new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

nosql/threats

9 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Insecure serialization/deserialization in NoSQL

Unsafe object deserialization in NoSQL systems can lead to remote code execution.

Credential leaks in NoSQL systems

Hardcoded database credentials in code, container images, or CI logs create security risks.

Unsafe backup exposure in NoSQL

Backups left unencrypted or publicly accessible expose sensitive data in NoSQL systems.

Insecure network exposure in NoSQL

NoSQL systems can be vulnerable to insecure network exposure via no TLS, open ports, and insufficient network segmentation.

Insecure defaults in NoSQL

Insecure defaults include default admin accounts, default passwords, and unsecured configurations in NoSQL systems.

Exposed management interfaces threat in NoSQL

Admin GUIs, database ports, or REST endpoints exposed to the internet create security risks in NoSQL systems.

Weak or no authentication in NoSQL

Default open access or excessive privileges for clients is a common failure mode in NoSQL systems. Enable authentication and do not run databases unauthenticated.

Supply-chain risks in NoSQL

Vulnerable drivers, ORMs/ODMs, or plugins used with NoSQL systems create supply-chain security risks.

Dangerous NoSQL pattern: unsecured listening port

Leaving MongoDB unsecured (no authentication) listening on a public IP address exposes the database to unauthorized access.

Give your agent this brain