steamer

Steamer Importa, gestiona y busca volcados públicos. ¿Tienes cantidades masivas de CSV, .sql, .txt que contengan credenciales, contraseñas y hashes? ¡Usa Steamer para gestionarlos! Cárgalos en una base de datos MongoDB, y ya sea usa la consola directamente, o simplemente usa la práctica interfaz...

xvna

XVNA Aplicación Node Extremadamente Vulnerable XVNA es una aplicación node extremadamente vulnerable codificada en NodejsExpressjs/MongoDB que ayuda a los entusiastas de la seguridad a aprender seguridad en aplicaciones. No se recomienda alojar esta aplicación en línea ya que está diseñada para s...

Linux Distros Unpatched Vulnerability : CVE-2026-107324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON...

Linux Distros Unpatched Vulnerability : CVE-2026-106432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4...

Linux Distros Unpatched Vulnerability : CVE-2026-107325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls...

Linux Distros Unpatched Vulnerability : CVE-2026-106433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document...

Linux Distros Unpatched Vulnerability : CVE-2026-106436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an...

Linux Distros Unpatched Vulnerability : CVE-2026-106431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at ...

Linux Distros Unpatched Vulnerability : CVE-2026-106429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This ca...

Linux Distros Unpatched Vulnerability : CVE-2026-106428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed...

Linux Distros Unpatched Vulnerability : CVE-2026-106438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over- precision inputs containing leading zeros instead of...

Linux Distros Unpatched Vulnerability : CVE-2026-106430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driv...

Linux Distros Unpatched Vulnerability : CVE-2026-106437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can...

Linux Distros Unpatched Vulnerability : CVE-2026-106434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a decryption error. An...

CVE-2026-106428

A flaw was found in the MongoDB C Driver. An out-of-bounds read occurs when the driver parses malformed responses during Salted Challenge Response Authentication Mechanism SCRAM authentication. A malicious server or network intermediary can exploit this flaw by sending a crafted response before...

CVE-2026-106438

A flaw was found in the MongoDB C Driver. This vulnerability allows an attacker to compromise data integrity by causing an application to store or process incorrect numeric values. Due to a calculation error during Decimal128 string parsing, the driver accepts certain over-precision numbers with...

CVE-2026-106434

A flaw was found in MongoDB libmongocrypt. When processing an unrecognized encrypted payload during explicit decryption, the library returns the data unchanged instead of generating a decryption error. An attacker capable of modifying stored encrypted fields, such as a compromised database server...

CVE-2026-106432

A flaw was found in the MongoDB PHP Driver. In non-default runtime configurations permitting multi-gigabyte values, the BSON Binary JSON encoder converts large string lengths without validation, triggering an integer wrap and subsequent heap-based buffer overflow when encoding strings near four...

CVE-2026-106436

A flaw was found in the MongoDB PHP Driver. The Binary JSON BSON encoder fails to properly check return values when data exceeds the library size limit, leaving the encoder in an invalid state. An unauthenticated remote attacker who can induce the application to encode an unusually large data...

CVE-2026-106429

creationtimestamp| type| source ---|---|--- 2026-10-09 03:51:17+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-mongodb 2026-10-12 01:50:11+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-mongodb-1...