CVE-2025-51495

Je souhaite signaler une vulnérabilité de sécurité identifiée dans la dernière version de Mongoose v7.17. Le problème réside dans le module WebSocket, plus précisément dans la fonction mgwscb responsable du traitement des trames WebSocket entrantes. La fonction est vulnérable à un débordement...

Mongoose - NoSQL Injection

NoSQL injection vulnerability in Mongoose 8.9.5 affecting the populate function's match option. This vulnerability exists due to an incomplete fix for CVE-2024-53900. While direct $where injection is blocked, attackers can bypass this protection by nesting $where operators within logical operator...

Mongoose < 8.8.3 - Remote Code Execution

Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. id: CVE-2024-53900 info: name: Mongoose 8.8.3 - Remote Code Execution author: h4mg severity: critical description: | Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. impact...

0xsp-Mongoose

Soutenez le projet pour un développement continu ETH 0xf340c15c5e669a4ababab856e9f2bccd659d6e42 0xsp Mongoose RED pour Windows Version actuelle 2.2.0 La version rouge de 0xsp mongoose est fournie pour répondre à vos besoins lors de simulations de cybersécurité. En utilisant cette version, vous...

CVE-2024-53900

CTF-задача - Mongoose RCE CVE-2024-53900 Обзор задачи Эта задача Capture The Flag CTF основана на CVE-2024-53900, уязвимости в Mongoose, которая позволяет выполнить удаленный код RCE из-за неправильного использования оператора $where в запросах MongoDB. Ваша цель — использовать эту уязвимость и...

CVE-2026-73256

A flaw was found in Mongoose. A remote, unauthenticated attacker can achieve unauthorized access or bypass security controls through HTTP request smuggling. Due to an error in protocol version validation, Mongoose fails to identify HTTP/1.0 requests and incorrectly processes chunked transfer...

CVE-2026-73257

A flaw was found in Mongoose. When processing incoming requests containing both Content-Length and Transfer-Encoding headers, the server accepts both headers instead of rejecting the malformed request. In environments where an upstream proxy processes request boundaries differently, a remote,...

CVE-2026-73251

A flaw was found in Mongoose. When configured with a Certificate Authority CA bundle, the built-in Transport Layer Security TLS implementation matches server certificates by name without verifying their cryptographic signatures. A remote network attacker can exploit this vulnerability by presenti...

CVE-2026-66749-Unchecked-Room-Lookup-Leads-to-Server-Crash-Let-s-Chat-

Бюллетень безопасности: непроверенный поиск комнаты приводит к падению сервера Let's Chat Присвоенный идентификатор CVE: CVE-2026-66749 Сводка Один HTTP-запрос от любой учётной записи останавливает процесс сервера Let's Chat. GET /messages принимает параметр room, ищет комнату по id и затем...

CVE-2026-101003

A flaw was found in Mongoose. A remote attacker can trigger a stack-based buffer overflow by sending specially crafted network messages to the MQTT broker component. This flaw could lead to a Denial of Service DoS condition by crashing the application...

DEBIAN-CVE-2026-101003

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003 Cesanta Mongoose MQTT Broker main.c fn stack-based overflow

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003

Cesanta Mongoose versions up to 7.21 are vulnerable to a stack-based buffer overflow within the MQTT Broker component. The flaw exists in the fn function located in tutorials/mqtt/mqtt-server/main.c. A remote attacker can trigger this vulnerability through a manipulation, potentially leading to a...

EUVD-2026-88089

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003 Cesanta Mongoose MQTT Broker main.c fn stack-based overflow

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003 Cesanta Mongoose MQTT Broker main.c fn stack-based overflow

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003: Stack-based Buffer Overflow

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...