Add CVE-2019-10758

Mongo-Express/CVE-2019-10758/README.md

@@ -0,0 +1,11 @@
+# CVE-2019-10758 Mongo Express Remote Code Execution Vulnerability
+
+Mongo Express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.
+
+**Affected version**: mongo-express < 0.54.0
+
+**[FOFA](https://fofa.so/result?qbase64=dGl0bGU9Ik1vbmdvIEV4cHJlc3Mi) query rule**: title="Mongo Express"
+
+# Demo
+
+![](CVE-2019-10758.gif)