mhoye on Nostr: MongoDB exploit in the wild, every version going back a decade. ...
MongoDB exploit in the wild, every version going back a decade.
https://cyberplace.social/@GossiTheDog/115786817774728155 Merry Christmas to everybody, except that dude who works for Elastic, who decided to drop an unauthenticated exploit for MongoDB (basically MySQL) on Christmas Day, that leaks memory and automates harvesting secrets (e.g. database passwords)
CVE-2025-14847 aka MongoBleed
Exp: https://github.com/joe-desimone/mongobleed/blob/main/mongobleed.py
This one is incredibly widely internet facing and will very likely see mass exploitation and impactful incidents
Impacts every MongoDB version going back a decade.
Shodan dork: product:"MongoDB"
Published at
2025-12-26 17:08:43 UTCEvent JSON
{
"id": "a54178060fd661d28fab05b5d592314a99b2f93ba4e617bb4b21c8438f1616de",
"pubkey": "89e6894f840adb2e784c84aa7a494a43e9fa8b424df8912d458216b224866746",
"created_at": 1766768923,
"kind": 1,
"tags": [
[
"q",
"3abb8fdb94245bf363b7d80beba0e7f15d40db3bfff6e757b201522e71fe0ef6",
"wss://relay.ditto.pub/"
],
[
"proxy",
"https://mastodon.social/users/mhoye/statuses/115786968148214046",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub/"
]
],
"content": "MongoDB exploit in the wild, every version going back a decade.\n\nhttps://cyberplace.social/@GossiTheDog/115786817774728155\n\nnostr:nevent1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyqathr7mjsj9humrklvqh6aqulc46sxm80llde6hkgq4ytn3lc80vka9ej9",
"sig": "3e8069b93cf5c0f69013702853ab670582c5b516bc7e80d6c97787afffd7ea553d58c5007d2cd3da75c12cbacc2d80ca74cf4e4269c99e0830a2536d4b0188fc"
}
