8 matches found
Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-
CVE-2026-49975 - HTTP/2 Bomb Proof of Concept Description CVE-2026-49975, also known as HTTP/2 Bomb , is a remote denial-of-service DoS vulnerability that affects most major web servers in their default HTTP/2 configuration. The vulnerability was discovered by OpenAI Codex by combining two...
cve-2026-49975-http2bomb_reproduction
CVE-2026-49975 HTTP/2 Bomb Complete Reproduction Guide Based on QiAnXin CERT Advisory + Calif Original Research ================================================================ I. Vulnerability Overview CVE-2026-49975 is a critical denial-of-service DoS vulnerability in HTTP/2 server and proxy...
CVE-2026-49975-HTTP-2-Bomb
A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 ā "HTTP/2 Bomb". ā ļø This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb ā CVE-2026-49975 HTTP/2 Bomb PoC ā Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...
http2-bomb-detector
http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 éē “å£ēčå¼±ę§ę¤åŗćć¼ć« ā Nginx / Apache httpd åć čå¼±ę§ć®čęÆ CVE-2026-49975 ćÆćåŗēÆå²ć«å½±éæćåć¼ć HTTP/2 ćććć³ć«å±¤ć®ćŖć¢ć¼ććµć¼ćć¹ęå¦čå¼±ę§ć§ćććć»ćć„ćŖćć£ē ē©¶č ć® Quang Luong ć«ćć£ć¦ēŗč¦ććć¾ććććć®čå¼±ę§ćÆ HPACK ćććć¼å§ēø® ćØ ććć¼å¶å¾”ć”ć«ććŗć ć®ēµćæåććć«ććčØčØäøć®ę¬ é„ćęŖēØććę»ęč ćÆčŖčؼćŖćć§ 10ļ½20 ē§ä»„å ć«ćµć¼ćć¼ć® 32GB ć”ć¢ćŖćęÆęøćććććØćć§ćć¾ćć CVSS 3.1...
nginx:1.26 security update
1.26.3-9.0.1.3 - Require oracle-indexhtml 2:1.26.3-13 - Fixes CVE-2026-56434 and CVE-2026-60005 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and...
nginx security update
1.26.3-6.0.1.el102.6 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-6.6 - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of...
