CVE-2025-14847

CVE-2025-14847 – Exploit di perdita di memoria non autenticata di MongoDB Panoramica Un exploit proof‑of‑concept PoC per la vulnerabilità di decompressione zlib di MongoDB che consente a utenti malintenzionati non autenticati di leggere la memoria sensibile del server. Il PoC è implementato in...

MongoBleed-CVE-2025-14847

MongoBleed CVE-2025-14847 – Schwachstellenprüfer Systemhaus Schulz – Sicherheitswerkzeuge Ein professioneller Sicherheitsscanner zur Erkennung der MongoBleed CVE-2025-14847 MongoDB-Speicher-Offenlegungsschwachstelle. Im Gegensatz zu einfachen Versionsprüfwerkzeugen verwendet dieser Scanner eine...

cve-2025-14847

MongoBleed: CVE-2025-14847 – Strumento di Rilevamento delle Perdite di Memoria MongoBleed è uno strumento di audit di sicurezza ad alte prestazioni progettato per rilevare e dimostrare CVE-2025-14847. Questa vulnerabilità consente a un attaccante remoto non autenticato di divulgare frammenti di...

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 Beschreibung Dieses Skript wurde entwickelt, um die Schwachstelle zur Offenlegung von Heap-Speicher namens CVE-2025-14847 „MongoBleed“ in MongoDB Server auszunutzen. Durch das Senden speziell präparierter zlib-komprimierter OPMSG-Pakete mit einer überhöhten Dokumentlän...

mongobleed

mongobleed CVE-2025-14847 Exploit für die Offenlegung von MongoDB-Heap-Speicher durch Puffer-Overread bei OPCOMPRESSED. Verwendung root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Sicherheitsforschungslabor CVE-2025-14847 | CVSS 8.7 Hoch | Nicht authentifizierte Speicher-Offenlegung CVE-2025-14847 , auch MongoBleed genannt, ermöglicht es nicht authentifizierten entfernten Angreifern, nicht initialisierten Heap-Speicher auszuleiten, indem die...

CVE-2025-14847

📝 Scanner MongoDB – Notas de Execução Nome do Script mongoexposurescanner.py 1. Pré-requisitos Python 3.9+ Acesso de rede aos hosts alvo Escopo aprovado para varredura Verifique o Python: root@kitploit: python3 --version 2. Arquivos Utilizados Arquivo| Finalidade ---|--- mongoscanner.py| Script...

CVE-2018-8097-PoC

CVE-2018-8097 POC per CVE-2018-8097. Questo script sfrutta CVE-2018-8097 e può recuperare file e contenuti utilizzando un metodo RCE blind basato sul tempo. Utilizzo root@kitploit: python cve-2018-8097.py -h -u URL -c COMMAND -t TIME -id OBJECTID -d FILEPATH options: -h, --help show this help...

MongoBleed-CVE-2025-14847-Fully-Automated-scanner

Questo repository non contiene un README...

mongobleed-scanner

MongoBleed CVE-2025-14847 MongoBleed è uno scanner PoC ad alte prestazioni per CVE-2025-14847, una vulnerabilità di divulgazione di memoria heap pre-autenticazione nel driver C++ di MongoDB. Lo strumento è progettato per l'identificazione rapida di istanze vulnerabili su ampi intervalli di rete...

CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026

CYBERDUDEBIVASH MONGODB DETECTOR TOOL v2026.1 Rileva istanze MongoDB esposte e rischi CVE-2025-14847 "MongoBleed" — Scanner Python Zero-Trust. Nel 2026, i database MongoDB malconfigurati rimangono una delle principali cause di violazioni dei dati e attacchi ransomware. Questo strumento aiuta i...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

CVE-2026-65645

Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6. 8.3.8, 8.2.8, 8.1.8, and 7.10.15, the Meteor DDP methods getThreadsList and getThreadMessages accept rid / tmid as raw, untyped parameters with no schema validation. A MongoDB operator object e.g. "$gt": "4" can be substituted for ...

GHSA-533J-2V4Q-MW5H LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

Executive Summary A NoSQL injection issue exists in the langgraph-checkpoint-mongodb and langgraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methods accept a filter parameter that is incorporated into MongoDB queries without sufficient validation. Because MongoDB query...

CVE-2026-77070

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacker who can influence the resolved query...

CVE-2026-77070 n8n before 1.123.69 NoSQL Injection via MongoDB Node

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacker who can influence the resolved query...

CVE-2026-77070

n8n (workflow automation tool) is vulnerable in its MongoDB node 's Find, Delete, and Aggregate operations. The Query parameter is parsed as JSON after expression resolution without sanitizing MongoDB operators , allowing an attacker who can influence the resolved query to inject operators like $...

EUVD-2026-63259

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacker who can influence the resolved query...

CVE-2026-77070 n8n before 1.123.69 NoSQL Injection via MongoDB Node

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacker who can influence the resolved query...

PT-2026-78926

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.33.4 n8n versions prior to 2.34.1 Description A NoSQL injection issue exists in the MongoDB node's Find, Delete, and Aggregate operations. The software parses the Query parameter as JSON...