CVE-2026-49975-POC

CVE-2026-49975 — PoC de Bomba HTTP/2 Exploit de prueba de concepto para CVE-2026-49975, una vulnerabilidad remota de denegación de servicio en implementaciones de servidores HTTP/2. Descubierto por Quang Luong Calif Security Research, divulgado el 2 de junio de 2026. Solo para pruebas de segurida...

CVE-2026-84304 gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

RedGuard

RedGuard - Excelente herramienta de control de flujo frontal C2 English | 中文文档 0x00 Introducción ¿Qué es RedGuard? RedGuard, una herramienta derivada basada en la tecnología de control de flujo frontal de comando y control C2, tiene un diseño más ligero, una interacción de tráfico eficiente y una...

Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-

CVE-2026-49975 - HTTP/2 Bomb Proof of Concept Descripción CVE-2026-49975, también conocida como HTTP/2 Bomb , es una vulnerabilidad de denegación de servicio DoS remoto que afecta a la mayoría de los servidores web principales en su configuración HTTP/2 predeterminada. La vulnerabilidad fue...

http2-bomb-detector

http2-bomb-detector Bomba HTTP/2 CVE-2026-49975 herramienta de detección de vulnerabilidades no destructiva — para Nginx / Apache httpd Contexto de la vulnerabilidad CVE-2026-49975 es una vulnerabilidad de denegación de servicio remota a nivel de protocolo HTTP/2 de gran impacto, descubierta por ...

CVE-2026-49975

CVE-2026-49975 PoC de Bomba HTTP/2 Herramienta de reproducción de la vulnerabilidad de denegación de servicio remota en HTTP/2 Resumen de la vulnerabilidad CVE-2026-49975 es una vulnerabilidad de denegación de servicio HTTP/2 que afecta a los principales servidores web. Fue descubierta a principi...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 Bomba HTTP/2 Guía completa de reproducción Basado en el aviso de QiAnXin CERT + investigación original de Calif ================================================================ I. Resumen de la vulnerabilidad CVE-2026-49975 es una vulnerabilidad crítica de denegación de servicio Do...

fides

Protegiendo Agentes de IA con Control de Flujo de Información Este repositorio contiene un cuaderno de Jupyter que acompaña al artículo académico «Protegiendo agentes de IA con control de flujo de información». El cuaderno está estructurado como un tutorial para guiar a los lectores a través de l...

http2-bomb-analysis-paper

HTTP/2 Bomb: HPACK Indexed-Reference Amplification Chain Attack Un approfondimento tecnico indipendente di uno studente delle superiori Giugno 2026 TL;DR Questo repository contiene la mia analisi completa della vulnerabilità HTTP/2 Bomb CVE-2026-49975 / CVE-2026-47774, che combina due primitive...

CVE-2026-67591

A flaw was found in Apache Qpid ProtonJ2. An authenticated attacker can exploit this vulnerability by exceeding the session flow control incoming window. This can lead to a denial of service DoS, making the system unavailable to legitimate users. Mitigation Ensure authenticated access to AMQP...

CVE-2026-66275

A flaw was found in Apache Qpid Proton-J. An authenticated attacker could exploit this by exceeding the session flow control incoming window. This action could lead to a denial of service DoS, making the system unavailable to legitimate users. Mitigation Ensure authenticated access to AMQP...

Astra Linux – Vulnerability in Node.js

A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOWUPDATE frames on stream 0 connection-level that cause the flow control window to exceed the maximum value of 2³¹-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up. This vulnerabili...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps rxfcpfvfbmap and txfcpfvfbmap are allocated by cgxlmacinit, but never freed in cgxlmacexit. Unbinding and rebinding the driver therefore triggers a kmemleak:...

CVE-2026-74836

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin an unbounded number of HTTP/2 stream processes indefinitely via connection-level flow control. When a stream's response body outruns the HTTP/2 connection-level se...

EUVD-2026-63660

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin an unbounded number of HTTP/2 stream processes indefinitely via connection-level flow control. When a stream's response body outruns the HTTP/2 connection-level se...

CVE-2026-74836 HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin an unbounded number of HTTP/2 stream processes indefinitely via connection-level flow control. When a stream's response body outruns the HTTP/2 connection-level se...

EEF-CVE-2026-74836 HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit

Summary Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin an unbounded number of HTTP/2 stream processes indefinitely via connection-level flow control. When a stream's response body outruns the HTTP/2...

CVE-2026-74836 HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin an unbounded number of HTTP/2 stream processes indefinitely via connection-level flow control. When a stream's response body outruns the HTTP/2 connection-level se...

CVE-2026-74836

CVE-2026-74836 is an unbounded resource exhaustion vulnerability in mtrudel/bandit (Erlang HTTP/2 server library), affecting versions 0.3.4 through before 1.12.5 . When a stream's response body exceeds the HTTP/2 connection-level send window (default 65,535 bytes), the stream process blocks indef...

PT-2026-79146

Name of the Vulnerable Software and Affected Versions bandit versions 0.3.4 through 1.12.4 Description An unauthenticated remote attacker can pin an unbounded number of HTTP/2 stream processes indefinitely by exploiting connection-level flow control. When a stream response body exceeds the HTTP/2...