dOuOb bouob

Security Advisories / Bulletins / vendors Responses linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

If you want to add a link, comment or send it to me
Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Royce Williams list sorted by vendors responses Royce List
Very detailed list NCSC-NL
The list maintained by U.S. Cybersecurity and Infrastructure Security Agency: CISA List

	// This worker is designed to be able to neatly handle MTA-STS policies for multiple domains.

	// Make a new worker with this script and add your domains to the stsPolicies dict like the example.
	// Add a DNS AAAA record for mta-sts.yourdomain.com pointing to 100:: and set to proxied,
	// then add a workers route for mta-sts.yourdomain.com/* pointing to this worker.

	// You should probably also create a Cloudflare configuration rule disabling Browser Integrity Check for the mta-sts subdomain
	// to ensure MTAs aren't blocked from retrieving your policy.

	// You'll still need to manually add the appropriate _mta-sts.yourdomain.com TXT record to enable the policy,

	#!/usr/bin/env expect

	# Login into PTT via SSH.
	# Combine crontab with this script so you don't forget to login PTT everyday.

	# Usage: /bin/bash -c ${FILE_PATH_OF_THIS_SCRIPT}

	# Example in crontab:
	# ptt auto login, every day at 12:00 PM
	# 0 12 * * * /bin/bash -c ${ABSOLUTE_FILE_PATH_OF_THIS_SCRIPT}