poc-CVE-2021-44521

This repository does not have a README...

CVE-2021-44521 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2021-44521 vulnerabilities

Vulnerabilities for packages: druid...

Security Bulletin: IBM Global Mailbox is vulnerable to remote code execution due to Apache Cassandra (CVE-2021-44521)

Summary IBM Global Mailbox has addressed a remote code execution in Apache Cassandra. Vulnerability Details CVEID:CVE-2021-44521 DESCRIPTION: Apache Cassandra could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a flaw when include configurations for...

Exploit for Code Injection in Apache Cassandra

0day 由于众所周知的原因，原始仓库被删除，但保留了副本，forks和stars 清零 不过请放心，还是原来的配方，原来的味道。 为了避免再次出现这种情况找不到此项目，可以Follow 一下 本仓库所有内容仅限用于学习交流 English | 中文 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新 优秀项目列表 1. Fastjson RCE https://github.com/dbgee/fastjson-rce 2. Log4j RCE https://github.com/dbgee/log4j2rce 3. redis RCE...

SUSE CVE-2021-44521

When running Apache Cassandra with the following configuration: enableuserdefinedfunctions: true enablescripteduserdefinedfunctions: true enableuserdefinedfunctionsthreads: false it is possible for an attacker to execute arbitrary code on the host. The attacker would need to have enough permissio...

Apache Cassandra Remote Code Execution (CVE-2021-44521)

A remote code execution vulnerability exists in Apache Cassandra. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Are MobileIron Products Vulnerable to CVE-2021-44521--apache-cassandra

Created Date Feb 24, 2022 5:15:47 PM...

Exploit for Incorrect Permission Assignment for Critical Resource in Apache Cassandra

CVE-2021-44521 Automated PoC of CVE-2021-44521 Credits to orig...

Security Bulletin: Datastax Enterprise with IBM is vulnerable to exploiting Apache Cassandra User-Defined Functions for Remote Code Execution

Summary In Datastax Enterprise with IBM, a remote code execution RCE security vulnerability in Apache Cassandra exists and has been assigned to CVE-2021-44521. Vulnerability Details CVEID: CVE-2021-44521 DESCRIPTION: Apache Cassandra could allow a remote authenticated attacker to execute arbitrar...

High-Severity RCE Bug Found in Popular Apache Cassandra Database

Researchers have shared details about a now-patched, high-severity security bug in the Apache Cassandra open-source NoSQL distributed database that’s easy to exploit and, if left unpatched, could enable attackers to gain remote code execution RCE. The bug, which involves how Cassandra creates...

com.impetus.kundera.client:kundera-cassandra (>=3.2, <=3.4), com.impetus.kundera.client:kundera-cassandra-ds-driver (>=3.2, <=3.4) +13 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.2.2)

org.apache.cassandra:cassandra-all MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.impetus.kundera.client:kundera-cassandra =3.2, =3.2, =3.2, =1.0, =2.0.3.final,...

com.github.stephenc.scale7:scale7-pelops (0.913), me.prettyprint:hector-core (>=0.7.0-23, <=0.7.0-28) +5 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (0.7.0)

org.apache.cassandra:cassandra-all MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.github.stephenc.scale7:scale7-pelops 0.913 - me.prettyprint:hector-core =0.7.0-23,...

com.thinkaurelius.faunus:faunus (0.1.0), com.thinkaurelius.titan:titan (>=0.1.0, <=0.2.0) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.1.3)

org.apache.cassandra:cassandra-all MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.thinkaurelius.faunus:faunus 0.1.0 - com.thinkaurelius.titan:titan =0.1.0, =0.2.0 Source...

com.netflix.ndbench:ndbench-cli (>=0.3.12, <=0.7.4), com.netflix.ndbench:ndbench-janusgraph-plugins (>=0.3.6, <=0.7.4) +6 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.1.18)

org.apache.cassandra:cassandra-all MAVEN version 2.1.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.netflix.ndbench:ndbench-cli =0.3.12, =0.3.6, =0.7.4 - com.pontusvision:janusgraph-all...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.2.3.0, <=2.2.3.2), info.archinnov:achilles-embedded (>=3.2.4-zeppelin, <=4.0.1) +3 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.2.3)

org.apache.cassandra:cassandra-all MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.2.3.0, =3.2.4-zeppelin,...

com.stratio.cassandra:cassandra-lucene-index-plugin (2.2.10.0) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.2.10)

org.apache.cassandra:cassandra-all MAVEN version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin 2.2.10.0 Source cves: CVE-2021-44521...

info.archinnov:achilles-core (>=2.0.9-dse, <=2.0.13-dse), info.archinnov:achilles-cql (>=2.0.9-dse, <=2.0.13-dse) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.2.13)

org.apache.cassandra:cassandra-all MAVEN version 1.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-core =2.0.9-dse, =2.0.9-dse, =2.0.13-dse Source cves: CVE-2021-445...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.2.9.0, <=2.2.9.1) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.2.9)

org.apache.cassandra:cassandra-all MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.2.9.0, =2.2.9.1 Source cves:...

com.github.jparkie:spark2cassandra_2.10 (2.2.0), com.github.jparkie:spark2cassandra_2.11 (2.2.0) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.2.5)

org.apache.cassandra:cassandra-all MAVEN version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.github.jparkie:spark2cassandra2.10 2.2.0 - com.github.jparkie:spark2cassandra2.11 2.2.0...