CVE-2020-35488

This repository contains a functional Python script that exploits CVE-2020-35488, a deserialization vulnerability in NXLOG Community Edition 2.10.2150. The exploit sends a crafted syslog message to trigger a denial-of-service (DoS) by attempting to create a directory with an invalid name (e.g., '..' or 'CON').

This repository contains a functional exploit PoC for CVE-2020-35488, targeting NXlog CE on Ubuntu 18.04. It automates the deployment of a vulnerable NXlog instance and clones a separate exploit repository to demonstrate the vulnerability.

This Python script exploits CVE-2020-35488, a DoS vulnerability in Nxlog Community Edition 2.10.2150 by sending a malformed syslog message. The exploit uses Scapy to craft and send a UDP packet with a specific payload that triggers the vulnerability.