Lucene search
263EF054-554A-53DB-B4B4-43AF73AA38C4HistoryNov 13, 2023 - 4:57 p.m.
Exploit for Deserialization of Untrusted Data in Apache Log4J
2023-11-1316:57:22
302
apache log4j
cve-2021-44228
remote access
vulnerability
reconnaissance
nmap
proof of concept
input manipulation
jndi syntax
java package
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.965
Percentile
99.6%
Log4j Vulnerability - CVE-2021-44228 :green_book:
-
**Int…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
rapid7blog
rapid7blog
Using InsightVM to Find Apache Log4j CVE-2021-44228
2021-12-14 14:17:29
Test for Log4Shell With InsightAppSec Using New Functionality
2021-12-22 21:50:50
5 Security Projects That Are Giving Back
2022-01-04 18:44:58
redhat
redhat
qualysblog
qualysblog
Log4Shell Exploit Detection and Response with Qualys Multi-Vector EDR
2021-12-14 23:55:59
What’s Next After Log4Shell?
2023-02-22 03:36:56
How to Make Log4Shell Remediation Quick & Effective
2022-01-11 16:58:48
githubexploit
githubexploit
Exploit for Expression Language Injection in Apache Log4J
2021-12-15 02:31:14
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-14 08:21:11
Exploit for Expression Language Injection in Apache Log4J
2021-12-15 22:30:34
suse
suse
Security update for log4j (important)
2021-12-15 00:00:00
Security update for logback (important)
2021-12-17 00:00:00
Security update for log4j (important)
2021-12-15 00:00:00
ibm
ibm
debian
debian
[SECURITY] [DLA 2842-1] apache-log4j2 security update
2021-12-12 15:09:37
kitploit
kitploit
nessus
nessus
Apache JSPWiki Log4Shell Direct Check (CVE-2021-44228)
2022-01-07 00:00:00
VMware vRealize Operations Manager Log4Shell Direct Check (CVE-2021-44228) (VMSA-2021-0028)
2022-01-21 00:00:00
MobileIron Core Log4Shell Direct Check (CVE-2021-44228)
2022-01-21 00:00:00
mssecure
mssecure
Build a stronger cybersecurity team through diversity and training
2022-01-20 17:00:00
hivepro
hivepro
Deep Panda deploys new rootkit “Fire Chili” by exploiting Log4shell in VMware horizon
2022-04-05 12:57:28
Lazarus’s Operation Blacksmith Deploys Novel Dlang RATs
2023-12-13 06:46:17
hackerone
hackerone
U.S. Dept Of Defense: LOGJ4 VUlnerability [HtUS]
2022-07-04 14:01:23
Acronis: [CVE-2021-44228] Arbitrary Code Execution on ng01-cloud.acronis.com
2022-01-25 07:33:15
msrc
msrc
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 08:00:00
ics
ics
Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester
2022-11-25 12:00:00
Sensormatic PowerManage (Update A)
2022-03-08 12:00:00
impervablog
impervablog
How We’re Protecting Customers & Staying Ahead of CVE-2021-44228
2021-12-11 02:31:39
freebsd
freebsd
openhab -- log4j remote code injection
2021-12-10 00:00:00
github
github
Critical vulnerability in log4j may affect generated PEAR projects
2021-12-16 21:01:51
openvas
openvas
openSUSE: Security Advisory for logback (openSUSE-SU-2021:4109-1)
2022-02-01 00:00:00
kaspersky
kaspersky
KLA12393 RCE vulnerability in Microsoft System Center
2021-12-16 00:00:00
qt
qt
metasploit
metasploit
UniFi Network Application Unauthenticated JNDI Injection RCE (via Log4Shell)
2022-01-19 22:51:31
osv
osv
Apache Log4j Remote Code Execution
2021-12-14 21:07:14
wordfence
wordfence
Analyzing Attack Data and Trends Targeting Log4J
2022-08-02 14:06:05
mmpc
mmpc
MERCURY and DEV-1084: Destructive attack on hybrid environment
2023-04-07 16:00:00
Build a stronger cybersecurity team through diversity and training
2022-01-20 17:00:00
zdt
zdt
MobileIron Log4Shell Remote Command Execution Exploit
2022-08-04 00:00:00
cisa
cisa
exploitdb
exploitdb
Apache Log4j2 2.14.1 - Information Disclosure
2021-12-14 00:00:00
ubuntu
ubuntu
Apache Log4j 2 vulnerability
2021-12-17 00:00:00
threatpost
threatpost
Conti Ransomware Gang Has Full Log4Shell Attack Chain
2021-12-20 22:11:30
FTC to Go After Companies that Ignore Log4j
2022-01-05 19:00:03
The Log4j Vulnerability Puts Pressure on the Security World
2022-01-18 20:21:04
fedora
fedora
[SECURITY] Fedora 34 Update: jansi-2.1.1-4.fc34
2021-12-22 01:14:26
thn
thn
NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon
2022-01-08 07:04:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.965
Percentile
99.6%
Related for 263EF054-554A-53DB-B4B4-43AF73AA38C4