Brand-new prototype pollution gadget in MongoDB leading to RCE
Target Program: MongoDB
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Mikhail Shcherbakov, Musard Balliu, Cristian-Alexandru StaicuSilent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
pentester.land
by Hossein Lotfi (@hosselot), Manfred Paul (@_manfp)But You Told Me You Were Safe: Attacking The Mozilla Firefox Renderer (Part 1)
pentester.land
by Song Li, Mingqing Kang, Jianwei Hou, Yinzhi CaoMining Node.js Vulnerabilities via Object Dependence Graph and Query
pentester.land
by Paul Gerste