118 matches found
CVE-2025-14847_Expolit
MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with CyberTechAjju 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...
CVE-2025-14847-MongoBleed-Exploit
CVE-2025-14847 - MongoBleed 👨💻 Author: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ EDUCATIONAL PURPOSE ONLY Lab environment and exploit script for the critical unauthenticated memory-leak vulnerability in MongoDB Server. 📋 Table of Contents Vulnerability Overview Affected Versions Installation Lab...
CVE-2025-14847
CVE-2025-14847 CVE-2025-14847 Vulnerability Environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...
Mongobleed-Detector-CVE-2025-14847
MongoBleed Scanner A professional vulnerability scanner for CVE-2025-14847 MongoBleed - MongoDB Memory Leak Vulnerability. +================================================================+ | MongoBleed Scanner v1.3.0 | | CVE-2025-14847 - MongoDB Memory Leak Vulnerability |...
CVE-2025-14847
CVE-2025-14847 CVE-2025-14847 vulnerability environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...
libqcow
libqcow is a library to access the QEMU Copy-On-Write QCOW image file format. Project information: Status: alpha Licence: LGPL-3.0-or-later Read-only supported QCOW formats: version 1 version 2 version 3 Supported QCOW format features: zlib DEFLATE compression AES-CBC 128-bit encryption backing...
zsteg
zsteg Description обнаружение скрытых стеганографией данных в PNG и BMP Installation gem install zsteg Detects: LSB-стеганография в PNG и BMP данные, сжатые zlib OpenStego Camouflage 1.2.1 LSB с множеством Эратосфена Usage zsteg -h Usage: zsteg options filename.png paramstring -a, --all try all...
CVE-2025-14847
MongoDB CVE-2025-14847 Vulnerability Detection Tool MongoDB Memory Leak Vulnerability CVE-2025-14847 Detection Tool ⚠️ Important: This tool is for authorized security testing and vulnerability assessment only. Unauthorized use may violate the law. 📋 Table of Contents Vulnerability Description...
CVE-2025-14847
🚨 CVE-2025-14847 — “MongoBleed” A high-severity unauthenticated memory disclosure vulnerability 📖 Table of Contents Overview Technical Details Severity & CVSS Affected Versions Real-World Impact Exploitation Summary Detection Guidance Remediation Mitigation Temporary Security Checklist Summary 🔎...
CVE-2025-14847
CVE-2025-14847 MongoBleed 📜 Description This script is designed to exploit the heap memory disclosure vulnerability known as CVE-2025-14847 "MongoBleed" in MongoDB Server. By sending specially crafted zlib-compressed OPMSG packets with an inflated document length, the script tricks the server int...
MongoBleed-exploit
CVE-2025-14847: MongoBleed Laboratory logo.svg Table of Contents 1. Introduction 2. Vulnerability Details How it Works 3. Impact 4. Lab Architecture 5. Prerequisites 6. Installation and Usage 1. Start the Environment 2. Install Dependencies 3. Verify Lab Setup Optional 4. Run the Exploit 7...
CVE-2025-14847_Expolit
MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with Alexcyberx 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...
cart
CaRT Compressed and RC4 Transport The CaRT file format is used to store/transfer malware and its associated metadata. It neuters the malware so it cannot be executed and encrypts it so anti-virus software cannot flag the CaRT file as malware. Advantages FAST: CaRT is just as fast as zipping a fil...
EUVD-2026-77370
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...
PT-2026-91148
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...
Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.
Summary IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries. Vulnerability Details CVEID:CVE-2026-55831 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final,...
DoS (Denial of Service) io.netty:netty-codec-http Dependency in Confluence Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 7.4.0, 7.13.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vect...
CVE-2026-69659 Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset
Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset pagination cursor. Read actions with keyset pagination deserialize the client-supplied page:after or page:before cursor in decodevalues/2 in...
CVE-2026-69659 Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset
Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset pagination cursor. Read actions with keyset pagination deserialize the client-supplied page:after or page:before cursor in decodevalues/2 in...
