Topic: public exploit

  • 87K MongoDB Servers Exposed by Critical Flaw

    87K MongoDB Servers Exposed by Critical Flaw

    A critical, high-severity vulnerability (CVE-2025-14847) in MongoDB, dubbed MongoBleed, is being actively exploited, allowing unauthenticated attackers to remotely steal secrets from tens of thousands of exposed servers. The flaw exploits a bug in the zlib compression library, where a specially c...

    Read More »
  • Critical FortiSIEM Flaw: Exploit Code Now Public

    Critical FortiSIEM Flaw: Exploit Code Now Public

    A critical, unauthenticated remote code execution vulnerability (CVE-2025-25256) in Fortinet's FortiSIEM platform allows attackers to gain full administrative control, with public exploit code now available. The flaw resides in the phMonitor service (TCP port 7900), a recurring weak point, and pa...

    Read More »