Exploiting NoSQL operator injection to extract unknown fields 1 Exploiting NoSQL operator injection to extract unknown fields Mar 4, 2025