Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploit57A04B68-8CB5-5CEE-999B-B21C3C35AB83
HistoryMar 23, 2024 - 5:03 a.m.

Exploit for Deserialization of Untrusted Data in Apache Log4J

2024-03-2305:03:44
159
apache log4j
uncontrolled resource consumption
exploit
cve-2021-44228
python3
http
ldap
nuclei
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.976 High

EPSS

Percentile

100.0%

JSON

CVE-2021-44228-POC<br>

exploit CVE-2021-44228 <br>

<br>
downl…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

ibm 48
ics 2
nuclei 1
openvas 6
githubexploit 61
suse 1
threatpost 33
redhat 1
mageia 1
impervablog 3
rapid7blog 6
nessus 12
freebsd 2
malwarebytes 1
kaspersky 2
thn 3
wallarmlab 1
zdt 3
metasploit 3
akamaiblog 1
packetstorm 2
qualysblog 1
msrc 1
hackerone 1
f5 1
trellix 1
hivepro 1
cisa_kev 1
ibm
ibm
Security Bulletin: IBM Db2 Big SQL for Hortonworks Data Platform, for Cloudera Data Platform Private Cloud, and IBM Db2 Big SQL on Cloud Pak for Data are affected by critical vulnerability in Log4j (CVE-2021-44228)
2022-01-27 19:42:01
Security Bulletin: Financial Transaction Manager is affected by a vulnerability in Apache log4j (CVE-2021-44228)
2022-01-07 20:05:45
Security Bulletin: Apache Log4j vulnerability in DCNM Network Management Software used by IBM c-type SAN directors and switches.
2021-12-28 20:35:34
ics
ics
Karakurt Data Extortion Group
2023-12-12 12:00:00
Johnson Controls exacq Enterprise Manager
2021-12-23 12:00:00
nuclei
nuclei
Apache Log4j2 Remote Code Injection
2021-12-11 19:26:50
openvas
openvas
Fedora: Security Advisory for jansi (FEDORA-2021-66d6c484f3)
2021-12-23 00:00:00
Apache Tika Server 2.x < 2.2.0 Log4j RCE Vulnerability (Log4Shell)
2021-12-23 00:00:00
openSUSE: Security Advisory for log4j (openSUSE-SU-2021:3999-1)
2022-02-01 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-01-05 11:27:16
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 09:58:11
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-13 13:05:26
suse
suse
Security update for log4j (important)
2021-12-13 00:00:00
threatpost
threatpost
RCE Bugs in Hugely Popular VoIP Apps: Patch Now!
2022-03-01 21:44:32
Most ServiceNow Instances Misconfigured, Exposed
2022-03-09 16:00:32
Cybercriminals Swarm Windows Utility Regsvr32 to Spread Malware
2022-02-09 21:56:49
redhat
redhat
(RHSA-2021:5133) Critical: Red Hat AMQ Streams 1.6.5 release and security update
2021-12-14 21:09:18
mageia
mageia
Updated log4j packages fix security vulnerability
2021-12-11 04:02:37
impervablog
impervablog
2021 in Review, Part 3: 5 Things Security Professionals Were Discussing this Year
2021-12-30 13:26:47
5 Things We’ve Learned About CVE-2021-44228
2021-12-17 06:44:55
Continuing to Stay Ahead of CVE-2021-44228: Addressing Your Top Questions
2021-12-14 22:55:49
rapid7blog
rapid7blog
Sharing the Gifts of Cybersecurity – Or, a Lesson From My First Year Without Santa
2022-01-03 15:00:00
Log4Shell Strategic Response: 5 Practices for Vulnerability Management at Scale
2022-01-07 18:20:22
The 2021 Naughty and Nice Lists: Cybersecurity Edition
2022-01-10 14:57:53
nessus
nessus
Cisco Unified Intelligence Center Log4j RCE
2022-05-16 00:00:00
Amazon Linux AMI : log4j-cve-2021-44228-hotpatch (ALAS-2022-1601)
2022-06-16 00:00:00
openSUSE 15 Security Update : log4j (openSUSE-SU-2021:3999-1)
2021-12-17 00:00:00
freebsd
freebsd
bastillion -- log4j vulnerability
2021-12-10 00:00:00
serviio -- affected by log4j vulnerability
2021-12-13 00:00:00
malwarebytes
malwarebytes
What SMBs can do to protect against Log4Shell attacks
2021-12-15 20:59:31
kaspersky
kaspersky
KLA12396 RCE vulnerability in Microsoft Developer Tools
2021-12-16 00:00:00
KLA12390 RCE vulnerability in Apache Log4j
2021-12-10 00:00:00
thn
thn
Iranian Hackers Compromised a U.S. Federal Agency's Network Using Log4Shell Exploit
2022-11-17 06:22:00
China suspends deal with Alibaba for not sharing Log4j 0-day first with the government
2021-12-22 11:53:00
Hackers Exploit Log4j Vulnerability to Infect Computers with Khonsari Ransomware
2021-12-14 11:09:00
wallarmlab
wallarmlab
5 things you must know about Log4Shell
2021-12-11 01:22:39
zdt
zdt
Apache Log4j2 2.14.1 - Information Disclosure Exploit
2021-12-14 00:00:00
Intel Data Center Manager 5.1 Local Privilege Escalation Vulnerability
2022-12-10 00:00:00
VMware vCenter Server Unauthenticated Log4Shell JNDI Injection Remote Code Execution Exploit
2022-01-20 00:00:00
metasploit
metasploit
VMware vCenter Server Unauthenticated JNDI Injection RCE (via Log4Shell)
2022-01-12 20:34:45
MobileIron Core Unauthenticated JNDI Injection RCE (via Log4Shell)
2022-07-29 17:31:15
Log4Shell HTTP Scanner
2021-12-15 13:45:24
akamaiblog
akamaiblog
CVE-2021-44228 - Zero Day Vulnerability in Apache Log4j that allows remote code execution (RCE)
2021-12-10 21:00:00
packetstorm
packetstorm
AD Manager Plus 7122 Remote Code Execution
2023-04-03 00:00:00
VMware vCenter Server Unauthenticated Log4Shell JNDI Injection Remote Code Execution
2022-01-20 00:00:00
qualysblog
qualysblog
Qualys Study Reveals How Enterprises Responded to Log4Shell
2022-03-18 13:00:00
msrc
msrc
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 08:00:00
hackerone
hackerone
Judge.me : Log4j RCE on https://judge.me/reviews
2021-12-15 10:30:12
f5
f5
K19026212 : Apache Log4j2 Remote Code Execution vulnerability CVE-2021-44228
2021-12-10 00:00:00
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
hivepro
hivepro
Iranian hackers leveraged Log4Shell to penetrate US federal agency
2022-11-17 12:28:57
cisa_kev
cisa_kev
Apache Log4j2 Remote Code Execution Vulnerability
2021-12-10 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.976 High

EPSS

Percentile

100.0%

JSON
Related for 57A04B68-8CB5-5CEE-999B-B21C3C35AB83
ibm48ics2nuclei1openvas6githubexploit61suse1threatpost33redhat1mageia1impervablog3rapid7blog6nessus12freebsd2malwarebytes1kaspersky2thn3wallarmlab1zdt3metasploit3akamaiblog1packetstorm2qualysblog1msrc1hackerone1f51trellix1hivepro1cisa_kev1