3174 matches found
log4j-scan
log4j-scan Un escáner totalmente automatizado, preciso y exhaustivo para encontrar hosts vulnerables a log4j Características Soporte para listas de URLs. Fuzzing en más de 60 cabeceras HTTP de solicitud no solo 3-4 cabeceras como en herramientas anteriores. Fuzzing en parámetros de datos POST HTT...
log4shell-vulnerable-app
Aplicación de ejemplo vulnerable Log4Shell CVE-2021-44228 Este repositorio contiene una aplicación web Spring Boot vulnerable a CVE-2021-44228, apodada Log4Shell. Utiliza Log4j 2.14.1 a través de spring-boot-starter-log4j2 2.6.1 y el JDK 1.8.0181. Ejecutar la aplicación Ejecútala: docker run --na...
log4j-finder
log4j-finder Un script en Python3 para escanear el sistema de archivos y encontrar Log4j2 vulnerable a Log4Shell CVE-2021-44228 y CVE-2021-45046 y CVE-2021-45105. Escanea recursivamente tanto en disco como dentro de archivos Java Archive JAR anidados. Cómo funciona log4j-finder identifica librerí...
divd-2021-00038--log4j-scanner
divd-2021-00038--log4j-scanner Este escáner recorrerá recursivamente rutas, incluyendo archivos comprimidos, en busca de versiones vulnerables de log4j y archivos org/apache/logging/log4j/core/lookup/JndiLookup.class. Actualmente la lista de permitidos define versiones no explotables, en este cas...
log4j-detector
Log4-detector Escáner que detecta versiones vulnerables de Log4J para ayudar a los equipos a evaluar su exposición a CVE-2021-44228 CRÍTICA, CVE-2021-45046, CVE-2021-45105 y CVE-2021-44832. Puede buscar instancias de Log4J examinando cuidadosamente el sistema de archivos completo, incluyendo toda...
log4j-poc
log4j-poc Un exploit LDAP RCE para CVE-2021-44228 Log4Shell Descripción El servidor Tomcat 8 de demostración en el puerto 8080 tiene una aplicación vulnerable log4shell desplegada en él y el servidor también es vulnerable mediante ataques de user-agent. La aplicación de exploit remoto en esta dem...
log4j-detect
log4j-detect Script simple en Python 3 para detectar la vulnerabilidad de la biblioteca Java "Log4j" CVE-2021-44228 para una lista de URL con multihilo El script "log4j-detect.py" desarrollado en Python 3 se encarga de detectar si una lista de URLs es vulnerable a CVE-2021-44228. Para ello, envía...
log4j-cve-2021-44228
Playbook dello scanner detector Log4j-CVE-2021-44228 Playbook Ansible per verificare gli host Linux di destinazione utilizzando lo script detector ufficiale Red Hat Log4j per Log4Shell CVE-2021-44228. Detector Red Hat versione 1.3 del 2022-01-10. Il risultato viene salvato in un file txt in...
CLEANSTART-2026-OB90229 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
Security vulnerability affects the apache-nifi package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...
PT-2026-117814
Security vulnerability affects the apache-nifi package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...
Security Bulletin: Due to use of Apache Log4j, IBM Cloud PAK for Watson AI Ops is vulnerable to arbitrary code execution (CVE-2021-45046) and denial of service (CVE-2021-45105)
Summary Apache Log4j is used by IBM Cloud PAK for Watson AI Ops as part of its logging infrastructure. The CVE numbers are: CVE-2021-45105 and CVE-2021-45046. Vulnerabilities were identified within the Apache Log4j library that is used by IBM Cloud Pak for Watson AIOps. These vulnerabilities have...
Security Bulletin: Vulnerability in Apache Log4j affects IBM Cloud Pak for Watson AIOps (CVE-2021-44228)
Summary A vulnerability was identified within the Apache Log4j library that is used by IBM Cloud Pak for Watson AIOps. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system,...
Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell CVE-2021-44228 — VMware RCE & Patch Validation Lab...
Security Bulletin: Vulnerability in Apache Log4j Core shipped in Tivoli Netcool/OMNIbus (CVE-2026-49844)
Summary The Netcool/Omnibus 'Administrator GUI' and 'Accelerated Event Notification GUI' desktop components use a version of Apache Log4j that contains a known vulnerability. This has been addressed. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite...
Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j (CVE-2026-49844)
Summary IBM® Db2® federated server is affected by a vulnerability in log4j. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue...
log4j2-vulnerable-spring-app
Aplicación de muestra de prueba para Log4j 2 CVE-2021-44228 Basada en spring-boot-starter-log4j2:2.6.1 log4j 2.14.1 Endpoints disponibles Endpoint| Método de solicitud| Parámetros ---|---|--- vulnerablerequestget| GET| v=payload vulnerablerequestpost| POST| v=payload vulnerablerequestheaderua| GE...
Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell CVE-2021-44228 in Apache Solr Vulhubhttps://vu...
CLEANSTART-2026-FS95827 JMSAppender in Log4j 1
Security vulnerability affects the apache-hive package. JMSAppender in Log4j 1...