Quic — PoC Archivehttps://poc.intelseclab.com/tags/quic/Latest proof-of-concept entries.Hugoen-usThu, 03 Sep 2026 00:00:00 +0000Nginx HTTP/3 QUIC Pool Corruption RCE (CVE-2026-42530)https://poc.intelseclab.com/pocs/binary/2026-09-03_cve-2026-42530-nginx-quic-rce/Thu, 03 Sep 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-09-03_cve-2026-42530-nginx-quic-rce/High severity (CVSS 8.1) — binary · CVE-2026-42530. Status: PoC. Affects: Nginx (HTTP/3 QUIC module). Tags: RCE, Nginx, HTTP/3, QUIC, pool corruption, heap, Python, remote.binaryHighRCENginxHTTP/3QUICpool corruptionheapPythonremoteXRING — XQUIC QPACK Ring Buffer Resize Underflow (Remote Unauthenticated DoS)https://poc.intelseclab.com/pocs/network/2026-07-08_xring-xquic-qpack-ring-mem-resize-underflow/Wed, 08 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-08_xring-xquic-qpack-ring-mem-resize-underflow/Critical severity — network. Status: Weaponized (public PoC, unpatched at publication). Affects: [alibaba/xquic](https://github.com/alibaba/xquic) — QUIC/HTTP-3 library, used by Tengine and reportedly across Alibaba's cloud/CDN infrastructure (Taobao, AliPay). Tags: quic, http3, qpack, xquic, alibaba, tengine, ring-buffer, integer-underflow, heap-oob-read, memcpy, remote, unauthenticated, dos, no-cve.networkCriticalquichttp3qpackxquicalibabatenginering-bufferinteger-underflowheap-oob-readmemcpyremoteunauthenticateddosno-cveNginx QUIC/HTTP-3 DCID Length Heap Overflow Lab (CVE-2026-0211)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0211-nginx-quic-heap-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0211-nginx-quic-heap-overflow/High severity — web · CVE-2026-0211 (repository explicitly labels this as a hypothetical/simulated CVE for coursework, not a confirmed vendor-assigned vulnerability). Status: PoC. Affects: A custom, deliberately vulnerabilized fork of Nginx 1.25.3's QUIC transport module (ngx_event_quic_transport.c), run inside a purpose-built Docker lab — not the stock upstream Nginx release. Tags: nginx, quic, http-3, heap-overflow, dos, fuzzing, dcid, academic-lab, docker.webHighnginxquichttp-3heap-overflowdosfuzzingdcidacademic-labdockerHAProxy HTTP/3 (QUIC) Standalone FIN Body Validation Bypass Leading to Request Smuggling — CVE-2026-33555https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33555-haproxy-h3-request-smuggling/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33555-haproxy-h3-request-smuggling/High severity — network · CVE-2026-33555. Status: PoC. Affects: HAProxy with HTTP/3 (QUIC) support built (USE_QUIC=1); tested on HAProxy 3.0.18. Tags: haproxy, http3, quic, request-smuggling, http-reuse, content-length, reverse-proxy, cross-user.networkHighhaproxyhttp3quicrequest-smugglinghttp-reusecontent-lengthreverse-proxycross-user