Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150075 advisory. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in...

CVE-2026-106806

A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeat...

CVE-2026-106806: n/a: A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server

A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeat...

CVE-2026-106806

A memory exhaustion vulnerability exists in Open5GS v2.8.0 within the HTTP/2 SBI server . The issue stems from repeated header names causing previously allocated header strings to be leaked; notably, HPACK compression enables an unauthenticated remote attacker to trigger tens of thousands of dupl...

CVE-2026-106806

A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeat...

Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat: Security constraint bypass due to improper access control CVE-2026-65182 tomcat: Apache Tomcat: Access control bypass due to off-by-one error in RewriteValve N...

FortiSIEM gRPC HTTP/2 Probe (CVE-2026-106173)

Probes FortiSIEM gRPC TCP 27918: TLS with ALPN h2 or plaintext HTTP/2. !/usr/bin/env python3 -- coding: utf-8 -- """Detect FortiSIEM gRPC surface CVE-2026-106173.""" from kittysploit import from lib.protocols.http2.http2client import Http2client from lib.protocols.tcp.tcpscannerclient import...

golang-CVE-2023-44487

Golang CVE-2023-44487 testing This repository contains testing resources and results for the CVE-2023-44487. It uses a modified version of https://github.com/secengjeff/rapidresetclient to test against various Golang server configs. Testing against a normal server go run server.go go run...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...

http2-security-lab

🦣 TuskMads HTTP/2 Security Lab A from-scratch HTTP/2 attack simulation and defense lab built in pure Python. What This Does Simulates 3 real-world HTTP/2 attacks against a vulnerable server, then demonstrates 5 defense layers blocking all 3 on a hardened server. Attacks Implemented Attack|...

cve-2023-44487-demo

⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack This project demonstrates the HTTP/2 "Rapid Reset" vulnerability CVE-2023-44487 that allows attackers to overwhelm servers using RSTSTREAM frames, causing denial-of-service DoS. It includes: ✅ Exploit test using Golang-based tool ✅ Vulnerable Apac...

CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - Apache httpd modhttp2 PoC This repository contains a proof-of-concept implementation written in Go for a pre-authentication memory corruption scenario affecting Apache httpd with modhttp2. The code in this repository demonstrates a spray-and-trigger approach against a vulnerable...

CVE-2023-44487

HTTP2 Rapid Reset Attack: CVE-2023-44487 Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Exploit: Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Table of Contents Installation Usage Installation Clone the...

CVE-2026-49975-POC

CVE-2026-49975 — HTTP/2 Bomb PoC Proof-of-concept exploit for CVE-2026-49975, a remote denial-of-service vulnerability in HTTP/2 server implementations. Discovered by Quang Luong Calif Security Research, disclosed June 2, 2026. For authorized security testing only. Do not use against infrastructu...

CVE_2023_44487-Rapid_Reset

CVE-2023-44487 HTTP/2 Rapid Reset Testing Tool - Enhanced Edition A comprehensive Python testing tool for CVE-2023-44487 , the HTTP/2 Rapid Reset vulnerability. This repository contains both attack testing and verification-focused tools. ⚠️ IMPORTANT DISCLAIMER This tool is for educational and...

nice-cve-poc

Nice CVE PoCs A collection of interesting CVE PoCs CVE-2023-44487 - HTTP/2 Rapid Reset Attack...

CVE-2024-27316_poc

CVE-2024-27316 HTTP/2 CONTINUATION flood PoC Target server Apache httpd Start docker-compose up -d Connectivity check httpd v2.4.58 vulnerable curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 fixed version curl --http2 -i --head...

CVE-2023-44487

Please note that the above code uses the libcurl library for making HTTP requests. You need to install libcurl and link against it when compiling the code. The code is a simplified version, and you may need to adjust it based on your exact requirements and the specific behavior of the HTTP/2 atta...

CVE-2026-42945

CVE-2026-42945 PoC Go 中文 | English A detection and exploitation helper for nginx HTTP/2 CVE-2026-42945. Use it only in authorized environments to verify vulnerability presence, compare patched vs. vulnerable behavior, and reproduce PoC logic in a controlled lab. Affected versions heuristic: nginx...

h2spacex

H2SpaceX HTTP/2 low level library based on Scapy which can be used for Single Packet Attack Race Condition on H2 This library was part of an academic research with title of QUIC-er Races: HTTP/3 won’t save you from TOCTOU vulnerabilities. Dive into Single Packet Attack Article I wrote an article...