104 matches found
CVE-2026-109457
Improper neutralization of special elements used in an os command 'os command injection' in Azure CLI allows an authorized attacker to execute code over a network...
EUVD-2026-121575
Improper neutralization of special elements used in an os command 'os command injection' in Azure CLI allows an authorized attacker to execute code over a network...
CVE-2026-109457
Improper neutralization of special elements used in an os command 'os command injection' in Azure CLI allows an authorized attacker to execute code over a network...
Azure CLI Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Azure CLI allows an authorized attacker to execute code over a network...
terragoat
TerraGoat - Vulnerable Terraform Infrastructure TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find the...
cirro
Cirro is an extensible security research platform that enables researchers and penetration testers to collect, analyze, and visualize cloud environments and identity relationships through graph databases. Built with a modular architecture, Cirro can be extended to support multiple platforms and...
azpim
Azure PIM CLI azpim A command-line interface tool for managing Azure Privileged Identity Management PIM role activations directly from your terminal. Features 🔐 Role Activation - Quickly activate eligible Azure PIM roles 🔓 Role Deactivation - Deactivate active roles when no longer needed 📋...
TokenMan
Access and Refresh Token Suite. Token Man is a tool for supporting post-exploitation activities using AAD access and/or refresh tokens. Table of Contents Usage Commands Fetch Search Swap FOCI Application Client ID Map AZ OAuth Usage usage: tokenman.py -h fetch,search,swap,az,oauth ... Token Man -...
Security Updates for Azure CLI (September 2026)
The Microsoft Azure CLI installation on the remote host is missing a security update. It is, therefore, affected by a command injection vulnerability: - Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execut...
CVE-2026-83948
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
CVE-2026-83948
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
CVE-2026-83948
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
EUVD-2026-73888
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
CVE-2026-83948
CVE-2026-83948 is a command injection vulnerability in Microsoft Azure CLI , caused by improper neutralization of special elements used in a command. An authorized attacker can leverage this to execute code over a network, achieving remote code execution with high impact on confidentiality, integ...
Microsoft Azure CLI Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
KLA91263 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...
PT-2026-88109
Name of the Vulnerable Software and Affected Versions Microsoft Azure CLI affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an authorized attacker to execute arbitrary code over a network. Recommendations ...
CVE-2026-83948: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...