113 matches found
log4shell-vulnerable-app
Log4Shell sample vulnerable application CVE-2021-44228 - edited twice This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: docke...
log4shell-vulnerable-app
Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: docker run --name...
log4shell-vulnerable-app
Log4Shellサンプル脆弱性アプリケーション（CVE-2021-44228） このリポジトリには、Log4Shell と呼ばれるCVE-2021-44228に対して脆弱なSpring Boot Webアプリケーションが含まれています。 Log4j 2.14.1（spring-boot-starter-log4j2 2.6.1経由）とJDK 1.8.0181を使用しています。 アプリケーションの実行 実行してください： docker run --name vulnerable-app --rm -p 8080:8080...
log4stdin
log4stdin — log4shell injection for anything with stdout This repository contains a Java application intentionally vulnerable to CVE-2021-44228, colloquially known as log4shell. log4stdin is quite literally nothing more than an stdin-reader, input of which is fed into a vulnerable log4j instance...
log4shell-homework9
Homework 9 – Securing Systems Against Log4Shell Exploits Overview This project demonstrates the exploitation and mitigation of the Log4Shell vulnerability CVE-2021-44228 using a Dockerized Java web application with vulnerable Log4j 2.14.1. The setup also includes a simulated malicious LDAP server...
l4s-vulnapp
Log4Shell Vulnerable Applicationl4s-vulnapp This is a potentially vulnerable Java web application containing Log4j2.14.1 affected by log4shellCVE-2021-44228. Verified environment and various versions AdoptOpenJDK 17.0.10+7 Gradle 8.6 Gretty 4.1.2 Apache Tomcat 10.1.15 Apache Log4j Core 2.14.1...
log4j2-vulnerable-spring-app
Log4j 2 CVE-2021-44228 テストサンプルアプリケーション spring-boot-starter-log4j2:2.6.1 log4j 2.14.1 ベース 利用可能なエンドポイント エンドポイント| リクエストメソッド| パラメータ ---|---|--- vulnerablerequestget| GET| v=payload vulnerablerequestpost| POST| v=payload vulnerablerequestheaderua| GET / POST| Header User-Agent テスト可能 GET $ curl...
log4shell-vulnerable-app
脆弱なアプリケーション このリポジトリには、log4shell として知られる CVE-2021-44228 に対して脆弱な Spring Boot Web アプリケーションが含まれています。 これは以下を使用します log-4j-core:2.14.1（spring-boot-starter-log4j2 経由）および openjdk:8u181 アプリケーションの実行 実行します: docker run --name vulnerable-app --rm -p 8080:8080 romanutti/log4shell-vulnerable-app...
log4shell-exploitation-detection
Log4Shell CVE-2021-44228 Exploitation, Detection & Remediation A hands-on offensive and defensive security project simulating the full lifecycle of the Log4Shell vulnerability: exploitation from an attacker-controlled VM, detection engineering in Splunk, and validated remediation. Why This Projec...
CVE-2021-44228
CVE-2021-44228 I think this story is more practical cryingchristophetd/log4shell-vulnerable-app I just researched on a whim out of interest, so there may be vague parts or mistakes. Please proceed at your own risk. Create a reproduction environment. Should work on Linux environments. 1. Download...
log4shell-cve-lab
Лаборатория Log4Shell CVE-2021-44228 Этот репозиторий содержит небольшой уязвимый HTTP-сервис на Log4j 2.14.1 для CVE-2021-44228. Sentinel воспроизвёл этот сценарий 2026-08-27 как лабораторию в песочнице, созданную с нуля. Важные свойства этого запуска сохранены здесь: контролируемый атакующим...
CVE-2026-79921 affecting package keda for versions less than 2.14.1-18
CVE-2026-79921 affecting package keda for versions less than 2.14.1-18. A patched version of the package is available...
JLSEC-2026-1148
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characters in subscription filters that were later forwarded as NATS protocol data to route or leafnode connections, corrupti...
CVE-2026-56852 affecting package keda for versions less than 2.14.1-16
CVE-2026-56852 affecting package keda for versions less than 2.14.1-16. A patched version of the package is available...
SUSE CVE-2026-53632
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the...
PYSEC-2026-2421 Code Index MCP is vulnerable to Uncontrolled Resource Consumption
A weakness has been identified in johnhuang316 code-index-mcp up to 2.14.0. Affected is the function issaferegexpattern of the component searchcodeadvanced. Executing a manipulation of the argument regex can lead to inefficient regular expression complexity. It is possible to launch the attack...
Injection
Overview github.com/nats-io/nats-server/v2/server is an A simple, secure and performant communications system for digital systems, services and devices. Affected versions of this package are vulnerable to Injection in the MQTT SUBSCRIBE handling, which forwards protocol control characters from...
CVE-2026-58213 NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characters in subscription filters that were later forwarded as NATS protocol data to route or leafnode connections, corrupti...
CVE-2026-58213 NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characters in subscription filters that were later forwarded as NATS protocol data to route or leafnode connections, corrupti...