CVEs-PoC/2019/CVE-2019-10758.md

CVE-2019-10758

Description

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the toBSON method. A misuse of the vm dependency to perform exec commands in a non-safe environment.

POC

Reference

• https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-473215

Github

• https://github.com/0ps/pocassistdb
• https://github.com/0xT11/CVE-POC
• https://github.com/20142995/Goby
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/CLincat/vulcat
• https://github.com/CnHack3r/Penetration_PoC
• https://github.com/EchoGin404/-
• https://github.com/EchoGin404/gongkaishouji
• https://github.com/HimmelAward/Goby_POC
• https://github.com/MelanyRoob/Goby
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/TrojanAZhen/Self_Back
• https://github.com/Tyro-Shan/gongkaishouji
• https://github.com/YIXINSHUWU/Penetration_Testing_POC
• https://github.com/Z0fhack/Goby_POC
• https://github.com/ZTK-009/Penetration_PoC
• https://github.com/apachecn-archive/Middleware-Vulnerability-detection
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/cyberharsh/mongo10758
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/gobysec/Goby
• https://github.com/hasee2018/Penetration_Testing_POC
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/hktalent/bug-bounty
• https://github.com/huike007/penetration_poc
• https://github.com/huike007/poc
• https://github.com/huimzjty/vulwiki
• https://github.com/jweny/pocassistdb
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/lovechinacoco/https-github.com-mai-lang-chai-Middleware-Vulnerability-detection
• https://github.com/lp008/CVE-2019-10758
• https://github.com/masahiro331/CVE-2019-10758
• https://github.com/ossf-cve-benchmark/CVE-2019-10758
• https://github.com/password520/Penetration_PoC
• https://github.com/retr0-13/Goby
• https://github.com/tdtc7/qps
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/xuetusummer/Penetration_Testing_POC
• https://github.com/yedada-wei/-
• https://github.com/yedada-wei/gongkaishouji
• https://github.com/zan8in/afrog