CVE-2024-22393

CVE-2024-22393 악용 이 취약점을 악용하려면 내가 제공한 사진을 아무 사진 업로드 섹션에 업로드하세요. lottapixel.jpg 참조: https://nvd.nist.gov/vuln/detail/CVE-2024-22393 https://www.openwall.com/lists/oss-security/2024/02/22/1 https://lists.apache.org/thread/f58l6dr4r74hl6o71gn47kmn44vw12cv...

Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC 웹 서버용 Pixel Flood 취약점 취약한 Apache Answer 버전을 실행하는 웹 애플리케이션에서 Pixel Flood 메모리 고갈 취약점을 테스트하기 위한 경량 개념 증명PoC입니다. 목차 설명 기술 세부사항 영향 받는 버전 요구사항 사용법 PoC 단계 탐지 완화 버그 바운티 팁 참고 자료 면책 조항 설명 이 저장소는 Apache Answer버전 1.2.1까지의 심각한 취약점인 CVE-2024-22393 에 대한 개념 증명PoC을 포함합니다. 이 취약...

Apache-Hunter

ApacheHunter - 고급 Apache 서버 스캐너 Rownok Ahmed Khan 개발 GitHub:https://github.com/Rk-000 ApacheHunter는 Apache 서버를 탐지하고, 버전을 식별하며, Apache Answer 설치에서 CVE-2024-22393 Pixel Flood 취약점을 확인하도록 설계된 강력한 스캐너입니다. 기능 ✅ Apache 서버 탐지 및 버전 추출 ✅ CVE-2024-22393 취약점 확인 ✅ 다양한 탐지 방법 헤더, 페이지 분석, 경로 프로빙 ✅ 세 가지 스캔 속도 느림,...

CVE-2024-22393

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content...

CVE-2024-22393 Apache Answer: Pixel Flood Attack by uploading the large pixel file

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content...

CVE-2024-22393 Apache Answer: Pixel Flood Attack by uploading the large pixel file

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content...

CVE-2024-22393

Apache Answer (versions up to 1.2.1 ) is vulnerable to a Pixel Flood attack (CWE-434 ) caused by a lack of file type and dimension checks. An authenticated user can upload a small image (e.g., 5KB) with falsified EXIF metadata declaring massive dimensions (e.g., 64,250 x 64,250 pixels). When the ...