{"uuid": "e6cd8b68-4721-4edf-90bd-ccb100127d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45046", "type": "exploited", "source": "https://t.me/cissp/4945", "content": "URGENT: Apache Foundation has issued a new patch (CVE-2021-45046) for Log4j utility after the previous patch for the recently disclosed Log4Shell exploit (CVE-2021-44228) was deemed incomplete in certain non-default configurations.\nDetails: https://thehackernews.com/2021/12/second-log4j-vulnerability-cve-2021.html\n\nResearchers discovered a new malicious module for IIS servers \u2014 dubbed Owowa \u2014 that attackers are using to steal users' Microsoft Exchange credentials and gain remote code execution ability on the underlying servers.\nDetails: https://thehackernews.com/2021/12/hackers-using-malicious-iis-server.html\n\nFacebook today expanded its Bug Bounty program to reward researchers for reporting bugs that could allow attackers to bypass data scraping restrictions and also for scraped databases that are available online.\nDetails: https://thehackernews.com/2021/12/facebook-to-pay-hackers-for-reporting.html\n\nTime to update your windows for the last time this year (probably!).\nMicrosoft releases latest Windows security updates to patch several newly discovered flaws, including a new 0-day that attackers are exploiting to spread the Emotet malware.\nhttps://thehackernews.com/2021/12/microsoft-issues-windows-update-to.html", "creation_timestamp": "2026-09-11T00:00:39.540850Z"}