log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

log4j_scanner_wrapper

Wrapper pour scanner les répertoires Linux pour la vulnérabilité log4j CVE-2021-44228. Tiré de https://github.com/logpresso/CVE-2021-44228-Scanner. Le crédit lui revient. Scanne la plupart des répertoires principaux suspects et exclura les montages nfs. Utilisation bash log4jscanner.sh...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

Log4j-JNDIServer

Log4j-JNDIServer سيساعدك هذا المشروع في اختبار الثغرات الأمنية Log4j CVE-2021-44228/CVE-2021-45046. التثبيت والبناء قم بتحميل المشروع في Intellij Idea اختر JDK في "Project Settings" CTRL + ALT + SHIFT + S في "Project Settings"، أنشئ Artifact - "Artifacts" - "Create JAR from Modules" - في "JAR fil...

Vm4J

Vm4J أداة لاكتشاف ثغرة log4j في منتجات VMware. كيف يعمل؟ أولاً، ابدأ تشغيل خادم JNDIExploit. شغّل هذه الأداة واضبط أي إعدادات على الوضع الصحيح. أرسِل الحمولة. لقطة الشاشة الدعم VMware HCX VMware vCenter VMware Workspace One سيتم إضافته VMware NSX VMware Horizon VMware vRealize Operations Manager...

vcenter-log4j

الحل المؤقت لثغرة log4j في VMware vCenter سكريبت لتطبيق الحل المؤقت لثغرة log4j في VMware vCenter CVE-2021-44228، وفقًا لمقال VMware KB. 2021-12-13 02:09 UTC - تمت إضافة خدمات Secure Token وإدارة الهوية 2021-12-13 12:46 UTC - تمت إضافة عميل PSC للإصدار 6.5 - انظر أدناه أصدرت VMware سكريبت بايثون...

Log4j-RCE-Exploiter

Log4j-RCE-Exploiter أداة فحص ثغرة Log4j RCE CVE-2021-44228 التثبيت للتثبيت، قم بتشغيل الأمر التالي بصلاحيات المستخدم المتميز ROOT ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh الاستخدام ▶ log4jExploiter -d tesla.com -b 6nuulng8dd2sivtd3kht31s9e0kq8f.burpcollaborator.net -h,...

csp-log4j

csp-log4j يكتشف روابط تقارير CSP ويختبرها لمعرفة ما إذا كانت معرّضة لثغرة log4j التثبيت go install github.com/randomrobbiebf/csp-log4j/ التشغيل csp-log4j -input file.txt -collab something.oastify.com...

log4jtest

Introduction Ce dépôt est configuré pour tester rapidement la vulnérabilité log4j à l'aide de Docker et de Hashicorp Terraform. Tous les composants de ce test s'exécuteront dans des conteneurs Docker sur le réseau Docker, accessibles via 'host.docker.internal'. Crédits / Avertissement Cet...

Search-log4Jvuln-AppScanSTD

Recherche de la vulnérabilité log4J à l'aide d'AppScan Standard et d'une liste de sites web Ce script Powershell exécute des scans AppScan Standard sur une liste de sites web URLs.txt en vérifiant uniquement la vulnérabilité Log4J CVE-2021-44228. Structure du projet : Après l'exécution du script,...

log4j-fuzzer

log4j-fuzzer Pour une cible unique chmod +x log4j Après cette commande, placez simplement votre cible ./log4j URLDEVOTRECIBLE VOTRESERVEURDISTANT Pour plusieurs cibles Rassemblez tous les domaines, sous-domaines et répertoires dans une liste Ensuite, exécutez simplement cette commande chmod +x...

log4j-dork-scanner

Scanner de dorks Log4j Ce script automatisé permet de rechercher, récupérer et analyser les fichiers affectés par la vulnérabilité Apache Log4j CVE-2021-44228 à l'aide de Google dorks. Installation : git clone https://github.com/JagarYousef/log4j-dork-scanner cd log4j-dork-scanner pip install -r...

pulsar-docker-images-patch-CVE-2021-44228

تصحيح صور Pulsar باستخدام ترقية Apache Log4J 2.17.1 يغطي CVE-2021-44228 و CVE-2021-45046 و CVE-2021-45105 و CVE-2021-44832 راجع ثغرات Log4J الأمنية والترقيات لمزيد من المعلومات. راجع Dockerfile للحل بناء ودفع صور Docker المُصححة مثال على الاستخدام: بناء الصورة ووضع علامة عليها docker build...

Astra Linux – Vulnerability in Apache Log4j2

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not prevent uncontrolled recursion from self-referential lookups. This allowed an attacker with control over the Thread Context Map data to cause a denial of service when a crafted string was interpreted. This issue w...

Astra Linux – Vulnerability in Apache Log4j2

Apache Log4j2 versions 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 have JNDI features that are used in configuration, log messages, and parameters. However, these features do not protect against attacks from controlled LDAP endpoints and other JNDI-related...

Security Bulletin: due to the use of Apache Log4j, IBM Transformation Extender Advanced is vulnerable to hostname verification bypass and log injection via CRLF sequences

Summary Apache Log4j is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers. Apache Log4j has been updated to address CVE-2026-34477 which causes hostname verification bypass and CVE-2026-34478 which causes log injection via...

CLSA-2026-1779842948 TuxCare security update for org.apache.logging.log4j (1 CVE)

TuxCare rebuilt 32 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.17.1-tuxcare.1...

Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The...

Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind

Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data...

Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j

Summary IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody TestConductor risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socke...