125 matches found
Python-MikrotikLoginExploit
Mikrotik Login Exploit PoC Proof of Concept della vulnerabilità mikrotik CVE-2018-14847 soprattutto su winbox, funziona leggendo la password direttamente da RouterOS sulla porta predefinita 8291. Originale di: https://github.com/BigNerd95/ Requisiti Python 3+ Installazione su Linux root@kitploit:...
mongobleed
mongobleed CVE-2025-14847 Exploit für die Offenlegung von MongoDB-Heap-Speicher durch Puffer-Overread bei OPCOMPRESSED. Verwendung root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017...
mikrotik-beast
Mikrotik Beast tool Strumento di sfruttamento di massa per MikroTik WinBox, CVE-2018-14847 Questo strumento ti consente di scansionare un intervallo di host di rete CIDR contro l'exploit winbox CVE-2018-14847. Utilizzo $ python3 mikrotikbeast.py Esempi di input accettati Esempio 1: '192.168.5.0/2...
WinboxExploit
WinboxExploit Implementação em C do BasuCert/WinboxPoC Vulnerabilidade Crítica do Winbox CVE-2018-14847 Apenas reimplementei uma solução de https://github.com/BasuCert/WinboxPoC...
mongobleedburp
Estensione Burp MongoBleed Estensione di Burp Suite per rilevare CVE-2025-14847 MongoBleed tramite test di leak manuali da una scheda UI dedicata. Repository: https://github.com/j0lt-github/mongobleedburp Versione attuale: 1.1.0 Funzionalità Scheda UI per test manuali con host/porta e offset...
winboxPOC
WinboxExploit Questa è una prova di concetto della vulnerabilità critica WinBox CVE-2018-14847 che consente la lettura arbitraria di file contenenti password in chiaro. Requisiti Python 3+ Questo script NON funzionerà con Python 2.x o versioni inferiori. Come Usare Lo script è semplice e si usa c...
MongoBleed-CVE-2025-14847-Fully-Automated-scanner
Questo repository non contiene un README...
CLEANSTART-2026-QL45485 Security fixes for CVE-2025-14847, CVE-2025-58181, CVE-2025-61727, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.0.30-r0, 7.0.30-r1, 7.0.31-r0, 7.0.32-r0, 8.2.1-r1
Multiple security vulnerabilities affect the mongodb package. These issues are resolved in later releases. See references for individual vulnerability details...
Security Bulletin: Optional Mongo DB images in IBM Automation Decision Services 24.0.x are affected by CVE-2025-14847
Summary CVE-2025-14847 has been reported for the Mongo DB images shipped with IBM Automation Decision Services 24.0.0 and 24.0.1.. An updated version of the image is available. Vulnerability Details CVEID:CVE-2025-14847 DESCRIPTION: Mismatched length fields in Zlib compressed protocol headers may...
Security Bulletin: Optional Mongo DB images in IBM Cloud Pak for Business Automation 24.0.x are affected by CVE-2025-14847
Summary CVE-2025-14847 has been reported for the Mongo DB images shipped with IBM Cloud Pak for Business Automation 24.0.x. An updated version of the image is available. Vulnerability Details CVEID:CVE-2025-14847 DESCRIPTION: Mismatched length fields in Zlib compressed protocol headers may allow ...
Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Handling of Length Parameter Inconsistency (CVE-2025-14847)
Summary There is a vulnerability in MongoDB Server used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-14847. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2025-14847 DESCRIPTION: Mismatched length fields in Zlib compressed protocol headers may allow a read of...
Security Bulletin: Vulnerabilities in MongoDB Server might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Zlib which use by MongoDB server. Vulnerability include mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client as described by t...
Security Bulletin: IBM Sterling Transformation Extender is affected by MongoBleed security vulnerability
Summary IBM Sterling Transformation Extender uses MongoDB and is affected by MongoBleed security vulnerability CVE-2025-14847. Vulnerability Details CVEID:CVE-2025-14847 DESCRIPTION: Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an...
Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb
MongoBleed CVE-2025-14847 Scanner and Exploitation Toolkit...
Splunk Enterprise 9.2.0 < 9.2.12, 9.3.0 < 9.3.9, 9.4.0 < 9.4.8, 10.0.0 < 10.0.3 (SVD-2026-0101)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0101 advisory. - Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an...
About Information Disclosure – MongoDB “MongoBleed” (CVE-2025-14847) vulnerability
About Information Disclosure - MongoDB "MongoBleed" CVE-2025-14847 vulnerability. MongoDB is a popular NoSQL database that stores data as JSON-like documents with an optional schema. The project is licensed under the SSPL. A flaw in MongoDB’s handling of the data length parameter during zlib...
Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb
MongoBleed-Pro ☠️ Advanced MongoDB Memory L...
Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb
🛠️ mongobleed - Easy Download of MongoDB Exploit Tool 📥 Do...