dumper

Über Dumper Dies ist ein CLI-Dienstprogramm zum Erstellen von Backup-Datenbanken verschiedener Typen mit flexiblen Verbindungs- und Speichereinstellungen. Möglichkeiten: Mehrere Datenbanksysteme können verwaltet werden. Unterstützt PostgreSQL , MySQL , MongoDB usw. Arbeiten mit SSH-Keys mit...

CVE-2025-61777

CVE-2025-61777 1. Modificação não autorizada de modelos de emblemas no FlagforgeCTF CVE-2025-61777 Resumo A aplicação Flagforge https://flagforge.xyz expõe vulnerabilidades críticas em seus endpoints de API administrativa, especificamente /api/admin/badge-templates GET e...

CVE-2025-6713

CVE-2025-6713 Erstelle eine Aggregations-Pipeline, um ohne ordnungsgemäße Autorisierung auf Daten zuzugreifen, aufgrund unsachgemäßer Handhabung von $mergeCursors in MongoDB v8.0 v7.0 v6.0 6.0.22 Installation nicht sehr schwierig – verwende einfach pip3, um die Abhängigkeiten zu installieren: pip...

PT-2026-82736

A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different...

PT-2026-82738

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...

PT-2026-82739

Name of the Vulnerable Software and Affected Versions MongoDB client library for PHP affected versions not specified Description The MongoDB client library for PHP fails to properly sanitize special elements within application-supplied namespace identifiers used to construct target namespaces for...

PT-2026-82742

A MongoDB C driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded to the server without neutralization of query-language special elements. An application that passes untrusted,...

PT-2026-82740

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

PT-2026-82551

In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclos...

PT-2026-82741

A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, special elements contained within those...

PT-2026-82743

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description Improper neutralization of delimiters during connection-URL construction enables connection-option injection. This occurs when an application passes untrusted text into the driver's...

PT-2026-82744

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

PT-2026-82735

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name...

PT-2026-82737

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

CVE-2025-61301

CVE-2025-61301 - CAPEv2: Negazione dell'analisi tramite fork ricorsivo di processi Descrizione Una vulnerabilità di gravità alta di negazione dell'analisi interessa reporting/mongodb.py e reporting/jsondump.py in CAPEv2 commit 52e4b43, del 2025-05-17 e consente agli attaccanti che possono inviare...

mongobleed

Laboratório de Vazamento de Compressão do MongoDB Educacional, Seguro Referência CVE : CVE-2025-14847 Este repositório é um laboratório educacional que demonstra o conceito por trás de uma classe de problemas frequentemente descritos como "compressão de enquadramento / divulgação de memória por...

kimi

Kimi: Motore di Scoperta della Superficie di Attacco Sviluppato con 💜 da @alechilczenko Contesto del Progetto: Questo progetto serve come pezzo di portfolio che dimostra concetti di sicurezza offensiva, concorrenza e architettura distribuita. 1. Presentazione di Kimi: La Storia dell'Origine...

Spring-Data-Mongodb-Demo

Spring-Data-Mongodb-Demo CVE-2022-22980 Umgebung...

CVE-2025-14847-MongoBleed

CVE-2025-14847 MongoBleed Divulgazione di memoria tramite compressione zlib di MongoDB — Analisi, Rilevamento e Mitigazione Panoramica CVE-2025-14847, comunemente conosciuta come MongoBleed , è una vulnerabilità di divulgazione di informazioni ad alta gravità che colpisce...

Mongobleed-Detector-CVE-2025-14847

MongoBleed Scanner Uno scanner di vulnerabilità professionale per CVE-2025-14847 MongoBleed: vulnerabilità di perdita di memoria di MongoDB. root@kitploit: +================================================================+ | MongoBleed Scanner v1.3.0 | | CVE-2025-14847 - MongoDB Memory Leak...