vcenter-log4j

Contournement log4j pour VMware vCenter Script pour contourner la vulnérabilité log4j de VMware vCenter CVE-2021-44228, conformément à l'article de la base de connaissances VMware. 2021-12-13 02:09 UTC - Ajout des services Secure Token et Identity Management 2021-12-13 12:46 UTC - Ajout du client...

Vm4J

Vm4J Инструмент для обнаружения уязвимости log4j в продуктах VMware. Как это работает? Сначала запустите сервер JNDIExploit. Запустите этот инструмент и настройте параметры подходящим образом. Отправьте полезную нагрузку. Скриншот Поддерживаемые продукты VMware HCX VMware vCenter VMware Workspace...

Log4j-JNDIServer

Log4j-JNDIServer Ce projet permet de tester les vulnérabilités Log4j CVE-2021-44228/CVE-2021-45046. Installation et construction Chargez le projet dans Intellij Idea Sélectionnez JDK dans "Project Settings" CTRL + ALT + MAJ + S Dans "Project Settings", créez l'Artifact - "Artifacts" - "Create JAR...

Log4j-RCE-Exploiter

Log4j-RCE-Exploiter Сканер для Log4j RCE CVE-2021-44228 Установка Для установки выполните следующую команду с правами суперпользователя ROOT ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh Использование ▶ log4jExploiter -d tesla.com -b...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

log4j_scanner_wrapper

Wrapper pour scanner les répertoires Linux pour la vulnérabilité log4j CVE-2021-44228. Tiré de https://github.com/logpresso/CVE-2021-44228-Scanner. Le crédit lui revient. Scanne la plupart des répertoires principaux suspects et exclura les montages nfs. Utilisation bash log4jscanner.sh...

csp-log4j

csp-log4j Находит URL-адреса отчетов CSP и проверяет, уязвимы ли они к log4j Установка go install github.com/randomrobbiebf/csp-log4j/ Запуск csp-log4j -input file.txt -collab something.oastify.com...

log4jtest

소개 이 저장소는 Docker와 Hashicorp Terraform을 사용하여 log4j 취약점을 신속하게 테스트하기 위해 구성되었습니다. 이 테스트의 모든 구성 요소는 Docker 네트워크에서 Docker 컨테이너로 실행되며, 'host.docker.internal'을 통해 접근할 수 있습니다. 크레딧 / 면책 조항 이 테스트 환경은 Raxis의 훌륭한 블로그 게시물에서 파생되었습니다: https://raxis.com/blog/log4j-exploit 취약한 애플리케이션과 익스플로잇 코드는...

Search-log4Jvuln-AppScanSTD

Поиск уязвимости log4J с помощью AppScan Standard и списка веб-сайтов Этот скрипт PowerShell запускает сканирование AppScan Standard по списку веб-сайтов URLs.txt, проверяя только уязвимость Log4J CVE-2021-44228. Структура проекта: После запуска скрипта он прочитает каждую строку в URLs.txt и...

log4j-fuzzer

log4j-fuzzer Для одной цели chmod +x log4j После этой команды просто укажите вашу цель ./log4j URLВАШЕЙЦЕЛИ ВАШУДАЛЕННЫЙСЕРВЕР Для нескольких целей Соберите все домены, поддомены и каталоги в список После этого просто выполните команду chmod +x log4j Вы можете создать удалённый сервер с помощью...

log4j-dork-scanner

Сканер dork-запросов для Log4j Это автоматический скрипт для поиска, сбора и сканирования файлов, затронутых уязвимостью Apache Log4j CVE-2021-44228, с использованием Google dork-запросов. Установка: git clone https://github.com/JagarYousef/log4j-dork-scanner cd log4j-dork-scanner pip install -r...

pulsar-docker-images-patch-CVE-2021-44228

Пропатчить образы Pulsar с обновлением Apache Log4J до 2.17.1 Охватывает CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 См. Уязвимости и обновления Log4J для получения дополнительной информации. решение см. в Dockerfile Сборка и публикация пропатченных docker-образов пример...

log4j-samples

log4j-samples Samples of log4j library versions to help log4j scanners / detectors including our own log4j-detector improve their accuracy for detecting CVE-2021-45046 and CVE-2021-44228. The samples include shaded jars, uber jars, spring-boot executable jars, jars inside jars, exploded jars, etc...

Astra Linux – Vulnerability in Apache Log4j2

Apache Log4j2 versions 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 have JNDI features that are used in configuration, log messages, and parameters. However, these features do not protect against attacks from controlled LDAP endpoints and other JNDI-related...

Astra Linux – Vulnerability in Apache Log4j2

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not prevent uncontrolled recursion from self-referential lookups. This allowed an attacker with control over the Thread Context Map data to cause a denial of service when a crafted string was interpreted. This issue w...

Security Bulletin: due to the use of Apache Log4j, IBM Transformation Extender Advanced is vulnerable to hostname verification bypass and log injection via CRLF sequences

Summary Apache Log4j is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers. Apache Log4j has been updated to address CVE-2026-34477 which causes hostname verification bypass and CVE-2026-34478 which causes log injection via...

CLSA-2026-1779842948 TuxCare security update for org.apache.logging.log4j (1 CVE)

TuxCare rebuilt 32 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.17.1-tuxcare.1...

Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The...

Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind

Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data...

Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j

Summary IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody TestConductor risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socke...