Http — PoC Archivehttps://poc.intelseclab.com/tags/http/Latest proof-of-concept entries.Hugoen-usThu, 03 Sep 2026 00:00:00 +0000Nginx HTTP/3 QUIC Pool Corruption RCE (CVE-2026-42530)https://poc.intelseclab.com/pocs/binary/2026-09-03_cve-2026-42530-nginx-quic-rce/Thu, 03 Sep 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-09-03_cve-2026-42530-nginx-quic-rce/High severity (CVSS 8.1) — binary · CVE-2026-42530. Status: PoC. Affects: Nginx (HTTP/3 QUIC module). Tags: RCE, Nginx, HTTP/3, QUIC, pool corruption, heap, Python, remote.binaryHighRCENginxHTTP/3QUICpool corruptionheapPythonremoteApache HTTP Server mod_auth_digest Timing Attack — CVE-2026-33006https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33006-apache-mod-auth-digest-timing/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33006-apache-mod-auth-digest-timing/Medium severity (CVSS 4.8) — web · CVE-2026-33006. Status: PoC. Affects: Apache HTTP Server (mod_auth_digest module). Tags: apache, mod_auth_digest, timing-attack, authentication-bypass, digest-auth, http, side-channel.webMediumapachemod_auth_digesttiming-attackauthentication-bypassdigest-authhttpside-channelApache httpd mod_http2 Double-Free Pre-Auth RCE - CVE-2026-23918https://poc.intelseclab.com/pocs/web/2026-05-17_apache-httpd-mod-http2-double-free/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_apache-httpd-mod-http2-double-free/Critical severity — web · CVE-2026-23918. Status: Weaponized. Affects: Apache HTTP Server (httpd) with mod_http2. Tags: RCE, pre-auth, unauthenticated, double-free, heap-corruption, Apache, httpd, mod_http2, HTTP/2, TLS.webCriticalRCEpre-authunauthenticateddouble-freeheap-corruptionApachehttpdmod_http2HTTP/2TLS