3 links tagged with all of: security + vulnerability + mongodb
Click any tag below to further narrow down your results
Links
This article details the MongoBleed vulnerability (CVE-2025-14847) in MongoDB, which allows attackers to extract sensitive data from server memory without authentication. It outlines a detection method using Velociraptor to identify exploitation attempts by analyzing connection patterns in MongoDB logs.
This article discusses the MongoBleed vulnerability (CVE-2025-14847), which allows attackers to read sensitive data from the heap memory of MongoDB databases. The vulnerability affects all versions since 2017 and can be exploited without authentication, posing significant risks to publicly-accessible instances.
This article details a critical vulnerability (CVE-2025-14847) in the zlib library that allows unauthenticated attackers to remotely access sensitive data from MongoDB server memory. By sending malformed packets, attackers can extract private information, including user data and API keys.