CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 취약점 환경 및 poc 포함 https://jira.mongodb.org/browse/SERVER-115508 요약 이는 CVE-2025-14847을 해결하기 위한 중대한 수정입니다. 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32 또는 4.4.30으로 업그레이드하세요. 문제 설명 및 영향 서버의 zlib 구현에 대한 클라이언트 측 익스플로잇을 통해 서버에 인증하지 않고도 초기화되지 않은 힙 메모리를 반환받을 수 있습니다. 수정된 버전으로 가능한 한 빨리...

mongobleed

mongobleed CVE-2025-14847 — Эксплойт утечки памяти MongoDB без аутентификации Доказательство концепции эксплуатации уязвимости декомпрессии zlib в MongoDB, позволяющей неаутентифицированным атакующим извлекать конфиденциальные данные из памяти сервера. Уязвимость Ошибка в декомпрессии сообщений...

mongobleed-detector

Детектор MongoBleed Офлайн-инструмент анализа MongoDB для CVE-2025-14847 MongoBleed Автономный инструмент командной строки для Linux, который анализирует данные MongoDB для выявления вероятной эксплуатации уязвимости CVE-2025-14847 с использованием нескольких модулей обнаружения. Оглавление Обзор...

zsteg

zsteg Description PNG 및 BMP에서 스테가노그래피로 숨겨진 데이터 탐지 Installation root@kitploit: gem install zsteg Detects: PNG 및 BMP의 LSB 스테가노그래피 zlib 압축 데이터 OpenStego Camouflage 1.2.1 에라토스테네스 집합을 이용한 LSB Usage root@kitploit: zsteg -h Usage: zsteg options filename.png paramstring -a, --all try all known methods -E...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Продвинутый инструмент эксплуатации утечки памяти MongoDB Продолжайте учиться | Продолжайте взламывать с CyberTechAjju 🔥 О программе MongoBleed-Pro — это продвинутый инструмент эксплуатации CVE-2025-14847 , критической уязвимости раскрытия памяти в обработке сжатия zlib в MongoDB...

New-lib3mf.dll-for-MeshMixer

Новая lib3mf.dll для MeshMixer Предварительно скомпилированная lib3mf.dll для MeshMixer, которая включает обратно перенесённый патч для CVE-2021-21772 и обновлённую zlib 1.3.1. Замените оригинальный файл по пути C:\Program Files\Autodesk\Meshmixer\ Исходный код прилагается, если вы хотите...

libqcow

libqcow は QEMU Copy-On-Write QCOW イメージファイル形式にアクセスするためのライブラリです。 プロジェクト情報: ステータス: alpha ライセンス: LGPL-3.0-or-later 読み取り専用で対応している QCOW 形式: バージョン 1 バージョン 2 バージョン 3 対応している QCOW 形式の機能: zlib DEFLATE 圧縮 AES-CBC 128ビット暗号化 バッキングファイル 差分イメージ 非対応の QCOW 形式の機能: LUKS 暗号化 データファイル イメージ内スナップショット 作業中: ファイル API...

MongoBleed-exploit

CVE-2025-14847: Лаборатория MongoBleed logo.svg Содержание 1. Введение 2. Детали уязвимости Как это работает 3. Воздействие 4. Архитектура лаборатории 5. Предварительные требования 6. Установка и использование 1. Запуск окружения 2. Установка зависимостей 3. Проверка настройки лаборатории...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

external_zlib_4.4_CVE-2018-25032

БИБЛИОТЕКА СЖАТИЯ ДАННЫХ ZLIB zlib 1.2.7 — это библиотека сжатия данных общего назначения. Весь код потокобезопасен. Формат данных, используемый библиотекой zlib, описывается в RFC Request for Comments 1950–1952 в файлах http://tools.ietf.org/html/rfc1950 формат zlib, rfc1951 формат deflate и...

CVE-2026-39113

CVE-2026-39113: SQLite 옵션 SQLAR 확장의 힙 버퍼 오버플로 핵심 요약 CVE-2026-39113은 SQLite의 옵션 SQLAR 확장에서 발생하는 힙 버퍼 오버플로입니다. 확장을 로드한 애플리케이션에서 공격자가 제어된 압축 blob과 크기를 사용해 sqlaruncompress를 호출할 수 있다면, LP64 시스템에서 zlib가 힙 할당 경계를 넘어 쓰기를 수행하게 할 수 있습니다. 이는 호스트 프로세스 내부의 메모리 안전 경계 실패이며, SQLite 데이터베이스 파일 파싱 문제, 인증 우회, 또는 모든 ...

CVE-2026-87776

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zl...

CVE-2026-87776

A flaw was found in the compression Node.js and Express middleware. A remote unauthenticated attacker can exploit this vulnerability by repeatedly initiating and then prematurely aborting connections while compressed responses are being sent. This action prevents the zlib stream, used for...

CVE-2026-87776 compression vulnerable to Denial of Service via memory leak on premature response close

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zl...

EUVD-2026-76072

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zl...

CVE-2026-87776 compression vulnerable to Denial of Service via memory leak on premature response close

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zl...

CVE-2026-87776

compression is a Node.js and Express compression middleware. In versions before 1.8.2 , when a client aborts a connection while a compressed response is still being sent, the associated zlib stream is never destroyed, causing native zlib memory to leak with each aborted response. A remote unauthe...

PT-2026-89865

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zl...

Linux Distros Unpatched Vulnerability : CVE-2026-87776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ 고급 MongoDB 메모리 유출 익스플로잇 도구 Alexcyberx와 함께 계속 배우기 | 계속 해킹하기 🔥 소개 MongoBleed-Pro 는 MongoDB의 zlib 압축 처리에서 발생하는 치명적인 메모리 노출 취약점인 CVE-2025-14847 을 위한 고급 익스플로잇 도구입니다. 이 도구는 보안 연구자가 취약한 MongoDB 인스턴스에서 민감한 데이터를 추출할 수 있게 해줍니다. ⚠️ 면책 조항 이 도구는 승인된 보안 테스트 및 교육 목적으로만 제작되었습니다. 컴퓨터 시스템에 대한 무단...