MyLog4Shell

MyLog4Shell log4j RCE 悪用検出 以下のコマンドとルールを使用して、log4j RCE 脆弱性 CVE-2021-44228 に対する悪用の試みを検索できます。 Grep / Zgrep このコマンドは、/var/log および /usr/var/log フォルダ内の非圧縮ファイルとすべてのサブフォルダを検索します。 root@kitploit: sudo egrep -I -i -r '$|%7Bjndi:ldaps?|rmi|dns|nis|iiop|corba|nds|http:/^\n+' /var/log このコマンドは、/var/log...

PrintNightmare

TryHackMe | PrintNightmare PrintNightmare Learn about the vulnerability known as PrintNightmare CVE-2021-1675 and CVE-2021-34527 タスク6 検出: Windows イベント ログ Event Viewer Applications and Services Logs Microsoft Windows PrintService Admin...

CVE-2026-48172

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation possibly to root, as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpaneljsonapifunc=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2/dev/null in Bash. If you get no output,...

GHSA-62CR-6WP5-Q43H Copyparty vulnerable to reflected XSS via setck parameter

Summary An XSS allows for reflected cross-site scripting via URL-parameter ?setck=... Details A reflected cross-site scripting XSS vulnerability could allow an attacker to execute malicious javascript by tricking users into accessing a malicious link. The worst-case outcome of this is being able ...

EUVD-2021-12382

Malware in sbrugna...