9855 matches found
Exploit for Expression Language Injection in Apache Log4J
CVE-2021-45046-Info Oh no another one POC $ctx:apive...
GHSA-FP5R-V3W9-4333 JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in...
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in...
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in...
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j2-CVE-2021-44228 介绍 Log4J的漏洞复现 软件架构 软件架构说明 安装教程 1. git clone https://gitee.com/demonbhao/log4j2-cve-2021-44228.git 2. 安装JDK1.8.0以下版本 3. 安装maven，打包需要 使用说明 1. 编写你的poc代码块 2. 编译Exploit.java javac Exploit.java 形成Exploit.class 3. 开启LDAP协议 4.开启http服务器，用python简单开启，注意要和被访问的端口一致...
PT-2021-24406
Name of the Vulnerable Software and Affected Versions: Splunk Logging for Java library versions prior to 1.11.1 Splunk Logging for Java library version 1.6.2 and earlier, with the exception of version 1.6.2-0-0 Description: Logging untrusted or user-controlled data with a vulnerable version of...
Deserialization of Untrusted Data
Overview topthink/framework is a The ThinkPHP Framework. Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class. Details Serialization is a process of converting an object into a sequence of bytes which can be...
Arbitrary Code Execution
Overview Masuit.Tools.Abstractions is a package for some commonly used operation classes, mostly static classes, encryption and decryption, reflection operations, weighted random screening algorithms, distributed short IDs, expression trees, linq extensions, file compression, and multithreading...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228: Log4j / Log4Shell Security Research Summary...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4JExploitation-VulnerabiliyCVE-2021-44228. !Untitled...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j-CVE-2021-44228 Log4j Remote Cod...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4J-Mitigation-CVE-2021-44228https://vulners.com/cve/CVE-...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4J-Mitigation-CVE-2021-44228https://vulners.com/cve/CVE-...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
scan4log4shell Scanner to send specially crafted requests an...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Awesome-CVE-2021-44228 An awesome curated list of repos for CV...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4j-CVE-2021-44228 On December 5, 2021, Apache identified a...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell CVE-2021-44228 related attack IOCs The source IP...