Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access

Four different Microsoft Azure services have been found vulnerable to server-side request forgery SSRF attacks that could be exploited to gain unauthorized access to cloud resources. The security issues, which were discovered by Orca between October 8, 2022 and December 2, 2022 in Azure API...

Malicious code in azure-arm-machinelearningexperimentation-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0134bbb1c3b162bd3ff1a31eb6f15b75ec14670f2808ebd5adcd62a2ae21d7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-machinelearningexperimentation-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28e960d07673497cdac69a46cac88d71047e5c8b724995837b47b34b8ccc828e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

azureml-designer-classic-modules (>=0.0.105 <=0.0.112), azureml-designer-core (>=0.0.21 <=0.0.29) +36 more potentially affected by CVE-2019-12410 via pyarrow (>=0.12.0 <=0.14.1)

pyarrow PYPI version =0.12.0, =0.0.105, =0.0.21, =0.0.17, =0.0.36, =0.0.9, =1.0.48.1, =0.1.0, =1.4.2, =3.0.20190405035157, =0.1.0, =0.1.1, =1.13.4, =1.15.1 and more Source cves: CVE-2019-12410 Source advisory: OSV:PYSEC-2019-196...