MongoBleed (CVE-2025-14847) - Unauthenticated Memory Leak PoC

A flaw in the zlib library enables attackers to leak sensitive data from MongoDB servers, the attacker can send the payload, without authentication, as the bug is exploited on the network level. 

Attackers can exploit this to extract sensitive information from MongoDB servers, including user information, passwords, API keys and more. Although the attacker might need to send a large amount of requests to gather the full database, and some data might be meaningless, the more time an attacker has the more information could be gathered.

Blog: https://www.ox.security/blog/attackers-could-exploit-zlib-to-exfiltrate-data-cve-2025-14847/

Dork:

Shodan: product:"MongoDB"
HUNTER: product.name="MongoDB"
ZoomEye Dork: app="MongoDB"

Affected versions:

8.2.0 to 8.2.2
8.0.0 to 8.0.16
7.0.0 to 7.0.27
6.0.0 to 6.0.26
5.0.0 to 5.0.31
4.4.0 to 4.4.29
4.2.0 and later
4.0.0 and later
3.6.0 and later

Malware Analysis Fundamental
Mandiant

Advance Python for Cybersecurity (2024)
Adam Jones

Happy Val....
forget it, it's just

val date : String = "14 February"

so Happy Immutable Variable day

I recommend book for who seeks to design a programming language:

- Programming Language Design Concepts by D. Watt, it suitable to understanding what a language needed to be called a programming language, it provided with comparison with real-world existing language.

- Programming Language Pragmatic by Michael Lee Scots. It focus on what the domain and the target of programming language, it more focused on what the target of your programming language and what needed for satisfy the domain target.

- Concept of Programming Language by Robert W. Sebesta, This book I suggested to read if you not want read the two book I had mentions. This book like what Watt's book but more refined, modern in material (it has Interview with language creator) and more baby step to read, this is book suitable if you like history class and surprise quiz in it.