{"vulnerability": "2015-78", "sightings": [{"uuid": "4067dc85-e6c4-4a06-97f6-5ec2d21c257f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7888", "type": "seen", "source": "MISP/dbc3a6fb-d0e6-4360-abac-982c485da241", "content": "", "creation_timestamp": "2020-10-09T15:54:25.000000Z"}, {"uuid": "a8e1830c-0d17-4c2f-9fe4-461e68b99210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7889", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38558", "content": "", "creation_timestamp": "2015-10-28T00:00:00.000000Z"}, {"uuid": "86007c5e-5067-41b8-b84e-03b93f335812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7891", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38557", "content": "", "creation_timestamp": "2015-10-28T00:00:00.000000Z"}, {"uuid": "3bc12126-1123-499f-af44-bde934f31286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7893", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38554", "content": "", "creation_timestamp": "2015-10-28T00:00:00.000000Z"}, {"uuid": "c5fb5ab8-b7fc-4d5e-955b-a00dc5c87b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7894", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38614", "content": "", "creation_timestamp": "2015-11-03T00:00:00.000000Z"}, {"uuid": "9e6b9ed1-0c38-4383-8ef2-97e5e2ea2bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7890", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38556", "content": "", "creation_timestamp": "2015-10-28T00:00:00.000000Z"}, {"uuid": "686a2d60-d16d-4951-ab19-8f36dff01159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7892", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38555", "content": "", "creation_timestamp": "2015-10-28T00:00:00.000000Z"}, {"uuid": "c365943b-c757-4cdd-bfc1-de393ce0ea67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7808", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38629", "content": "", "creation_timestamp": "2015-11-05T00:00:00.000000Z"}, {"uuid": "f2a65f2a-7684-490c-a066-da7c77a19b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7895", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38613", "content": "", "creation_timestamp": "2015-11-03T00:00:00.000000Z"}, {"uuid": "472fd1da-7b46-43a3-b83a-d233d403bb05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7896", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38612", "content": "", "creation_timestamp": "2015-11-03T00:00:00.000000Z"}, {"uuid": "d1ff5bf4-2401-4bdc-8294-4f1a0c05ac62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7898", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38610", "content": "", "creation_timestamp": "2015-11-03T00:00:00.000000Z"}, {"uuid": "23460b71-19f2-4cf3-bd95-ea695e78ccd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7897", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38611", "content": "", "creation_timestamp": "2015-11-03T00:00:00.000000Z"}, {"uuid": "26c67884-b4b4-40e6-a6e5-97fb1545a925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7855", "type": "exploited", "source": "https://www.exploit-db.com/exploits/40840", "content": "", "creation_timestamp": "2016-11-28T00:00:00.000000Z"}, {"uuid": "ccf1c8bb-34fe-4a97-b15b-c24db8248c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7865", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38792", "content": "", "creation_timestamp": "2015-11-23T00:00:00.000000Z"}, {"uuid": "de3c4eea-4684-4ce7-ab00-2e5a8a4a5941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7808", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38790", "content": "", "creation_timestamp": "2015-11-23T00:00:00.000000Z"}, {"uuid": "fa875e3a-aee2-42b1-89c5-97022d4e1126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7858", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38797", "content": "", "creation_timestamp": "2015-11-23T00:00:00.000000Z"}, {"uuid": "344b77b5-7763-40d7-8d72-00e88cba46d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7857", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38797", "content": "", "creation_timestamp": "2015-11-23T00:00:00.000000Z"}, {"uuid": "e86ea926-89dd-4d24-b2a3-faf9cf637f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7871", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "314e55c0-da8c-4baf-8c17-79dd0477bdeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7858", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "5b2b8ebb-8626-469a-9b55-4697e8738a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7808", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "84c7f10b-6a15-4e6e-94c7-f73678641e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7857", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "0576cadf-efde-4345-821a-b7e97b9181d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7858", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:43.000000Z"}, {"uuid": "7689353a-8e6b-45d0-a659-6ac2dbafbeed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7857", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:43.000000Z"}, {"uuid": "6669ce60-212a-424e-924d-71943925d591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7871", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:43.000000Z"}, {"uuid": "897298b9-96fa-4e7c-8411-761d4276e822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7808", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:43.000000Z"}, {"uuid": "8f67d1ae-0cc4-4199-8f94-475f77d7b194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7871", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "f51aba61-4cc9-40c6-bcc6-100d692a4914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7808", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vbulletin_unserialize.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "8baca0b0-16d5-4d19-b994-01228a084c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7857", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_contenthistory_sqli_rce.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "413e0601-e994-4b71-b93f-7dda7889ff24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7858", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_contenthistory_sqli_rce.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "0c93f02f-f18e-447e-b58d-8b34f927de9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2015-7837", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "b83b1ede-3888-482b-b06d-c45aeece17a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7808", "type": "published-proof-of-concept", "source": "https://t.me/HackingPublicoficial/162", "content": "Best Exploits\n\nphpMoAdmin Remote Code Execution (CVE-2015-2208)\nLotusCMS Remote Code Execution (OSVDB-75095)\nElasticSearch Remote Code Execution (CVE-2015-1427)\nShellShock (httpd) Remote Code Execution (CVE-2014-6271)\nIISlap - http.sys Denial of Service/RCE PoC (DoS only). (MS-15-034)\nse0wned - Seowintech Router diagnostic.cgi remote root\nWPsh0pwn - Wordpress WPShop eCommerce Shell Upload (WPVDB-7830)\nnmediapwn - Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload\npwnflow - Wordpress Work the flow file upload 2.5.2 Shell Upload\ndelusions - Wordpress InfusionSoft Gravity Forms Shell Upload (CVE-2014-6446)\nsuiteshell - SuiteCRM Post-Auth Remote Code Execution (CVE-2015-NOTYET)\nsuiteracer - SuiteCRM Post-Auth Remote Code Execution Race Condition (CVE-2015-xxxx)\nunsanitary - Address Sanitizer + Setuid Binary = Local Root exploit (LD_PRELOAD vector)\nDiamondFox - DiamondFox Botnet C&C Panel Shell Upload\nDoubtfullyMalignant - BenignCertain DoS PoC\nTorCT-Shell - TorCT RAT C&C Panel Shell Upload\nvBullshit - vBulletin 5.x.x unserialize() Remote Code Execution (CVE-2015-7808)\nXanity-Shell - Xanity RAT C&C Panel Shell Upload\nJoomraa - PoC + upload blacklist bypass (CVE-2016-8869, CVE-2016-8870, CVE-2016-9836)\nDeathsize - LifeSize Room remote code execution & local root exploit\nAssetExploder - ManageEngine Asset Explorer remote code execution\nDroppleGanger - Droppler <= 1.6.5 Auth-Bypass & RCE\ntr-06fail - TR-064 Misimplementations leading to remote device takeover in ZyXEL Routers\nscreen2root - Screen 4.05.00 (CVE-2017-5618) local privesc\nFreeACS-Pwn - TR-069 exploit for FreeACS server, disclosed at BSides Edinburgh.\nJoomblah - Joomla 3.7.0 SQL Injection exploit (CVE-2017-8917)\npisspoorpool - Local file inclusion exploit for p2pool status page\nwipgpwn - Remote Root Exploit for WePresent WiPG-1000,1500,2000 devices\nTBA\n\nLink:\n\nhttps://github.com/XiphosResearch/exploits https://www.facebook.com/1656611301265857/posts/1887994441460874", "creation_timestamp": "2017-07-11T02:04:41.000000Z"}, {"uuid": "8892aa8f-0b9f-4271-aaa0-dadeef5a000d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7892", "type": "seen", "source": "https://t.me/ctinow/203855", "content": "https://ift.tt/PeAgW0b\nCVE-2015-7892 | Samsung m2m1shot Driver Framework m2m1shot_compat_ioctl32 IOCTL Call out-of-bounds write (ID 134108 / EDB-38555)", "creation_timestamp": "2024-03-09T09:36:28.000000Z"}, {"uuid": "f5d7c3fb-c351-4dfd-a52e-ab1776b6cfb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7831", "type": "seen", "source": "https://t.me/ctinow/195255", "content": "https://ift.tt/XP7H0hx\nCVE-2015-7831 | Cloudera HUE up to 5.4.8 CDH privileges management", "creation_timestamp": "2024-02-28T10:11:35.000000Z"}, {"uuid": "14518ef0-408c-429f-a5ad-2658d95b597f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7810", "type": "seen", "source": "https://t.me/ctinow/193373", "content": "https://ift.tt/oCYNqRs\nCVE-2015-7810 | libbluray JAR File MountManager toctou (BID-72769)", "creation_timestamp": "2024-02-26T14:42:06.000000Z"}, {"uuid": "0d2ecfc8-d88f-4387-b337-6e525f9c7572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7882", "type": "seen", "source": "https://t.me/cibsecurity/5618", "content": "ATENTION\u203c New - CVE-2015-7882\n\nImproper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-07-19T20:33:38.000000Z"}, {"uuid": "06de83ef-e463-43c2-9a78-096d3d8c988a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7882", "type": "seen", "source": "https://t.me/hacking_Attack/85770", "content": "Kali Linux Tutorials\nMongoaudit \u2013 An Audit and Pentesting Tool for MongoDB Databases\n\nDatabases typically store sensitive data or data that is important for the company. Mongoaudit helps to audit several technical aspects of running a MongoDB instance and get it properly secured. Usage and AudienceMongoaudit is commonly used for Application security or Database security. \n\nTarget users for this tool are pentesters, security professionals, and system administrators. Installation Clone this repository and run the setup:\n> git clone https://github.com/stampery/mongoaudit.git\n> cd mongoaudit\n> python setup.py install\n> mongoaudit IntroductionIt is widely known that there are quite a few holes in MongoDB\u2019s default configuration settings. This fact, combined with abundant lazy system administrators and developers, has led to what the press has called the MongoDB apocalypse.\n\nMongoaudit\u00a0not only detects misconfigurations, known vulnerabilities, and bugs but also gives you advice on how to fix them, recommends best practices, and teaches you how to DevOp like a pro!\n\nThis is what the actual app looks like: Yep, that\u2019s the material design on a console line interface. (Powered by urwid) Supported tests* MongoDB listens on a port different from the default one\n* The server only accepts connections from whitelisted hosts/networks\n* MongoDB HTTP status interface is not accessible on port 28017\n* MongoDB is not exposing its version number\n* MongoDB version is newer than 2.4\n* TLS/SSL encryption is enabled\n* Authentication is enabled\n* SCRAM-SHA-1 authentication method is enabled\n* Server-side Javascript is forbidden *\n* Roles granted to the user only permit CRUD operations *\n* The user has permission over a single database *\n* Security bug CVE-2015-7882\n* Security bug CVE-2015-2705\n* Security bug CVE-2014-8964\n* Security bug CVE-2015-1609\n* Security bug CVE-2014-3971\n* Security bug CVE-2014-2917\n* Security bug CVE-2013-4650\n* Security bug CVE-2013-3969\n* Security bug CVE-2012-6619\n* Security bug CVE-2013-1892\n* Security bug CVE-2013-2132\n\nTests marked with an asterisk (*) require valid authentication credentials. How can I best secure my MongoDB?Once you run any of the test suites provided by mongoaudit, it will offer you to receive a fully detailed report via email. This personalized report links to a series of useful guides on how to fix every specific issue and how to harden your MongoDB deployments.\n\nFor your convenience, we have also published the mongoaudit\u00a0guides in our Medium publication. ContributingWe\u2019re happy you want to contribute! You can help us in different ways:\n\n* Open an issue with suggestions for improvements and errors you\u2019re facing.\n* Fork this repository and submit a pull request.\n* Improve the documentation.\n\nTo submit a pull request, fork the mongoaudit repository and then clone your fork:\ngit clone git@github.com:<your-name/mongoaudit.git \nMake your suggested changes, git pushand then submit a pull request. Author and MaintainersMaintainersThe mongoaudit project is maintained by:\n\n* Ad\u00e1n S\u00e1nchez de Pedro\n* Johann Og LegalLicensemongoaudit\u00a0is released under the [MIT License] Disclaimer\"With great power comes great responsibility\" * Never use this tool on servers you don\u2019t own. Unauthorized access to strangers\u2019 computer systems is a crime in many countries.\n* Please use this tool at your own risk. We will accept no liability for any loss or damage which you may incur no matter how caused.\n* Don\u2019t be evil! \n\nYou can download mongoaudit tool here Also Read:The Hackingsage/Hacktronian \u2013 A Pentesting Tool for Linux and Android BabySploit \u2013 Beginner Pentesting Toolkit/Framework Written in Python GitDump : A Pentesting Tool", "creation_timestamp": "2026-09-01T20:01:06.250801Z"}, {"uuid": "0df1cda7-81ab-45da-931c-f7312f04258b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7882", "type": "seen", "source": "https://t.me/hacking_Attack/85770", "content": "Kali Linux Tutorials\nMongoaudit \u2013 An Audit and Pentesting Tool for MongoDB Databases\n\nDatabases typically store sensitive data or data that is important for the company. Mongoaudit helps to audit several technical aspects of running a MongoDB instance and get it properly secured. Usage and AudienceMongoaudit is commonly used for Application security or Database security. \n\nTarget users for this tool are pentesters, security professionals, and system administrators. Installation Clone this repository and run the setup:\n> git clone https://github.com/stampery/mongoaudit.git\n> cd mongoaudit\n> python setup.py install\n> mongoaudit IntroductionIt is widely known that there are quite a few holes in MongoDB\u2019s default configuration settings. This fact, combined with abundant lazy system administrators and developers, has led to what the press has called the MongoDB apocalypse.\n\nMongoaudit\u00a0not only detects misconfigurations, known vulnerabilities, and bugs but also gives you advice on how to fix them, recommends best practices, and teaches you how to DevOp like a pro!\n\nThis is what the actual app looks like: Yep, that\u2019s the material design on a console line interface. (Powered by urwid) Supported tests* MongoDB listens on a port different from the default one\n* The server only accepts connections from whitelisted hosts/networks\n* MongoDB HTTP status interface is not accessible on port 28017\n* MongoDB is not exposing its version number\n* MongoDB version is newer than 2.4\n* TLS/SSL encryption is enabled\n* Authentication is enabled\n* SCRAM-SHA-1 authentication method is enabled\n* Server-side Javascript is forbidden *\n* Roles granted to the user only permit CRUD operations *\n* The user has permission over a single database *\n* Security bug CVE-2015-7882\n* Security bug CVE-2015-2705\n* Security bug CVE-2014-8964\n* Security bug CVE-2015-1609\n* Security bug CVE-2014-3971\n* Security bug CVE-2014-2917\n* Security bug CVE-2013-4650\n* Security bug CVE-2013-3969\n* Security bug CVE-2012-6619\n* Security bug CVE-2013-1892\n* Security bug CVE-2013-2132\n\nTests marked with an asterisk (*) require valid authentication credentials. How can I best secure my MongoDB?Once you run any of the test suites provided by mongoaudit, it will offer you to receive a fully detailed report via email. This personalized report links to a series of useful guides on how to fix every specific issue and how to harden your MongoDB deployments.\n\nFor your convenience, we have also published the mongoaudit\u00a0guides in our Medium publication. ContributingWe\u2019re happy you want to contribute! You can help us in different ways:\n\n* Open an issue with suggestions for improvements and errors you\u2019re facing.\n* Fork this repository and submit a pull request.\n* Improve the documentation.\n\nTo submit a pull request, fork the mongoaudit repository and then clone your fork:\ngit clone git@github.com:<your-name/mongoaudit.git \nMake your suggested changes, git pushand then submit a pull request. Author and MaintainersMaintainersThe mongoaudit project is maintained by:\n\n* Ad\u00e1n S\u00e1nchez de Pedro\n* Johann Og LegalLicensemongoaudit\u00a0is released under the [MIT License] Disclaimer\"With great power comes great responsibility\" * Never use this tool on servers you don\u2019t own. Unauthorized access to strangers\u2019 computer systems is a crime in many countries.\n* Please use this tool at your own risk. We will accept no liability for any loss or damage which you may incur no matter how caused.\n* Don\u2019t be evil! \n\nYou can download mongoaudit tool here Also Read:The Hackingsage/Hacktronian \u2013 A Pentesting Tool for Linux and Android BabySploit \u2013 Beginner Pentesting Toolkit/Framework Written in Python GitDump : A Pentesting Tool", "creation_timestamp": "2026-09-02T01:01:27.062110Z"}, {"uuid": "8ac3d139-eef7-4531-9852-d32d0f8d5164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7882", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/85770", "content": "Kali Linux Tutorials\nMongoaudit \u2013 An Audit and Pentesting Tool for MongoDB Databases\n\nDatabases typically store sensitive data or data that is important for the company. Mongoaudit helps to audit several technical aspects of running a MongoDB instance and get it properly secured. Usage and AudienceMongoaudit is commonly used for Application security or Database security. \n\nTarget users for this tool are pentesters, security professionals, and system administrators. Installation Clone this repository and run the setup:\n> git clone https://github.com/stampery/mongoaudit.git\n> cd mongoaudit\n> python setup.py install\n> mongoaudit IntroductionIt is widely known that there are quite a few holes in MongoDB\u2019s default configuration settings. This fact, combined with abundant lazy system administrators and developers, has led to what the press has called the MongoDB apocalypse.\n\nMongoaudit\u00a0not only detects misconfigurations, known vulnerabilities, and bugs but also gives you advice on how to fix them, recommends best practices, and teaches you how to DevOp like a pro!\n\nThis is what the actual app looks like: Yep, that\u2019s the material design on a console line interface. (Powered by urwid) Supported tests* MongoDB listens on a port different from the default one\n* The server only accepts connections from whitelisted hosts/networks\n* MongoDB HTTP status interface is not accessible on port 28017\n* MongoDB is not exposing its version number\n* MongoDB version is newer than 2.4\n* TLS/SSL encryption is enabled\n* Authentication is enabled\n* SCRAM-SHA-1 authentication method is enabled\n* Server-side Javascript is forbidden *\n* Roles granted to the user only permit CRUD operations *\n* The user has permission over a single database *\n* Security bug CVE-2015-7882\n* Security bug CVE-2015-2705\n* Security bug CVE-2014-8964\n* Security bug CVE-2015-1609\n* Security bug CVE-2014-3971\n* Security bug CVE-2014-2917\n* Security bug CVE-2013-4650\n* Security bug CVE-2013-3969\n* Security bug CVE-2012-6619\n* Security bug CVE-2013-1892\n* Security bug CVE-2013-2132\n\nTests marked with an asterisk (*) require valid authentication credentials. How can I best secure my MongoDB?Once you run any of the test suites provided by mongoaudit, it will offer you to receive a fully detailed report via email. This personalized report links to a series of useful guides on how to fix every specific issue and how to harden your MongoDB deployments.\n\nFor your convenience, we have also published the mongoaudit\u00a0guides in our Medium publication. ContributingWe\u2019re happy you want to contribute! You can help us in different ways:\n\n* Open an issue with suggestions for improvements and errors you\u2019re facing.\n* Fork this repository and submit a pull request.\n* Improve the documentation.\n\nTo submit a pull request, fork the mongoaudit repository and then clone your fork:\ngit clone git@github.com:<your-name/mongoaudit.git \nMake your suggested changes, git pushand then submit a pull request. Author and MaintainersMaintainersThe mongoaudit project is maintained by:\n\n* Ad\u00e1n S\u00e1nchez de Pedro\n* Johann Og LegalLicensemongoaudit\u00a0is released under the [MIT License] Disclaimer\"With great power comes great responsibility\" * Never use this tool on servers you don\u2019t own. Unauthorized access to strangers\u2019 computer systems is a crime in many countries.\n* Please use this tool at your own risk. We will accept no liability for any loss or damage which you may incur no matter how caused.\n* Don\u2019t be evil! \n\nYou can download mongoaudit tool here Also Read:The Hackingsage/Hacktronian \u2013 A Pentesting Tool for Linux and Android BabySploit \u2013 Beginner Pentesting Toolkit/Framework Written in Python GitDump : A Pentesting Tool", "creation_timestamp": "2026-09-05T00:00:11.307158Z"}, {"uuid": "25e3d3ca-75f1-4b25-86c7-2ddbe9a4c926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7871", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Matthew Van Gundy of Cisco ASIG\", \"Jon Hart \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"Crypto-NAK packets can be used to cause ntpd to accept time from\\n          unauthenticated ephemeral symmetric peers by bypassing the\\n          authentication required to mobilize peer associations.  This module\\n          sends these Crypto-NAK packets in order to establish an association\\n          between the target ntpd instance and the attacking client.  The end goal\\n          is to cause ntpd to declare the legitimate peers \\\"false tickers\\\" and\\n          choose the attacking clients as the preferred peers, allowing\\n          these peers to control time.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/ntp/ntp_nak_to_the_future\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"NTP \\\"NAK to the Future\\\"\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/ntp/ntp_nak_to_the_future\", \"references\": [\"URL-http://talosintel.com/reports/TALOS-2015-0069/\", \"URL-https://www.cisco.com/c/en/us/support/docs/availability/high-availability/19643-ntpm.html\", \"URL-https://support.ntp.org/bin/view/Main/NtpBug2941\", \"CVE-2015-7871\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:02.335512Z"}, {"uuid": "d4edef8a-860a-415e-8a0f-48a25aebb4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7808", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vbulletin_unserialize.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Netanel Rubin\", \"cutz\", \"Julien (jvoisin) Voisin\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a PHP object injection vulnerability in vBulletin 5.1.2 to 5.1.9\", \"disclosure_date\": \"2015-11-04\", \"fullname\": \"exploit/multi/http/vbulletin_unserialize\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"vBulletin 5.1.2 Unserialize Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/vbulletin_unserialize.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/vbulletin_unserialize\", \"references\": [\"CVE-2015-7808\", \"EDB-38629\", \"URL-http://web.archive.org/web/20160608045552/http://pastie.org/pastes/10527766/text?key=wq1hgkcj4afb9ipqzllsq\", \"URL-http://blog.checkpoint.com/2015/11/05/check-point-discovers-critical-vbulletin-0-day/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\", \"vBulletin 5.0.X\", \"vBulletin 5.1.X\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:18.451633Z"}, {"uuid": "7758ebef-dd65-43ed-90a5-c32d42d9924c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7857", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_contenthistory_sqli_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Asaf Orpani\", \"xistence \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection vulnerability found in Joomla versions\\n          3.2 up to 3.4.4. The vulnerability exists in the Content History administrator\\n          component in the core of Joomla. Triggering the SQL injection makes it possible\\n          to retrieve active Super User sessions. The cookie can be used to login to the\\n          Joomla administrator backend. By creating a new template file containing our\\n          payload, remote code execution is made possible.\", \"disclosure_date\": \"2015-10-23\", \"fullname\": \"exploit/unix/webapp/joomla_contenthistory_sqli_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Joomla Content History SQLi Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/joomla_contenthistory_sqli_rce.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/joomla_contenthistory_sqli_rce\", \"references\": [\"CVE-2015-7857\", \"CVE-2015-7297\", \"CVE-2015-7858\", \"URL-https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/\", \"URL-http://developer.joomla.org/security-centre/628-20151001-core-sql-injection.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Joomla 3.x <= 3.4.4\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:43.466190Z"}, {"uuid": "5a27ad23-c824-4a94-b9d7-07c2397c5f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7858", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_contenthistory_sqli_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Asaf Orpani\", \"xistence \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection vulnerability found in Joomla versions\\n          3.2 up to 3.4.4. The vulnerability exists in the Content History administrator\\n          component in the core of Joomla. Triggering the SQL injection makes it possible\\n          to retrieve active Super User sessions. The cookie can be used to login to the\\n          Joomla administrator backend. By creating a new template file containing our\\n          payload, remote code execution is made possible.\", \"disclosure_date\": \"2015-10-23\", \"fullname\": \"exploit/unix/webapp/joomla_contenthistory_sqli_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Joomla Content History SQLi Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/joomla_contenthistory_sqli_rce.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/joomla_contenthistory_sqli_rce\", \"references\": [\"CVE-2015-7857\", \"CVE-2015-7297\", \"CVE-2015-7858\", \"URL-https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/\", \"URL-http://developer.joomla.org/security-centre/628-20151001-core-sql-injection.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Joomla 3.x <= 3.4.4\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:43.545295Z"}]}