Curated security research, vulnerabilities, advisories and tools for practitioners.

#log4j

Security coverage tagged log4j.

1.

Log4j FilteredObjectInputStream Bypass: Pre-auth RCE via MarshalledObject

vulnerability | Critical | 2026-08-26 15:44 | github.com | original ↗ | #rce | #public-poc | #java

2.

Hacking for €10k rewards and a secure open source ecosystem: Bug Bounty opportunities from the Sovereign Tech Fund

blog | 2024-09-04 12:13 | yeswehack.com | original ↗ | #bug-bounty | #open-source | #log4j

3.

Identity Attack Watch: August 2022

blog | 2022-08-31 21:32 | CVE-2022-30216 | semperis.com | original ↗ | #active-directory | #ransomware | #log4j

4.

Zero-Day Collaboration: Working With Imperva to Eliminate a Critical Exposure

vulnerability | 2022-01-11 00:00 | bishopfox.com | original ↗ | #cloud | #zero-day | #vulnerability

5.

Bugcrowd’s Log4j Response: Behind the Numbers

research | 2022-01-06 00:00 | bugcrowd.com | original ↗ | #rce | #vulnerability-management | #incident-response

6.

Log4Shell: Attack Evolution

blog | 2022-01-06 23:52 | hackerone.com | original ↗ | #rce | #log4j | #hackerone

7.

How Bishop Fox Has Been Identifying and Exploiting Log4shell

vulnerability | 2021-12-27 00:00 | CVE-2021-44228 | bishopfox.com | original ↗ | #pentesting | #exploitation | #vulnerability

8.

Identity Attack Watch: December 2021

blog | 2021-12-31 16:00 | semperis.com | original ↗ | #active-directory | #log4j | #patching

9.

Log4Shell, Ten Days On: YesWeHack’s Hunters Are at the Forefront of Securing Organisations

vulnerability | 2021-12-20 10:44 | yeswehack.com | original ↗ | #bug-bounty | #supply-chain | #zero-day

10.

Avoiding “Blindside” Cloud Security Attacks

blog | 2021-12-21 00:00 | bugcrowd.com | original ↗ | #cloud | #supply-chain | #cloud-security

11.

Log4j Vulnerability Activity on the HackerOne Platform

vulnerability | 2021-12-13 19:50 | CVE-2021-45046 | hackerone.com | original ↗ | #bug-bounty | #zero-day | #vulnerability-management

12.

Living with and Learning from Log4Shell

blog | 2021-12-16 00:00 | bugcrowd.com | original ↗ | #supply-chain | #incident-response | #waf