16188 matches found
Azure Data Factory Disclosure
The vulnerability of the Azure Data Factory service is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that should be protected...
‘CanisterWorm’ Springs Wiper Attack Targeting Iran
A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran's time zone or have Farsi set as the default language. Experts say the wip...
OPENSUSE-SU-2026:10407-1 azure-storage-azcopy-10.32.2-1.1 on GA media
These are all security issues fixed in the azure-storage-azcopy-10.32.2-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2026-1985 Malicious code in azure-eventhub-checkpointstoretable (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e41a629242e28270fbee568718ddef63da1e359ad5a5a1401ed85c48ef870d73 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
EUVD-2026-13204
Server-side request forgery ssrf in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-13174
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-13177
Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
CVE-2026-32169
Server-side request forgery ssrf in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-23659
Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
CVE-2026-23658
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-23659
Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
CVE-2026-23659 Azure Data Factory Information Disclosure Vulnerability
...
CVE-2026-23659
Azure Data Factory contains an information disclosure vulnerability (CVE-2026-23659) that allows an unauthorized network actor to access sensitive data. The descriptor indicates exposure of information to unauthorized actors over a network, implying a potential data breach risk. Connected sources...
CVE-2026-23659 Azure Data Factory Information Disclosure Vulnerability
...
CVE-2026-23658 Azure DevOps: msazure Elevation of Privilege Vulnerability
...
CVE-2026-23658 Azure DevOps: msazure Elevation of Privilege Vulnerability
...
CVE-2026-23658
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-23658
CVE-2026-23658 affects Microsoft Azure DevOps: msazure, with root cause described as insufficiently protected credentials enabling an unauthorized network-based privilege escalation. The description and multiple connected sources confirm impact to Azure DevOps components and privilege elevation, ...