apachedos

이 도구는 HTTP2를 지원하는 Apache HTTPD 2.4.17 - 2.4.23을 실행하는 서버를 충돌시키기 위해 CVE-2016-8740을 사용합니다. 이 도구는 서버가 엄청나게 많은 양의 RAM을 할당하도록 강제하여 컴퓨터를 사용할 수 없게 만듭니다. 여기에서 다운로드할 수 있습니다 명령줄에서 실행해야 합니다 사용법: apachedos target target port...

CVE-2026-79208

Missing authorization in HTTP/2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. The vulnerability was rated Medium severity by Chromium. The fix is available in Chrome 152.0.7977.65 . No exploitation details are provided...

http2-rst-stream-attacker

CVE-2023-44487 et http2-rst-stream-attacker CVE-2023-44487 CVE-2023-44487 est une exploitation du protocole HTTP2 lui-même. En HTTP2, les requêtes de données sont initiées par l'envoi d'une trame HEADERS. Après réception de cette trame, un serveur commence à traiter votre requête, puis envoie des...

Afuzz

Afuzz - أداة فحص مسارات الويب الآلية Afuzz هي أداة فحص مسارات ويب آلية لمشاريع مكافآت الاختراق Bug Bounty. Afuzz يتم تطويره بنشاط بواسطة @rapiddns الميزات يكتشف Afuzz تلقائياً لغة التطوير المستخدمة في الموقع، ويقوم بإنشاء الامتدادات وفقاً للغة يستخدم قائمة سوداء لتصفية الصفحات غير الصالحة يستخدم...

CVE-2024-27983-nodejs-http2

Этот репозиторий создаёт уязвимый HTTP2-сервер на Node.js server-nossl.js на основе CVE-2024-27983, который эксплуатирует уязвимость типа continuation flood в HTTP2-серверах. Примечания: server.js признан не уязвимым благодаря использованию SSL-сертификатов. server-nossl.js уязвим к атаке...

emp3r0r

emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r?...

ROOT-APP-MAVEN-CVE-2024-22201 CVE-2024-22201 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2024-22201 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-1948 CVE-2025-1948 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2025-1948 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-5115 CVE-2025-5115 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2025-5115 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

EUVD-2026-58510

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...

io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing t...

netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...

netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...

netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...

SUSE-SU-2026:3557-1 Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks bsc1272882. - CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits...

Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to 22.23.2. CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks bsc1272882. CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits...

K000162851: Apache HttpComponents vulnerabilities CVE-2026-54399,CVE-2026-54428

Security Advisory Description CVE-2026-54399 Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows an remote attacker to cause a denial of service through memory exhaustion by sending messages...

SUSE-SU-2026:23130-1 Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks bsc1272882. - CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits...

CVE-2026-56848

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing. Mitigation Restrict netwo...

SUSE SLES15 Security Update : nodejs24 (SUSE-SU-2026:3520-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3520-1 advisory. Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF an...