nginx:1.26 security update

1.26.3-9.4.0.1 - Require oracle-indexhtml 2:1.26.3-14 - Fixes CVE-2026-42533 2:1.26.3-13 - Fixes CVE-2026-56434 and CVE-2026-60005 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Servic...

nginx:1.24 security update

1.24.0-7.5.0.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-7.5 - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 1:1.24.0-7.4 - Resolves: RHEL-219310 - nginx:...

SUSE SLES15: tomcat10 / tomcat10-admin-webapps / tomcat10-el-5_0-api / etc (SUSE-SU-2026:4119-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4119-1 advisory. - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: Apache Tomcat: TOCTOU when...

SUSE SLES15: tomcat11 / tomcat11-admin-webapps / tomcat11-el-6_0-api / etc (SUSE-SU-2026:4114-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4114-1 advisory. - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: Apache Tomcat: TOCTOU when...

CVE-2026-49975

CVE-2026-49975 HTTP/2 炸弹 ★ CVE-2026-49975 HTTP/2 炸弹 PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 概述 CVE-2026-49975 是 Apache HTTP Server 中的一个 拒绝服务（DoS） 漏洞。 该漏洞出现在 HTTP/2 请求处理路径中，多个 cookie 头部字段可能被合并，而未被正确计入 LimitRequestFields 限制。 通过发送一个经过 HPACK 编码的小型 HTTP/2...

impersonate-proxy

impersonate-proxy English | 日本語 | 简体中文 一个本地 MITM 代理,可通过单个 YAML 配置文件控制 TLS 指纹JA3/JA4、HTTP/2 指纹、HTTP 请求头顺序、User-Agent 以及源 IP 请求头。 项目内置了一个 Chrome 扩展 ,可以直接在浏览器工具栏上切换代理开关和指纹配置,无需重启代理。 本工具用于对 WAF 机器人检测系统进行授权的安全测试 。将 curl、浏览器或 Playwright 的流量路由到该代理,即可观察不同指纹组合会被如何判定。 工作原理 root@kitploit: curl / browser /...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - HTTP/2 快速重置检测器 PoC 描述 此工具是 CVE-2023-44487 （又称 HTTP/2 快速重置攻击 ）的概念验证（PoC）程序。该漏洞允许攻击者通过 HTTP/2 连接快速发送 RSTSTREAM 帧来执行拒绝服务（DoS）攻击，从而使目标服务器不堪重负。 功能特性 单 URL 测试 ：测试单个 URL 是否存在漏洞。 批量 URL 测试 ：测试文件中提供的多个 URL。 HTTP 与 HTTPS 支持 ：同时支持 HTTP 和 HTTPS 协议。 自定义端口选择 ：为测试指定自定义端口。 输出选项 ：结果可保存为 CSV、TXT 或...

CVE-2025-8671-MadeYouReset-HTTP-2-DDoS

HTTP/2 DDoS Heuristic Tester 自动测试，用于启发式检测 HTTP/2 中与 DDoS 攻击相关的漏洞是否存在： 由 m10sec 开发。 CVE-2023-44487 – Rapid Reset CVE-2025-8671 – MadeYouReset 组合对比 包括交互式菜单 、通过 CLI 执行、支持包含多个目标的 TXT 文件 以及导出为 JSON/CSV 。 安装 克隆仓库并创建虚拟环境： root@kitploit: git clone...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

http2-bomb-analysis-paper

HTTP/2 炸弹：HPACK 索引引用放大链攻击 一名高中生的独立技术深度剖析 2026年6月 TL;DR 本仓库包含我对 HTTP/2 炸弹 漏洞（CVE-2026-49975 / CVE-2026-47774）的完整分析，该漏洞将两个存在二十年的 HTTP/2 原语链接在一起： HPACK 索引引用放大 – 发送数千个单字节引用指向一个近乎空的动态表条目 流控窗口停滞 – 零初始窗口加上周期性1字节 WINDOWUPDATE 永久锁定内存 结果： 一条 100 Mbps 的客户端连接可在短短 10 秒内 耗尽 32 GB 服务器内存 。 🧠 我是如何入坑的 一切始于我在...

Astra Linux – Vulnerability in Node.js

A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOWUPDATE frames on stream 0 connection-level that cause the flow control window to exceed the maximum value of 2³¹-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up. This vulnerabili...

Astra Linux – Vulnerability in Golang-Google-GRPC

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have a vulnerability caused by improper input validation of the HTTP/2 :path pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the :path did not start with a leading slash...

Astra Linux – Vulnerability in golang-golang-x-net

In net/http in Go, before versions 1.18.6 and 1.19.x, and before version 1.19.1, attackers can cause a denial of service because an HTTP/2 connection may become unresponsive during closure, if the shutdown process is interrupted by a fatal error...

Astra Linux – Vulnerability in Tomcat9

A vulnerability exists in Apache Tomcat related to uncontrolled resource consumption, caused by an allocation leak in the HTTP/2 backlog tracking when a stream is reset. This issue affects Apache Tomcat: versions from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, and from 9.0.39...

tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...