15260 matches found
Azure API Management (APIM) Remote Code Execution Vulnerability
Improper access control in Azure API Management APIM allows an authorized attacker to execute code over a network...
Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
Improper authorization in Azure Red Hat OpenShift ARO allows an authorized attacker to elevate privileges over a network...
Azure AI Search Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...
PT-2026-64207
Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...
CVE-2026-56167: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...
CVE-2026-56160: Improper Authorization
Improper authorization in Azure Red Hat OpenShift ARO allows an authorized attacker to elevate privileges over a network...
PT-2026-64205
Name of the Vulnerable Software and Affected Versions Azure Red Hat OpenShift ARO affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version tha...
KLA91175 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...
cloud-misconfig
Cloud Misconfiguration Exploitation Lab !AWShttps://img.s...
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds. The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one ...
The vulnerability of the Azure OpenAI cloud platform, related to insufficient validation of requests on the server side, allows attackers to escalate their privileges.
The vulnerability of the Azure OpenAI cloud platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
EUVD-2025-210492
In Microsoft Azure API Management through 2025-10-17, when self-service signup username/password Basic Authentication is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Tenant B, even when Tenant B has signup disabled at the UI...
CVE-2025-66390
In Microsoft Azure API Management through 2025-10-17, when self-service signup username/password Basic Authentication is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Tenant B, even when Tenant B has signup disabled at the UI...
AzureHound v3.0.0-rc1
AzureHound The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and...
CVE-2025-66390: Improper Access Control
In Microsoft Azure API Management through 2025-10-17, when self-service signup username/password Basic Authentication is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Tenant B, even when Tenant B has signup disabled at the UI...
CVE-2025-66390
In Microsoft Azure API Management through 2025-10-17, when self-service signup username/password Basic Authentication is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Tenant B, even when Tenant B has signup disabled at the UI...
CVE-2025-66390
Microsoft Azure API Management (prior to 2025-10-17) contains a vulnerability where the underlying signup API endpoint remains active even if self-service registration is disabled via the portal UI. When Basic Authentication is enabled, an attacker can perform a cross-tenant signup bypass by reus...
GHSA-24F9-69R4-VR33 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-azure, linux-qemu, linux-gcp...
