CVE-2023-44487

HTTP/2 Rapid Reset: CVE-2023-44487 Описание Этот репозиторий содержит proof-of-concept PoC код для уязвимости HTTP/2 Rapid Reset, идентифицированной как CVE-2023-44487. Обзор уязвимости CVE ID : CVE-2023-44487 Воздействие : Отказ в обслуживании DoS Затронутые протоколы : HTTP/2 Затронутые...

CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup

CVE-2026-22019 – Смешивание туннелей HTTP/2 CONNECT в libcurl Код программы C-симуляция // curlhttp2tunnelmixup.c - Simulated libcurl handling CONNECT over HTTP/2 include void handlehttp2streamint streamid // Vulnerability: after CONNECT, the proxy mixes streams with the tunneled data if streamid...

CVE-2025-53020-PoC

CVE-2025-53020 - Preuve de concept d'épuisement mémoire Apache httpd HTTP/2 Une preuve de concept démontrant CVE-2025-53020, une vulnérabilité d'épuisement mémoire dans l'implémentation HTTP/2 d'Apache httpd que j'ai découverte mi-2025. 📖 Analyse approfondie :...

HTTP-2-Rapid-Reset-DDos

Attaque DoS par réinitialisation rapide HTTP/2 Description Cette démonstration illustre l'attaque par déni de service DoS par réinitialisation rapide HTTP/2 à l'aide d'une topologie réseau personnalisée créée avec Containernet. L'attaque exploite des vulnérabilités du protocole HTTP/2 pour...

CVE-2023-44487-HTTP-2-Rapid-Reset-Attack

PoC - CVE-2023-44487: HTTP/2 Rapid Reset Attack Ce dépôt contient un Proof of Concept PoC pour démontrer l'exploitation de la vulnérabilité CVE-2023-44487 , également connue sous le nom HTTP/2 Rapid Reset Attack. Cette vulnérabilité affecte le protocole HTTP/2 et permet à un attaquant de surcharg...

HTTP-2-RapidReset-CVE-2023-44487-Testlab

Ce dépôt contient le code source de mon laboratoire Docker, réalisé pour mes recherches de thèse...

CVE-2026-42945

CVE-2026-42945 PoC Go Chinois | English Outil de détection et d’exploitation auxiliaire pour la mise en œuvre de HTTP/2 dans nginx CVE-2026-42945 , destiné à vérifier la présence de la vulnérabilité dans un environnement autorisé , à comparer l’effet des correctifs et à reproduire le comportement...

CVE-2019-9511_Priority-Churn-Data-Dribble

HTTP/2 CVE-2019-9511 & CVE-2019-9513 Lightweight Probes Репозиторий со скриптами контролируемой валидации поведения, связанного с CVE CVE-2019-9511 и CVE-2019-9513 , обе касаются векторов отказа в обслуживании в реализациях HTTP/2. Скрипты созданы для поддержки технических проверок в авторизованн...

tomcat-embed-core-9.0.31-CVE-2020-11996

Veuillez voir le PoC dans le test unitaire testImplicitCloseLargeId de TestHttp2Section51.java : https://github.com/rusakovichma/tomcat-embed-core-9.0.31-CVE-2020-11996/blob/master/test/org/apache/coyote/http2/TestHttp2Section51.java...

CVE-2026-49975-HTTP-2-Bomb

Un outil de tri pas d'exploitation pour identifier les surfaces d'attaque exposées à CVE-2026-49975 — "Bombe HTTP/2". ⚠️ Ce script n'envoie pas de charges d'attaque. Il effectue uniquement des requêtes HTTP normales et analyse les en-têtes de réponse pour signaler les hôtes qui nécessitent une...

BIT-TOMCAT-2026-78437 Apache Tomcat: HTTP/2 DoS via malformed request

Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially depends on timing cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0.116 through 9.0.121. Users are...

BIT-TOMCAT-2026-77762 Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Request

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0 through 11.0.25, from 10.1.0 through 10.1.59, from 9.0.39...

CLEANSTART-2026-HC06922 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

CVE-2026-33814 affects multiple packages. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0. See references for individual vulnerability details...

CVE-2026-23918-Passive-Audit

Сценарий аудита CVE-2026-23918 В качестве альтернативы можно просто curl заголовки и заглянуть, но вот: Неинвазивный аудитор метаданных HTTP для Apache HTTP Server Триаж экспозиции CVE-2026-23918 https://www.openwall.com/lists/oss-security/2026/05/04/19. Инструмент отправляет обычные HTTP-запросы...

CLEANSTART-2025-MG51423 HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023

CVE-2023-44487 affects multiple packages. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. See references for individual vulnerability details...

CLEANSTART-2024-IW99789 Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

Security vulnerability affects the nghttp2 package. Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service...

CLEANSTART-2026-EH49722 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

CVE-2026-33814 affects multiple packages. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0. See references for individual vulnerability details...

CLEANSTART-2026-WX23354 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...

Rocky Linux 8 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / libcurl / etc (crlsa-2024_5654)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20245654 advisory. curl: HTTP/2 push headers memory-leak CVE-2024-2398 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...

Rocky Linux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.6:CLSA-2026:1776939108)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776939108 advisory. - A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOWUPDATE frames on stream 0 connection-level that cause the flow...