153 matches found
mongobleed-detector
MongoBleed Detector Offline MongoDB Analysis Tool for CVE-2025-14847 MongoBleed A standalone Linux command-line tool that analyzes MongoDB data to identify likely exploitation of CVE-2025-14847 using multiple detection modules. Table of Contents Overview Detection Modules Requirements Installatio...
mongobleed
mongobleed CVE-2025-14847 - Explotación de fuga de memoria no autenticada en MongoDB Un exploit de prueba de concepto para la vulnerabilidad de descompresión zlib de MongoDB que permite a atacantes no autenticados filtrar memoria sensible del servidor. Vulnerabilidad Un fallo en la descompresión...
mongobleed-exploit-CVE-2025-14847
🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure CVE-2025-14847 , dubbed MongoBleed , allows unauthenticated remote attackers to exfiltrate uninitialised heap memory by exploiting MongoDB's zlib decompression logic. This...
MongoBleed
MongoBleed CVE-2025-14847 Scanner and Exploitation Toolkit A security research toolkit for MongoBleed -- a critical unauthenticated memory leak in MongoDB's zlib decompression that allows attackers to extract sensitive data from server heap memory without authentication. ╔╦╗┌─┐┌┐┌┌─┐┌─┐╔╗ ┬...
CVE-2025-14847
mongoExploit CVE-2025-14847 mongoExploit is a Proof-of-Concept PoC exploit tool for CVE-2025-14847 , a memory leak vulnerability in MongoDB. This tool exploits a bug in zlib decompression to leak server memory via BSON field names. By crafting a BSON payload with an inflated document length, it...
CVE-2026-39113
CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLAR Extension Executive Summary CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension. In an application that has loaded the extension, an attacker who can invoke sqlaruncompress with a controlled compressed blob...
CVE-2025-14847---MongoBleed
Mongobleed CVE-2025-14847 – Prueba de concepto en Go Este repositorio contiene un exploit de prueba de concepto en Go para CVE-2025-14847 , una vulnerabilidad de divulgación de memoria en MongoDB comúnmente conocida como Mongobleed. Esta PoC es una reimplementación en Go del exploit original en...
cve-2025-14847
MongoBleed: CVE-2025-14847 Memory Leak Discovery Tool MongoBleed is a high-performance security auditing tool designed to detect and demonstrate CVE-2025-14847. This vulnerability allows an unauthenticated, remote attacker to leak fragments of uninitialized heap memory from a MongoDB server by...
Rocky Linux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785564050)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785564050 advisory. - Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-653...
AlmaLinux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785564050)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785564050 advisory. - Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-6535 ...
CVE-2025-14847-MongoBleed
CVE-2025-14847 MongoBleed MongoDB zlib Compression Memory Disclosure — Analysis, Detection, and Remediation Overview CVE-2025-14847, commonly referred to as MongoBleed , is a high-severity information disclosure vulnerability affecting :contentReferenceoaicite:0index=0 Server. The vulnerability...
CVE-2026-77021 Missing decompression size limit in agent receiver allows memory exhaustion via push agent data
Improper handling of highly compressed data data amplification in Checkmk 2.5.0p14, 2.4.0p37, 2.3.0p51 and 2.2.0 EOL allows an attacker who controls a host registered for push mode to exhaust the memory of the agent receiver by sending a small zlib compressed payload that decompresses to an...
CVE-2026-92000
A flaw was found in adm-zip. A remote attacker could exploit this vulnerability by crafting a malicious ZIP archive containing highly compressible entries that declare a zero uncompressed size. This oversight prevents the application of zlib decompression output limits, leading to excessive memor...
CVE-2026-92000
adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives with highly compressible entries declaring zero size to exhaust memory and cause denial of service...
EUVD-2026-80001
adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives with highly compressible entries declaring zero size to exhaust memory and cause denial of service...
PT-2026-93178
Name of the Vulnerable Software and Affected Versions adm-zip versions 0.5.14 through 0.6.0 Description The software fails to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. This allows attackers to use malicious ZIP archives containing highly compressible...
Linux Distros Unpatched Vulnerability : CVE-2026-92000
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft...
Astra Linux – Vulnerability in gst-plugins-good1.0
DOS: Potential heap overwrite in qtdemux using zlib decompression. Integer overflow in the qtdemux element within the qtdemuxinflate function can lead to a segfault, or it may cause a heap overwrite, depending on the libc and operating system. Depending on the libc used and the underlying operati...
Astra Linux – Vulnerability in gst-plugins-good1.0
DOS: Potential heap overwrite during MKV demuxing using Zlib decompression. Integer overflow occurs in the matroskademux element within the gstmatroskadecompressdata function, which can cause a segfault—or potentially a heap overwrite, depending on the libc and operating system. Depending on the...