{"vulnerability": "CVE-2021-44832", "sightings": [{"uuid": "ed00d9d1-ec90-43c7-a4c3-647712364d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://gist.github.com/Darkcrai86/7032a61956294ef61b60c99a9d29d3fa", "content": "", "creation_timestamp": "2026-01-12T08:25:35.000000Z"}, {"uuid": "4aaa21cf-e4c4-4a85-917f-2e95a28358f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=708", "content": "", "creation_timestamp": "2021-12-29T04:00:00.000000Z"}, {"uuid": "4217cc71-82ad-4f30-b160-9f7189ec7bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_38/2021", "content": "", "creation_timestamp": "2021-12-10T08:54:02.000000Z"}, {"uuid": "02bb4408-31c0-479d-a310-1dad005d2fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1252", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-44832\nURL\uff1ahttps://github.com/DanielRuf/CVE-2021-44832", "creation_timestamp": "2021-12-30T20:26:46.000000Z"}, {"uuid": "451785cd-d7aa-4320-a072-334433ede84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/GithubRedTeam/1262", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aLog4J CVE-2021-44228 : Mitigation Cheat Sheet\nURL\uff1ahttps://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832", "creation_timestamp": "2022-01-03T17:46:59.000000Z"}, {"uuid": "9e4cd36d-5d9c-45eb-8b38-906204e31d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "MISP/4d26c5b0-4bc5-443c-8641-553684788bdc", "content": "", "creation_timestamp": "2026-04-19T22:45:30.000000Z"}, {"uuid": "59ca30e7-0cd9-435a-ac9c-8f471a1f8500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/BleepingComputer/11243", "content": "Log4j 2.17.1 out now, fixes new remote code execution bug\n\nApache has released another Log4j version, 2.17.1 fixing a newly discovered remote code execution (RCE) vulnerability in 2.17.0, tracked as CVE-2021-44832. Prior to today, 2.17.0 was the most recent version of Log4j and deemed the safest release to upgrade to, but that advice has now evolved. [...]\n\nhttps://www.bleepingcomputer.com/news/security/log4j-2171-out-now-fixes-new-remote-code-execution-bug/", "creation_timestamp": "2021-12-28T20:31:37.000000Z"}, {"uuid": "88a5730e-8e9a-4be3-a2e9-044d5e7e2f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/HackingPublicoficial/419", "content": "\u26a0\ufe0f Log4Shell | CVE-2021-44832 \ud83c\udd95\nEl 28 de diciembre se dio a conocer una nueva vulnerabilidad con identificador CVE-2021-44832 en la biblioteca de Log4j. Esta vulnerabilidad es del tipo de ejecuci\u00f3n remota de c\u00f3digo la cual afecta a las versiones 2.0-beta7 a 2.17.0 excluyendo las versiones 2.3.2 y 2.14.4", "creation_timestamp": "2021-12-30T10:56:29.000000Z"}, {"uuid": "cc077f75-2194-414e-abbb-8d2469084300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/ctinow/44480", "content": "Apache Log4j 2.17.1 fixes new remote code execution flaw (CVE-2021-44832)\n\nhttps://ift.tt/3Juy5TJ", "creation_timestamp": "2021-12-29T15:36:44.000000Z"}, {"uuid": "157c3717-8855-4c2f-b339-e61fdc94d0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/CyberSecurityIL/8342", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e0\u05d5\u05e1\u05e4\u05ea, \u05d4\u05d7\u05de\u05d9\u05e9\u05d9\u05ea \u05d1\u05de\u05e1\u05e4\u05e8 \u05ea\u05d5\u05da \u05d7\u05d5\u05d3\u05e9, \u05d4\u05ea\u05d2\u05dc\u05ea\u05d4 \u05d1\u05e1\u05e4\u05e8\u05d9\u05d9\u05ea log4j, \u05ea\u05d9\u05e7\u05d5\u05df \u05d9\u05e6\u05d0 \u05d1\u05d2\u05e8\u05e1\u05d4 2.17.1.\n\n\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea, CVE-2021-44832, \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05d1\u05de\u05d9\u05d3\u05d4 \u05d5\u05d9\u05e9 \u05d1\u05e8\u05e9\u05d5\u05ea\u05d5 \u05d2\u05d9\u05e9\u05d4 \u05dc\u05e9\u05d9\u05e0\u05d5\u05d9 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05e9\u05dc \u05d4\u05e1\u05e4\u05e8\u05d9\u05d4.\n\n\u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05d7\u05de\u05d9\u05e9\u05d9\u05ea \u05d4\u05de\u05ea\u05d2\u05dc\u05d4 \u05d1\u05e1\u05e4\u05e8\u05d9\u05d9\u05d4 \u05d1\u05d7\u05d5\u05d3\u05e9 \u05d1\u05d0\u05d7\u05e8\u05d5\u05df, \u05d7\u05d1\u05e8\u05ea Apache \u05e4\u05d9\u05e8\u05e1\u05de\u05d4 \u05d4\u05d5\u05d3\u05e2\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0 \u05db\u05d0\u05df.\n\nhttps://t.me/joinchat/VRKwnb9-k8CSIizf\n\nhttps://www.bleepingcomputer.com/news/security/log4j-2171-out-now-fixes-new-remote-code-execution-bug/", "creation_timestamp": "2021-12-29T08:04:23.000000Z"}, {"uuid": "0b9d244c-beed-4abf-bb01-9aeb62671530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/true_secator/5186", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Veracode \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e (\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432)  \u043d\u0435\u0433\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044e, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u043e\u043b\u0435\u0435 38% \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Apache Log4j \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 10-\u0442\u0438 \u0431\u0430\u043b\u044c\u043d\u0443\u044e Log4Shell, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f).\n\n\u041e\u0442\u0447\u0435\u0442 \u0432\u044b\u0448\u0435\u043b \u043a\u0430\u043d\u0443\u043d \u0434\u0432\u0443\u0445\u043b\u0435\u0442\u043d\u0435\u0439 \u0433\u043e\u0434\u043e\u0432\u0449\u0438\u043d\u044b Log4Shell \u0438 \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u043b \u0445\u043e\u0440\u043e\u0448\u0435\u0439 \u043e\u0441\u043d\u043e\u0432\u043e\u0439 \u0434\u043b\u044f \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e Veracode \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 15 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043f\u043e 15 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 38 278 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Log4j \u0432\u0435\u0440\u0441\u0438\u0439 1.1\u20133.0.0-alpha1, \u0432 3866 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c 2,8 % \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Log4j \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Log4Shell (Log4j2 2.0-beta9\u20132.15.0).\u00a0\n\n\u0415\u0449\u0435 3,8% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Log4j 2.17.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c \u0434\u043b\u044f Log4Shell, \u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d CVE-2021-44832, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.17.1 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b.\n\n\u0418, \u043d\u0430\u043a\u043e\u043d\u0435\u0446, 32% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Log4j \u0432\u0435\u0440\u0441\u0438\u0438 1.2.x, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430 \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2015 \u0433\u043e\u0434\u0430. \u042d\u0442\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043e 2022 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2022-23307, CVE-2022-23305 \u0438 CVE-2022-23302.\n\n\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0442\u043e\u0440\u0438\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Log4j\u00a0Sonatype \u0441 25% \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Veracode, 79% \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e\u0442 \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0432\u043e\u044e \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 50% \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 65 \u0434\u043d\u0435\u0439 \u0438 \u0431\u043e\u043b\u0435\u0435.\u00a0\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Veracode \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0438 \u0442\u0430\u043a\u043e\u0439 \u0438\u043d\u0435\u0440\u0442\u043d\u043e\u043c \u043f\u043e\u0434\u0445\u043e\u0434\u0435 \u043a \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u0440\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b\u00a0\u0431\u0443\u0434\u0443\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0438 \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441 \u0432\u043e\u043a\u0440\u0443\u0433 Log4Shell \u0432\u043e\u043f\u0440\u0435\u043a\u0438 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u043b.", "creation_timestamp": "2023-12-11T15:30:06.000000Z"}, {"uuid": "b26c8023-f3fd-46aa-b01d-0e5fc6dda7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "exploited", "source": "Telegram/QbzltGTL5MLooH2kEl1qS06h23oJX4UpKYkbnKcssYleTA", "content": "", "creation_timestamp": "2022-01-03T05:49:38.000000Z"}, {"uuid": "967f921f-61b1-4565-848c-9709d4fb1091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/true_secator/2491", "content": "Apache \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0432 \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432\u043e-\u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043b\u0435\u043f\u0438\u0442\u044c \u0437\u0430\u043f\u043b\u0430\u0442\u043a\u0438 \u043d\u0430 Log4j, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e 2.17.1, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 (\u0443\u0436\u0435 \u0437\u0430\u043f\u0443\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u043e \u0441\u0447\u0435\u0442\u0443) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) - CVE-2021-44832.\n \n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e \u0443\u0436\u0435 \u043f\u044f\u0442\u0430\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0430\u044f \u0437\u0430 \u043c\u0435\u0441\u044f\u0446 CVE, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u043f\u043e\u043b\u043e\u0436\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0447\u0430\u043b\u043e Log4Shell - CVE-2021-44228 \u043d\u0430\u0447\u0430\u043b\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n \n\u041f\u044f\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 2.17.0 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 6,6 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c JDNI \u0432 log4j.\n \nJDBC Appender \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 JndiManager \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a JNDI, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f JDBC Appender \u0441 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0441\u044b\u043b\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u043d\u0430 JNDI URI, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n \n\u041d\u043e\u0432\u0443\u044e \u043b\u0430\u0433\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u042f\u043d\u0438\u0432 \u041d\u0438\u0437\u0440\u0438\u0439 \u0438\u0437 Checkmarx, \u0432\u044b\u0437\u0432\u0430\u0432 \u0431\u0443\u0440\u044e \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0439 \u0432 Twitter. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e CVE \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0437\u0436\u0435 \u041c\u0430\u0440\u043a\u043e\u043c \u0420\u043e\u0434\u0436\u0435\u0440\u0441\u043e\u043c, \u0432\u0438\u0446\u0435-\u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043e\u043c \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Okta, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u0430\u043a \u0440\u0430\u0437 \u0438 \u043f\u043e\u044f\u0441\u043d\u0438\u043b, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 log4j, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0412 \u0446\u0435\u043b\u043e\u043c, \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043f\u0440\u0435\u0436\u0434\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0430\u043a \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u0432 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u0441 Log4Shell.\n \n\u0412 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0430\u0437, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e 2.17.1 (\u0434\u043b\u044f Java 8).\n \n\u041d\u043e, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u043d\u0435 \u043e\u043a\u0430\u0436\u0443\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0441 Log4Shell, \u0436\u0435\u0440\u0442\u0432\u044b \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u0434\u0430\u0436\u0435 \u0438 \u043d\u0435 \u0434\u043e\u0433\u0430\u0434\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043e \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438: \u0434\u043e \u043f\u043e\u0440\u044b \u2013 \u0434\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438.", "creation_timestamp": "2021-12-29T16:00:23.000000Z"}, {"uuid": "3cd36f30-1b4e-46a3-9603-3576b52beb4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/xakep_ru/11773", "content": "\u0412\u044b\u0448\u043b\u0430 Log4j \u0432\u0435\u0440\u0441\u0438\u0438 2.17.1, \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0412\u044b\u0448\u043b\u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Log4j, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0412 \u0441\u0432\u0435\u0436\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 2.17.1 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-44832.\n\nhttps://xakep.ru/2021/12/29/one-more-log4j-rce/", "creation_timestamp": "2021-12-29T09:33:58.000000Z"}, {"uuid": "60772a27-941e-488e-bd3b-ea5459cb0aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/5115", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Dec 1-31)\nCVE-2021-44228 - Apache Log4j2\nCVE-2021-45046 - Apache Log4j DoS\nCVE-2021-42278, CVE-2021-42287 - AD Domain Services EoP Vulnerability\nCVE-2021-44832 - Apache Log4j 2.17.0\nCVE-2021-45105 - DoS via Uncontrolled Recursion in Log4j Strsubstitutor\nCVE-2021-43798 - Grafana 8.x Path Traversal\nCVE-2021-44077 - PreAuth RCE in ManageEngine ServiceDesk Plus\nCVE-2021-4422 - Log4j vulnerability\nCVE-2021-44515 - Zoho ManageEngine Desktop Central Pre-auth RCE", "creation_timestamp": "2024-10-21T16:08:53.000000Z"}, {"uuid": "2fdbe608-1095-40f4-be3c-97039ea316ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5087", "content": "Special Report:\nNew Variant of Log4j2 Discovered: CVE-2021-44832 (PoC)\nhttps://checkmarx.com/blog/cve-2021-44832-apache-log4j-2-17-0-arbitrary-code-execution-via-jdbcappender-datasource-element", "creation_timestamp": "2021-12-29T13:43:37.000000Z"}, {"uuid": "324aa62f-4c43-4107-ac2e-454a96c6b761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/bhhub/691", "content": "#BugBountyTips of the Day\nEl Webinar Gratuito: \"Google Hacking\" est\u00e1 disponible en video. #hacking #cybersecurity #bugbounty #osint #forensics \u2623  https://t.co/kFwav2QUuw  https://t.co/CIIZdK4zV0\n---\n\u201cDecoding PDF Injection\u201d by Urshila  https://t.co/G0ruWowrhY  #bugbounty #hacking #infosec\n---\nNew #log4j 2.17.0 RCE may be assigned as CVE-2021-44832   #CVE-2021-44832   Vulnerability confirmed!!! #bugbounty #cybersecurity #apache\n---\nEl Webinar Gratuito: \"Explotaci\u00f3n con Kali Linux\" est\u00e1 disponible en video. #hacking #cybersecurity #bugbounty #osint #forensics \u2623  https://t.co/0vytpnm8QY  https://t.co/omdwhQ8hdD\n---\nTop 20 Most Popular Hacking Tools in 2021  https://t.co/TL3DTtNauI #cybersecurity #bugbountytips #hacking #tools  https://t.co/ahxYRFWRIM\n---\nHere is my biggest 2021 goal.  ...is completed  In  May 2021 I started the bug bounty ...and today I found my name in   @GoogleVRP @Apple @Microsoft   I'm always Thankful - my bro , my mentor - @ADITYASHENDE17   #bugbounty #bughunter  https://t.co/kxUyjxVJGN\n---\nReflected- Cross Site Scripting on login user account  Payload : javascript:alert(1) javascript:alert(document.cookie) #bugbounty #bugbountytips  https://t.co/nCw2T7TWdY\n---\n https://t.co/3r30wz8xys  A simple website to guess API Key / OAuth Token  When you do pentest / Github recon and find API key / OAuth token but you don't know what API key it is, you can use my website that I built from javascript  #bugbountytips #bugbounty #infosec  https://t.co/0I1LOdzkgs\n---\nafter 5 months of break I am able to find something good \ud83d\ude00. The trending vulnerability. and got \ud83e\udd11\ud83e\udd11 #Log4Shell #bugbounty #cybersecurity  https://t.co/OVLjQCfQH9\n---\nXSS TIP : to bypass WAF  @PecentZero Inserting space before (),[], .  is allowed  when execute command ,you can replace space with /**/  alert/**/(\"XSS\") alert/**/?.(\"XSS\") alert?./**/(\"XSS\") alert/**/?./**/(\"XSS\") window?./**/[/al/.source+/ert/.source]/**/('XSS') #bugbountytip", "creation_timestamp": "2021-12-29T13:37:04.000000Z"}, {"uuid": "dd0c7535-2acb-4394-be73-a07b0a271881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/java_sup/283", "content": "\u0413\u0434\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u043d\u0438\u0435 \u0432 Java \u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0438\u0437 \u043d\u0430\u0448\u0435\u0439 \u0441\u0435\u0440\u0438\u0438 \u00ab\u041e\u0447\u0435\u043d\u044c \u0441\u0442\u0440\u0430\u043d\u043d\u044b\u0435 \u0432\u0435\u0449\u0438 \u0432 Java\u00bb, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044e Java, \u043c\u044b \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u043f\u0440\u043e\u044f\u0441\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0430 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u043d\u0438\u044f \u00ab_\u00bb \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043d\u0430 Java. https://shly.link/1rL0j                                                                                                                                                                                                                                   \u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Apache Log4j \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Apache Software Foundation (ASF) \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0432\u0435\u0436\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Log4j, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u044f\u0442\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0432 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446.\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2021-44832 , \u0438\u043c\u0435\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 6,6 \u043f\u043e 10-\u0431\u0430\u043b\u043b\u044c\u043d\u043e\u0439 \u0448\u043a\u0430\u043b\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u043e\u0442 2.0-alpha7 \u0434\u043e 2.17.0, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c 2.3.2 \u0438 2.12.4. \u0425\u043e\u0442\u044f Log4j \u0432\u0435\u0440\u0441\u0438\u0438 1.x \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Log4j 2.3.2 (\u0434\u043b\u044f Java 6), 2.12.4 (\u0434\u043b\u044f Java 7) \u0438\u043b\u0438 2.17.1 (\u0434\u043b\u044f Java 8 \u0438 \u043d\u043e\u0432\u0435\u0435). https://shly.link/Y3Ydy", "creation_timestamp": "2026-08-09T08:15:00.563447Z"}, {"uuid": "08a38ffa-6f11-4bbd-af03-5972c2be331e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/java_sup/283", "content": "\u0413\u0434\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u043d\u0438\u0435 \u0432 Java \u0412 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435 \u0438\u0437 \u043d\u0430\u0448\u0435\u0439 \u0441\u0435\u0440\u0438\u0438 \u00ab\u041e\u0447\u0435\u043d\u044c \u0441\u0442\u0440\u0430\u043d\u043d\u044b\u0435 \u0432\u0435\u0449\u0438 \u0432 Java\u00bb, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044e Java, \u043c\u044b \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u043f\u0440\u043e\u044f\u0441\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0430 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u043d\u0438\u044f \u00ab_\u00bb \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043d\u0430 Java. https://shly.link/1rL0j                                                                                                                                                                                                                                   \u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Apache Log4j \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Apache Software Foundation (ASF) \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0432\u0435\u0436\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Log4j, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u044f\u0442\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0432 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446.\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2021-44832 , \u0438\u043c\u0435\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 6,6 \u043f\u043e 10-\u0431\u0430\u043b\u043b\u044c\u043d\u043e\u0439 \u0448\u043a\u0430\u043b\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u043e\u0442 2.0-alpha7 \u0434\u043e 2.17.0, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c 2.3.2 \u0438 2.12.4. \u0425\u043e\u0442\u044f Log4j \u0432\u0435\u0440\u0441\u0438\u0438 1.x \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Log4j 2.3.2 (\u0434\u043b\u044f Java 6), 2.12.4 (\u0434\u043b\u044f Java 7) \u0438\u043b\u0438 2.17.1 (\u0434\u043b\u044f Java 8 \u0438 \u043d\u043e\u0432\u0435\u0435). https://shly.link/Y3Ydy", "creation_timestamp": "2026-08-10T00:00:28.143933Z"}, {"uuid": "d7acdab2-82b1-462c-b784-6e66d4bba000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/pleyades_it/9535", "content": "\u2757\ufe0f\u00abUna #vulnerabilidad llamada Log4Shell es capaz de permitir a los crackers comprometer millones de dispositivos a trav\u00e9s de servicios muy populares de empresas como Apple, Valve, Cloudflare o a trav\u00e9s de juegos populares como Minecraft\u00bb.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u00bfQu\u00e9 es Log4Shell?: \u00abse trata de una vulnerabilidad de seguridad en una biblioteca Apache ampliamente utilizada que est\u00e1 afectando a casi todos los servidores, plataformas y sistemas cibern\u00e9ticos, provocando el m\u00e1s absoluto caos en Internet\u00bb.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\nBitdefender: \u00abT\u00e9cnicamente hablando, el error es una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo de d\u00eda cero, lo que significa que \u201cpermite a los atacantes descargar y ejecutar scripts en servidores espec\u00edficos, dej\u00e1ndolos abiertos al control remoto completo\u00bb.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udd16 M\u00e1s detalles: https://bit.ly/30i4Qlx\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\uddde Comunicado del CCN-CERT: https://bit.ly/3rV1XlQ\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2755Actualizaci\u00f3n vulnerabilidad en Apache Log4j 2 (CCN-CERT): https://bit.ly/3DS5t31\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fCrackers comienzan a aprovechar la vulnerabilidad Log4Shell para desplegar #malware por todo el mundo: https://bit.ly/3DOSNtp\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udc27 Dos botnets de #Linux ya explotan Log4Shell en la biblioteca de Log4j: https://bit.ly/3oN6hlf\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83c\udde8\ud83c\udde6 Canad\u00e1 cierra 4.000 sitios web gubernamentales por temor a #ciberataques explotando una vulnerabilidad en Log4j: https://bit.ly/3IJP6ZV\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2705 El parche ya existe: se lanz\u00f3 poco m\u00e1s de 24 horas despu\u00e9s de tener conocimiento de la existencia de Log4Shell. Ahora, basta con actualizar a la versi\u00f3n 2.15.0 de Log4J para solventar el agujero de seguridad: https://bit.ly/3pWoHPM\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fPrimer caso en el que se ha aprovechado la vulnerabilidad Log4Shell para un #ciberataque de #ransomware: https://bit.ly/3yu4oxh\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udea8 Cloudflare ha detectado m\u00e1s de 24.600 #ciberataques por minuto que explotaban la vulnerabilidad Log4Shell: https://bit.ly/3sdvEyT\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fDescubren una tercera vulnerabilidad en la librer\u00eda Log4j: https://bit.ly/3skUZaf\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83c\uddfa\ud83c\uddf8 Estados unidos activa medidas de emergencia contra la vulnerabilidad Log4J: https://bit.ly/3ssliva\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fCVE-2021-44832: La quinta vulnerabilidad cr\u00edtica descubierta en la biblioteca de registro Apache\nhttps://bit.ly/3zaxa6j\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796", "creation_timestamp": "2026-07-12T22:00:16.328660Z"}, {"uuid": "b57ad3f6-576f-42f3-82c8-1ca97090c700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/pleyades_it/9535", "content": "\u2757\ufe0f\u00abUna #vulnerabilidad llamada Log4Shell es capaz de permitir a los crackers comprometer millones de dispositivos a trav\u00e9s de servicios muy populares de empresas como Apple, Valve, Cloudflare o a trav\u00e9s de juegos populares como Minecraft\u00bb.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u00bfQu\u00e9 es Log4Shell?: \u00abse trata de una vulnerabilidad de seguridad en una biblioteca Apache ampliamente utilizada que est\u00e1 afectando a casi todos los servidores, plataformas y sistemas cibern\u00e9ticos, provocando el m\u00e1s absoluto caos en Internet\u00bb.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\nBitdefender: \u00abT\u00e9cnicamente hablando, el error es una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo de d\u00eda cero, lo que significa que \u201cpermite a los atacantes descargar y ejecutar scripts en servidores espec\u00edficos, dej\u00e1ndolos abiertos al control remoto completo\u00bb.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udd16 M\u00e1s detalles: https://bit.ly/30i4Qlx\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\uddde Comunicado del CCN-CERT: https://bit.ly/3rV1XlQ\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2755Actualizaci\u00f3n vulnerabilidad en Apache Log4j 2 (CCN-CERT): https://bit.ly/3DS5t31\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fCrackers comienzan a aprovechar la vulnerabilidad Log4Shell para desplegar #malware por todo el mundo: https://bit.ly/3DOSNtp\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udc27 Dos botnets de #Linux ya explotan Log4Shell en la biblioteca de Log4j: https://bit.ly/3oN6hlf\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83c\udde8\ud83c\udde6 Canad\u00e1 cierra 4.000 sitios web gubernamentales por temor a #ciberataques explotando una vulnerabilidad en Log4j: https://bit.ly/3IJP6ZV\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2705 El parche ya existe: se lanz\u00f3 poco m\u00e1s de 24 horas despu\u00e9s de tener conocimiento de la existencia de Log4Shell. Ahora, basta con actualizar a la versi\u00f3n 2.15.0 de Log4J para solventar el agujero de seguridad: https://bit.ly/3pWoHPM\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fPrimer caso en el que se ha aprovechado la vulnerabilidad Log4Shell para un #ciberataque de #ransomware: https://bit.ly/3yu4oxh\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udea8 Cloudflare ha detectado m\u00e1s de 24.600 #ciberataques por minuto que explotaban la vulnerabilidad Log4Shell: https://bit.ly/3sdvEyT\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fDescubren una tercera vulnerabilidad en la librer\u00eda Log4j: https://bit.ly/3skUZaf\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83c\uddfa\ud83c\uddf8 Estados unidos activa medidas de emergencia contra la vulnerabilidad Log4J: https://bit.ly/3ssliva\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fCVE-2021-44832: La quinta vulnerabilidad cr\u00edtica descubierta en la biblioteca de registro Apache\nhttps://bit.ly/3zaxa6j\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796", "creation_timestamp": "2026-07-13T00:00:40.179125Z"}, {"uuid": "0ff00c4b-ced2-4c80-a8aa-d275ba66aa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "exploited", "source": "https://t.me/pleyades_it/9535", "content": "\u2757\ufe0f\u00abUna #vulnerabilidad llamada Log4Shell es capaz de permitir a los crackers comprometer millones de dispositivos a trav\u00e9s de servicios muy populares de empresas como Apple, Valve, Cloudflare o a trav\u00e9s de juegos populares como Minecraft\u00bb.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u00bfQu\u00e9 es Log4Shell?: \u00abse trata de una vulnerabilidad de seguridad en una biblioteca Apache ampliamente utilizada que est\u00e1 afectando a casi todos los servidores, plataformas y sistemas cibern\u00e9ticos, provocando el m\u00e1s absoluto caos en Internet\u00bb.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\nBitdefender: \u00abT\u00e9cnicamente hablando, el error es una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo de d\u00eda cero, lo que significa que \u201cpermite a los atacantes descargar y ejecutar scripts en servidores espec\u00edficos, dej\u00e1ndolos abiertos al control remoto completo\u00bb.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udd16 M\u00e1s detalles: https://bit.ly/30i4Qlx\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\uddde Comunicado del CCN-CERT: https://bit.ly/3rV1XlQ\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2755Actualizaci\u00f3n vulnerabilidad en Apache Log4j 2 (CCN-CERT): https://bit.ly/3DS5t31\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fCrackers comienzan a aprovechar la vulnerabilidad Log4Shell para desplegar #malware por todo el mundo: https://bit.ly/3DOSNtp\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udc27 Dos botnets de #Linux ya explotan Log4Shell en la biblioteca de Log4j: https://bit.ly/3oN6hlf\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83c\udde8\ud83c\udde6 Canad\u00e1 cierra 4.000 sitios web gubernamentales por temor a #ciberataques explotando una vulnerabilidad en Log4j: https://bit.ly/3IJP6ZV\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2705 El parche ya existe: se lanz\u00f3 poco m\u00e1s de 24 horas despu\u00e9s de tener conocimiento de la existencia de Log4Shell. Ahora, basta con actualizar a la versi\u00f3n 2.15.0 de Log4J para solventar el agujero de seguridad: https://bit.ly/3pWoHPM\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fPrimer caso en el que se ha aprovechado la vulnerabilidad Log4Shell para un #ciberataque de #ransomware: https://bit.ly/3yu4oxh\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udea8 Cloudflare ha detectado m\u00e1s de 24.600 #ciberataques por minuto que explotaban la vulnerabilidad Log4Shell: https://bit.ly/3sdvEyT\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fDescubren una tercera vulnerabilidad en la librer\u00eda Log4j: https://bit.ly/3skUZaf\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83c\uddfa\ud83c\uddf8 Estados unidos activa medidas de emergencia contra la vulnerabilidad Log4J: https://bit.ly/3ssliva\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2757\ufe0fCVE-2021-44832: La quinta vulnerabilidad cr\u00edtica descubierta en la biblioteca de registro Apache\nhttps://bit.ly/3zaxa6j\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796", "creation_timestamp": "2026-07-14T00:00:52.239300Z"}, {"uuid": "7a0c9b70-6fdd-4863-9017-b035245356b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "published-proof-of-concept", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "content": "", "creation_timestamp": "2026-08-28T00:00:36.498009Z"}, {"uuid": "a0afcb05-b007-499a-bd64-280a7302f42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "content": "", "creation_timestamp": "2026-08-27T16:00:03.732259Z"}, {"uuid": "a79a06a1-5297-411d-be3f-c0346b096fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/xhqcankao/2090", "content": "Log4j 2.17  \u53ef\u80fd\u7684\u65b0 RCE\n\n\u76f8\u5173\u5bf9\u8bdd\u5728 Twitter \u4e0a\u5c55\u5f00\uff0c\u8bf7\u6301\u7eed\u5173\u6ce8\u3002\n\n==Update==============\nLog4j 2.17  \u51fa\u73b0\u65b0 RCE \u6f0f\u6d1e\n\n\u5f71\u54cd\u8303\u56f4\uff1a2.0-beta7 \uff5e 2.17.0\n\n\u5229\u7528\u6761\u4ef6\uff1a\n1.You are loading configuration from a remote server and/or someone can hijack/modify your log4j configuration file;\n2. You are using the JDBC log appender with a dynamic URL address.\n\n\u8be6\u7ec6\u4fe1\u606f\uff1aCVE-2021-44832\n\n\u603b\u7ed3\uff1a\u9700\u8981\u5728\u975e\u9ed8\u8ba4\u914d\u7f6e\u4e0b\u624d\u80fd\u88ab\u5229\u7528\uff0c\u5c5e\u5b9e\u662f\u5c51\u5566\uff0c\u4e0d\u5fc5\u60ca\u614c\u3002", "creation_timestamp": "2026-08-25T00:00:24.801614Z"}, {"uuid": "c2aa0c0a-d756-4125-9932-541cd4b70572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/EchelonEyes/2263", "content": "\u0411\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Log4j\n\n\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 38% \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Apache Log4j, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u044e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Log4Shell (CVE-2021-44228), \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442.\n\nLog4Shell \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0441 Log4j 2.0-beta9 \u0438 \u0434\u043e 2.15.0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f 10 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2021 \u0433\u043e\u0434\u0430. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043a\u043e\u043b\u043e\u0441\u0441\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0438 \u0431\u044b\u043b \u043f\u0440\u043e\u0441\u0442\u0430 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u0438\u043c\u0435\u043b\u043e \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u0430\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Veracode, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 3866 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 15 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043f\u043e 15 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430. \n\n\u0418\u0437 38 278 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 Log4j, 38% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438.\n\n\u0422\u0430\u043a, \u0438\u0437 \u044d\u0442\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 2,8% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b Log4J \u0441 2.0-beta9 \u043f\u043e 2.15.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f Log4Shell.\n\n\u0415\u0449\u0435 3,8% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Log4j 2.17.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f Log4Shell, \u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 CVE-2021-44832, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.17.1.\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, 32% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Log4j \u0432\u0435\u0440\u0441\u0438\u0438 1.2.x, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430 \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2015 \u0433\u043e\u0434\u0430. \u042d\u0442\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043e 2022 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2022-23307, CVE-2022-23305 \u0438 CVE-2022-23302.\n\n\u041f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Veracode \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0445 \u043e\u0441\u043b\u043e\u0436\u043d\u0435\u043d\u0438\u0439. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, 79% \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e\u0442 \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0432\u043e\u044e \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e 50% \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 65 \u0434\u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.veracode.com/blog/research/state-log4j-vulnerabilities-how-much-did-log4shell-change \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Log4Shell", "creation_timestamp": "2026-07-26T02:02:17.790862Z"}, {"uuid": "4823db25-ef54-446d-8eab-ffdb7bc1fa7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/EchelonEyes/2263", "content": "\u0411\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Log4j\n\n\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 38% \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Apache Log4j, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u044e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Log4Shell (CVE-2021-44228), \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442.\n\nLog4Shell \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0441 Log4j 2.0-beta9 \u0438 \u0434\u043e 2.15.0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f 10 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2021 \u0433\u043e\u0434\u0430. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043a\u043e\u043b\u043e\u0441\u0441\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0438 \u0431\u044b\u043b \u043f\u0440\u043e\u0441\u0442\u0430 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u0438\u043c\u0435\u043b\u043e \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u0430\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Veracode, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 3866 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 15 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043f\u043e 15 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430. \n\n\u0418\u0437 38 278 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 Log4j, 38% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438.\n\n\u0422\u0430\u043a, \u0438\u0437 \u044d\u0442\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 2,8% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b Log4J \u0441 2.0-beta9 \u043f\u043e 2.15.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f Log4Shell.\n\n\u0415\u0449\u0435 3,8% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Log4j 2.17.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f Log4Shell, \u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 CVE-2021-44832, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.17.1.\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, 32% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Log4j \u0432\u0435\u0440\u0441\u0438\u0438 1.2.x, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430 \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2015 \u0433\u043e\u0434\u0430. \u042d\u0442\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043e 2022 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2022-23307, CVE-2022-23305 \u0438 CVE-2022-23302.\n\n\u041f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Veracode \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0445 \u043e\u0441\u043b\u043e\u0436\u043d\u0435\u043d\u0438\u0439. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, 79% \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e\u0442 \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0432\u043e\u044e \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e 50% \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 65 \u0434\u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.veracode.com/blog/research/state-log4j-vulnerabilities-how-much-did-log4shell-change \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Log4Shell", "creation_timestamp": "2026-07-27T00:00:54.471782Z"}, {"uuid": "5042fb57-ae2a-41e8-bb69-beb3ecb4a1d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/EchelonEyes/2263", "content": "\u0411\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Log4j\n\n\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 38% \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Apache Log4j, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u044e, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Log4Shell (CVE-2021-44228), \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442.\n\nLog4Shell \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0441 Log4j 2.0-beta9 \u0438 \u0434\u043e 2.15.0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f 10 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2021 \u0433\u043e\u0434\u0430. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043a\u043e\u043b\u043e\u0441\u0441\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0438 \u0431\u044b\u043b \u043f\u0440\u043e\u0441\u0442\u0430 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438, \u0447\u0442\u043e \u0438\u043c\u0435\u043b\u043e \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0442\u0430\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Veracode, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 3866 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 15 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043f\u043e 15 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430. \n\n\u0418\u0437 38 278 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 Log4j, 38% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438.\n\n\u0422\u0430\u043a, \u0438\u0437 \u044d\u0442\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 2,8% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b Log4J \u0441 2.0-beta9 \u043f\u043e 2.15.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f Log4Shell.\n\n\u0415\u0449\u0435 3,8% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Log4j 2.17.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f Log4Shell, \u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 CVE-2021-44832, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.17.1.\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, 32% \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Log4j \u0432\u0435\u0440\u0441\u0438\u0438 1.2.x, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430 \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2015 \u0433\u043e\u0434\u0430. \u042d\u0442\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043e 2022 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2022-23307, CVE-2022-23305 \u0438 CVE-2022-23302.\n\n\u041f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Veracode \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0445 \u043e\u0441\u043b\u043e\u0436\u043d\u0435\u043d\u0438\u0439. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, 79% \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e\u0442 \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0432\u043e\u044e \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e 50% \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 65 \u0434\u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.veracode.com/blog/research/state-log4j-vulnerabilities-how-much-did-log4shell-change \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Log4Shell", "creation_timestamp": "2026-07-28T00:00:33.295440Z"}, {"uuid": "584f8791-bfea-4fdf-ab73-980b187a9779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/xhqcankao/2090", "content": "Log4j 2.17  \u53ef\u80fd\u7684\u65b0 RCE\n\n\u76f8\u5173\u5bf9\u8bdd\u5728 Twitter \u4e0a\u5c55\u5f00\uff0c\u8bf7\u6301\u7eed\u5173\u6ce8\u3002\n\n==Update==============\nLog4j 2.17  \u51fa\u73b0\u65b0 RCE \u6f0f\u6d1e\n\n\u5f71\u54cd\u8303\u56f4\uff1a2.0-beta7 \uff5e 2.17.0\n\n\u5229\u7528\u6761\u4ef6\uff1a\n1.You are loading configuration from a remote server and/or someone can hijack/modify your log4j configuration file;\n2. You are using the JDBC log appender with a dynamic URL address.\n\n\u8be6\u7ec6\u4fe1\u606f\uff1aCVE-2021-44832\n\n\u603b\u7ed3\uff1a\u9700\u8981\u5728\u975e\u9ed8\u8ba4\u914d\u7f6e\u4e0b\u624d\u80fd\u88ab\u5229\u7528\uff0c\u5c5e\u5b9e\u662f\u5c51\u5566\uff0c\u4e0d\u5fc5\u60ca\u614c\u3002", "creation_timestamp": "2026-08-24T08:00:02.904216Z"}, {"uuid": "395591de-c87d-46b6-afdb-1752c53f754a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/Hackme_news/449", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Apache Log4j \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Apache Software Foundation (ASF) \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0432\u0435\u0436\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Log4j, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u044f\u0442\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0432 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2021-44832 , \u0438\u043c\u0435\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 6,6 \u043f\u043e 10-\u0431\u0430\u043b\u043b\u044c\u043d\u043e\u0439 \u0448\u043a\u0430\u043b\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u043e\u0442 2.0-alpha7 \u0434\u043e 2.17.0, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c 2.3.2 \u0438 2.12.4. \u0425\u043e\u0442\u044f Log4j \u0432\u0435\u0440\u0441\u0438\u0438 1.x \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Log4j 2.3.2 (\u0434\u043b\u044f Java 6), 2.12.4 (\u0434\u043b\u044f Java 7) \u0438\u043b\u0438 2.17.1 (\u0434\u043b\u044f Java 8 \u0438 \u043d\u043e\u0432\u0435\u0435). https://shly.link/Y3Ydy", "creation_timestamp": "2026-09-01T17:00:11.455032Z"}, {"uuid": "b10e3dd1-bc05-4059-88ca-391870556198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/hacking_Attack/36753", "content": "nerability identifier (CVE-2021-44832) and that the exploitation of the bug depends on a non-default log4j setup where configuration is being loaded from a remote server: Looks like log4j CVE-2021-44832 has non default preconditions:  \u201cYou are loading configuration from a remote server and/or someone can hijack/modify your log4j configuration file\nYou are using the JDBC log appender with a dynamic URL address.\u201d\n\n\u2014 Marc Rogers (@marcwrogers) December 28, 2021\nSee Also: Offensive Security Tool: log4j Honeypot Flask Up until now, log4j vulnerabilities have been exploited by all kinds of threat actors from state-backed hackers\u00a0to ransomware\u00a0gangs\u00a0and others to inject Monero miners\u00a0on vulnerable systems.\n\nThe Conti ransomware gang has been seen\u00a0 eying vulnerable VMWare vCenter servers. Whereas\u00a0attackers breaching\u00a0the Vietnamese\u00a0crypto platform, ONUS, via log4shell demanded a $5 million ransom. \n\nLog4j users should immediately upgrade to the latest release 2.17.1\u00a0(for Java 8). Backported versions\u00a02.12.4 (Java 7) and 2.3.2 (Java 6) containing the fix are also expected to be released shortly.\n\nBleepingComputer has reached out to Checkmarx for comment in advance of writing and we are awaiting their response.\nSee Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/qnap-logo-white-90x90.jpg QNAP NAS devices hit in surge of ech0raix ransomware attacks1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/shutterstock_495927541-90x90.jpg Wireless coexistence \u2013 New attack technique exploits Bluetooth, WiFi performance features2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/apple-store-tower-90x90.jpg Apple fixes macOS security flaw behind Gatekeeper bypass5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5157-article-201208-ms-team_body_text-90x90.jpg Microsoft Teams bug allowing phishing unpatched since March6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-6-90x90.jpg 800K WordPress sites still impacted by critical SEO plugin flaw1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-5-90x90.jpg Microsoft warns of easy Windows domain takeover via Active Directory bugs1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-4-90x90.jpg TellYouThePass ransomware revived in Linux, Windows Log4j attacks1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-1-90x90.jpg Log4j attackers switch to injecting Monero miners via RMI2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Hackers-Using-Malicious-IIS-Server-Module-to-Steal-Microsoft-Exchange-560x380-1-90x90.jpg Hackers steal Microsoft Exchange credentials using IIS module2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/how-ransomware-works-1024x535-1-90x90.png New ransomware now being deployed in Log4Shell attacks2 weeks ago\nThe post Log4j 2.17.1 out now, fixes new remote code execution bug first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:01.136779Z"}, {"uuid": "c38f8336-f217-4bda-98a1-80e1277de893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/hacking_Attack/36752", "content": "Black Hat Ethical Hacking\nLog4j 2.17.1 out now, fixes new remote code execution bug\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Log4j 2.17.1 out now, fixes new remote code execution bugPost Views: 200 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nApache has released another Log4j version, 2.17.1 fixing a newly discovered remote code execution (RCE) vulnerability in 2.17.0, tracked as CVE-2021-44832.\nPrior to today, 2.17.0 was the most recent version of Log4j and deemed the safest release to upgrade to, but that advice has now evolved. Fifth Log4j CVE in under\u00a0a monthMass\u00a0exploitation of the original Log4Shell vulnerability\u00a0(CVE-2021-44228) by threat actors began around December 9th, when a PoC exploit\u00a0for it surfaced on GitHub.\n\nGiven Log4j\u2019s vast usage\u00a0in the majority of Java applications, Log4Shell soon\u00a0turned into a nightmare for enterprises and governments\u00a0worldwide.\n\nWhile the critical risk posed by the original Log4Shell exploit is\u00a0paramount, milder variants of the vulnerability\u00a0emerged in Log4j versions, including 2.15 and 2.16\u2014previously believed to be fully patched.\n\nBleepingComputer earlier reported on four different\u00a0CVEs impacting Log4j\u00a0and one discovered in the \u2018logback\u2019 framework.\u00a0After the discovery of a DoS flaw\u00a0in version 2.16, the advice had swiftly shifted towards upgrading to version 2.17.0, deemed the safest of all.\n\nBut now a fifth vulnerability\u2014an RCE flaw, tracked as CVE-2021-44832 has been discovered in 2.17.0, with a patch applied to the newest\u00a0release 2.17.1\u00a0which is out.\n\nRated \u2018Moderate\u2019 in severity and assigned a 6.6 score on the CVSS scale, the vulnerability stems from the lack of additional controls on JDNI access in log4j.\n\n\u201cJDBC Appender should use JndiManager when accessing JNDI. JNDI access should be controlled via a system property,\u201d states the issue description seen by BleepingComputer.\nSee Also: Complete Offensive Security and Ethical Hacking Course\n\u201cRelated to CVE-2021-44832 where an attacker with permission to modify the logging configuration file can construct a malicious configuration using a JDBC Appender with a data source referencing a JNDI URI which can execute remote code.\u201d\n\nCheckmarx security researcher Yaniv Nizry\u00a0claimed credit for reporting the vulnerability to Apache:\nStay tuned for a blogpost \ud83d\ude09 pic.twitter.com/D56WpVsuF3\n\n\u2014 Yaniv Nizry (@YNizry) December 28, 2021\nNizry\u2019s tweet quickly exploded in traffic, attracting remarks and memes\u00a0from security experts and \u2018victims\u2019 of the ongoing log4j-patching fatigue.\n\n\u201cI hope this is a joke, I\u00a0hope so much\u2026\u00a0#log4j,\u201d tweeted\u00a0one user in response.\n\n\u201cWe are LONG past the point where the only responsible thing to do is put up a giant flashing neon sign that reads \u2018LOG4J CANNOT BE FIXED, DO NOT USE IT FOR ANYTHING.'\u201d taunted\u00a0another.\n\nSecurity expert Kevin Beaumont labeled\u00a0the instance another \u201cfailed Log4j disclosure in motion\u201d\u00a0during the holidays.\nSee Also: Hackers start pushing malware in worldwide Log4Shell attacks Disclosed too soon?At the time of\u00a0Nizry\u2019s tweet,\u00a0BleepingComputer did not see an official advisory or memo\u00a0indicating the presence of\u00a0an RCE bug in log4j 2.17.\n\nThe tweet itself contained no details about the vulnerability or how it could\u00a0be exploited but, within minutes, led\u00a0a pack of security pros and netizens to start investigating the claim.\n\nDisclosing security vulnerabilities prematurely can lure threat actors to conduct malicious scanning and exploitation activities, as evident from the Log4Shell exploit leak of December 9th.\n\n \nMarc Rogers, VP of cybersecurity at Okta first disclosed the vul[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:01.197704Z"}, {"uuid": "c851d2a7-723c-4b87-be58-0bc2f7a71190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/hacking_Attack/42876", "content": "Kali Linux Tutorials\nLog4J-Detector : Detects Log4J versions on your file-system within any application that are vulnerable to CVE-2021-44228 and CVE-2021-45046\n\nLog4J-Detector is a Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228\u00a0(CRITICAL),\u00a0CVE-2021-45046,\u00a0CVE-2021-45105, and\u00a0CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It is able to find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too!\n\nIntroduction\n\nCurrently reports\u00a0log4j-core\u00a0versions 2.3.2, 2.12.4, and 2.17.1 as _SAFE_, 2.3.1, 2.12.2, 2.12.3, 2.15.0, 2.16.0, and 2.17.0 as _OKAY_\u00a0and all other versions as _VULNERABLE_\u00a0(although it does report pre-2.0-beta9 as _POTENTIALLY_SAFE_). It reports older\u00a0log4j-1.x\u00a0versions as _OLD_.\n\nCan correctly detect log4j inside executable spring-boot jars/wars, dependencies blended into\u00a0uber jars, shaded jars, and even exploded jar files just sitting uncompressed on the file-system (aka *.class).\n\nWe currently maintain a collection of\u00a0log4j-samples\u00a0we use for testing.\n\nExample Usage\n\njava -jar log4j-detector-2021.12.29.jar ./samples\n\n\u2014 github.com/mergebase/log4j-detector v2021.12.29 (by mergebase.com) analyzing paths (could take a while).\n\u2014 Note: specify the \u2018\u2013verbose\u2019 flag to have every file examined printed to STDERR.\nfalse-hits/log4j-core-2.12.2.jar contains Log4J-2.x == 2.12.2 OKAY\nfalse-hits/log4j-core-2.12.3.jar contains Log4J-2.x == 2.12.3 OKAY\nfalse-hits/log4j-core-2.12.4.jar contains Log4J-2.x == 2.12.4 SAFE\nfalse-hits/log4j-core-2.15.0.jar contains Log4J-2.x == 2.15.0 OKAY\nfalse-hits/log4j-core-2.16.0.jar contains Log4J-2.x == 2.16.0 OKAY\nfalse-hits/log4j-core-2.17.0.jar contains Log4J-2.x == 2.17.0 OKAY\nfalse-hits/log4j-core-2.17.1.jar contains Log4J-2.x >= 2.17.1 SAFE\nfalse-hits/log4j-core-2.3.1.jar contains Log4J-2.x == 2.3.1 OKAY\nfalse-hits/log4j-core-2.3.2.jar contains Log4J-2.x == 2.3.2 SAFE\ntrue-hits/log4j-core-2.0-beta9.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.10.0.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.10.0.zip contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.11.0.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.11.1.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.11.2.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.12.0.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.12.1.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.14.0.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.14.1.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.2.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.3.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.4.1.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.4.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.9.1.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE\nold-hits/log4j-1.1.3.jar contains Log4J-1.x <=OLD\nold-hits/log4j-1.2.17.jar contains Log4J-1.x <=OLD\nold-hits/log4j-core-2.0-beta2.jar contains Log4J-2.x <=POTENTIALLY_SAFE (Did you remove JndiLookup.class?)\n\nUnderstanding The Results\n\n_VULNERABLE_\u00a0-> You need to upgrade or remove this file.\n\n_OKAY_\u00a0-> We report this for Log4J versions 2.3.1, 2.12.2, 2.12.3, 2.15.0, 2.16.0, and 2.17.0. We recommend upgrading to 2.17.1.\n\n_SAFE_\u00a0-> We currently only report this for Log4J versions 2.3.2, 2.12.4, and 2.17.1 (and greater).\n\n_OLD_\u00a0-> You are safe from CVE-2021-44228, but should plan to upgrade because Log4J 1.2.x has been EOL for 7 years and has [...]", "creation_timestamp": "2026-09-01T20:01:55.194650Z"}, {"uuid": "2835de3e-91de-4324-90bf-2d2cdc302fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/hacking_Attack/36753", "content": "nerability identifier (CVE-2021-44832) and that the exploitation of the bug depends on a non-default log4j setup where configuration is being loaded from a remote server: Looks like log4j CVE-2021-44832 has non default preconditions:  \u201cYou are loading configuration from a remote server and/or someone can hijack/modify your log4j configuration file\nYou are using the JDBC log appender with a dynamic URL address.\u201d\n\n\u2014 Marc Rogers (@marcwrogers) December 28, 2021\nSee Also: Offensive Security Tool: log4j Honeypot Flask Up until now, log4j vulnerabilities have been exploited by all kinds of threat actors from state-backed hackers\u00a0to ransomware\u00a0gangs\u00a0and others to inject Monero miners\u00a0on vulnerable systems.\n\nThe Conti ransomware gang has been seen\u00a0 eying vulnerable VMWare vCenter servers. Whereas\u00a0attackers breaching\u00a0the Vietnamese\u00a0crypto platform, ONUS, via log4shell demanded a $5 million ransom. \n\nLog4j users should immediately upgrade to the latest release 2.17.1\u00a0(for Java 8). Backported versions\u00a02.12.4 (Java 7) and 2.3.2 (Java 6) containing the fix are also expected to be released shortly.\n\nBleepingComputer has reached out to Checkmarx for comment in advance of writing and we are awaiting their response.\nSee Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/qnap-logo-white-90x90.jpg QNAP NAS devices hit in surge of ech0raix ransomware attacks1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/shutterstock_495927541-90x90.jpg Wireless coexistence \u2013 New attack technique exploits Bluetooth, WiFi performance features2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/apple-store-tower-90x90.jpg Apple fixes macOS security flaw behind Gatekeeper bypass5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5157-article-201208-ms-team_body_text-90x90.jpg Microsoft Teams bug allowing phishing unpatched since March6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-6-90x90.jpg 800K WordPress sites still impacted by critical SEO plugin flaw1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-5-90x90.jpg Microsoft warns of easy Windows domain takeover via Active Directory bugs1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-4-90x90.jpg TellYouThePass ransomware revived in Linux, Windows Log4j attacks1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-1-90x90.jpg Log4j attackers switch to injecting Monero miners via RMI2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Hackers-Using-Malicious-IIS-Server-Module-to-Steal-Microsoft-Exchange-560x380-1-90x90.jpg Hackers steal Microsoft Exchange credentials using IIS module2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/how-ransomware-works-1024x535-1-90x90.png New ransomware now being deployed in Log4Shell attacks2 weeks ago\nThe post Log4j 2.17.1 out now, fixes new remote code execution bug first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:23.104193Z"}, {"uuid": "13368780-ed15-4a02-88fd-522012c9f02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/hacking_Attack/36752", "content": "Black Hat Ethical Hacking\nLog4j 2.17.1 out now, fixes new remote code execution bug\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Log4j 2.17.1 out now, fixes new remote code execution bugPost Views: 200 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nApache has released another Log4j version, 2.17.1 fixing a newly discovered remote code execution (RCE) vulnerability in 2.17.0, tracked as CVE-2021-44832.\nPrior to today, 2.17.0 was the most recent version of Log4j and deemed the safest release to upgrade to, but that advice has now evolved. Fifth Log4j CVE in under\u00a0a monthMass\u00a0exploitation of the original Log4Shell vulnerability\u00a0(CVE-2021-44228) by threat actors began around December 9th, when a PoC exploit\u00a0for it surfaced on GitHub.\n\nGiven Log4j\u2019s vast usage\u00a0in the majority of Java applications, Log4Shell soon\u00a0turned into a nightmare for enterprises and governments\u00a0worldwide.\n\nWhile the critical risk posed by the original Log4Shell exploit is\u00a0paramount, milder variants of the vulnerability\u00a0emerged in Log4j versions, including 2.15 and 2.16\u2014previously believed to be fully patched.\n\nBleepingComputer earlier reported on four different\u00a0CVEs impacting Log4j\u00a0and one discovered in the \u2018logback\u2019 framework.\u00a0After the discovery of a DoS flaw\u00a0in version 2.16, the advice had swiftly shifted towards upgrading to version 2.17.0, deemed the safest of all.\n\nBut now a fifth vulnerability\u2014an RCE flaw, tracked as CVE-2021-44832 has been discovered in 2.17.0, with a patch applied to the newest\u00a0release 2.17.1\u00a0which is out.\n\nRated \u2018Moderate\u2019 in severity and assigned a 6.6 score on the CVSS scale, the vulnerability stems from the lack of additional controls on JDNI access in log4j.\n\n\u201cJDBC Appender should use JndiManager when accessing JNDI. JNDI access should be controlled via a system property,\u201d states the issue description seen by BleepingComputer.\nSee Also: Complete Offensive Security and Ethical Hacking Course\n\u201cRelated to CVE-2021-44832 where an attacker with permission to modify the logging configuration file can construct a malicious configuration using a JDBC Appender with a data source referencing a JNDI URI which can execute remote code.\u201d\n\nCheckmarx security researcher Yaniv Nizry\u00a0claimed credit for reporting the vulnerability to Apache:\nStay tuned for a blogpost \ud83d\ude09 pic.twitter.com/D56WpVsuF3\n\n\u2014 Yaniv Nizry (@YNizry) December 28, 2021\nNizry\u2019s tweet quickly exploded in traffic, attracting remarks and memes\u00a0from security experts and \u2018victims\u2019 of the ongoing log4j-patching fatigue.\n\n\u201cI hope this is a joke, I\u00a0hope so much\u2026\u00a0#log4j,\u201d tweeted\u00a0one user in response.\n\n\u201cWe are LONG past the point where the only responsible thing to do is put up a giant flashing neon sign that reads \u2018LOG4J CANNOT BE FIXED, DO NOT USE IT FOR ANYTHING.'\u201d taunted\u00a0another.\n\nSecurity expert Kevin Beaumont labeled\u00a0the instance another \u201cfailed Log4j disclosure in motion\u201d\u00a0during the holidays.\nSee Also: Hackers start pushing malware in worldwide Log4Shell attacks Disclosed too soon?At the time of\u00a0Nizry\u2019s tweet,\u00a0BleepingComputer did not see an official advisory or memo\u00a0indicating the presence of\u00a0an RCE bug in log4j 2.17.\n\nThe tweet itself contained no details about the vulnerability or how it could\u00a0be exploited but, within minutes, led\u00a0a pack of security pros and netizens to start investigating the claim.\n\nDisclosing security vulnerabilities prematurely can lure threat actors to conduct malicious scanning and exploitation activities, as evident from the Log4Shell exploit leak of December 9th.\n\n \nMarc Rogers, VP of cybersecurity at Okta first disclosed the vul[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:23.180536Z"}, {"uuid": "ab63f2f4-4712-40f8-a9c0-59fb28e3dbf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/hacking_Attack/42876", "content": "Kali Linux Tutorials\nLog4J-Detector : Detects Log4J versions on your file-system within any application that are vulnerable to CVE-2021-44228 and CVE-2021-45046\n\nLog4J-Detector is a Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228\u00a0(CRITICAL),\u00a0CVE-2021-45046,\u00a0CVE-2021-45105, and\u00a0CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It is able to find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too!\n\nIntroduction\n\nCurrently reports\u00a0log4j-core\u00a0versions 2.3.2, 2.12.4, and 2.17.1 as _SAFE_, 2.3.1, 2.12.2, 2.12.3, 2.15.0, 2.16.0, and 2.17.0 as _OKAY_\u00a0and all other versions as _VULNERABLE_\u00a0(although it does report pre-2.0-beta9 as _POTENTIALLY_SAFE_). It reports older\u00a0log4j-1.x\u00a0versions as _OLD_.\n\nCan correctly detect log4j inside executable spring-boot jars/wars, dependencies blended into\u00a0uber jars, shaded jars, and even exploded jar files just sitting uncompressed on the file-system (aka *.class).\n\nWe currently maintain a collection of\u00a0log4j-samples\u00a0we use for testing.\n\nExample Usage\n\njava -jar log4j-detector-2021.12.29.jar ./samples\n\n\u2014 github.com/mergebase/log4j-detector v2021.12.29 (by mergebase.com) analyzing paths (could take a while).\n\u2014 Note: specify the \u2018\u2013verbose\u2019 flag to have every file examined printed to STDERR.\nfalse-hits/log4j-core-2.12.2.jar contains Log4J-2.x == 2.12.2 OKAY\nfalse-hits/log4j-core-2.12.3.jar contains Log4J-2.x == 2.12.3 OKAY\nfalse-hits/log4j-core-2.12.4.jar contains Log4J-2.x == 2.12.4 SAFE\nfalse-hits/log4j-core-2.15.0.jar contains Log4J-2.x == 2.15.0 OKAY\nfalse-hits/log4j-core-2.16.0.jar contains Log4J-2.x == 2.16.0 OKAY\nfalse-hits/log4j-core-2.17.0.jar contains Log4J-2.x == 2.17.0 OKAY\nfalse-hits/log4j-core-2.17.1.jar contains Log4J-2.x >= 2.17.1 SAFE\nfalse-hits/log4j-core-2.3.1.jar contains Log4J-2.x == 2.3.1 OKAY\nfalse-hits/log4j-core-2.3.2.jar contains Log4J-2.x == 2.3.2 SAFE\ntrue-hits/log4j-core-2.0-beta9.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.10.0.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.10.0.zip contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.11.0.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.11.1.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.11.2.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.12.0.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.12.1.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.14.0.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.14.1.jar contains Log4J-2.x >= 2.10.0 VULNERABLE\ntrue-hits/log4j-core-2.2.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.3.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.4.1.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.4.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE true-hits/log4j-core-2.9.1.jar contains Log4J-2.x >= 2.0-beta9 (< 2.10.0) VULNERABLE\nold-hits/log4j-1.1.3.jar contains Log4J-1.x <=OLD\nold-hits/log4j-1.2.17.jar contains Log4J-1.x <=OLD\nold-hits/log4j-core-2.0-beta2.jar contains Log4J-2.x <=POTENTIALLY_SAFE (Did you remove JndiLookup.class?)\n\nUnderstanding The Results\n\n_VULNERABLE_\u00a0-> You need to upgrade or remove this file.\n\n_OKAY_\u00a0-> We report this for Log4J versions 2.3.1, 2.12.2, 2.12.3, 2.15.0, 2.16.0, and 2.17.0. We recommend upgrading to 2.17.1.\n\n_SAFE_\u00a0-> We currently only report this for Log4J versions 2.3.2, 2.12.4, and 2.17.1 (and greater).\n\n_OLD_\u00a0-> You are safe from CVE-2021-44228, but should plan to upgrade because Log4J 1.2.x has been EOL for 7 years and has [...]", "creation_timestamp": "2026-09-02T01:02:15.520362Z"}, {"uuid": "b9ff8200-cee3-4dff-875f-afe6ec8aef3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/Hackme_news/449", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Apache Log4j \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Apache Software Foundation (ASF) \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0432\u0435\u0436\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Log4j, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0433\u0443\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u044f\u0442\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0432 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2021-44832 , \u0438\u043c\u0435\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 6,6 \u043f\u043e 10-\u0431\u0430\u043b\u043b\u044c\u043d\u043e\u0439 \u0448\u043a\u0430\u043b\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u043e\u0442 2.0-alpha7 \u0434\u043e 2.17.0, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c 2.3.2 \u0438 2.12.4. \u0425\u043e\u0442\u044f Log4j \u0432\u0435\u0440\u0441\u0438\u0438 1.x \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e Log4j 2.3.2 (\u0434\u043b\u044f Java 6), 2.12.4 (\u0434\u043b\u044f Java 7) \u0438\u043b\u0438 2.17.1 (\u0434\u043b\u044f Java 8 \u0438 \u043d\u043e\u0432\u0435\u0435). https://shly.link/Y3Ydy", "creation_timestamp": "2026-09-02T01:03:45.959361Z"}]}