automatic module_metadata_base.json update

Author: jenkins-metasploit

db/modules_metadata_base.json

@@ -49512,6 +49512,53 @@
     "needs_cleanup": false,
     "actions": []
   },
+  "auxiliary_scanner/mongodb/cve_2025_14847_mongobleed": {
+    "name": "MongoDB Memory Disclosure (CVE-2025-14847) - Mongobleed",
+    "fullname": "auxiliary/scanner/mongodb/cve_2025_14847_mongobleed",
+    "aliases": [],
+    "rank": 300,
+    "disclosure_date": "2025-12-19",
+    "type": "auxiliary",
+    "author": [
+      "Alexander Hagenah",
+      "Diego Ledda",
+      "Joe Desimone"
+    ],
+    "description": "This module exploits a memory disclosure vulnerability in MongoDB's zlib\n          decompression handling (CVE-2025-14847). By sending crafted OP_COMPRESSED\n          messages with inflated BSON document lengths, the server reads beyond the\n          decompressed buffer and returns leaked memory contents in error messages.\n\n          The vulnerability allows unauthenticated remote attackers to leak server\n          memory which may contain sensitive information such as credentials, session\n          tokens, encryption keys, or other application data.",
+    "references": [
+      "CVE-2025-14847",
+      "URL-https://www.wiz.io/blog/mongobleed-cve-2025-14847-exploited-in-the-wild-mongodb",
+      "URL-https://jira.mongodb.org/browse/SERVER-115508",
+      "URL-https://x.com/dez_"
+    ],
+    "platform": "",
+    "arch": "",
+    "rport": 27017,
+    "autofilter_ports": [],
+    "autofilter_services": [],
+    "targets": null,
+    "mod_time": "2025-12-30 14:34:57 +0000",
+    "path": "/modules/auxiliary/scanner/mongodb/cve_2025_14847_mongobleed.rb",
+    "is_install_path": true,
+    "ref_name": "scanner/mongodb/cve_2025_14847_mongobleed",
+    "check": false,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "SideEffects": [
+        "ioc-in-logs"
+      ],
+      "Reliability": [
+        "repeatable-session"
+      ]
+    },
+    "session_types": false,
+    "needs_cleanup": false,
+    "actions": []
+  },
   "auxiliary_scanner/mongodb/mongodb_login": {
     "name": "MongoDB Login Utility",
     "fullname": "auxiliary/scanner/mongodb/mongodb_login",