dotnet: X509 Certificates - Validation Bypass across Azure

A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggerin...

Vdisk locks are not clearing after shutting down a target from the PVS console running in Azure

PVS on Azure - When shutting down a target from the PVS console or the Azure portal vdisk locks are not releasing properly...

Vulnerabilities fixed in Microsoft Azure

Vulnerabilities have been fixed in Microsoft Azure. The vulnerabilities allow a malicious party to obtain elevated privileges obtain or to execute arbitrary code under the privileges of the user. The vulnerabilities marked CVE-2022-3602 and CVE-2022-3786 are located in OpenSSL and were previously...

The vulnerability of the command-line interface (CLI) of the Azure IoT platform, which allows a malicious actor to escalate their privileges

The vulnerability of the Azure IoT Command Line Interface CLI is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Scientific Linux Security Update : cloud-init on SL7.x (x86_64) (20190318)

Security Fixes : - cloud-init: extra ssh keys added to authorizedkeys on the Azure platform CVE-2019-0816 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid122961; scriptversion"1.7";...

CentOS 7 : cloud-init (CESA-2019:0597)

An update for cloud-init is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RHEL 7 : cloud-init (RHSA-2019:0597)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:0597 advisory. The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to...

Extraneous SSH Public Keys added to Authorized Keys file on Linux VM

None None...

PoC Exploit Compromises Microsoft Live Accounts via Subdomain Hijacking

A proof-of-concept PoC attack details how an attacker can gain access a victim’s Microsoft Live webmail session, without having the person’s credentials. It relies upon the hijack of a Microsoft-owned Live.com website subdomain. The PoC, developed by CyberInt, demonstrates what it characterizes a...