Exploiting NoSQL operator injection to extract unknown fields 1 Exploiting NoSQL operator injection to extract unknown fields 04/03/2025