Log4j-RCE-Exploiter

Log4j-RCE-Exploiter Scanner per Log4j RCE CVE-2021-44228 Installazione Per l'installazione, esegui il seguente comando con SUPERUSER ROOT root@kitploit: ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh Utilizzo root@kitploit: ▶ log4jExploiter -d tesla.com -b...

vcenter-log4j

VMware vCenter log4j Workaround Skript zum Umgehen der VMware vCenter log4j-Schwachstelle CVE-2021-44228, gemäß dem VMware-KB-Artikel. 2021-12-13 02:09 UTC - Secure Token- & Identity Management-Dienste hinzugefügt 2021-12-13 12:46 UTC - PSC-Client für 6.5 hinzugefügt - siehe unten VMware hat ein...

pulsar-docker-images-patch-CVE-2021-44228

Applica la patch alle immagini Pulsar con l'aggiornamento Apache Log4J 2.17.1 Copre CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 Vedi Vulnerabilità di sicurezza e aggiornamenti di Log4J per maggiori informazioni. vedi il Dockerfile per la soluzione Creazione e push delle immagini...

Vm4J

Vm4J Ein Tool zur Erkennung der Log4j-Schwachstelle in VMware-Produkten. Wie funktioniert es? Starten Sie zuerst einen JNDIExploit-Server. Starten Sie dieses Tool und konfigurieren Sie alle Einstellungen richtig. Senden Sie den Payload. Screenshot Unterstützung VMware HCX VMware vCenter VMware...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

Log4j-JNDIServer

Log4j-JNDIServer Questo progetto aiuta a testare le vulnerabilità Log4j CVE-2021-44228/CVE-2021-45046. Installazione e compilazione Caricare il progetto su Intellij Idea Selezionare JDK in "Project Settings" CTRL + ALT + SHIFT + S In "Project Settings", creare l'Artifact - "Artifacts" - "Create J...

log4j_scanner_wrapper

Wrapper per la scansione delle directory Linux per la vulnerabilità log4j CVE-2021-44228. Prelevato da https://github.com/logpresso/CVE-2021-44228-Scanner. Il merito va a loro. Scansiona la maggior parte delle directory principali sospette ed esclude i mount nfs. Uso root@kitploit: bash...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

csp-log4j

csp-log4j Trova gli URL di report CSP e verifica se sono vulnerabili a log4j Installazione root@kitploit: go install github.com/randomrobbiebf/csp-log4j/ Esecuzione root@kitploit: csp-log4j -input file.txt -collab something.oastify.com...

Security Bulletin: due to the use of Apache Log4j, IBM Transformation Extender Advanced is vulnerable to hostname verification bypass and log injection via CRLF sequences

Summary Apache Log4j is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers. Apache Log4j has been updated to address CVE-2026-34477 which causes hostname verification bypass and CVE-2026-34478 which causes log injection via...

Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The...

Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind

Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 Proof-of-Concept Lab An isolated...

Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low We have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appende...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j-core (CVE-2026-34479)

Summary IBM® Db2® federated server is affected by a vulnerability in log4j-core. Vulnerability Details CVEID:CVE-2026-34479 DESCRIPTION: The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output...

Improper Encoding or Escaping of Output

Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the MapMessage.asJson method, which emits the bare NaN, Infinity, or -Infinity tokens instead of an RFC 8259-compliant representation. An attacker can emit malformed JSON that corrupts the...

K000161888: Apache log4j vulnerability CVE-2026-34481

Security Advisory Description Apache Log4j's JsonTemplateLayout https:// logging. apache. org/log4j/2. x/manual/json-template-layout. html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values NaN, Infinity, or -Infinity,...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j-core-2.17.2 (CVE-2025-68161)

Summary IBM® Db2® federated server is affected by a vulnerability in log4j-core-2.17.2 CVE-2025-68161 Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerability to man-in-the-middle attacks due to the log4j package (CVE-2025-68161)

Summary DataStage on Cloud Pak for Data uses log4j as part of logging functionality. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the...

Security Bulletin: Vulnerability in log4j/2.x affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in log4j/2.x has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...