Log4j-RCE-Exploiter

Log4j-RCE-Exploiter أداة فحص ثغرة Log4j RCE CVE-2021-44228 التثبيت للتثبيت، قم بتشغيل الأمر التالي بصلاحيات المستخدم المتميز ROOT root@kitploit: ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh الاستخدام root@kitploit: ▶ log4jExploiter -d tesla.com -b...

vcenter-log4j

الحل المؤقت لثغرة log4j في VMware vCenter سكريبت لتطبيق الحل المؤقت لثغرة log4j في VMware vCenter CVE-2021-44228، وفقًا لمقال VMware KB. 2021-12-13 02:09 UTC - تمت إضافة خدمات Secure Token وإدارة الهوية 2021-12-13 12:46 UTC - تمت إضافة عميل PSC للإصدار 6.5 - انظر أدناه أصدرت VMware سكريبت بايثون...

pulsar-docker-images-patch-CVE-2021-44228

تصحيح صور Pulsar باستخدام ترقية Apache Log4J 2.17.1 يغطي CVE-2021-44228 و CVE-2021-45046 و CVE-2021-45105 و CVE-2021-44832 راجع ثغرات Log4J الأمنية والترقيات لمزيد من المعلومات. راجع Dockerfile للحل بناء ودفع صور Docker المُصححة مثال على الاستخدام: root@kitploit: بناء الصورة ووضع علامة عليها dock...

Vm4J

Vm4J أداة لاكتشاف ثغرة log4j في منتجات VMware. كيف يعمل؟ أولاً، ابدأ تشغيل خادم JNDIExploit. شغّل هذه الأداة واضبط أي إعدادات على الوضع الصحيح. أرسِل الحمولة. لقطة الشاشة الدعم VMware HCX VMware vCenter VMware Workspace One سيتم إضافته VMware NSX VMware Horizon VMware vRealize Operations Manager...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

Log4j-JNDIServer

Log4j-JNDIServer Ce projet permet de tester les vulnérabilités Log4j CVE-2021-44228/CVE-2021-45046. Installation et construction Chargez le projet dans Intellij Idea Sélectionnez JDK dans "Project Settings" CTRL + ALT + MAJ + S Dans "Project Settings", créez l'Artifact - "Artifacts" - "Create JAR...

log4j_scanner_wrapper

غلاف لفحص أدلة لينكس بحثًا عن ثغرة log4j CVE-2021-44228. يتم السحب من https://github.com/logpresso/CVE-2021-44228-Scanner. يعود الفضل هنا. يفحص معظم الأدلة الرئيسية المشبوهة ويستثني نقاط التحميل nfs. الاستخدام root@kitploit: bash log4jscanner.sh optionaljavapath كتبه Andrew Pomnean و Matt Cengic...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

csp-log4j

csp-log4j Находит URL-адреса отчетов CSP и проверяет, уязвимы ли они к log4j Установка root@kitploit: go install github.com/randomrobbiebf/csp-log4j/ Запуск root@kitploit: csp-log4j -input file.txt -collab something.oastify.com...

Security Bulletin: due to the use of Apache Log4j, IBM Transformation Extender Advanced is vulnerable to hostname verification bypass and log injection via CRLF sequences

Summary Apache Log4j is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers. Apache Log4j has been updated to address CVE-2026-34477 which causes hostname verification bypass and CVE-2026-34478 which causes log injection via...

Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The...

Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind

Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 Proof-of-Concept Lab An isolated...

Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low We have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appende...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j-core (CVE-2026-34479)

Summary IBM® Db2® federated server is affected by a vulnerability in log4j-core. Vulnerability Details CVEID:CVE-2026-34479 DESCRIPTION: The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output...

Improper Encoding or Escaping of Output

Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the MapMessage.asJson method, which emits the bare NaN, Infinity, or -Infinity tokens instead of an RFC 8259-compliant representation. An attacker can emit malformed JSON that corrupts the...

K000161888: Apache log4j vulnerability CVE-2026-34481

Security Advisory Description Apache Log4j's JsonTemplateLayout https:// logging. apache. org/log4j/2. x/manual/json-template-layout. html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values NaN, Infinity, or -Infinity,...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j-core-2.17.2 (CVE-2025-68161)

Summary IBM® Db2® federated server is affected by a vulnerability in log4j-core-2.17.2 CVE-2025-68161 Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerability to man-in-the-middle attacks due to the log4j package (CVE-2025-68161)

Summary DataStage on Cloud Pak for Data uses log4j as part of logging functionality. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the...

Security Bulletin: Vulnerability in log4j/2.x affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in log4j/2.x has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...