Linux Distros Unpatched Vulnerability : CVE-2026-112368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary documen...

CVE-2026-107325

A flaw was found in the MongoDB Go Driver due to improper validation of Binary JSON BSON array lengths. An unauthenticated remote attacker can exploit this vulnerability by supplying specially crafted BSON array data to an affected application. When the application validates this malformed input,...

CVE-2026-107324

A flaw was found in the MongoDB Go Driver. An unauthenticated attacker can cause a Denial of Service DoS by supplying a malformed Binary JSON BSON document to an affected application. Due to an integer overflow during BSON value-length processing, validating or accessing the malformed input...

CVE-2026-112368

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

CVE-2026-112368 Unbounded Recursion in phongo_bson_visit_document/visit_array:

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

EUVD-2026-104414

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

CVE-2026-112368

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

CVE-2026-112368

The MongoDB PHP driver contains an uncontrolled recursion weakness (CWE-674) within its BSON decoding logic, specifically in the phongo_bson_visit_document/visit_array functions. An unauthenticated attacker can provide crafted binary document data to the decoder to exhaust the process stack. This...

Unbounded Recursion in phongo_bson_visit_document/visit_array:

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb remote code execution | cve-2022-22980 poc Description A Spring Data MongoDB application is vulnerable to SpEL injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value...

CVE-2022-22980

CVE-2022-22980 Spring Data MongoDB SpEL Expression Injection MongoDB is a document-oriented NoSQL database with the scalable and flexible that used for high volume data storage. Instead of using tables and rows as in the traditional relational databases, MongoDB makes use of collections and...

PT-2026-117473

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure 📖 Full Documentation • 🔬 Technical Analysis • ⚡ Quick Commands 🎯 CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...

Spring-Data-Mongodb-Demo

Spring-Data-Mongodb-Demo CVE-2022-22980 Environment...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 vulnerability environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

Iran-War-Media

Iran War Media Monitor Read the Full Deep Dive Introduction This project monitors news coverage of the war between Iran, Israel, and the United States. You can use this repository to: 1. Create a corpus of media articles in English 2. Identify authors and news media outlets to keep track of who...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with CyberTechAjju 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...

CVE-2025-14847

🍃 CVE-2025-14847 — MongoBleed 🍃 MongoBleed — MongoDB Server Memory Disclosure Vulnerability 🍃 Overview CVE-2025-14847, known as MongoBleed , is a security vulnerability affecting MongoDB Server's handling of compressed network messages. Under vulnerable conditions, an unauthenticated remote...

Linux Distros Unpatched Vulnerability : CVE-2026-104004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server proce...

Linux Distros Unpatched Vulnerability : CVE-2026-96299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in MongoDB mongos the sharded cluster router where an authenticated user with readWrite privileges could crash the mongos proces...