MongoDB Compass Security Vulnerability

MongoDB Compass is a free interactive tool from the US-based MongoDB Inc. for querying, optimizing and analyzing MongoDB data. A security vulnerability previously existed in MongoDB Compass version 1.42.2, which stemmed from a possible bypass of the ejson shell parser...

PT-2023-9237 · Mongodb · Mongodb Compass

Name of the Vulnerable Software and Affected Versions: MongoDB Compass versions prior to 1.42.2 Description: The issue is related to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling, which may allow attackers to execute malicious code o...

[SECURITY] Fedora 36 Update: golang-mvdan-sh-3-3.4.3-5.fc36

A shell parser, formatter, and interpreter. Supports POSIX Shell, Bash, and mksh...

[SECURITY] Fedora 35 Update: golang-mvdan-sh-3-3.4.3-4.fc35

A shell parser, formatter, and interpreter. Supports POSIX Shell, Bash, and mksh...

Ntop nDPI Input Validation Error Vulnerability

Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. An input validation error vulnerability exists in the SSH protocol parser in Ntop nDPI 3.2 Stable and prior versions, which can be exploited by attackers to execute code or perform network traffic analysis...