Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC Pixel Flood Bug for Web Servers A lightweight Proof-of-Concept to test for the Pixel Flood memory exhaustion vulnerability in web applications running vulnerable versions of Apache Answer. Table of Contents Description Technical Details Affected Versions...

Apache-Hunter

ApacheHunter - Advanced Apache Server Scanner Developed by Rownok Ahmed Khan GitHub:https://github.com/Rk-000 ApacheHunter is a powerful scanner designed to detect Apache servers, identify versions, and check for CVE-2024-22393 Pixel Flood vulnerability in Apache Answer installations. Features ✅...

CVE-2024-22393

Exploit CVE-2024-22393 To exploit this vulnerability, upload the photo I provided in any photo upload section. lottapixel.jpg References: https://nvd.nist.gov/vuln/detail/CVE-2024-22393 https://www.openwall.com/lists/oss-security/2024/02/22/1...

CVE-2024-22393

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content...

CVE-2024-22393 Apache Answer: Pixel Flood Attack by uploading the large pixel file

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content...

CVE-2024-22393 Apache Answer: Pixel Flood Attack by uploading the large pixel file

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content...

CVE-2024-22393

Apache Answer (versions up to 1.2.1 ) is vulnerable to a Pixel Flood attack (CWE-434 ) caused by a lack of file type and dimension checks. An authenticated user can upload a small image (e.g., 5KB) with falsified EXIF metadata declaring massive dimensions (e.g., 64,250 x 64,250 pixels). When the ...