Curated security research, vulnerabilities, advisories and tools for practitioners.

#log4j

Security coverage tagged log4j.

1.

Log4j FilteredObjectInputStream Bypass: Pre-auth RCE via MarshalledObject

vulnerability | Critical | 2026-08-26 15:44 | github.com | Original ↗ | .md | #rce | #public-poc | #java

2.

Hacking for €10k rewards and a secure open source ecosystem: Bug Bounty opportunities from the Sovereign Tech Fund

blog | 2024-09-04 12:13 | yeswehack.com | Original ↗ | .md | #bug-bounty | #open-source | #log4j

3.

Identity Attack Watch: August 2022

blog | 2022-08-31 21:32 | CVE-2022-30216 | semperis.com | Original ↗ | .md | #active-directory | #ransomware | #log4j

4.

The Log4Shell vulnerability may have been exploited since August 2021

vulnerability | 2022-01-27 16:54 | CVE-2021-44228 | blog.viettelcybersecurity.com | Original ↗ | .md | #cloud | #threat-intelligence | #log4j

5.

Zero-Day Collaboration: Working With Imperva to Eliminate a Critical Exposure

vulnerability | 2022-01-11 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #zero-day | #vulnerability

6.

Bugcrowd’s Log4j Response: Behind the Numbers

research | 2022-01-06 00:00 | bugcrowd.com | Original ↗ | .md | #rce | #vulnerability-management | #incident-response

7.

Log4Shell: Attack Evolution

blog | 2022-01-06 23:52 | hackerone.com | Original ↗ | .md | #rce | #log4j | #hackerone

8.

Identity Attack Watch: December 2021

blog | 2021-12-31 16:00 | semperis.com | Original ↗ | .md | #active-directory | #log4j | #patching

9.

Best of NetSPI: Top Cybersecurity Blogs, Resources, Webinars, and Podcasts of 2021

blog | 2021-12-28 00:00 | netspi.com | Original ↗ | .md | #cloud | #appsec | #log4j

10.

Log4Shell, Ten Days On: YesWeHack’s Hunters Are at the Forefront of Securing Organisations

vulnerability | 2021-12-20 10:44 | yeswehack.com | Original ↗ | .md | #bug-bounty | #supply-chain | #zero-day

11.

Avoiding “Blindside” Cloud Security Attacks

blog | 2021-12-21 00:00 | bugcrowd.com | Original ↗ | .md | #cloud | #supply-chain | #cloud-security

12.

5 Apache Log4j Discovery Tips

blog | 2021-12-21 00:00 | netspi.com | Original ↗ | .md | #log4j | #nmap | #vulnerability-scanning

13.

Log4j Vulnerability Activity on the HackerOne Platform

vulnerability | 2021-12-13 19:50 | CVE-2021-45046 | hackerone.com | Original ↗ | .md | #bug-bounty | #zero-day | #vulnerability-management

14.

Living with and Learning from Log4Shell

blog | 2021-12-16 00:00 | bugcrowd.com | Original ↗ | .md | #supply-chain | #incident-response | #waf