Back to the CVE list
CVE-2021-44228 CISA KEV · Actively exploitedLinked to ransomware

Improper input validation in Apache Log4j

CVSS score

10.0

EPSS probability

%100.0

Risk score

20.0

Published

4 y ago

OverviewPublic Exploits (30)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
fullhunt/log4j-scan
GitHub

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228 (★2884)

Public PoCSource updated: 22.05.2022 01:26:13
G
kozmer/log4j-shell-poc
GitHub

A Proof-Of-Concept for the CVE-2021-44228 vulnerability. (★1362)

Public PoCSource updated: 20.05.2022 22:23:21
G
logpresso/CVE-2021-44228-Scanner
GitHub

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228 (★815)

Public PoCSource updated: 18.05.2022 23:16:36
G
Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
GitHub

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks (★759)

Public PoCSource updated: 19.05.2022 19:41:55
G
corretto/hotpatch-for-apache-log4j2
GitHub

An agent to hotpatch the log4j RCE from CVE-2021-44228. (★488)

Public PoCSource updated: 17.05.2022 23:04:55
G
jas502n/Log4j2-CVE-2021-44228
GitHub

Remote Code Injection In Log4j (★366)

Public PoCSource updated: 20.05.2022 19:03:22
G
CERTCC/CVE-2021-44228_scanner
GitHub

Scanners for Jar files that may be vulnerable to CVE-2021-44228 (★339)

Public PoCSource updated: 13.05.2022 22:22:47
G
0xInfection/LogMePwn
GitHub

A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability. (★313)

Public PoCSource updated: 19.05.2022 00:08:05
E
AD Manager Plus 7122 - Remote Code Execution (RCE)
Exploit-DB

AD Manager Plus 7122 - Remote Code Execution (RCE)

Exploit referenceSource updated: 01.04.2023 00:00:00
E
Apache Log4j2 2.14.1 - Information Disclosure
Exploit-DB

Apache Log4j2 2.14.1 - Information Disclosure

Exploit referenceSource updated: 14.12.2021 00:00:00
E
Apache Log4j 2 - Remote Code Execution (RCE)
Exploit-DB

Apache Log4j 2 - Remote Code Execution (RCE)

Exploit referenceSource updated: 14.12.2021 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44228.yaml
Nuclei

Nuclei: Apache Log4j2 Remote Code Injection

Exploit reference
N
http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html
NVD reference

http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html

Exploit reference
N
http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html
NVD reference

http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html

Exploit reference
N
http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html
NVD reference

http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html

Exploit reference
N
http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html
NVD reference

http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html

Exploit reference
N
http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html
NVD reference

http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html

Exploit reference
N
http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html
NVD reference

http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html

Exploit reference
N
http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html
NVD reference

http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html

Exploit reference
N
http://seclists.org/fulldisclosure/2022/Dec/2
NVD reference

http://seclists.org/fulldisclosure/2022/Dec/2

Exploit reference
G
corelight/cve-2021-44228
GitHub

Log4j Exploit Detection Logic for Zeek

Public PoC
G
CyberCTF/vulhub-log4j-cve-2021-44228
GitHub

Vulhub log4j/CVE-2021-44228: Log4Shell in Apache Solr 8.11.0, run with Isoloom

Public PoC
G
hoangvvthu/CVE-2021-44228-Log4Shell-Lab
GitHub

hoangvvthu/CVE-2021-44228-Log4Shell-Lab

Public PoC
G
Muskann02/cve-2021-44228-lab
GitHub

Docker-based educational lab for CVE-2021-44228 (Log4Shell)

Public PoC
G
nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228
GitHub

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228

Exploit reference
G
osflaky/exp-logpresso-CVE-2021-44228-Scanner
GitHub

snapshot of logpresso/CVE-2021-44228-Scanner at a pinned commit, for cross platform ci legs

Public PoC
G
ResoluteRacoons/log4-Java-logging-poc
GitHub

a proof of concept for the apache log4j Java logging library (CVE-2021-44228 vulnerability)

Public PoC
G
rh-rahulshetty/log4shell-CVE-2021-44228
GitHub

rh-rahulshetty/log4shell-CVE-2021-44228

Public PoC
N
https://twitter.com/kurtseifried/status/1469345530182455296
NVD reference

https://twitter.com/kurtseifried/status/1469345530182455296

Exploit reference
N
https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html
NVD reference

https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-44228"