log4j-fuzzer

log4j-fuzzer للهدف الواحد root@kitploit: chmod +x log4j بعد هذا الأمر، ضع هدفك ببساطة root@kitploit: ./log4j YOURTARGETURL YOURREMOTESERVER لأهداف متعددة اجمع كل النطاقات والنطاقات الفرعية والدلائل في قائمة بعد ذلك نفّذ هذا الأمر ببساطة root@kitploit: chmod +x log4j يمكنك إنشاء خادم بعيد باستخدام...

Search-log4Jvuln-AppScanSTD

البحث عن ثغرة log4J باستخدام AppScan Standard وقائمة من المواقع يقوم هذا السكربت بلغة Powershell بتشغيل فحوصات AppScan Standard ضد قائمة من المواقع URLs.txt للتحقق فقط من ثغرة Log4J CVE-2021-44228. هيكل المشروع: بعد تشغيل السكربت، سيقرأ كل سطر في URLs.txt ويبدأ بفحص ثغرة Log4J CVE-2021-44228. بعد...

log4j-dork-scanner

ماسح دُورك Log4j هذا سكربت تلقائي للبحث والتجميع والفحص عن الملفات المتأثرة بثغرة Apache Log4j CVE-2021-44228 باستخدام Google dorks. التثبيت: root@kitploit: git clone https://github.com/JagarYousef/log4j-dork-scanner cd log4j-dork-scanner pip install -r requirments.txt الفحص: root@kitploit: pytho...

Log4j-JNDIServer

Log4j-JNDIServer यह परियोजना Log4j CVE‑2021‑44228/CVE‑2021‑45046 कमजोरियों का परीक्षण करने में मदद करेगी। स्थापना और निर्माण Intellij Idea पर प्रोजेक्ट लोड करें "प्रोजेक्ट सेटिंग्स" CTRL + ALT + SHIFT + S में JDK चुनें "प्रोजेक्ट सेटिंग्स" में, आर्टिफैक्ट बनाएं - "आर्टिफैक्ट्स" - "मॉड्यूल से JAR...

Log4j-RCE-Exploiter

Log4j-RCE-Exploiter Сканер для Log4j RCE CVE-2021-44228 Установка Для установки выполните следующую команду с правами суперпользователя ROOT root@kitploit: ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh Использование root@kitploit: ▶ log4jExploiter -d tesla.com -b...

vcenter-log4j

الحل المؤقت لثغرة log4j في VMware vCenter سكريبت لتطبيق الحل المؤقت لثغرة log4j في VMware vCenter CVE-2021-44228، وفقًا لمقال VMware KB. 2021-12-13 02:09 UTC - تمت إضافة خدمات Secure Token وإدارة الهوية 2021-12-13 12:46 UTC - تمت إضافة عميل PSC للإصدار 6.5 - انظر أدناه أصدرت VMware سكريبت بايثون...

Vm4J

Vm4J Ein Tool zur Erkennung der Log4j-Schwachstelle in VMware-Produkten. Wie funktioniert es? Starten Sie zuerst einen JNDIExploit-Server. Starten Sie dieses Tool und konfigurieren Sie alle Einstellungen richtig. Senden Sie den Payload. Screenshot Unterstützung VMware HCX VMware vCenter VMware...

log4jtest

Introduzione Questo repository è configurato per testare rapidamente la vulnerabilità log4j utilizzando Docker e Hashicorp Terraform. Tutti i componenti di questo test verranno eseguiti in container Docker sulla rete Docker, accessibili tramite 'host.docker.internal'. Crediti / Disclaimer Questo...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

pulsar-docker-images-patch-CVE-2021-44228

Applica la patch alle immagini Pulsar con l'aggiornamento Apache Log4J 2.17.1 Copre CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 Vedi Vulnerabilità di sicurezza e aggiornamenti di Log4J per maggiori informazioni. vedi il Dockerfile per la soluzione Creazione e push delle immagini...

log4j_scanner_wrapper

Wrapper per la scansione delle directory Linux per la vulnerabilità log4j CVE-2021-44228. Prelevato da https://github.com/logpresso/CVE-2021-44228-Scanner. Il merito va a loro. Scansiona la maggior parte delle directory principali sospette ed esclude i mount nfs. Uso root@kitploit: bash...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

csp-log4j

csp-log4j Trova gli URL di report CSP e verifica se sono vulnerabili a log4j Installazione root@kitploit: go install github.com/randomrobbiebf/csp-log4j/ Esecuzione root@kitploit: csp-log4j -input file.txt -collab something.oastify.com...

Security Bulletin: due to the use of Apache Log4j, IBM Transformation Extender Advanced is vulnerable to hostname verification bypass and log injection via CRLF sequences

Summary Apache Log4j is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers. Apache Log4j has been updated to address CVE-2026-34477 which causes hostname verification bypass and CVE-2026-34478 which causes log injection via...

Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The...

Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind

Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 Proof-of-Concept Lab An isolated...

Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low We have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appende...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j-core (CVE-2026-34479)

Summary IBM® Db2® federated server is affected by a vulnerability in log4j-core. Vulnerability Details CVEID:CVE-2026-34479 DESCRIPTION: The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output...

Improper Encoding or Escaping of Output

Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the MapMessage.asJson method, which emits the bare NaN, Infinity, or -Infinity tokens instead of an RFC 8259-compliant representation. An attacker can emit malformed JSON that corrupts the...