Lucene search
7E75E72C-B195-554D-8C57-95071AE77EBEHistoryJun 09, 2024 - 2:49 a.m.
Exploit for Deserialization of Untrusted Data in Apache Log4J
2024-06-0902:49:42
111
log4shell vulnerability
apache log4j
banking application
remote code execution
payload crafting
exploitation
data exfiltration
lateral movement
detection
mitigation
patching
network monitoring
exploit process
jndi exploit kit
burp suite
configuration file
listener setup
illegal activities
ethical considerations.
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.976 High
EPSS
Percentile
100.0%
Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment
O…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
threatpost
threatpost
Cyberattackers Cook Up Employee Personal Data Heist for Meyer
2022-02-22 20:41:48
TrickBot Takes a Break, Leaving Researchers Scratching Their Heads
2022-02-25 21:32:15
RCE Bugs in WhatsApp, Other Hugely Popular VoIP Apps: Patch Now!
2022-03-01 21:44:32
nessus
nessus
kitploit
kitploit
ibm
ibm
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-04-18 09:16:05
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-21 22:14:24
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-23 01:59:03
thn
thn
Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations
2022-08-27 03:23:00
NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon
2022-01-08 07:04:00
Last Years Open Source - Tomorrow's Vulnerabilities
2022-11-01 12:04:00
packetstorm
packetstorm
Apache Log4j2 2.14.1 Information Disclosure
2021-12-14 00:00:00
UniFi Network Application Unauthenticated Log4Shell Remote Code Execution
2022-01-24 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Log4Shell: RCE 0-day exploit on █████████
2021-12-16 18:32:13
hivepro
hivepro
Monti ransomware infiltrates networks via the well-known Log4Shell
2022-09-16 10:51:13
osv
osv
apache-log4j2 - security update
2021-12-12 00:00:00
apache-log4j2 vulnerability
2021-12-17 12:46:46
apache-log4j2 vulnerability
2021-12-14 13:39:20
openvas
openvas
Fedora: Security Advisory for log4j (FEDORA-2021-66d6c484f3)
2021-12-23 00:00:00
Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check
2021-12-20 00:00:00
Mageia: Security Advisory (MGASA-2021-0556)
2022-01-28 00:00:00
nvd
nvd
CVE-2021-44228
2021-12-10 10:15:09
metasploit
metasploit
Log4Shell HTTP Header Injection
2021-12-29 14:10:07
cisa
cisa
Ivanti Updates Log4j Advisory with Security Updates for Multiple Products
2022-01-14 00:00:00
CISA Issues ED 22-02 Directing Federal Agencies to Mitigate Apache Log4j Vulnerabilities
2021-12-17 00:00:00
CISA Creates Webpage for Apache Log4j Vulnerability CVE-2021-44228
2021-12-13 00:00:00
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
rapid7blog
rapid7blog
Being Naughty to See Who Was Nice: Machine Learning Attacks on Santa’s List
2022-01-14 14:46:41
Log4Shell 2 Months Later: Security Strategies for the Internet's New Normal
2022-02-17 18:00:00
3 Takeaways From the 2022 Verizon Data Breach Investigations Report
2022-05-31 13:22:17
mmpc
mmpc
Build a stronger cybersecurity team through diversity and training
2022-01-20 17:00:00
freebsd
freebsd
graylog -- include log4j patches
2021-12-10 00:00:00
suse
suse
Security update for log4j (important)
2021-12-12 00:00:00
Security update for logback (important)
2021-12-24 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: jansi-2.1.1-4.fc34
2021-12-22 01:14:26
zdt
zdt
wallarmlab
wallarmlab
Log4j 0day mitigation update CVE-2021-44228
2021-12-10 20:56:40
ubuntu
ubuntu
Apache Log4j 2 vulnerability
2021-12-17 00:00:00
Apache Log4j 2 vulnerability
2021-12-14 00:00:00
github
github
Apache Log4j Remote Code Execution
2021-12-14 21:07:14
qualysblog
qualysblog
Put SecOps in the Driver’s Seat with Custom Assessment and Remediation
2022-05-20 13:00:00
Detect Exploitation Attempts With Qualys XDR (Beta)
2021-12-14 23:55:43
malwarebytes
malwarebytes
CISA Log4Shell warning: Patch VMware Horizon installations immediately
2022-06-27 09:54:58
mscve
mscve
Apache Log4j Remote Code Execution Vulnerability
2021-12-16 08:00:00
impervablog
impervablog
2021 in Review, Part 1: 5 Cybersecurity Topics that Made News
2021-12-28 14:08:23
2021 in Review, Part 4: 5 Cybersecurity Topics to Watch in 2022
2022-01-04 10:44:57
redhat
redhat
(RHSA-2022:0082) Critical: Red Hat Process Automation Manager 7.11.1 security update
2022-01-11 10:28:38
(RHSA-2021:5132) Critical: Red Hat Data Grid 8.2.2 security update
2021-12-14 20:00:47
kaspersky
kaspersky
KLA12442 RCE vulnerability in LibreOffice
2021-12-16 00:00:00
debiancve
debiancve
CVE-2021-44228
2021-12-10 10:15:09
vmware
vmware
akamaiblog
akamaiblog
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.976 High
EPSS
Percentile
100.0%
Related for 7E75E72C-B195-554D-8C57-95071AE77EBE