826 matches found
CVE-2025-14847
CVE-2025-14847 CVE-2025-14847 μ·¨μ½μ νκ²½ λ° poc ν¬ν¨ https://jira.mongodb.org/browse/SERVER-115508 μμ½ μ΄λ CVE-2025-14847μ ν΄κ²°νκΈ° μν μ€λν μμ μ λλ€. 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32 λλ 4.4.30μΌλ‘ μ κ·Έλ μ΄λνμΈμ. λ¬Έμ μ€λͺ λ° μν₯ μλ²μ zlib ꡬνμ λν ν΄λΌμ΄μΈνΈ μΈ‘ μ΅μ€νλ‘μμ ν΅ν΄ μλ²μ μΈμ¦νμ§ μκ³ λ μ΄κΈ°νλμ§ μμ ν λ©λͺ¨λ¦¬λ₯Ό λ°νλ°μ μ μμ΅λλ€. μμ λ λ²μ μΌλ‘ κ°λ₯ν ν 빨리...
mongoaudit
mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: root@kitploit: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install...
CVE-2026-89099
A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...
CVE-2026-89099
A race condition in the document value layer of MongoDB Server allows concurrent server threads to operate on the same internal memory without proper synchronization, leading to memory corruption . An authenticated user holding ordinary read-write privileges can trigger this over the normal clien...
Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption
A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...
CVE-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption
A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...
CVE-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption
A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...
EUVD-2026-76165
A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...
PT-2026-90007
A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...
CVE-2025-14847-MongoBleed-Exploit
CVE-2025-14847 - MongoBleed π¨βπ» μμ±μ: Furkan KAYAPINAR @FurkanKAYAPINAR β οΈ κ΅μ‘ λͺ©μ μΌλ‘λ§ μ¬μ©νμΈμ MongoDB μλ²μ μ¬κ°ν μΈμ¦λμ§ μμ λ©λͺ¨λ¦¬ λμ μ·¨μ½μ μ λν μ€μ΅ νκ²½ λ° μ΅μ€νλ‘μ μ€ν¬λ¦½νΈμ λλ€. π λͺ©μ°¨ μ·¨μ½μ κ°μ μν₯λ°λ λ²μ μ€μΉ μ€μ΅ νκ²½ μ¬μ©λ² μ‘°μΉ λ²μ κ³ μ§ π΄ μ·¨μ½μ κ°μ CVE-2025-14847 MongoBleed μ MongoDB μλ²μ zlib μμΆ μ²λ¦¬μμ λ°μνλ μ¬κ°ν μΈμ¦λμ§ μμ λ©λͺ¨λ¦¬ λμ μ·¨μ½μ μ λλ€. κΈ°μ μ μΈλΆμ¬ν μ΄...
CVE-2025-14847-MongoBleed
CVE-2025-14847 MongoBleed MongoDB zlib μμΆ λ©λͺ¨λ¦¬ λ ΈμΆ β λΆμ, νμ§ λ° λμ κ°μ CVE-2025-14847, μΌλ°μ μΌλ‘ MongoBleed λ‘ μλ €μ Έ μμΌλ©°, :contentReferenceoaicite:0index=0 Server μ μν₯μ λ―ΈμΉλ λμ μ¬κ°λμ μ 보 λ ΈμΆ μ·¨μ½μ μ λλ€. μ΄ μ·¨μ½μ μ μ격μ μΈμ¦λμ§ μμ 곡격μκ° zlib μμΆ λ€νΈμν¬ λ©μμ§λ₯Ό λΆμ μ νκ² μ²λ¦¬νλ κ²μ μ μ©νμ¬ μλ² λ©λͺ¨λ¦¬μμ λ―Όκ°ν λ°μ΄ν°λ₯Ό μ μΆν μ μκ² ν©λλ€. μ΄ λ¬Έμ λ μ€μ νκ²½μμ νλ°ν μ μ©λ...
CVE-2026-82074
MongoDB Server contains an incorrect authorization vulnerability in th...
CVE-2026-82073
A security issue in the MongoDB Server aggregation framework allows an...
UBUNTU-CVE-2026-82070
A security issue in MongoDB Servers diagnostic reporting interface al...
UBUNTU-CVE-2026-82069
A security issue in MongoDB Servers query statistics serialization on...
UBUNTU-CVE-2026-82073
A security issue in the MongoDB Server aggregation framework allows an...
CVE-2026-82069
A security issue in MongoDB Servers query statistics serialization on...
UBUNTU-CVE-2026-82068
A security issue in MongoDB Server allows an authenticated user with w...
CVE-2026-82065
A security issue in the MongoDB Servers storage engine integration la...
Linux Distros Unpatched Vulnerability : CVE-2026-82062
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by...