282 matches found
Pixel-Flood-Attack
Pixel Flood DoS - CVE-2024-22393 PoC 针对Web服务器的Pixel Flood漏洞 一个轻量级的概念验证，用于测试运行受影响版本Apache Answer的Web应用程序中的Pixel Flood内存耗尽漏洞。 目录 描述 技术细节 受影响版本 环境要求 使用说明 PoC步骤 检测 缓解措施 漏洞赏金提示 参考 免责声明 描述 本仓库包含CVE-2024-22393 的概念验证，这是Apache Answer（版本至1.2.1）中的一个严重漏洞，允许经过身份验证的攻击者使用精心制作的图像文件使服务器崩溃。该攻击也被称为“Pixel...
Apache-Hunter
ApacheHunter - 高级 Apache 服务器扫描器 由 Rownok Ahmed Khan 开发 GitHub:https://github.com/Rk-000 ApacheHunter 是一款功能强大的扫描器，用于检测 Apache 服务器、识别版本并检查 Apache Answer 安装中的 CVE-2024-22393（像素洪水漏洞）。 功能特点 ✅ 检测 Apache 服务器并提取版本 ✅ 检查 CVE-2024-22393 漏洞 ✅ 多种检测方法（头部信息、页面分析、路径探测） ✅ 三种扫描速度（慢速、普通、快速） ✅ 代理支持 ✅...
SUSE CVE-2026-25688
Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. AI-generated response content was rendered in the browser without proper sanitization, allowing malicious scripts to be executed when the content was viewed. Users are...
SUSE CVE-2026-25699
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...
SUSE CVE-2026-25700
Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after an administrator account was suspended, deleted, or deactivated, allowing continued access to...
SUSE CVE-2026-33582
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are...
SUSE CVE-2026-34031
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images, which could expose users to...
SUSE CVE-2026-34033
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in notification emails without proper escaping, allowing authenticated users to inject arbitrary HTML int...
SUSE CVE-2026-34905
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question feature did not enforce access restrictions on direct API endpoints, allowing authenticated users to discover and access unlisted...
GO-2026-6152 Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in github.com/apache/answer
Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in github.com/apache/answer...
GO-2026-6148 Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability in github.com/apache/answer
Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability in github.com/apache/answer...
GO-2026-6249 Apache Answer: AdminToken not invalidated after admin deactivation in github.com/apache/answer
Apache Answer: AdminToken not invalidated after admin deactivation in github.com/apache/answer. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerabilit...
GO-2026-6153 Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/answer
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/answer...
GO-2026-6154 Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/answer
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/answer...
GO-2026-6151 Apache Answer vulnerable to Cross-site Scripting in github.com/apache/answer
Apache Answer vulnerable to Cross-site Scripting in github.com/apache/answer...
GO-2026-6147 Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability in github.com/apache/answer
Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability in github.com/apache/answer...
PT-2026-80393
Apache Answer vulnerable to Cross-site Scripting in github.com/apache/answer...
PT-2026-80394
Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in github.com/apache/answer...