25 matches found
AMSI.fail
AMSI.fail Originally C Azure Function Later ported to JS with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process. The snippets are randomly selected from a small pool of techniques/variations before being obfuscated. Every snippet is...
EUVD-2026-67187
Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...
Azure Function App - Default Page Detection
Detects Azure Function App - Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Azure Function App - Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure Function App - Default Page...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, potentially grant themselves elevated privileges and thus execute arbitrary code or gain access to sensitive data. Of the vulnerabilities labeled...
EUVD-2026-5521
Azure Function Information Disclosure Vulnerability...
CVE-2026-21532
Azure Function Information Disclosure Vulnerability...
Azure Function Information Disclosure Vulnerability
...
CVE-2026-21532: Exposure of Sensitive Information to an Unauthorized Actor
Azure Function Information Disclosure Vulnerability...
PT-2026-6636
Name of the Vulnerable Software and Affected Versions Azure Function affected versions not specified Description An information disclosure issue exists in Azure Function. The issue allows for the potential disclosure of information. Recommendations At the moment, there is no information about a...
org.jenkins-ci.plugins:azure-app-service (>=0.1, <=0.4.2), org.jenkins-ci.plugins:azure-function (>=0.1.0, <=0.3.0) potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (2.4.6)
org.jenkins-ci.plugins:git-client MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:azure-app-service =0.1, =0.1.0, =0.3.0 Source cves: CVE-2025-67640...
org.jenkins-ci.plugins:azure-app-service (>=0.1, <=0.4.2), org.jenkins-ci.plugins:azure-function (>=0.1.0, <=0.3.0) potentially affected by CVE-2025-58458 via org.jenkins-ci.plugins:git-client (2.4.6)
org.jenkins-ci.plugins:git-client MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:azure-app-service =0.1, =0.1.0, =0.3.0 Source cves: CVE-2025-58458...
Spring Cloud Function for Azure Function
What is the Spring Cloud Function? Spring Cloud Function is a SpringBoot-based framework allowing users to concentrate on their business logic by implementing them as Java Functions i.e., Supplier, Function, Consumer. In turn the framework provides necessary abstraction to enable execution of the...
org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.1.3), org.jenkins-ci.plugins:azure-app-service (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.2)
org.jenkins-ci.plugins:azure-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.0, =0.1.1, =0.1.0, =0.1.1 Source cves:...
org.jenkins-ci.plugins:azure-acs (>=0.2.0, <=0.2.2), org.jenkins-ci.plugins:azure-app-service (0.2.0) +3 more potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.4.0)
org.jenkins-ci.plugins:azure-credentials MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.2.0, =0.6.1, =0.9.0 -...
org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.1.3), org.jenkins-ci.plugins:azure-app-service (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.2)
org.jenkins-ci.plugins:azure-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.0, =0.1.1, =0.1.0, =0.1.1 Source cves:...
org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.1.3), org.jenkins-ci.plugins:azure-app-service (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.2)
org.jenkins-ci.plugins:azure-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.0, =0.1.1, =0.1.0, =0.1.1 Source cves:...
org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.3)
org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...
org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.3)
org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...
org.jenkins-ci.plugins:azure-acs (>=0.2.0, <=0.2.2), org.jenkins-ci.plugins:azure-app-service (0.2.0) +3 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.4.0)
org.jenkins-ci.plugins:azure-credentials MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.2.0, =0.6.1, =0.9.0 -...
Stronger Cloud Security in Azure Function Using Custom Cloud Container
In this entry, we discuss how developers can use custom cloud container image and the distroless approach to minimize security gaps in Azure Function...