Loading video player...
MongoBleed is a critical MongoDB vulnerability that can silently expose your data to anyone who knows how to poke at it. In this video, I break down the root cause of the bug and show you exactly how the exploit works step by step. // Chapters 0:00 - Intro 0:19 - Vulnerability Overview 1:54 - Preparing the POC environment 2:34 - Running the exploit against a vulnerable container 3:15 - Running the exploit against a patched container 3:41 - Rust exploit code analysis: Part 1 5:06 - Rust exploit code analysis: Part 2 5:53 - Rust exploit code analysis: Part 3 // Links * Mongobleed analysis from Akamai: https://www.akamai.com/blog/security-research/cve-2025-14847-all-you-need-to-know-about-mongobleed * MongoDB Wire Protocol: https://www.mongodb.com/docs/manual/reference/mongodb-wire-protocol * Mongobleed POC (Security Phoenix): https://github.com/Security-Phoenix-demo/mongobleed-exploit-CVE-2025-14847 // Tags #CVE-2025-14847 #exploitdevelopment #mongobleed #mongodb #cybersecurity #rustlang