http4s Ember HTTP/2: unbounded inbound body buffering

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received from the network rather than bytes consumed by the application, while each stream stores DATA in an unbounded channel. A hostile peer can...

EUVD-2026-79234

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received from the network rather than bytes consumed by the application, while each stream stores DATA in an unbounded channel. A hostile peer can...