X

Vous n'êtes pas connecté

Rubriques :

Maroc Maroc - ITSECURITYNEWS.INFO - A La Une - 27/Dec 08:31

New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory

A high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated users to read uninitialized heap memory. The vulnerability, tracked as CVE-2025-14847 (CVSS score: 8.7), has been described as a case of improper handling of length parameter inconsistency,…

Articles similaires

Sorry! Image not available at this time

New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory

itsecuritynews.info - 27/Dec 08:31

A high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated users to read uninitialized heap memory. The...

Sorry! Image not available at this time

CVE-2025-14847 affecting MongoDB

thecyberthrone.in - 27/Dec 11:19

CVE-2025-14847 exposes MongoDB Server to unauthenticated remote attacks through malformed zlib-compressed protocol headers, leaking uninitialized heap...

Sorry! Image not available at this time

Critical MongoDB Flaw Leaks Sensitive Data Through zlib Compression

itsecuritynews.info - 24/Dec 06:02

MongoDB has disclosed a critical security vulnerability tracked as CVE-2025-14847 that could allow attackers to extract uninitialized heap memory from...

Sorry! Image not available at this time

Critical MongoDB Flaw Leaks Sensitive Data Through zlib Compression

itsecuritynews.info - 24/Dec 06:02

MongoDB has disclosed a critical security vulnerability tracked as CVE-2025-14847 that could allow attackers to extract uninitialized heap memory from...

Sorry! Image not available at this time

High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover

securityaffairs.co - 25/Dec 10:12

MongoDB addressed a high-severity vulnerability that can be exploited to achieve remote code execution on vulnerable servers. MongoDB addressed a...

Sorry! Image not available at this time

High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover

itsecuritynews.info - 25/Dec 11:02

MongoDB addressed a high-severity vulnerability that can be exploited to achieve remote code execution on vulnerable servers. MongoDB addressed a...

Sorry! Image not available at this time

High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover

itsecuritynews.info - 25/Dec 11:02

MongoDB addressed a high-severity vulnerability that can be exploited to achieve remote code execution on vulnerable servers. MongoDB addressed a...

Sorry! Image not available at this time

MongoBleed Now in CISA KEV After Global Exploitation Wave

thecyberthrone.in - 04:21

MongoBleed, tracked as CVE-2025-14847, represents a critical unauthenticated memory-leak vulnerability in MongoDB’s zlib-based network...

Sorry! Image not available at this time

87,000+ MongoDB Instances Vulnerable to MongoBleed Flaw Exposed Online – PoC Exploit Released

itsecuritynews.info - 28/Dec 04:31

A high-severity vulnerability in MongoDB Server that allows unauthenticated remote attackers to siphon sensitive data from database memory. Dubbed...

Sorry! Image not available at this time

CISA Adds One Known Exploited Vulnerability to Catalog

itsecuritynews.info - 21:02

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-14847...