Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploit4B1180FB-F4A3-5FCD-A8D2-65364D1EA9EC
HistoryDec 15, 2021 - 2:31 a.m.

Exploit for Expression Language Injection in Apache Log4J

2021-12-1502:31:14
218
apache log4j
improper input validation
cve-2021-44228
jndilookup.class
file system scanner
zip files
jar files
war files
exploit

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.965

Percentile

99.6%

JSON

File system scanner for CVE-2021-44228

Aims to find JndiLooku…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

githubexploit 86
ibm 47
ubuntu 1
threatpost 8
fedora 1
thn 5
rapid7blog 2
cisa 2
mmpc 1
nessus 9
hivepro 1
osv 5
openvas 8
hackerone 4
freebsd 1
packetstorm 2
wallarmlab 2
trellix 1
kitploit 1
nvd 1
suse 1
zdt 1
github 1
metasploit 1
prion 1
cvelist 1
debiancve 1
vmware 1
akamaiblog 2
mscve 1
redhat 1
githubexploit
githubexploit
Exploit for Expression Language Injection in Apache Log4J
2021-12-14 21:47:04
Exploit for Expression Language Injection in Apache Log4J
2021-12-16 11:54:11
Exploit for Expression Language Injection in Apache Log4J
2021-12-18 16:09:49
ibm
ibm
Security Bulletin: Vulnerability in Apache Log4j addressed in IBM Spectrum Conductor
2022-01-07 16:23:40
Security Bulletin: IBM Security Verify Governance Products NOT Affected by CVE-2021-44228 Exploit
2022-04-04 21:53:13
Security Bulletin: Is Blueworks Live affected by CVE-2021-44228 (Log4j Vulnerability)?
2021-12-17 17:30:47
ubuntu
ubuntu
Apache Log4j 2 vulnerability
2021-12-17 00:00:00
threatpost
threatpost
Conti Ransomware Gang Has Full Log4Shell Attack Chain
2021-12-20 22:11:30
FTC to Go After Companies that Ignore Log4j
2022-01-05 19:00:03
The Log4j Vulnerability Puts Pressure on the Security World
2022-01-18 20:21:04
fedora
fedora
[SECURITY] Fedora 34 Update: jansi-2.1.1-4.fc34
2021-12-22 01:14:26
thn
thn
NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon
2022-01-08 07:04:00
Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations
2022-08-27 03:23:00
Last Years Open Source - Tomorrow's Vulnerabilities
2022-11-01 12:04:00
rapid7blog
rapid7blog
Being Naughty to See Who Was Nice: Machine Learning Attacks on Santa’s List
2022-01-14 14:46:41
Log4Shell 2 Months Later: Security Strategies for the Internet's New Normal
2022-02-17 18:00:00
cisa
cisa
Ivanti Updates Log4j Advisory with Security Updates for Multiple Products  
2022-01-14 00:00:00
CISA Issues ED 22-02 Directing Federal Agencies to Mitigate Apache Log4j Vulnerabilities
2021-12-17 00:00:00
mmpc
mmpc
Build a stronger cybersecurity team through diversity and training
2022-01-20 17:00:00
nessus
nessus
Amazon Linux 2 : log4j-cve-2021-44228-hotpatch (ALAS-2022-1806)
2022-06-16 00:00:00
FreeBSD : serviio -- affected by log4j vulnerability (1ea05bb8-5d74-11ec-bb1e-001517a2e1a4)
2021-12-15 00:00:00
Apache Apereo CAS Log4Shell Direct Check (CVE-2021-44228)
2022-07-26 00:00:00
hivepro
hivepro
Monti ransomware infiltrates networks via the well-known Log4Shell
2022-09-16 10:51:13
osv
osv
apache-log4j2 - security update
2021-12-12 00:00:00
apache-log4j2 vulnerability
2021-12-17 12:46:46
apache-log4j2 vulnerability
2021-12-14 13:39:20
openvas
openvas
Fedora: Security Advisory for log4j (FEDORA-2021-66d6c484f3)
2021-12-23 00:00:00
Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check
2021-12-20 00:00:00
Mageia: Security Advisory (MGASA-2021-0556)
2022-01-28 00:00:00
hackerone
hackerone
MTN Group: Remote code injection in Log4j on http://mtn1app.mtncameroon.net - CVE-2021-44228
2021-12-14 03:55:04
Acronis: [forum.acronis.com] JNDI Code Injection due an outdated log4j component
2021-12-19 06:07:01
U.S. Dept Of Defense: Log4Shell: RCE 0-day exploit on █████████
2021-12-16 18:32:13
freebsd
freebsd
graylog -- include log4j patches
2021-12-10 00:00:00
packetstorm
packetstorm
Apache Log4j2 2.14.1 Information Disclosure
2021-12-14 00:00:00
UniFi Network Application Unauthenticated Log4Shell Remote Code Execution
2022-01-24 00:00:00
wallarmlab
wallarmlab
Log4j 0day mitigation update CVE-2021-44228
2021-12-10 20:56:40
5 things you need to know about Log4Shell (CVE-2021-44228)
2021-12-10 20:40:07
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
kitploit
kitploit
NodeSecurityShield - A Developer And Security Engineer Friendly Package For Securing NodeJS Applications
2022-05-14 21:30:00
nvd
nvd
CVE-2021-44228
2021-12-10 10:15:09
suse
suse
Security update for log4j (important)
2021-12-12 00:00:00
zdt
zdt
UniFi Network Application Unauthenticated Log4Shell Remote Code Execution Exploit
2022-01-24 00:00:00
github
github
Apache Log4j Remote Code Execution
2021-12-14 21:07:14
metasploit
metasploit
Log4Shell HTTP Header Injection
2021-12-29 14:10:07
prion
prion
Default configuration
2021-12-10 10:15:00
cvelist
cvelist
CVE-2021-44228 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
2021-12-10 00:00:00
debiancve
debiancve
CVE-2021-44228
2021-12-10 10:15:09
vmware
vmware
VMware Response to Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228)
2021-12-10 00:00:00
akamaiblog
akamaiblog
CVE-2021-44228 - Patching is Recommended for Evolving Zero Day Vulnerability in Apache Log4j that allows remote code execution (RCE)
2021-12-11 11:00:53
Our Journey to Detect Log4j-Vulnerable Machines
2021-12-27 19:30:00
mscve
mscve
Apache Log4j Remote Code Execution Vulnerability
2021-12-16 08:00:00
redhat
redhat
(RHSA-2022:0082) Critical: Red Hat Process Automation Manager 7.11.1 security update
2022-01-11 10:28:38

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.965

Percentile

99.6%

JSON
Related for 4B1180FB-F4A3-5FCD-A8D2-65364D1EA9EC
githubexploit86ibm47ubuntu1threatpost8fedora1thn5rapid7blog2cisa2mmpc1nessus9hivepro1osv5openvas8hackerone4freebsd1packetstorm2wallarmlab2trellix1kitploit1nvd1suse1zdt1github1metasploit1prion1cvelist1debiancve1vmware1akamaiblog2mscve1redhat1