Skip to content
New

DeepSeek V4.1 Flash free for 7 days: 10M tokens a day after any top-up. Until Nov 30.

How it works
Create account

A research bench that cites its sources.

Attach files, ask a question and get an answer where each claim points to a page, a line, an offset or an external source.

Create accountAll models
SpecterhighCVE

Is CVE-2021-44228 exploited in the wild? What should we check first on our own Java services?

NotHoly

Thought for 8s

Tools2

  • cve_lookupCVE-2021-44228
  • advisory_lookupMaven/org.apache.logging.log4j:log4j-core

Is CVE-2021-44228 (Log4Shell) exploited in the wild?

Yes, very much so — this is about as confirmed as wild exploitation gets:

  • CISA KEV: Listed since 2021-12-10, with remediation due by 2021-12-24, and it is flagged as known to be used in ransomware campaigns 2.
  • EPSS: 0.99999 (top percentile) — essentially the maximum predicted exploitation probability 3.
  • CVSS: 10.0 CRITICAL, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H — network-exploitable, no privileges or user interaction, full compromise 1.
Research chat. Files are never executed. CVE and web answers come with their sources.

What the chat does with your question

  • Files are never executed

    PDF, DOCX, archives, ELF, PE, APK, JavaScript and more get static analysis, built for a disposable container with no network that is not switched on in production yet. Nothing you upload is executed.

  • Web, CVE and package data

    The chat searches the web, reads public pages through a guarded fetcher, and looks up CVEs and package advisories.

  • Evidence beside the answer

    Citations open in a side panel, tagged as observed in a file, external source or generated by the model.

  • Resumes where it was

    Answers run on the server. Close the tab or reload the page and the answer keeps streaming from where it was.

  • Saved encrypted, or not at all

    Conversations are stored encrypted with a key per conversation. Ephemeral chats save no conversation or messages.

  • Projects per engagement

    Group conversations with their instructions and scope notes. Notes guide the model; they do not grant authorization.

Ask anything your scope allows.

Create an account, add credits from $10 and ask the first question in the chat or the terminal.

Create accountSee pricing
  1. 1/3

    Create the account

    Individual or company. You can switch to a company later without losing balance or keys.

    IndividualCompany
  2. 2/3

    Add credits

    By card, from $10. Pay per token, no subscription.

    $10.00minimum deposit
  3. 3/3

    Ask

    In the chat, or install the CLI and run notholy login in your terminal.

    $ notholy login