Spring-Data-Mongodb-Demo

Spring-Data-Mongodb-Demo CVE-2022-22980 Environment...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

xvna

XVNA 极脆弱的Node应用程序 XVNA是一个用NodejsExpressjs/MongoDB编写的极度脆弱的Node应用程序，旨在帮助安全爱好者学习应用安全。不建议将此应用程序在线托管，因为它本意是脆弱的。我们建议在本地环境中托管此应用程序，并使用您自己选择的任何工具来磨练您的应用安全技能。中断或入侵此应用程序是完全合法的。其理念是以可能的最佳和最基本的方式向社区推广应用安全。为了正当目的学习和掌握这些技能。您如何使用这些技能和内容不是我们的责任。 警告...

CVE-2025-14847-mongobleed

CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed python file CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An...

CVE-2022-22980

CVE-2022-22980 一个基于本地的 CVE-2022-22980 PoC，有关此漏洞的详细信息请参见 https://tanzu.vmware.com/security/cve-2022-22980。 运行前需要在本地安装 mongodb。 另外，我已在 dockerv 上创建了一个基于 Docker 的 Web 版 PoC。 运行 root@kitploit: mvn spring-boot:run 或使用 IDEA 打开，并启动 AccessingDataMongodbApplication...

mongobleed-scanner

🐍 mongobleed-scanner - Scan for MongoDB Vulnerabilities Easily 🚀 Getting Started Welcome to mongobleed-scanner! This tool helps you discover vulnerabilities in MongoDB related to heap memory leaks. Protect your data and enhance your security effortlessly. 📥 Download the Application Visit this pag...

CVE-2026-48204

CVE-2026-48204 — camel-mongodb-gridfs gridfs. Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

CVE-2025-60357

CVE-2025-60357- NoSQLMongoDB Injection Vulnerability and Product description AhnLab EPP Management is a globally recognized next-generation advanced endpoint protection platform that integrates patch management, advanced malware detection, EDR, and XDR capabilities. NoSQLMongoDB Injection in was...

CVE-2025-14847

MongoDB CVE-2025-14847 Vulnerability Detection Tool MongoDB Memory Leak Vulnerability CVE-2025-14847 Detection Tool ⚠️ Important: This tool is for authorized security testing and vulnerability assessment only. Unauthorized use may violate the law. 📋 Table of Contents Vulnerability Description...

CVE-2025-14847

🛡️ CVE-2025-14847 - Easy Tool for MongoDB Security 📥 Download Now Download 📋 Overview CVE-2025-14847, also known as MongoBleed, is a security tool designed to identify vulnerabilities in MongoDB. This application helps users assess their MongoDB databases effectively. You do not need programming...

mongobleed-scanner

MongoBleed CVE-2025-14847 MongoBleed is a high-performance PoC scanner for CVE-2025-14847, a pre-authentication heap memory disclosure vulnerability in the MongoDB C++ Driver. The tool is designed for rapid identification of vulnerable instances across large network ranges. Technical Analysis The...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 安全研究实验室 CVE-2025-14847 | CVSS 8.7 高 | 未经身份验证的内存泄露 CVE-2025-14847 ，被称为 MongoBleed ，允许未经身份验证的远程攻击者通过利用 MongoDB 的 zlib 解压缩逻辑来泄露未初始化的堆内存。这个高严重性缺陷暴露了敏感工件，包括明文凭证和会话令牌，为横向移动和完全接管服务器提供了路线图。 📖 完整文档 → 面向工程团队的快速概览 方面| 详情 ---|--- 漏洞组件| 使用 zlib 压缩的 MongoDB 服务器网络传输层 严重性| 高（CVSS...

MongoBleed

MongoBleed CVE-2025-14847 Scanner and Exploitation Toolkit A security research toolkit for MongoBleed -- a critical unauthenticated memory leak in MongoDB's zlib decompression that allows attackers to extract sensitive data from server heap memory without authentication. root@kitploit:...

CVE-2025-14847

CVE-2025-14847 Description CVE-2025–14847, also known as MongoBleed, is a vulnerability that allows attackers to perform unauthorized data reads from the heap memory space of the server on which the MongoDB database runs, without authentication. How to Reproduce root@kitploit: podman-compose...

CVE-2025-14847

🚨 CVE-2025-14847 — “MongoBleed” A high-severity unauthenticated memory disclosure vulnerability 📖 Table of Contents Overview Technical Details Severity & CVSS Affected Versions Real-World Impact Exploitation Summary Detection Guidance Remediation Mitigation Temporary Security Checklist Summary 🔎...

mongobleed

This repository does not have a README...

CVE-2025-52385

CVE-2025-52385 Software : Studio 3T v.2025.1.0 Vulnerability Report : Studio 3T Remote Command Execution Overview A critical vulnerability in Studio 3T version 2025.1.0 and earlier allows a remote attacker to execute arbitrary code via a crafted payload exploiting the childprocess module in the...

MongoBLEED---CVE-2025-14847-POC-

MongoBLEED---CVE-2025-14847-POC- This repo contains my python script version of CVE-2025-14847 MongoBleed Description The script simulates a malicious request by sending a forged decompression size field. If the server is vulnerable, it will return adjacent data from the heap memory. Prerequisite...

MongoBleed-CVE-2025-14847-Fully-Automated-scanner

This repository does not have a README...

CVE-2025-14847

mongoExploit CVE-2025-14847 mongoExploit is a Proof-of-Concept PoC exploit tool for CVE-2025-14847 , a memory leak vulnerability in MongoDB. This tool exploits a bug in zlib decompression to leak server memory via BSON field names. By crafting a BSON payload with an inflated document length, it...