7 matches found
CVE-2026-49975-POC
CVE-2026-49975 — HTTP/2 炸弹 PoC 针对 CVE-2026-49975 的概念验证利用程序，这是一种影响 HTTP/2 服务器实现的远程拒绝服务漏洞。由 Quang Luong（Calif 安全研究）发现，于 2026 年 6 月 2 日公开披露。 仅供授权安全测试使用。切勿用于你不拥有或未经书面许可测试的基础设施。 工作原理 该攻击链式利用了两种 HTTP/2 协议机制： 1. HPACK 索引引用炸弹 HPACK（RFC...
CVE-2025-8671-vulnerability-POC-
CVE-2025-8671-vulnerability-POC- CVE-2025-8671 漏洞 PoC CVE-2025-8671 漏洞扫描器 一款用于检测 HTTP/2 服务器中 MadeYouReset 漏洞（CVE-2025-8671）的专业安全研究工具。该扫描器使用多种检测启发式方法，识别易受流记账操纵攻击影响的服务器。 🔍 关于 CVE-2025-8671 MadeYouReset 漏洞利用 HTTP/2 流记账机制，通过畸形的协议违规强制服务器发送 RSTSTREAM 帧，而后端处理仍在继续。这将造成资源耗尽状况，可能导致： 拒绝服务（DoS） - 服务器资源耗尽 后端过...
CVE-2020-5871
On BIG-IP 14.1.0-14.1.2.3, undisclosed requests can lead to a denial of service DoS when sent to BIG-IP HTTP/2 virtual servers. The problem can occur when ciphers, which have been blacklisted by the HTTP/2 RFC, are used on backend servers. This is a data-plane issue. There is no control-plane...
Fedora 39 : prometheus-podman-exporter (2023-b75ee820ce)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b75ee820ce advisory. release v1.5.0 + security fix for CVE-2023-39325 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Important: Red Hat Security Advisory: RHACS 4.0 enhancement and security update
Updated images are now available for Red Hat Advanced Cluster Security. The updated image includes new features and bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2023-39325 HTTP/2 rapid reset can cause excessive work in net/http
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...