Weblogic

English｜ 中文 Research topic on WebLogic vulnerabilities Weblogic CVE-2023-21931 vulnerability exploration technique: post-deserialization exploitation Abstract：In recent years, Weblogic deserialization vulnerabilities have been discovered and focused on the triggering point of deserialization...

CVE-2026-36374

描述 已发现一个公共端点，允许使用可预测的标识符（证书代码）进行证书查询，且无需任何身份验证或授权机制。 通过枚举该标识符，攻击者可以访问第三方个人数据，包括全名、CPF（巴西个人纳税人登记号）、RG（巴西身份证号）、出生日期和出生地。 同时还观察到，即使证书持有人选择在专业网络或其他平台上公开分享其带有部分脱敏个人数据的文凭，证书标识符通常仍然可见。通过该标识符，可以直接查询端点并获取完整数据，完全绕过界面中实施的脱敏机制。 受影响的端点 https://www.fiap.com.br/consultadocumento 载荷示例 8 字符标识符 概念验证（PoC）...

CVE-2021-44228

Log4Shell 概念验证 此仓库是 CVE-2021-44228 漏洞的概念验证。 它衍生自此仓库。 在此仓库中，我制作了一个易受攻击的应用程序示例，并演示了如何利用该漏洞。 概念验证组件 我已修改上游 Python 脚本，以自动化生成此漏洞。 此仓库中有两个 Dockerfile，可方便使用，如下所示： Docker-Ldap 在此 Docker 镜像中，我们从我的 Google Drive 下载 java jdk-8u20，因为您需要在 Oracle 上注册账号才能下载。 如果您不信任此来源，可以修改 Dockerfile 中的下载文件，并从此处下载 jdk（确保下载适用于...

Log4j_CVE-2021-44228

The Log4j vulnerability, also known as "Log4Shell" or "CVE-2021-44228," is a critical security flaw in the Apache Log4j library. Log4j is a widely used Java-based logging framework that allows developers to log messages from applications to various destinations, such as files, databases, and...

AZL-101184 CVE-2026-89884 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

Log4jTools

Log4jTools Tools for investigating Log4j CVE-2021-44228 Bug explanation and Demo https://www.youtube.com/watch?v=0-abhd-CLwQ FetchPayload.py Get java payload from ldap path provided in JNDI lookup. Requirements: curl system, requests python Example command: root@kitploit: python FetchPayload.py...

CVE-2026-89884 media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

CVE-2026-89884

CVE-2026-89884 affects the mtk-mdp3 platform driver in the Linux kernel (MediaTek multimedia display processor). The vulnerability is a NULL pointer dereference that occurs when the driver looks up the SCP (System Control Processor) but the SCP driver has not yet been bound, causing the lookup to...

EUVD-2026-80484

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

CVE-2021-44228-Log4j-PoC-RCE

Apache Log4j CVE-2021-44228 GK7 PoC Steps 1. Compile Log4jRCE.java and move the .class file to a web server e.g., local PHP 1. cd src/main/java 2. javac Log4jRCE.java 3. Move the .class file to a web server or start a local PHP server, for example: php -S 127.0.0.1:8888 2. Start LDAP Server 1. gi...

cve-2021-44228-log4shell_rce_reproduction

CVE-2021-44228 — Log4Shell: Apache Log4j2 Remote Code Execution CVSS 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | CWE-917: Improper Neutralization for Expression Language Injection Overview Log4Shell CVE-2021-44228 is arguably the most severe vulnerability of the 2020s, affecting...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

log4noshell

Log4NoShell A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 "Log4Shell". If possible, update your program to use the latest Log4J version, as the vulnerability is fixed as of version 2.17.1. Otherwise, download log4noshell-0.8.1.jar and continue reading. Usage To...

regresshion-check

regresshion-check regresshion-check is a Rust CLI tool to check SSH servers for vulnerability to CVE-2024-6387. It takes in a single IP or multiple IPs/CIDRs separated by newlines in a file. It includes the reverse DNS lookup and version string with any IPs detected as vulnerable. IPs listed in...

kernel: fanotify: fix false positive on permission events

A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...

CVE-2026-73313

CVE-2026-73313: Passkey credential not bound to login account XenForo before 2.3.13 can complete one user's two-step login with a passkey owned by a different user. What happens The passkey manager performs a global lookup using the credential ID supplied in the assertion and correctly verifies...

Log4shell

Igloo Corporation Won Chi-hyeon Log4shell 分析报告 Log4shell CVE-2021-44228 Log4j 是 Apache 基金会的免费开源、基于 Java 的日志记录组件，适用于各种基于 Java 的服务；它支持通过 JNDI 查找并引用 JDNI 数据与对象（Java LDAP1389 Lookup），并使用通过 JNDI 找到的资源。 下载运行易受攻击服务器的 Docker 镜像文件 Asudo git clone sudo docker build . -t vulnerable-app 将新建的镜像命名为...

Linux Distros Unpatched Vulnerability : CVE-2026-89884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in ca...

Log4Shell-CVE-2021-44228

Exploiting Log4Shell CVE-2021-44228: A Complete, Modern Demonstration Lab Log4Shell CVE-2021-44228 is one of the most impactful remote code execution vulnerabilities ever disclosed. It affects Apache Log4j 2 , a widely used Java logging framework, and allows attackers to execute arbitrary code by...

log4j2-issue-check

Evaluate the Log4Shell: RCE 0-day Issue This repo contains the code to evaluate Log4j2 issue CVE-2021-44228 More details https://www.lunasec.io/docs/blog/log4j-zero-day/ How to Test Send GET request with query parameter as $jndi:ldap://127.0.0.1:3089/. root@kitploit:...