Open post T1- Push The Button @Just_Patch_It@cyberplace.social · 9mo ago Replying to @GossiTheDog@cyberplace.social <p>Merry Christmas to everybody, except that dude who works for Elastic, who decided to drop an unauthenticated exploit for MongoDB on Christmas Day, that leaks memory and automates harvesting secrets (e.g. database passwords)</p><p>CVE-2025-14847 aka MongoBleed</p><p>Exp: <a href="https://github.com/joe-desimone/mongobleed/blob/main/mongobleed.py" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">github.com/joe-desimone/mongob</span><span class="invisible">leed/blob/main/mongobleed.py</span></a></p><p>This one is incredibly widely internet facing and will very likely see mass exploitation and impactful incidents</p><p>Impacts every MongoDB version going back a decade.</p><p>Shodan dork: product:"MongoDB"</p> @GossiTheDog@cyberplace.social who the fuck exposes a DB directly to the internet?
Open post T1- Push The Button @Just_Patch_It@cyberplace.social · 10mo ago Replying to @greem@cyberplace.social Serious post, please boost... On #InternationalMensDay here's your periodic reminder, fellow AMAB & prostate carrying people who are over 50: Go see your doctor. Don't put it off. Ask for a DRE or a PSA test. Yes, DRE means a finger up your bum, get over it. They probably won't find anything wrong, but if they do then early intervention will help you avoid the situation I'm in. PSA units should be 3-5; mine was 1206 and my prostate about the size of an orange. Stage 4 cancer is no joke. @greem Oh fuckity fuck. So sorry to hear what you are going through. I have my poking scheduled for Jan. I had slightly elevated levels at last years physical.