45 matches found
365-Stealer
365-Stealer Table of Contents About 365-Stealer About Illicit Consent Grant Attack Key Features of 365-Stealer Setup Attacking Environment Automated Azure App Registration Manual Azure App Registration Configuring the Application Creating Client Secrets Adding API Permissions Setting Up 365-Steal...
Azure-App-Tools
Azure-App-Tools Collection of tools to use with Azure Applications. https://azure.microsoft.com/en-us/get-started/apps/ Prerequisites Azure Powershell Module https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 Examples: Dynamic Device Codes Original PoC by @MrUn1k0d3r...
CVE-2026-58630
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-48602
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
...
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
...
CVE-2026-58630
CVE-2026-58630 concerns Azure App Service on Azure Stack Hub. The issue is improper access control that allows an unauthenticated attacker to elevate privileges over a network. Impact is high for confidentiality and integrity; CVSS 3.1 base score 10.0. Connected sources confirm the name and core ...
PT-2026-64316
Name of the Vulnerable Software and Affected Versions Azure App Service affected versions not specified Description Improper access control allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...
Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...
KLA90450 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Application Gateway can be exploited remotely to gain privileges. 2. An elevatio...
EUVD-2019-9929
Malware in sbrugna...
EUVD-2018-20215
Malware in sbrugna...
EUVD-2023-25944
Malicious code in bioql PyPI...
Microsoft Azure App Services Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within Azure App Services. The issue results from the exposure of sensitive information...
CVE-2019-1372
An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the...
How to convert PFX certificate without importing password to PEM certificate on ADC
This article provides instruction on how toconvert PFX certificate with importing password to PEM certificate in our document using "Import PKCS12" on GUI. Refer to...
How to configure ARM templates using the new Azure App Layering Azure connector
How to configure ARM templates using the new Azure App Layering Azure connector...
CVE-2023-21777
Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability...