HTTP3-Adapter

HTTP/3-Adapter Расширение для Burp Suite, отправляющее запросы по HTTP/3. Burp не поддерживает HTTP/3 нативно. Это расширение реализует стек HTTP/3, перехватывает все запросы, преобразует и отправляет их по HTTP/3, а затем преобразует ответ обратно в версию HTTP, понятную Burp. Установка Доступно...

HTTP3-attacks

HTTP3-attacks CVE-2022-30592 На основе работы: E. Chatzoglou, V. Kouliaridis, G. Kambourakis, G. Karopoulos, and S. Gritzalis,"A hands-on gaze on HTTP/3 security through the lens of HTTP/2 and a public dataset", Computers & Security, p. 103051, 2022. Этот репозиторий служит для публикации скрипто...

ssh3

!NOTE SSH3 va probablement changer de nom. Il s'agit toujours du protocole de connexion SSH RFC4254 fonctionnant sur HTTP/3 Extended Connect, mais les modifications nécessaires sont lourdes et trop éloignées de la philosophie des implémentations SSH populaires pour être envisagées en vue d'une...

HTTP3ONSTEROIDS

Содержание Описание уязвимости Обзор исходного кода Настройка лаборатории Выявление проблемы Ссылки Описание уязвимости Реализация HTTP/3 в HAProxy не блокирует некорректное имя поля HTTP-заголовка , и при развёртывании перед сервером, который неправильно обрабатывает такой некорректный заголовок...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Неразрушающий массовый сканер для use-after-free в NGINX HTTP/3 QUIC Определите, какие из ваших хостов подвержены уязвимости, — не вызывая ошибку. ⚠️ Отказ от ответственности Этот инструмент предназначен только для авторизованного тестирования безопасности —...

CVE-2026-42530

CVE-2026-42530 Сканер для CVE-2026-42530, use-after-free в HTTP/3-модуле nginx. Затронуты: nginx 1.31.0, 1.31.1 Исправлено: nginx 1.31.2 Использование pip install aioquic python3 scannerCVE-2026-42530.py port python3 scannerCVE-2026-42530.py --file hosts.txt Принцип работы Открывает два...

CVE-2026-42530

🛡️ CVE-2026-42530 - Vulnérabilité Use-After-Free dans NGINX HTTP/3 QUIC Use-After-Free de haute sévérité dans NGINX HTTP/3 QUIC ⚠️ Vulnérabilité du flux encodeur QPACK 🔍 Aperçu CVE-2026-42530 est une vulnérabilité use-after-free dans le module ngxhttpv3module de NGINX. Un attaquant distant non...

CVE-2026-33555

Обход проверки тела запроса в HAProxy H3/QUIC Standalone FIN при HTTP Request Smuggling Полная статья здесь: https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html Краткое описание Уязвимость в реализации HTTP/3 в HAProxy позволяет злоумышленнику отправить HTTP-запрос с...

CLEANSTART-2026-WX23354 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...

Linux Distros Unpatched Vulnerability : CVE-2026-100663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty's HTTP/3 codec io.netty:netty-codec-http3 from 4.2.2.Final through 4.2.17.Final does not special- case HTTP/1 CONNECT authority-form request-targets when...

Linux Distros Unpatched Vulnerability : CVE-2026-100659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty's HTTP/3 codec io.netty:netty-codec-http3 in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC 9114 requirement that the :authority...

Linux Distros Unpatched Vulnerability : CVE-2026-100660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty's HTTP/3 codec io.netty:netty-codec-http3 from 4.2.0.Final through 4.2.17.Final retains unbounded per-stream QPACK encoder state. QpackEncoder stores a...

Linux Distros Unpatched Vulnerability : CVE-2026-100661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain a denial-of-service vulnerability in the QPACK prefixed-intege...

BIT-ENVOY-2026-48521 Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...

CLEANSTART-2026-PQ26679 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)

Security vulnerability affects the kafka package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...

PT-2026-102719

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transport socket options while selecting an HTTP/3 connection pool without first checking whether t...

CVE-2026-100659

A flaw was found in the Netty HTTP/3 codec. This vulnerability allows access control and request routing bypasses due to missing validation of destination headers. A remote, unauthenticated attacker can exploit this flaw by sending a Hypertext Transfer Protocol HTTP request containing conflicting...

CVE-2026-100664

A flaw was found in Netty's HTTP/3 codec. When converting HTTP/1 requests to HTTP/3, the codec improperly prioritizes the Host header over the request-target authority. A remote, unauthenticated attacker can exploit this authority confusion by sending a request containing conflicting destination...

CVE-2026-100663

A flaw was found in Netty's HTTP/3 codec netty-codec-http3. A remote attacker can bypass security policies and tunnel allowlists when Netty acts as an HTTP/1 to HTTP/3 proxy or gateway. Due to improper translation of HTTP/1 CONNECT requests, the component uses the attacker-controlled Host header ...

CVE-2026-100662

A flaw was found in Netty's HTTP/3 codec. A remote, unauthenticated attacker can cause a Denial of Service DoS by establishing an HTTP/3 connection and sending stream instructions that declare excessively large field lengths without delivering the complete data. Because the server does not enforc...