nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
d1e82ef91e27cc2bfa782054ce72a7b626389cc1
PoC-in-GitHub/2026/CVE-2026-49975.json
T

453 lines
16 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1258685193,
"name": "Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-",
"full_name": "fevar54\/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-",
"owner": {
"login": "fevar54",
"id": 80516843,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80516843?v=4",
"html_url": "https:\/\/github.com\/fevar54",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fevar54\/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-",
"description": "PoC de CVE-2026-49975 (HTTP\/2 Bomb): DoS remoto contra servidores web con HTTP\/2 por defecto.",
"fork": false,
"created_at": "2026-06-03T20:22:30Z",
"updated_at": "2026-08-25T16:45:21Z",
"pushed_at": "2026-06-03T20:34:52Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-pocs"
],
"visibility": "public",
"forks": 2,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1259037076,
"name": "CVE-2026-49975-POC",
"full_name": "mrx-arafat\/CVE-2026-49975-POC",
"owner": {
"login": "mrx-arafat",
"id": 71003115,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71003115?v=4",
"html_url": "https:\/\/github.com\/mrx-arafat",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mrx-arafat\/CVE-2026-49975-POC",
"description": "HTTP\/2 Bomb PoC — CVE-2026-49975 (HPACK indexed reference bomb + flow-control stall)",
"fork": false,
"created_at": "2026-06-04T06:22:54Z",
"updated_at": "2026-11-07T07:34:33Z",
"pushed_at": "2026-06-04T06:23:03Z",
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 30,
"score": 0,
"subscribers_count": 3
},
{
"id": 1263020786,
"name": "CVE-2026-49975-HTTP-2-Bomb",
"full_name": "renzi25031469\/CVE-2026-49975-HTTP-2-Bomb",
"owner": {
"login": "renzi25031469",
"id": 63527374,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63527374?v=4",
"html_url": "https:\/\/github.com\/renzi25031469",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/renzi25031469\/CVE-2026-49975-HTTP-2-Bomb",
"description": "Disclosed on June 3, 2026, the \"HTTP\/2 Bomb\" is an unauthenticated remote DoS that combines an HPACK compression bomb with a Slowloris-style hold to exhaust server memory. It affects default HTTP\/2 configurations of **nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora**.",
"fork": false,
"created_at": "2026-06-08T14:44:32Z",
"updated_at": "2026-06-29T10:57:08Z",
"pushed_at": "2026-06-08T14:58:44Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1264681974,
"name": "CVE-2026-49975",
"full_name": "EQSTLab\/CVE-2026-49975",
"owner": {
"login": "EQSTLab",
"id": 148991397,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4",
"html_url": "https:\/\/github.com\/EQSTLab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EQSTLab\/CVE-2026-49975",
"description": "HTTP\/2 Bomb",
"fork": false,
"created_at": "2026-06-10T05:06:42Z",
"updated_at": "2026-09-25T11:50:20Z",
"pushed_at": "2026-06-25T08:34:41Z",
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
{
"id": 1265079070,
"name": "CVE-2026-49975",
"full_name": "LSG-PolarBear\/CVE-2026-49975",
"owner": {
"login": "LSG-PolarBear",
"id": 168621063,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168621063?v=4",
"html_url": "https:\/\/github.com\/LSG-PolarBear",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/LSG-PolarBear\/CVE-2026-49975",
"description": "CVE-2026-49975漏洞复现",
"fork": false,
"created_at": "2026-06-10T12:52:47Z",
"updated_at": "2026-08-17T14:08:16Z",
"pushed_at": "2026-06-11T03:44:05Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1265340328,
"name": "CVE-2026-49975",
"full_name": "LiaoZiqi-GZFLS\/CVE-2026-49975",
"owner": {
"login": "LiaoZiqi-GZFLS",
"id": 108562065,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108562065?v=4",
"html_url": "https:\/\/github.com\/LiaoZiqi-GZFLS",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/LiaoZiqi-GZFLS\/CVE-2026-49975",
"description": "CVE-2026-49975",
"fork": false,
"created_at": "2026-06-10T17:26:30Z",
"updated_at": "2026-08-14T13:17:01Z",
"pushed_at": "2026-06-10T19:06:35Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1268005033,
"name": "http2-bomb-analysis-paper",
"full_name": "minc-nice-100\/http2-bomb-analysis-paper",
"owner": {
"login": "minc-nice-100",
"id": 100515973,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100515973?v=4",
"html_url": "https:\/\/github.com\/minc-nice-100",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/minc-nice-100\/http2-bomb-analysis-paper",
"description": "HTTP\/2 Bomb: HPACK indexed-reference amplification + flow-control stall. A high school student's full protocol analysis (LaTeX). CVE-2026-49975, CVE-2026-47774.",
"fork": false,
"created_at": "2026-06-13T03:50:11Z",
"updated_at": "2026-06-13T04:57:47Z",
"pushed_at": "2026-06-13T04:01:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": false,
"pull_request_creation_policy": "all",
"topics": [
"amplification-attack",
"cve-2026-47774",
"cve-2026-49975",
"dos-attack",
"hpack",
"http2",
"http2-bomb",
"security-research",
"vulnerability",
"web-security"
],
"visibility": "public",
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1268552178,
"name": "cve-2026-49975-http2bomb_reproduction",
"full_name": "razureink\/cve-2026-49975-http2bomb_reproduction",
"owner": {
"login": "razureink",
"id": 200357710,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200357710?v=4",
"html_url": "https:\/\/github.com\/razureink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/razureink\/cve-2026-49975-http2bomb_reproduction",
"description": null,
"fork": false,
"created_at": "2026-06-13T17:05:58Z",
"updated_at": "2026-08-27T12:17:52Z",
"pushed_at": "2026-07-23T03:46:56Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1273379879,
"name": "CVE-2026-49975",
"full_name": "0xc03307b\/CVE-2026-49975",
"owner": {
"login": "0xc03307b",
"id": 292400373,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292400373?v=4",
"html_url": "https:\/\/github.com\/0xc03307b",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xc03307b\/CVE-2026-49975",
"description": "HTTP2-Bomb",
"fork": false,
"created_at": "2026-06-18T13:17:37Z",
"updated_at": "2026-06-18T13:18:15Z",
"pushed_at": "2026-06-18T06:00:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1275462013,
"name": "http2-bomb-detector",
"full_name": "wlor0623\/http2-bomb-detector",
"owner": {
"login": "wlor0623",
"id": 34371116,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34371116?v=4",
"html_url": "https:\/\/github.com\/wlor0623",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wlor0623\/http2-bomb-detector",
"description": "HTTP\/2 Bomb (CVE-2026-49975) non-destructive vulnerability detector for Nginx \/ Apache httpd. Zero-dependency Python.",
"fork": false,
"created_at": "2026-06-20T18:08:57Z",
"updated_at": "2026-06-20T18:08:57Z",
"pushed_at": "2026-06-13T04:05:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1290328767,
"name": "http2-bomb",
"full_name": "Manisso\/http2-bomb",
"owner": {
"login": "Manisso",
"id": 16539311,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16539311?v=4",
"html_url": "https:\/\/github.com\/Manisso",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Manisso\/http2-bomb",
"description": "Proof of Concept (PoC) for CVE-2026-49975 – HTTP\/2 server memory exhaustion attack leveraging HPACK amplification and connection retention (HTTP\/2 Slowloris).",
"fork": false,
"created_at": "2026-07-05T20:50:06Z",
"updated_at": "2026-07-05T21:33:58Z",
"pushed_at": "2026-07-05T20:56:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1341391010,
"name": "CVE-2026-49975",
"full_name": "yym8538\/CVE-2026-49975",
"owner": {
"login": "yym8538",
"id": 180361321,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180361321?v=4",
"html_url": "https:\/\/github.com\/yym8538",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yym8538\/CVE-2026-49975",
"description": null,
"fork": false,
"created_at": "2026-08-21T04:18:30Z",
"updated_at": "2026-09-25T11:50:15Z",
"pushed_at": "2026-08-21T04:18:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1372672515,
"name": "POC-CVE-2026-49975",
"full_name": "naheeju\/POC-CVE-2026-49975",
"owner": {
"login": "naheeju",
"id": 86222949,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86222949?v=4",
"html_url": "https:\/\/github.com\/naheeju",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/naheeju\/POC-CVE-2026-49975",
"description": "Security research PoC for CVE-2026-49975: HTTP\/2 HPACK compression bomb + flow-control hold DoS in Apache mod_http2",
"fork": false,
"created_at": "2026-09-16T07:21:14Z",
"updated_at": "2026-10-29T14:40:24Z",
"pushed_at": "2026-09-16T07:29:54Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"apache",
"cve",
"dos",
"golang",
"hpack",
"http2",
"poc",
"security-research"
],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink