{"uuid": "894d5eb4-8544-468c-9bd1-990d4c611d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44228", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/95957", "content": "les in data/vulnerability-tables-cron/output/ after the script completed. It needs several minutes. RunYou can either wait for cron to execute the download script on a schedule.\nAlternatively you can execute the download script manually by running: docker exec -it vulnerability-tables-cron bash /opt/scripts/download.sh Container DescriptionThere are three docker containers.\nThe cron container downloads the information once a week (Monday 06:00) and stores the files in the output directory.\nIt uses curl and wget to download files. jq is used work with json.\n\nThe filebeat container reads the json files and forwards it to the logstash container.\nThe logstash container can be used to send to a OpenSearch instance, upload it to Azure Log Analytics, or other supported outputs.\nFilebeat and logstash are optional and are only included for continence. Example output filesSeveral output files will be generated. Here is an estimate: 316K   CISA_known_exploited.csv\n452K   CISA_known_exploited.json\n50M    CVSS.csv\n179M   CVSS.json\n206M   CVE.json\n56M    CVE.csv\n6.7M   EPSS.csv\n12M    EPSS.json\n49M    database.sqlite You can expect this information for every CVE: grep -i 'CVE-2021-44228' CVE.json | jq\n{\n  \"CVE\": \"CVE-2021-44228\",\n  \"CVSS2_accessComplexity\": \"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\n  \"CVSS2_accessVector\": \"NETWORK\",\n  \"CVSS2_authentication\": \"MEDIUM\",\n  \"CVSS2_availabilityImpact\": \"NONE\",\n  \"CVSS2_baseScore\": \"COMPLETE\",\n  \"CVSS2_baseSeverity\": \"COMPLETE\",\n  \"CVSS2_confidentialityImpact\": \"COMPLETE\",\n  \"CVSS2_exploitabilityScore\": \"9.3\",\n  \"CVSS2_impactScore\": \"null\",\n  \"CVSS2_integrityImpact\": \"8.6\",\n  \"CVSS2_vectorString\": \"10\",\n  \"CVSS3_attackComplexity\": \"null\",\n  \"CVSS3_attackVector\": \"null\",\n  \"CVSS3_availabilityImpact\": \"null\",\n  \"CVSS3_baseScore\": \"null\",\n  \"CVSS3_baseSeverity\": \"null\",\n  \"CVSS3_confidentialityImpact\": \"null\",\n  \"CVSS3_exploitabilityScore\": \"null\",\n  \"CVSS3_impactScore\": \"null\",\n  \"CVSS3_integrityImpact\": \"null\",\n  \"CVSS3_privilegesRequired\": \"null\",\n  \"CVSS3_scope\": \"null\",\n  \"CVSS3_userInteraction\": \"null\",\n  \"CVSS3_vectorString\": \"null\",\n  \"CVSS3_acInsufInfo\": \"null\",\n  \"CVSS3_obtainAllPrivilege\": \"null\",\n  \"CVSS3_obtainUserPrivilege\": \"null\",\n  \"CVSS3_obtainOtherPrivilege\": \"null\",\n  \"CVSS3_userInteractionRequired\": \"null\",\n  \"EPSS\": \"0.97095\",\n  \"EPSS_Percentile\": \"0.99998\",\n  \"CISA_dateAdded\": \"2021-12-10\",\n  \"CISA_RequiredAction\": \"For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.\"\n} Links* https://www.first.org/epss/user-guide\n* https://www.cisa.gov/known-exploited-vulnerabilities-catalog\n* https://nvd.nist.gov/developers/vulnerabilities Click Here To Download", "creation_timestamp": "2026-09-04T19:00:05.170696Z"}