6 matches found
POC-CVE-2026-49975
-red CVE-2026-49975 HTTP/2 Bomb — PoC de bomba de compresión HPACK + retención de control de flujo PoC de investigación de seguridad por naheeju ⚠️ Esta es una herramienta funcional de DoS por agotamiento de memoria — no es un juguete. Abre flujos que fuerzan al objetivo a asignar memoria y los...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 远程拒绝服务漏洞复现工具 漏洞概述 CVE-2026-49975 是一个影响主流 Web 服务器的 HTTP/2 拒绝服务漏洞。该漏洞由安全公司 Calif（使用 OpenAI Codex）于 2026 年 6 月初发现。 攻击原理 1. HPACK 压缩炸弹 ：将极小的 header（如 "x: a"）插入服务器 HPACK 动态表，然后发送成千上万个 1-byte 的索引引用。每个引用迫使服务器分配大量簿记内存，但客户端只消耗极少带宽。内存放大比例可达 5700:1 （Envoy）和 4000:1 （Apac...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
CVE-2026-49975
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...