Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps
Article URL: https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497 Comments URL: http…
标签：HTTP
共 7 篇相关文章
Evolving Threat: http2shell is an RCE in node, Python, and more
Article URL: https://nitter.click/AikidoSecurity/status/2113759110625906950?__galadriel=lPmlGl9id4oAd5UeBwMhlYKArHyr6lR2…
Qpack amplification attacks against HTTP/3 servers
Article URL: https://foxio.io/blog/header-accordions-qpack-amplification-attacks-against-http-3-servers Comments URL: ht…
Prompt injection in HTTP headers: what 217M web responses show
Article URL: https://www.signalscorps.com/blog/prompt-injection-in-http-headers/ Comments URL: https://news.ycombinator.…
Better HTTP/1 connection reuse in Go 1.27
Article URL: https://go.dev/blog/http-connection-reuse Comments URL: https://news.ycombinator.com/item?id=50090369 Point…
谷歌发布安卓 17 QPR2 Beta 7 更新：修复待机耗电与 HTTPS 下载故障
IT之家 10 月 10 日消息，谷歌已推送安卓 17 QPR2 Beta 7 更新，修复 Pixel 手机待机耗电故障，并解决系统 HTTPS 文件下载失败问题。IT之家援引博文介绍，本次更新版本号为 CP41.260831.016，安全…
“一把梭：REST API 全用 POST”
写这篇文章的原因主要还是因为V2EX上的这个贴子，这个贴子中说—— “对接同事的接口，他定义的所有接口都是 post 请求，理由是 https 用 post 更... Read More Read More The post “一把梭：RE…