psa-2026-00043-recovery

psa-2026-00043-recovery 从伪装成勒索软件的擦除器（wiper）攻击中恢复，该攻击针对暴露于互联网的 Proxmox 基础设施（PSA-2026-00043-1 / CVE-2023-54391 ）。 攻击者擦除了客户机并破坏了文件系统。根据客户机的类型，有两条恢复路径： 数据库客户机 — 从原始 WiredTiger 页面中雕刻出 BSON 文档 应用主机 — 从受损文件系统中雕刻文件（nginx、systemd 单元、环境变量、应用根目录） 以下是工具和方法论，经过泛化处理，以便对处于相同境况的任何人都有用。对源数据只读，CC0...

CVE-2025-14847-MongoDB

CVE-2025-14847-MongoDB 内存泄露研究工具 概述 本仓库包含一个教育性研究工具，用于演示 CVE-2025-14847 背后的内存安全概念——这是一个在 MongoDB 的 BSON 解压实现中发现的严重漏洞。该工具模拟了解压过程中不恰当的边界检查如何导致内存泄露。 演示的关键概念： BSON 协议解析与验证 内存边界检查失败 安全与非安全的解压实现对比 错误消息的净化处理 重要法律声明：本工具仅供教育用途。仅可用于你拥有或已获得明确书面许可的系统。未经授权的测试可能违反法律，包括《计算机欺诈与滥用法案》等。 目的 本工具演示了： 边界验证失败如何导致内存泄露...

CVE-2025-61301

CVE-2025-61301 - CAPEv2: 通过递归进程分叉实现的分析拒绝 描述 一个高严重性 的分析拒绝漏洞影响CAPEv2（提交52e4b43，2025-05-17）中的reporting/mongodb.py和reporting/jsondump.py，允许可以提交样本的攻击者通过生成深度嵌套或过大的行为数据来触发MongoDB BSON限制或orjson递归错误，从而导致行为分析报告不完整或缺失，当样本在沙箱中执行时。 CVSS评分 CVSS v3.1: 7.5 高 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 作者/研究...

CVE-2025-14847---MongoBleed

Mongobleed CVE-2025-14847 – Go 概念验证（PoC） 本仓库包含针对 CVE-2025-14847 的 Go 概念验证漏洞利用程序，该漏洞是 MongoDB 的一个内存泄露漏洞，通常被称为 Mongobleed 。 该 PoC 是 Joe Desimone 原始 Python 漏洞利用程序的 Go 重实现，可在此获取： https://github.com/joe-desimone/mongobleed 该漏洞利用程序利用 zlib 解压和 BSON 解析缺陷，从存在漏洞的 MongoDB 服务器中泄露未初始化内存。 阅读博客文章 -...

CVE-2026-82058

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

EUVD-2026-72945

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

OPENSUSE-SU-2026:11706-1 bson-devel-2.5.2-1.1 on GA media

These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-14847

mongoExploit CVE-2025-14847 mongoExploit 是一个针对 CVE-2025-14847 的概念验证（PoC）利用工具，该漏洞是 MongoDB 中的一个内存泄漏漏洞。 该工具利用 zlib 解压缩中的缺陷，通过 BSON 字段名泄漏服务器内存。通过构造一个包含膨胀文档长度的 BSON 负载，它会强制服务器从泄漏的内存中读取字段名，直到遇到空字节为止。 ⚠️ 免责声明 此工具仅用于教育和授权的安全测试目的。 作者不对该工具的任何滥用行为负责。请勿对未经明确授权的系统使用此工具。 功能特性 扫描一段偏移范围以泄漏内存片段。 将泄漏的数据保存为二进制文件。...

Linux Distros Unpatched Vulnerability : CVE-2026-84966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly...

Linux Distros Unpatched Vulnerability : CVE-2026-84963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently...

UBUNTU-CVE-2026-84965

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently larg...

Linux Distros Unpatched Vulnerability : CVE-2026-84969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a...

Linux Distros Unpatched Vulnerability : CVE-2026-84968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a...

CVE-2026-84970

A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...

UBUNTU-CVE-2026-84969

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...

Linux Distros Unpatched Vulnerability : CVE-2026-84965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operati...

Linux Distros Unpatched Vulnerability : CVE-2026-84970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding...

CVE-2026-84969

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...

UBUNTU-CVE-2026-84963

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticat...